Add deadtime detection for SMB2. Correctly update lastused timestamp across all activ...
[abartlet/samba.git/.git] / source3 / smbd / process.c
index 485439a089648f76bccda6b43d3a0dcb439b6176..f2aa23e3e09b334cb6f73578a053625b904f366a 100644 (file)
 
 #include "includes.h"
 #include "smbd/globals.h"
-#include "../librpc/gen_ndr/srv_dfs.h"
-#include "../librpc/gen_ndr/srv_dssetup.h"
-#include "../librpc/gen_ndr/srv_echo.h"
-#include "../librpc/gen_ndr/srv_eventlog.h"
-#include "../librpc/gen_ndr/srv_initshutdown.h"
-#include "../librpc/gen_ndr/srv_lsa.h"
-#include "../librpc/gen_ndr/srv_netlogon.h"
-#include "../librpc/gen_ndr/srv_ntsvcs.h"
-#include "../librpc/gen_ndr/srv_samr.h"
-#include "../librpc/gen_ndr/srv_spoolss.h"
-#include "../librpc/gen_ndr/srv_srvsvc.h"
-#include "../librpc/gen_ndr/srv_svcctl.h"
-#include "../librpc/gen_ndr/srv_winreg.h"
-#include "../librpc/gen_ndr/srv_wkssvc.h"
+#include "librpc/gen_ndr/netlogon.h"
+#include "librpc/gen_ndr/messaging.h"
+#include "../lib/async_req/async_sock.h"
+#include "ctdbd_conn.h"
+#include "../lib/util/select.h"
 
 extern bool global_machine_password_needs_changing;
 
 static void construct_reply_common(struct smb_request *req, const char *inbuf,
                                   char *outbuf);
+static struct pending_message_list *get_deferred_open_message_smb(uint64_t mid);
 
 static bool smbd_lock_socket_internal(struct smbd_server_connection *sconn)
 {
        bool ok;
 
-       if (smbd_server_conn->smb1.echo_handler.socket_lock_fd == -1) {
+       if (sconn->smb1.echo_handler.socket_lock_fd == -1) {
                return true;
        }
 
-       smbd_server_conn->smb1.echo_handler.ref_count++;
+       sconn->smb1.echo_handler.ref_count++;
 
-       if (smbd_server_conn->smb1.echo_handler.ref_count > 1) {
+       if (sconn->smb1.echo_handler.ref_count > 1) {
                return true;
        }
 
        DEBUG(10,("pid[%d] wait for socket lock\n", (int)sys_getpid()));
 
-       ok = fcntl_lock(smbd_server_conn->smb1.echo_handler.socket_lock_fd,
+       ok = fcntl_lock(sconn->smb1.echo_handler.socket_lock_fd,
                        SMB_F_SETLKW, 0, 0, F_WRLCK);
        if (!ok) {
                return false;
@@ -78,17 +70,17 @@ static bool smbd_unlock_socket_internal(struct smbd_server_connection *sconn)
 {
        bool ok;
 
-       if (smbd_server_conn->smb1.echo_handler.socket_lock_fd == -1) {
+       if (sconn->smb1.echo_handler.socket_lock_fd == -1) {
                return true;
        }
 
-       smbd_server_conn->smb1.echo_handler.ref_count--;
+       sconn->smb1.echo_handler.ref_count--;
 
-       if (smbd_server_conn->smb1.echo_handler.ref_count > 0) {
+       if (sconn->smb1.echo_handler.ref_count > 0) {
                return true;
        }
 
-       ok = fcntl_lock(smbd_server_conn->smb1.echo_handler.socket_lock_fd,
+       ok = fcntl_lock(sconn->smb1.echo_handler.socket_lock_fd,
                        SMB_F_SETLKW, 0, 0, F_UNLCK);
        if (!ok) {
                return false;
@@ -112,7 +104,7 @@ void smbd_unlock_socket(struct smbd_server_connection *sconn)
  Send an smb to a fd.
 ****************************************************************************/
 
-bool srv_send_smb(int fd, char *buffer,
+bool srv_send_smb(struct smbd_server_connection *sconn, char *buffer,
                  bool do_signing, uint32_t seqnum,
                  bool do_encrypt,
                  struct smb_perfcount_data *pcd)
@@ -122,11 +114,11 @@ bool srv_send_smb(int fd, char *buffer,
        ssize_t ret;
        char *buf_out = buffer;
 
-       smbd_lock_socket(smbd_server_conn);
+       smbd_lock_socket(sconn);
 
        if (do_signing) {
                /* Sign the outgoing packet if required. */
-               srv_calculate_sign_mac(smbd_server_conn, buf_out, seqnum);
+               srv_calculate_sign_mac(sconn, buf_out, seqnum);
        }
 
        if (do_encrypt) {
@@ -141,10 +133,19 @@ bool srv_send_smb(int fd, char *buffer,
 
        len = smb_len(buf_out) + 4;
 
-       ret = write_data(fd,buf_out+nwritten,len - nwritten);
+       ret = write_data(sconn->sock, buf_out+nwritten, len - nwritten);
        if (ret <= 0) {
-               DEBUG(0,("pid[%d] Error writing %d bytes to client. %d. (%s)\n",
-                       (int)sys_getpid(), (int)len,(int)ret, strerror(errno) ));
+
+               char addr[INET6_ADDRSTRLEN];
+               /*
+                * Try and give an error message saying what
+                * client failed.
+                */
+               DEBUG(1,("pid[%d] Error writing %d bytes to client %s. %d. (%s)\n",
+                        (int)sys_getpid(), (int)len,
+                        get_peer_addr(sconn->sock, addr, sizeof(addr)),
+                        (int)ret, strerror(errno) ));
+
                srv_free_enc_buffer(buf_out);
                goto out;
        }
@@ -154,7 +155,7 @@ bool srv_send_smb(int fd, char *buffer,
 out:
        SMB_PERFCOUNT_END(pcd);
 
-       smbd_unlock_socket(smbd_server_conn);
+       smbd_unlock_socket(sconn);
        return true;
 }
 
@@ -208,11 +209,21 @@ static bool valid_packet_size(size_t len)
 static NTSTATUS read_packet_remainder(int fd, char *buffer,
                                      unsigned int timeout, ssize_t len)
 {
+       NTSTATUS status;
+
        if (len <= 0) {
                return NT_STATUS_OK;
        }
 
-       return read_fd_with_timeout(fd, buffer, len, len, timeout, NULL);
+       status = read_fd_with_timeout(fd, buffer, len, len, timeout, NULL);
+       if (!NT_STATUS_IS_OK(status)) {
+               char addr[INET6_ADDRSTRLEN];
+               DEBUG(0, ("read_fd_with_timeout failed for client %s read "
+                         "error = %s.\n",
+                         get_peer_addr(fd, addr, sizeof(addr)),
+                         nt_errstr(status)));
+       }
+       return status;
 }
 
 /****************************************************************************
@@ -233,7 +244,8 @@ static NTSTATUS read_packet_remainder(int fd, char *buffer,
 
 static NTSTATUS receive_smb_raw_talloc_partial_read(TALLOC_CTX *mem_ctx,
                                                    const char lenbuf[4],
-                                                   int fd, char **buffer,
+                                                   struct smbd_server_connection *sconn,
+                                                   char **buffer,
                                                    unsigned int timeout,
                                                    size_t *p_unread,
                                                    size_t *len_ret)
@@ -247,12 +259,15 @@ static NTSTATUS receive_smb_raw_talloc_partial_read(TALLOC_CTX *mem_ctx,
        memcpy(writeX_header, lenbuf, 4);
 
        status = read_fd_with_timeout(
-               fd, writeX_header + 4,
+               sconn->sock, writeX_header + 4,
                STANDARD_WRITE_AND_X_HEADER_SIZE,
                STANDARD_WRITE_AND_X_HEADER_SIZE,
                timeout, NULL);
 
        if (!NT_STATUS_IS_OK(status)) {
+               DEBUG(0, ("read_fd_with_timeout failed for client %s read "
+                         "error = %s.\n", sconn->client_id.addr,
+                         nt_errstr(status)));
                return status;
        }
 
@@ -261,7 +276,7 @@ static NTSTATUS receive_smb_raw_talloc_partial_read(TALLOC_CTX *mem_ctx,
         * valid writeX call.
         */
 
-       if (is_valid_writeX_buffer((uint8_t *)writeX_header)) {
+       if (is_valid_writeX_buffer(sconn, (uint8_t *)writeX_header)) {
                /*
                 * If the data offset is beyond what
                 * we've read, drain the extra bytes.
@@ -271,7 +286,7 @@ static NTSTATUS receive_smb_raw_talloc_partial_read(TALLOC_CTX *mem_ctx,
 
                if (doff > STANDARD_WRITE_AND_X_HEADER_SIZE) {
                        size_t drain = doff - STANDARD_WRITE_AND_X_HEADER_SIZE;
-                       if (drain_socket(smbd_server_fd(), drain) != drain) {
+                       if (drain_socket(sconn->sock, drain) != drain) {
                                smb_panic("receive_smb_raw_talloc_partial_read:"
                                        " failed to drain pending bytes");
                        }
@@ -326,7 +341,8 @@ static NTSTATUS receive_smb_raw_talloc_partial_read(TALLOC_CTX *mem_ctx,
 
        if(toread > 0) {
                status = read_packet_remainder(
-                       fd, (*buffer) + 4 + STANDARD_WRITE_AND_X_HEADER_SIZE,
+                       sconn->sock,
+                       (*buffer) + 4 + STANDARD_WRITE_AND_X_HEADER_SIZE,
                        timeout, toread);
 
                if (!NT_STATUS_IS_OK(status)) {
@@ -340,7 +356,8 @@ static NTSTATUS receive_smb_raw_talloc_partial_read(TALLOC_CTX *mem_ctx,
        return NT_STATUS_OK;
 }
 
-static NTSTATUS receive_smb_raw_talloc(TALLOC_CTX *mem_ctx, int fd,
+static NTSTATUS receive_smb_raw_talloc(TALLOC_CTX *mem_ctx,
+                                      struct smbd_server_connection *sconn,
                                       char **buffer, unsigned int timeout,
                                       size_t *p_unread, size_t *plen)
 {
@@ -351,20 +368,21 @@ static NTSTATUS receive_smb_raw_talloc(TALLOC_CTX *mem_ctx, int fd,
 
        *p_unread = 0;
 
-       status = read_smb_length_return_keepalive(fd, lenbuf, timeout, &len);
+       status = read_smb_length_return_keepalive(sconn->sock, lenbuf, timeout,
+                                                 &len);
        if (!NT_STATUS_IS_OK(status)) {
-               DEBUG(10, ("receive_smb_raw: %s\n", nt_errstr(status)));
                return status;
        }
 
        if (CVAL(lenbuf,0) == 0 && min_recv_size &&
            (smb_len_large(lenbuf) > /* Could be a UNIX large writeX. */
                (min_recv_size + STANDARD_WRITE_AND_X_HEADER_SIZE)) &&
-           !srv_is_signing_active(smbd_server_conn) &&
-           smbd_server_conn->smb1.echo_handler.trusted_fde == NULL) {
+           !srv_is_signing_active(sconn) &&
+           sconn->smb1.echo_handler.trusted_fde == NULL) {
 
                return receive_smb_raw_talloc_partial_read(
-                       mem_ctx, lenbuf, fd, buffer, timeout, p_unread, plen);
+                       mem_ctx, lenbuf, sconn, buffer, timeout,
+                       p_unread, plen);
        }
 
        if (!valid_packet_size(len)) {
@@ -385,7 +403,7 @@ static NTSTATUS receive_smb_raw_talloc(TALLOC_CTX *mem_ctx, int fd,
 
        memcpy(*buffer, lenbuf, sizeof(lenbuf));
 
-       status = read_packet_remainder(fd, (*buffer)+4, timeout, len);
+       status = read_packet_remainder(sconn->sock, (*buffer)+4, timeout, len);
        if (!NT_STATUS_IS_OK(status)) {
                return status;
        }
@@ -394,7 +412,8 @@ static NTSTATUS receive_smb_raw_talloc(TALLOC_CTX *mem_ctx, int fd,
        return NT_STATUS_OK;
 }
 
-static NTSTATUS receive_smb_talloc(TALLOC_CTX *mem_ctx,        int fd,
+static NTSTATUS receive_smb_talloc(TALLOC_CTX *mem_ctx,
+                                  struct smbd_server_connection *sconn,
                                   char **buffer, unsigned int timeout,
                                   size_t *p_unread, bool *p_encrypted,
                                   size_t *p_len,
@@ -406,9 +425,12 @@ static NTSTATUS receive_smb_talloc(TALLOC_CTX *mem_ctx,    int fd,
 
        *p_encrypted = false;
 
-       status = receive_smb_raw_talloc(mem_ctx, fd, buffer, timeout,
+       status = receive_smb_raw_talloc(mem_ctx, sconn, buffer, timeout,
                                        p_unread, &len);
        if (!NT_STATUS_IS_OK(status)) {
+               DEBUG(1, ("read_smb_length_return_keepalive failed for "
+                         "client %s read error = %s.\n",
+                         sconn->client_id.addr, nt_errstr(status)));
                return status;
        }
 
@@ -424,7 +446,7 @@ static NTSTATUS receive_smb_talloc(TALLOC_CTX *mem_ctx,     int fd,
        }
 
        /* Check the incoming SMB signature. */
-       if (!srv_check_sign_mac(smbd_server_conn, *buffer, seqnum, trusted_channel)) {
+       if (!srv_check_sign_mac(sconn, *buffer, seqnum, trusted_channel)) {
                DEBUG(0, ("receive_smb: SMB Signature verification failed on "
                          "incoming packet!\n"));
                return NT_STATUS_INVALID_NETWORK_RESPONSE;
@@ -438,11 +460,12 @@ static NTSTATUS receive_smb_talloc(TALLOC_CTX *mem_ctx,   int fd,
  * Initialize a struct smb_request from an inbuf
  */
 
-static bool init_smb_request(struct smb_request *req, const uint8 *inbuf,
+static bool init_smb_request(struct smb_request *req,
+                            struct smbd_server_connection *sconn,
+                            const uint8 *inbuf,
                             size_t unread_bytes, bool encrypted,
                             uint32_t seqnum)
 {
-       struct smbd_server_connection *sconn = smbd_server_conn;
        size_t req_size = smb_len(inbuf) + 4;
        /* Ensure we have at least smb_size bytes. */
        if (req_size < smb_size) {
@@ -453,7 +476,7 @@ static bool init_smb_request(struct smb_request *req, const uint8 *inbuf,
        req->cmd    = CVAL(inbuf, smb_com);
        req->flags2 = SVAL(inbuf, smb_flg2);
        req->smbpid = SVAL(inbuf, smb_pid);
-       req->mid    = SVAL(inbuf, smb_mid);
+       req->mid    = (uint64_t)SVAL(inbuf, smb_mid);
        req->seqnum = seqnum;
        req->vuid   = SVAL(inbuf, smb_uid);
        req->tid    = SVAL(inbuf, smb_tid);
@@ -463,10 +486,12 @@ static bool init_smb_request(struct smb_request *req, const uint8 *inbuf,
        req->buf    = (const uint8_t *)smb_buf(inbuf);
        req->unread_bytes = unread_bytes;
        req->encrypted = encrypted;
+       req->sconn = sconn;
        req->conn = conn_find(sconn,req->tid);
        req->chain_fsp = NULL;
        req->chain_outbuf = NULL;
        req->done = false;
+       req->smb2req = NULL;
        smb_init_perfcount_data(&req->pcd);
 
        /* Ensure we have at least wct words and 2 bytes of bcc. */
@@ -503,7 +528,7 @@ static void smbd_deferred_open_timer(struct event_context *ev,
        struct pending_message_list *msg = talloc_get_type(private_data,
                                           struct pending_message_list);
        TALLOC_CTX *mem_ctx = talloc_tos();
-       uint16_t mid = SVAL(msg->buf.data,smb_mid);
+       uint64_t mid = (uint64_t)SVAL(msg->buf.data,smb_mid);
        uint8_t *inbuf;
 
        inbuf = (uint8_t *)talloc_memdup(mem_ctx, msg->buf.data,
@@ -515,8 +540,8 @@ static void smbd_deferred_open_timer(struct event_context *ev,
 
        /* We leave this message on the queue so the open code can
           know this is a retry. */
-       DEBUG(5,("smbd_deferred_open_timer: trigger mid %u.\n",
-               (unsigned int)mid ));
+       DEBUG(5,("smbd_deferred_open_timer: trigger mid %llu.\n",
+               (unsigned long long)mid ));
 
        /* Mark the message as processed so this is not
         * re-processed in error. */
@@ -527,9 +552,9 @@ static void smbd_deferred_open_timer(struct event_context *ev,
                    msg->seqnum, msg->encrypted, &msg->pcd);
 
        /* If it's still there and was processed, remove it. */
-       msg = get_open_deferred_message(mid);
+       msg = get_deferred_open_message_smb(mid);
        if (msg && msg->processed) {
-               remove_deferred_open_smb_message(mid);
+               remove_deferred_open_message_smb(mid);
        }
 }
 
@@ -599,15 +624,20 @@ static bool push_queued_message(struct smb_request *req,
  Function to delete a sharing violation open message by mid.
 ****************************************************************************/
 
-void remove_deferred_open_smb_message(uint16 mid)
+void remove_deferred_open_message_smb(uint64_t mid)
 {
        struct pending_message_list *pml;
 
+       if (smbd_server_conn->using_smb2) {
+               remove_deferred_open_message_smb2(smbd_server_conn, mid);
+               return;
+       }
+
        for (pml = deferred_open_queue; pml; pml = pml->next) {
-               if (mid == SVAL(pml->buf.data,smb_mid)) {
-                       DEBUG(10,("remove_deferred_open_smb_message: "
-                                 "deleting mid %u len %u\n",
-                                 (unsigned int)mid,
+               if (mid == (uint64_t)SVAL(pml->buf.data,smb_mid)) {
+                       DEBUG(10,("remove_deferred_open_message_smb: "
+                                 "deleting mid %llu len %u\n",
+                                 (unsigned long long)mid,
                                  (unsigned int)pml->buf.length ));
                        DLIST_REMOVE(deferred_open_queue, pml);
                        TALLOC_FREE(pml);
@@ -621,16 +651,23 @@ void remove_deferred_open_smb_message(uint16 mid)
  schedule it for immediate processing.
 ****************************************************************************/
 
-void schedule_deferred_open_smb_message(uint16 mid)
+void schedule_deferred_open_message_smb(uint64_t mid)
 {
        struct pending_message_list *pml;
        int i = 0;
 
+       if (smbd_server_conn->using_smb2) {
+               schedule_deferred_open_message_smb2(smbd_server_conn, mid);
+               return;
+       }
+
        for (pml = deferred_open_queue; pml; pml = pml->next) {
-               uint16 msg_mid = SVAL(pml->buf.data,smb_mid);
+               uint64_t msg_mid = (uint64_t)SVAL(pml->buf.data,smb_mid);
 
-               DEBUG(10,("schedule_deferred_open_smb_message: [%d] msg_mid = %u\n", i++,
-                       (unsigned int)msg_mid ));
+               DEBUG(10,("schedule_deferred_open_message_smb: [%d] "
+                       "msg_mid = %llu\n",
+                       i++,
+                       (unsigned long long)msg_mid ));
 
                if (mid == msg_mid) {
                        struct timed_event *te;
@@ -638,14 +675,15 @@ void schedule_deferred_open_smb_message(uint16 mid)
                        if (pml->processed) {
                                /* A processed message should not be
                                 * rescheduled. */
-                               DEBUG(0,("schedule_deferred_open_smb_message: LOGIC ERROR "
-                                       "message mid %u was already processed\n",
-                                       msg_mid ));
+                               DEBUG(0,("schedule_deferred_open_message_smb: LOGIC ERROR "
+                                       "message mid %llu was already processed\n",
+                                       (unsigned long long)msg_mid ));
                                continue;
                        }
 
-                       DEBUG(10,("schedule_deferred_open_smb_message: scheduling mid %u\n",
-                               mid ));
+                       DEBUG(10,("schedule_deferred_open_message_smb: "
+                               "scheduling mid %llu\n",
+                               (unsigned long long)mid ));
 
                        te = event_add_timed(smbd_event_context(),
                                             pml,
@@ -653,9 +691,10 @@ void schedule_deferred_open_smb_message(uint16 mid)
                                             smbd_deferred_open_timer,
                                             pml);
                        if (!te) {
-                               DEBUG(10,("schedule_deferred_open_smb_message: "
-                                         "event_add_timed() failed, skipping mid %u\n",
-                                         mid ));
+                               DEBUG(10,("schedule_deferred_open_message_smb: "
+                                       "event_add_timed() failed, "
+                                       "skipping mid %llu\n",
+                                       (unsigned long long)msg_mid ));
                        }
 
                        TALLOC_FREE(pml->te);
@@ -665,20 +704,25 @@ void schedule_deferred_open_smb_message(uint16 mid)
                }
        }
 
-       DEBUG(10,("schedule_deferred_open_smb_message: failed to find message mid %u\n",
-               mid ));
+       DEBUG(10,("schedule_deferred_open_message_smb: failed to "
+               "find message mid %llu\n",
+               (unsigned long long)mid ));
 }
 
 /****************************************************************************
  Return true if this mid is on the deferred queue and was not yet processed.
 ****************************************************************************/
 
-bool open_was_deferred(uint16 mid)
+bool open_was_deferred(uint64_t mid)
 {
        struct pending_message_list *pml;
 
+       if (smbd_server_conn->using_smb2) {
+               return open_was_deferred_smb2(smbd_server_conn, mid);
+       }
+
        for (pml = deferred_open_queue; pml; pml = pml->next) {
-               if (SVAL(pml->buf.data,smb_mid) == mid && !pml->processed) {
+               if (((uint64_t)SVAL(pml->buf.data,smb_mid)) == mid && !pml->processed) {
                        return True;
                }
        }
@@ -689,45 +733,85 @@ bool open_was_deferred(uint16 mid)
  Return the message queued by this mid.
 ****************************************************************************/
 
-struct pending_message_list *get_open_deferred_message(uint16 mid)
+static struct pending_message_list *get_deferred_open_message_smb(uint64_t mid)
 {
        struct pending_message_list *pml;
 
        for (pml = deferred_open_queue; pml; pml = pml->next) {
-               if (SVAL(pml->buf.data,smb_mid) == mid) {
+               if (((uint64_t)SVAL(pml->buf.data,smb_mid)) == mid) {
                        return pml;
                }
        }
        return NULL;
 }
 
+/****************************************************************************
+ Get the state data queued by this mid.
+****************************************************************************/
+
+bool get_deferred_open_message_state(struct smb_request *smbreq,
+                               struct timeval *p_request_time,
+                               void **pp_state)
+{
+       struct pending_message_list *pml;
+
+       if (smbd_server_conn->using_smb2) {
+               return get_deferred_open_message_state_smb2(smbreq->smb2req,
+                                       p_request_time,
+                                       pp_state);
+       }
+
+       pml = get_deferred_open_message_smb(smbreq->mid);
+       if (!pml) {
+               return false;
+       }
+       if (p_request_time) {
+               *p_request_time = pml->request_time;
+       }
+       if (pp_state) {
+               *pp_state = (void *)pml->private_data.data;
+       }
+       return true;
+}
+
 /****************************************************************************
  Function to push a deferred open smb message onto a linked list of local smb
  messages ready for processing.
 ****************************************************************************/
 
-bool push_deferred_smb_message(struct smb_request *req,
+bool push_deferred_open_message_smb(struct smb_request *req,
                               struct timeval request_time,
                               struct timeval timeout,
+                              struct file_id id,
                               char *private_data, size_t priv_len)
 {
        struct timeval end_time;
 
+       if (req->smb2req) {
+               return push_deferred_open_message_smb2(req->smb2req,
+                                               request_time,
+                                               timeout,
+                                               id,
+                                               private_data,
+                                               priv_len);
+       }
+
        if (req->unread_bytes) {
-               DEBUG(0,("push_deferred_smb_message: logic error ! "
+               DEBUG(0,("push_deferred_open_message_smb: logic error ! "
                        "unread_bytes = %u\n",
                        (unsigned int)req->unread_bytes ));
-               smb_panic("push_deferred_smb_message: "
+               smb_panic("push_deferred_open_message_smb: "
                        "logic error unread_bytes != 0" );
        }
 
        end_time = timeval_sum(&request_time, &timeout);
 
-       DEBUG(10,("push_deferred_open_smb_message: pushing message len %u mid %u "
-                 "timeout time [%u.%06u]\n",
-                 (unsigned int) smb_len(req->inbuf)+4, (unsigned int)req->mid,
-                 (unsigned int)end_time.tv_sec,
-                 (unsigned int)end_time.tv_usec));
+       DEBUG(10,("push_deferred_open_message_smb: pushing message "
+               "len %u mid %llu timeout time [%u.%06u]\n",
+               (unsigned int) smb_len(req->inbuf)+4,
+               (unsigned long long)req->mid,
+               (unsigned int)end_time.tv_sec,
+               (unsigned int)end_time.tv_usec));
 
        return push_queued_message(req, request_time, end_time,
                                   private_data, priv_len);
@@ -844,20 +928,20 @@ static void smbd_sig_hup_handler(struct tevent_context *ev,
                                  void *siginfo,
                                  void *private_data)
 {
+       struct messaging_context *msg_ctx = talloc_get_type_abort(
+               private_data, struct messaging_context);
        change_to_root_user();
        DEBUG(1,("Reloading services after SIGHUP\n"));
-       reload_services(False);
+       reload_services(msg_ctx, smbd_server_conn->sock, False);
 }
 
-void smbd_setup_sig_hup_handler(void)
+void smbd_setup_sig_hup_handler(struct tevent_context *ev,
+                               struct messaging_context *msg_ctx)
 {
        struct tevent_signal *se;
 
-       se = tevent_add_signal(smbd_event_context(),
-                              smbd_event_context(),
-                              SIGHUP, 0,
-                              smbd_sig_hup_handler,
-                              NULL);
+       se = tevent_add_signal(ev, ev, SIGHUP, 0, smbd_sig_hup_handler,
+                              msg_ctx);
        if (!se) {
                exit_server("failed to setup SIGHUP handler");
        }
@@ -866,7 +950,7 @@ void smbd_setup_sig_hup_handler(void)
 static NTSTATUS smbd_server_connection_loop_once(struct smbd_server_connection *conn)
 {
        fd_set r_fds, w_fds;
-       int selrtn;
+       int selrtn = 0;
        struct timeval to;
        int maxfd = 0;
 
@@ -894,7 +978,7 @@ static NTSTATUS smbd_server_connection_loop_once(struct smbd_server_connection *
        }
 
        /* Process a signal and timed events now... */
-       if (run_events(smbd_event_context(), 0, NULL, NULL)) {
+       if (run_events(smbd_event_context(), &selrtn, NULL, NULL)) {
                return NT_STATUS_RETRY;
        }
 
@@ -909,17 +993,25 @@ static NTSTATUS smbd_server_connection_loop_once(struct smbd_server_connection *
                errno = sav;
        }
 
-       if (run_events(smbd_event_context(), selrtn, &r_fds, &w_fds)) {
-               return NT_STATUS_RETRY;
-       }
-
        /* Check if error */
        if (selrtn == -1) {
-               /* something is wrong. Maybe the socket is dead? */
-               return map_nt_error_from_unix(errno);
+               if (errno == EINTR)
+                       return NT_STATUS_RETRY;
+               else
+                       /* Maybe the socket is dead? */
+                       return map_nt_error_from_unix(errno);
        }
 
-       /* Did we timeout ? */
+       /* Process events until all available fds have been handled.
+        * This allows for fair round-robin handling of all available fds
+        * on each select() wakeup, while still maintaining responsiveness
+        * by re-checking for signal and timed events between the handling
+        * of each ready fd. */
+       do {
+               run_events(smbd_event_context(), &selrtn, &r_fds, &w_fds);
+       } while (selrtn > 0);
+
+       /* Processed all fds or timed out */
        if (selrtn == 0) {
                return NT_STATUS_RETRY;
        }
@@ -933,7 +1025,7 @@ static NTSTATUS smbd_server_connection_loop_once(struct smbd_server_connection *
  * prevent a DoS.
  */
 
-NTSTATUS allow_new_trans(struct trans_state *list, int mid)
+NTSTATUS allow_new_trans(struct trans_state *list, uint64_t mid)
 {
        int count = 0;
        for (; list != NULL; list = list->next) {
@@ -1335,7 +1427,7 @@ static connection_struct *switch_message(uint8 type, struct smb_request *req, in
        int flags;
        uint16 session_tag;
        connection_struct *conn = NULL;
-       struct smbd_server_connection *sconn = smbd_server_conn;
+       struct smbd_server_connection *sconn = req->sconn;
 
        errno = 0;
 
@@ -1389,8 +1481,7 @@ static connection_struct *switch_message(uint8 type, struct smb_request *req, in
                                set_current_user_info(
                                        vuser->server_info->sanitized_username,
                                        vuser->server_info->unix_name,
-                                       pdb_get_domain(vuser->server_info
-                                                      ->sam_account));
+                                       vuser->server_info->info3->base.domain.string);
                        }
                }
        }
@@ -1414,7 +1505,8 @@ static connection_struct *switch_message(uint8 type, struct smb_request *req, in
 
                if (!change_to_user(conn,session_tag)) {
                        DEBUG(0, ("Error: Could not change to user. Removing "
-                           "deferred open, mid=%d.\n", req->mid));
+                               "deferred open, mid=%llu.\n",
+                               (unsigned long long)req->mid));
                        reply_force_doserror(req, ERRSRV, ERRbaduid);
                        return conn;
                }
@@ -1463,8 +1555,9 @@ static connection_struct *switch_message(uint8 type, struct smb_request *req, in
        /* does this protocol need to be run as guest? */
        if ((flags & AS_GUEST)
            && (!change_to_guest() ||
-               !check_access(smbd_server_fd(), lp_hostsallow(-1),
-                             lp_hostsdeny(-1)))) {
+               !allow_access(lp_hostsdeny(-1), lp_hostsallow(-1),
+                             sconn->client_id.name,
+                             sconn->client_id.addr))) {
                reply_nterror(req, NT_STATUS_ACCESS_DENIED);
                return conn;
        }
@@ -1477,7 +1570,8 @@ static connection_struct *switch_message(uint8 type, struct smb_request *req, in
  Construct a reply to the incoming packet.
 ****************************************************************************/
 
-static void construct_reply(char *inbuf, int size, size_t unread_bytes,
+static void construct_reply(struct smbd_server_connection *sconn,
+                           char *inbuf, int size, size_t unread_bytes,
                            uint32_t seqnum, bool encrypted,
                            struct smb_perfcount_data *deferred_pcd)
 {
@@ -1488,8 +1582,8 @@ static void construct_reply(char *inbuf, int size, size_t unread_bytes,
                smb_panic("could not allocate smb_request");
        }
 
-       if (!init_smb_request(req, (uint8 *)inbuf, unread_bytes, encrypted,
-                             seqnum)) {
+       if (!init_smb_request(req, sconn, (uint8 *)inbuf, unread_bytes,
+                             encrypted, seqnum)) {
                exit_server_cleanly("Invalid SMB request");
        }
 
@@ -1508,7 +1602,7 @@ static void construct_reply(char *inbuf, int size, size_t unread_bytes,
 
        if (req->unread_bytes) {
                /* writeX failed. drain socket. */
-               if (drain_socket(smbd_server_fd(), req->unread_bytes) !=
+               if (drain_socket(req->sconn->sock, req->unread_bytes) !=
                                req->unread_bytes) {
                        smb_panic("failed to drain pending bytes");
                }
@@ -1528,7 +1622,7 @@ static void construct_reply(char *inbuf, int size, size_t unread_bytes,
                show_msg((char *)req->outbuf);
        }
 
-       if (!srv_send_smb(smbd_server_fd(),
+       if (!srv_send_smb(req->sconn,
                        (char *)req->outbuf,
                        true, req->seqnum+1,
                        IS_CONN_ENCRYPTED(conn)||req->encrypted,
@@ -1544,7 +1638,7 @@ static void construct_reply(char *inbuf, int size, size_t unread_bytes,
 /****************************************************************************
  Process an smb from the client
 ****************************************************************************/
-static void process_smb(struct smbd_server_connection *conn,
+static void process_smb(struct smbd_server_connection *sconn,
                        uint8_t *inbuf, size_t nread, size_t unread_bytes,
                        uint32_t seqnum, bool encrypted,
                        struct smb_perfcount_data *deferred_pcd)
@@ -1555,33 +1649,39 @@ static void process_smb(struct smbd_server_connection *conn,
 
        DEBUG( 6, ( "got message type 0x%x of len 0x%x\n", msg_type,
                    smb_len(inbuf) ) );
-       DEBUG( 3, ( "Transaction %d of length %d (%u toread)\n", trans_num,
-                               (int)nread,
-                               (unsigned int)unread_bytes ));
+       DEBUG(3, ("Transaction %d of length %d (%u toread)\n",
+                 sconn->trans_num, (int)nread, (unsigned int)unread_bytes));
 
        if (msg_type != 0) {
                /*
                 * NetBIOS session request, keepalive, etc.
                 */
-               reply_special((char *)inbuf);
+               reply_special(sconn, (char *)inbuf, nread);
                goto done;
        }
 
-       if (smbd_server_conn->allow_smb2) {
+       if (sconn->using_smb2) {
+               /* At this point we're not really using smb2,
+                * we make the decision here.. */
                if (smbd_is_smb2_header(inbuf, nread)) {
-                       smbd_smb2_first_negprot(smbd_server_conn, inbuf, nread);
+                       smbd_smb2_first_negprot(sconn, inbuf, nread);
                        return;
+               } else if (nread >= smb_size && valid_smb_header(inbuf)
+                               && CVAL(inbuf, smb_com) != 0x72) {
+                       /* This is a non-negprot SMB1 packet.
+                          Disable SMB2 from now on. */
+                       sconn->using_smb2 = false;
                }
-               smbd_server_conn->allow_smb2 = false;
        }
 
        show_msg((char *)inbuf);
 
-       construct_reply((char *)inbuf,nread,unread_bytes,seqnum,encrypted,deferred_pcd);
-       trans_num++;
+       construct_reply(sconn, (char *)inbuf, nread, unread_bytes, seqnum,
+                       encrypted, deferred_pcd);
+       sconn->trans_num++;
 
 done:
-       conn->smb1.num_requests++;
+       sconn->smb1.num_requests++;
 
        /* The timeout_processing function isn't run nearly
           often enough to implement 'max log size' without
@@ -1590,7 +1690,7 @@ done:
           level 10.  Checking every 50 SMBs is a nice
           tradeoff of performance vs log file size overrun. */
 
-       if ((conn->smb1.num_requests % 50) == 0 &&
+       if ((sconn->smb1.num_requests % 50) == 0 &&
            need_to_check_log_size()) {
                change_to_root_user();
                check_log_size();
@@ -1961,7 +2061,7 @@ void chain_reply(struct smb_request *req)
                smb_setlen((char *)(req->chain_outbuf),
                           talloc_get_size(req->chain_outbuf) - 4);
 
-               if (!srv_send_smb(smbd_server_fd(), (char *)req->chain_outbuf,
+               if (!srv_send_smb(req->sconn, (char *)req->chain_outbuf,
                                  true, req->seqnum+1,
                                  IS_CONN_ENCRYPTED(req->conn)
                                  ||req->encrypted,
@@ -2101,11 +2201,11 @@ void chain_reply(struct smb_request *req)
 
        show_msg((char *)(req->chain_outbuf));
 
-       if (!srv_send_smb(smbd_server_fd(), (char *)req->chain_outbuf,
+       if (!srv_send_smb(req->sconn, (char *)req->chain_outbuf,
                          true, req->seqnum+1,
                          IS_CONN_ENCRYPTED(req->conn)||req->encrypted,
                          &req->pcd)) {
-               exit_server_cleanly("construct_reply: srv_send_smb failed.");
+               exit_server_cleanly("chain_reply: srv_send_smb failed.");
        }
        TALLOC_FREE(req->chain_outbuf);
        req->done = true;
@@ -2115,7 +2215,7 @@ void chain_reply(struct smb_request *req)
  Check if services need reloading.
 ****************************************************************************/
 
-void check_reload(time_t t)
+static void check_reload(struct smbd_server_connection *sconn, time_t t)
 {
        time_t printcap_cache_time = (time_t)lp_printcap_cache_time();
 
@@ -2140,7 +2240,7 @@ void check_reload(time_t t)
        }
 
        if (t >= last_smb_conf_reload_time+SMBD_RELOAD_CHECK) {
-               reload_services(True);
+               reload_services(sconn->msg_ctx, sconn->sock, True);
                last_smb_conf_reload_time = t;
        }
 
@@ -2154,7 +2254,7 @@ void check_reload(time_t t)
                        || (t-last_printer_reload_time  < 0) ) 
                {
                        DEBUG( 3,( "Printcap cache time expired.\n"));
-                       reload_printers();
+                       reload_printers(sconn->msg_ctx);
                        last_printer_reload_time = t;
                }
        }
@@ -2192,19 +2292,19 @@ static void smbd_server_connection_read_handler(
        NTSTATUS status;
        uint32_t seqnum;
 
-       bool from_client = (smbd_server_fd() == fd)?true:false;
+       bool from_client = (conn->sock == fd);
 
        if (from_client) {
                smbd_lock_socket(conn);
 
-               if (!fd_is_readable(smbd_server_fd())) {
+               if (!fd_is_readable(fd)) {
                        DEBUG(10,("the echo listener was faster\n"));
                        smbd_unlock_socket(conn);
                        return;
                }
 
                /* TODO: make this completely nonblocking */
-               status = receive_smb_talloc(mem_ctx, fd,
+               status = receive_smb_talloc(mem_ctx, conn,
                                            (char **)(void *)&inbuf,
                                            0, /* timeout */
                                            &unread_bytes,
@@ -2214,7 +2314,7 @@ static void smbd_server_connection_read_handler(
                smbd_unlock_socket(conn);
        } else {
                /* TODO: make this completely nonblocking */
-               status = receive_smb_talloc(mem_ctx, fd,
+               status = receive_smb_talloc(mem_ctx, conn,
                                            (char **)(void *)&inbuf,
                                            0, /* timeout */
                                            &unread_bytes,
@@ -2248,8 +2348,11 @@ static void smbd_server_connection_handler(struct event_context *ev,
 
        if (flags & EVENT_FD_WRITE) {
                smbd_server_connection_write_handler(conn);
-       } else if (flags & EVENT_FD_READ) {
-               smbd_server_connection_read_handler(conn, smbd_server_fd());
+               return;
+       }
+       if (flags & EVENT_FD_READ) {
+               smbd_server_connection_read_handler(conn, conn->sock);
+               return;
        }
 }
 
@@ -2263,9 +2366,12 @@ static void smbd_server_echo_handler(struct event_context *ev,
 
        if (flags & EVENT_FD_WRITE) {
                smbd_server_connection_write_handler(conn);
-       } else if (flags & EVENT_FD_READ) {
+               return;
+       }
+       if (flags & EVENT_FD_READ) {
                smbd_server_connection_read_handler(
                        conn, conn->smb1.echo_handler.trusted_fd);
+               return;
        }
 }
 
@@ -2274,10 +2380,8 @@ received when we should release a specific IP
 ****************************************************************************/
 static void release_ip(const char *ip, void *priv)
 {
-       char addr[INET6_ADDRSTRLEN];
-       char *p = addr;
-
-       client_socket_addr(get_client_fd(),addr,sizeof(addr));
+       const char *addr = (const char *)priv;
+       const char *p = addr;
 
        if (strncmp("::ffff:", addr, 7) == 0) {
                p = addr + 7;
@@ -2300,23 +2404,23 @@ static void release_ip(const char *ip, void *priv)
 static void msg_release_ip(struct messaging_context *msg_ctx, void *private_data,
                           uint32_t msg_type, struct server_id server_id, DATA_BLOB *data)
 {
-       release_ip((char *)data->data, NULL);
+       struct smbd_server_connection *sconn = talloc_get_type_abort(
+               private_data, struct smbd_server_connection);
+
+       release_ip((char *)data->data, sconn->client_id.addr);
 }
 
 #ifdef CLUSTER_SUPPORT
-static int client_get_tcp_info(struct sockaddr_storage *server,
+static int client_get_tcp_info(int sock, struct sockaddr_storage *server,
                               struct sockaddr_storage *client)
 {
        socklen_t length;
-       if (server_fd == -1) {
-               return -1;
-       }
        length = sizeof(*server);
-       if (getsockname(server_fd, (struct sockaddr *)server, &length) != 0) {
+       if (getsockname(sock, (struct sockaddr *)server, &length) != 0) {
                return -1;
        }
        length = sizeof(*client);
-       if (getpeername(server_fd, (struct sockaddr *)client, &length) != 0) {
+       if (getpeername(sock, (struct sockaddr *)client, &length) != 0) {
                return -1;
        }
        return 0;
@@ -2328,14 +2432,28 @@ static int client_get_tcp_info(struct sockaddr_storage *server,
  */
 static bool keepalive_fn(const struct timeval *now, void *private_data)
 {
+       struct smbd_server_connection *sconn = smbd_server_conn;
        bool ret;
 
+       if (sconn->using_smb2) {
+               /* Don't do keepalives on an SMB2 connection. */
+               return false;
+       }
+
        smbd_lock_socket(smbd_server_conn);
-       ret = send_keepalive(smbd_server_fd());
+       ret = send_keepalive(sconn->sock);
        smbd_unlock_socket(smbd_server_conn);
 
        if (!ret) {
-               DEBUG( 2, ( "Keepalive failed - exiting.\n" ) );
+               char addr[INET6_ADDRSTRLEN];
+               /*
+                * Try and give an error message saying what
+                * client failed.
+                */
+               DEBUG(0, ("send_keepalive failed for client %s. "
+                         "Error %s - exiting\n",
+                         get_peer_addr(sconn->sock, addr, sizeof(addr)),
+                         strerror(errno)));
                return False;
        }
        return True;
@@ -2346,23 +2464,14 @@ static bool keepalive_fn(const struct timeval *now, void *private_data)
  */
 static bool deadtime_fn(const struct timeval *now, void *private_data)
 {
-       struct smbd_server_connection *sconn = smbd_server_conn;
-
-       if (sconn->allow_smb2) {
-               /* TODO: implement real idle check */
-               if (sconn->smb2.sessions.list) {
-                       return true;
-               }
-               DEBUG( 2, ( "Closing idle SMB2 connection\n" ) );
-               messaging_send(smbd_messaging_context(), procid_self(),
-                              MSG_SHUTDOWN, &data_blob_null);
-               return false;
-       }
+       struct smbd_server_connection *sconn =
+               (struct smbd_server_connection *)private_data;
 
        if ((conn_num_open(sconn) == 0)
            || (conn_idle_all(sconn, now->tv_sec))) {
-               DEBUG( 2, ( "Closing idle SMB1 connection\n" ) );
-               messaging_send(smbd_messaging_context(), procid_self(),
+               DEBUG( 2, ( "Closing idle connection\n" ) );
+               messaging_send(sconn->msg_ctx,
+                              messaging_server_id(sconn->msg_ctx),
                               MSG_SHUTDOWN, &data_blob_null);
                return False;
        }
@@ -2376,13 +2485,15 @@ static bool deadtime_fn(const struct timeval *now, void *private_data)
 
 static bool housekeeping_fn(const struct timeval *now, void *private_data)
 {
+       struct smbd_server_connection *sconn = talloc_get_type_abort(
+               private_data, struct smbd_server_connection);
        change_to_root_user();
 
        /* update printer queue caches if necessary */
-       update_monitored_printq_cache();
+       update_monitored_printq_cache(sconn->msg_ctx);
 
        /* check if we need to reload services */
-       check_reload(time(NULL));
+       check_reload(sconn, time(NULL));
 
        /* Change machine password if neccessary. */
        attempt_machine_password_change();
@@ -2481,8 +2592,7 @@ static void smbd_echo_writer_done(struct tevent_req *req)
        smbd_echo_activate_writer(state);
 }
 
-static bool smbd_echo_reply(int fd,
-                           uint8_t *inbuf, size_t inbuf_len,
+static bool smbd_echo_reply(uint8_t *inbuf, size_t inbuf_len,
                            uint32_t seqnum)
 {
        struct smb_request req;
@@ -2491,6 +2601,14 @@ static bool smbd_echo_reply(int fd,
        char *outbuf;
        bool ok;
 
+       if ((inbuf_len == 4) && (CVAL(inbuf, 0) == SMBkeepalive)) {
+               DEBUG(10, ("Got netbios keepalive\n"));
+               /*
+                * Just swallow it
+                */
+               return true;
+       }
+
        if (inbuf_len < smb_size) {
                DEBUG(10, ("Got short packet: %d bytes\n", (int)inbuf_len));
                return false;
@@ -2500,7 +2618,8 @@ static bool smbd_echo_reply(int fd,
                return false;
        }
 
-       if (!init_smb_request(&req, inbuf, 0, false, seqnum)) {
+       if (!init_smb_request(&req, smbd_server_conn, inbuf, 0, false,
+                             seqnum)) {
                return false;
        }
        req.inbuf = inbuf;
@@ -2537,7 +2656,7 @@ static bool smbd_echo_reply(int fd,
 
        out_len = smb_len(req.outbuf) + 4;
 
-       ok = srv_send_smb(smbd_server_fd(),
+       ok = srv_send_smb(req.sconn,
                          (char *)outbuf,
                          true, seqnum+1,
                          false, &req.pcd);
@@ -2567,11 +2686,14 @@ static void smbd_echo_reader(struct tevent_context *ev,
        size_t unread, num_pending;
        NTSTATUS status;
        struct iovec *tmp;
+       size_t iov_len;
        uint32_t seqnum = 0;
        bool reply;
        bool ok;
        bool encrypted = false;
 
+       smb_msleep(1000);
+
        ok = smbd_lock_socket_internal(sconn);
        if (!ok) {
                DEBUG(0, ("%s: failed to lock socket\n",
@@ -2579,7 +2701,7 @@ static void smbd_echo_reader(struct tevent_context *ev,
                exit(1);
        }
 
-       if (!fd_is_readable(smbd_server_fd())) {
+       if (!fd_is_readable(sconn->sock)) {
                DEBUG(10,("echo_handler[%d] the parent smbd was faster\n",
                          (int)sys_getpid()));
                ok = smbd_unlock_socket_internal(sconn);
@@ -2602,12 +2724,12 @@ static void smbd_echo_reader(struct tevent_context *ev,
 
        DEBUG(10,("echo_handler[%d]: reading pdu\n", (int)sys_getpid()));
 
-       status = receive_smb_talloc(state, smbd_server_fd(),
+       status = receive_smb_talloc(state->pending, sconn,
                                    (char **)(void *)&state->pending[num_pending].iov_base,
                                    0 /* timeout */,
                                    &unread,
                                    &encrypted,
-                                   &state->pending[num_pending].iov_len,
+                                   &iov_len,
                                    &seqnum,
                                    false /* trusted_channel*/);
        if (!NT_STATUS_IS_OK(status)) {
@@ -2615,6 +2737,7 @@ static void smbd_echo_reader(struct tevent_context *ev,
                          (int)sys_getpid(), nt_errstr(status)));
                exit(1);
        }
+       state->pending[num_pending].iov_len = iov_len;
 
        ok = smbd_unlock_socket_internal(sconn);
        if (!ok) {
@@ -2623,15 +2746,7 @@ static void smbd_echo_reader(struct tevent_context *ev,
                exit(1);
        }
 
-       /*
-        * place the seqnum in the packet so that the main process can reply
-        * with signing
-        */
-       SIVAL((uint8_t *)state->pending[num_pending].iov_base, smb_ss_field, seqnum);
-       SIVAL((uint8_t *)state->pending[num_pending].iov_base, smb_ss_field+4, NT_STATUS_V(NT_STATUS_OK));
-
-       reply = smbd_echo_reply(smbd_server_fd(),
-                               (uint8_t *)state->pending[num_pending].iov_base,
+       reply = smbd_echo_reply((uint8_t *)state->pending[num_pending].iov_base,
                                state->pending[num_pending].iov_len,
                                seqnum);
        if (reply) {
@@ -2640,10 +2755,22 @@ static void smbd_echo_reader(struct tevent_context *ev,
                state->pending = talloc_realloc(state, state->pending,
                                                struct iovec,
                                                num_pending);
-       } else {
-               DEBUG(10,("echo_handler[%d]: forward to main\n", (int)sys_getpid()));
-               smbd_echo_activate_writer(state);
+               return;
+       }
+
+       if (state->pending[num_pending].iov_len >= smb_size) {
+               /*
+                * place the seqnum in the packet so that the main process
+                * can reply with signing
+                */
+               SIVAL((uint8_t *)state->pending[num_pending].iov_base,
+                     smb_ss_field, seqnum);
+               SIVAL((uint8_t *)state->pending[num_pending].iov_base,
+                     smb_ss_field+4, NT_STATUS_V(NT_STATUS_OK));
        }
+
+       DEBUG(10,("echo_handler[%d]: forward to main\n", (int)sys_getpid()));
+       smbd_echo_activate_writer(state);
 }
 
 static void smbd_echo_loop(struct smbd_server_connection *sconn,
@@ -2672,7 +2799,7 @@ static void smbd_echo_loop(struct smbd_server_connection *sconn,
                TALLOC_FREE(state);
                return;
        }
-       state->read_fde = tevent_add_fd(state->ev, state, smbd_server_fd(),
+       state->read_fde = tevent_add_fd(state->ev, state, sconn->sock,
                                        TEVENT_FD_READ, smbd_echo_reader,
                                        state);
        if (state->read_fde == NULL) {
@@ -2716,9 +2843,11 @@ static bool fork_echo_handler(struct smbd_server_connection *sconn)
                NTSTATUS status;
 
                close(listener_pipe[0]);
+               set_blocking(listener_pipe[1], false);
 
-               status = reinit_after_fork(smbd_messaging_context(),
-                                          smbd_event_context(), false);
+               status = reinit_after_fork(sconn->msg_ctx,
+                                          smbd_event_context(),
+                                          procid_self(), false);
                if (!NT_STATUS_IS_OK(status)) {
                        DEBUG(1, ("reinit_after_fork failed: %s\n",
                                  nt_errstr(status)));
@@ -2766,34 +2895,117 @@ fail:
        return false;
 }
 
+#if CLUSTER_SUPPORT
+
+static NTSTATUS smbd_register_ips(struct smbd_server_connection *sconn,
+                                 struct sockaddr_storage *srv,
+                                 struct sockaddr_storage *clnt)
+{
+       struct ctdbd_connection *cconn;
+       char tmp_addr[INET6_ADDRSTRLEN];
+       char *addr;
+
+       cconn = messaging_ctdbd_connection();
+       if (cconn == NULL) {
+               return NT_STATUS_NO_MEMORY;
+       }
+
+       client_socket_addr(sconn->sock, tmp_addr, sizeof(tmp_addr));
+       addr = talloc_strdup(cconn, tmp_addr);
+       if (addr == NULL) {
+               return NT_STATUS_NO_MEMORY;
+       }
+       return ctdbd_register_ips(cconn, srv, clnt, release_ip, addr);
+}
+
+#endif
+
 /****************************************************************************
  Process commands from the client
 ****************************************************************************/
 
-void smbd_process(void)
+void smbd_process(struct smbd_server_connection *sconn)
 {
        TALLOC_CTX *frame = talloc_stackframe();
-       char remaddr[INET6_ADDRSTRLEN];
+       struct sockaddr_storage ss;
+       struct sockaddr *sa = NULL;
+       socklen_t sa_socklen;
+       struct tsocket_address *local_address = NULL;
+       struct tsocket_address *remote_address = NULL;
+       const char *remaddr = NULL;
+       int ret;
 
        if (lp_maxprotocol() == PROTOCOL_SMB2 &&
            lp_security() != SEC_SHARE &&
            !lp_async_smb_echo_handler()) {
-               smbd_server_conn->allow_smb2 = true;
+               /*
+                * We're not making the desion here,
+                * we're just allowing the client
+                * to decide between SMB1 and SMB2
+                * with the first negprot
+                * packet.
+                */
+               sconn->using_smb2 = true;
        }
 
        /* Ensure child is set to blocking mode */
-       set_blocking(smbd_server_fd(),True);
+       set_blocking(sconn->sock,True);
+
+       set_socket_options(sconn->sock, "SO_KEEPALIVE");
+       set_socket_options(sconn->sock, lp_socket_options());
+
+       sa = (struct sockaddr *)(void *)&ss;
+       sa_socklen = sizeof(ss);
+       ret = getpeername(sconn->sock, sa, &sa_socklen);
+       if (ret != 0) {
+               int level = (errno == ENOTCONN)?2:0;
+               DEBUG(level,("getpeername() failed - %s\n", strerror(errno)));
+               exit_server_cleanly("getpeername() failed.\n");
+       }
+       ret = tsocket_address_bsd_from_sockaddr(sconn,
+                                               sa, sa_socklen,
+                                               &remote_address);
+       if (ret != 0) {
+               DEBUG(0,("%s: tsocket_address_bsd_from_sockaddr remote failed - %s\n",
+                       __location__, strerror(errno)));
+               exit_server_cleanly("tsocket_address_bsd_from_sockaddr remote failed.\n");
+       }
+
+       sa = (struct sockaddr *)(void *)&ss;
+       sa_socklen = sizeof(ss);
+       ret = getsockname(sconn->sock, sa, &sa_socklen);
+       if (ret != 0) {
+               int level = (errno == ENOTCONN)?2:0;
+               DEBUG(level,("getsockname() failed - %s\n", strerror(errno)));
+               exit_server_cleanly("getsockname() failed.\n");
+       }
+       ret = tsocket_address_bsd_from_sockaddr(sconn,
+                                               sa, sa_socklen,
+                                               &local_address);
+       if (ret != 0) {
+               DEBUG(0,("%s: tsocket_address_bsd_from_sockaddr remote failed - %s\n",
+                       __location__, strerror(errno)));
+               exit_server_cleanly("tsocket_address_bsd_from_sockaddr remote failed.\n");
+       }
+
+       sconn->local_address = local_address;
+       sconn->remote_address = remote_address;
+
+       if (tsocket_address_is_inet(remote_address, "ip")) {
+               remaddr = tsocket_address_inet_addr_string(
+                               sconn->remote_address,
+                               talloc_tos());
+               if (remaddr == NULL) {
 
-       set_socket_options(smbd_server_fd(),"SO_KEEPALIVE");
-       set_socket_options(smbd_server_fd(), lp_socket_options());
+               }
+       } else {
+               remaddr = "0.0.0.0";
+       }
 
        /* this is needed so that we get decent entries
           in smbstatus for port 445 connects */
-       set_remote_machine_name(get_peer_addr(smbd_server_fd(),
-                                             remaddr,
-                                             sizeof(remaddr)),
-                                             false);
-       reload_services(true);
+       set_remote_machine_name(remaddr, false);
+       reload_services(sconn->msg_ctx, sconn->sock, true);
 
        /*
         * Before the first packet, check the global hosts allow/ hosts deny
@@ -2802,23 +3014,25 @@ void smbd_process(void)
         * the hosts allow list.
         */
 
-       if (!check_access(smbd_server_fd(), lp_hostsallow(-1),
-                         lp_hostsdeny(-1))) {
-               char addr[INET6_ADDRSTRLEN];
-
+       if (!allow_access(lp_hostsdeny(-1), lp_hostsallow(-1),
+                         sconn->client_id.name,
+                         sconn->client_id.addr)) {
                /*
                 * send a negative session response "not listening on calling
                 * name"
                 */
                unsigned char buf[5] = {0x83, 0, 0, 1, 0x81};
-               DEBUG( 1, ("Connection denied from %s\n",
-                          client_addr(get_client_fd(),addr,sizeof(addr)) ) );
-               (void)srv_send_smb(smbd_server_fd(),(char *)buf, false,
+               DEBUG( 1, ("Connection denied from %s to %s\n",
+                          tsocket_address_string(remote_address, talloc_tos()),
+                          tsocket_address_string(local_address, talloc_tos())));
+               (void)srv_send_smb(sconn,(char *)buf, false,
                                   0, false, NULL);
                exit_server_cleanly("connection denied");
        }
 
-       static_init_rpc;
+       DEBUG(10, ("Connection allowed from %s to %s\n",
+                  tsocket_address_string(remote_address, talloc_tos()),
+                  tsocket_address_string(local_address, talloc_tos())));
 
        init_modules();
 
@@ -2840,33 +3054,33 @@ void smbd_process(void)
                DEBUG(0,("Changed root to %s\n", lp_rootdir()));
        }
 
-       if (!srv_init_signing(smbd_server_conn)) {
+       if (!srv_init_signing(sconn)) {
                exit_server("Failed to init smb_signing");
        }
 
-       if (lp_async_smb_echo_handler() && !fork_echo_handler(smbd_server_conn)) {
+       if (lp_async_smb_echo_handler() && !fork_echo_handler(sconn)) {
                exit_server("Failed to fork echo handler");
        }
 
        /* Setup oplocks */
-       if (!init_oplocks(smbd_messaging_context()))
+       if (!init_oplocks(sconn->msg_ctx))
                exit_server("Failed to init oplocks");
 
        /* register our message handlers */
-       messaging_register(smbd_messaging_context(), NULL,
+       messaging_register(sconn->msg_ctx, NULL,
                           MSG_SMB_FORCE_TDIS, msg_force_tdis);
-       messaging_register(smbd_messaging_context(), NULL,
+       messaging_register(sconn->msg_ctx, sconn,
                           MSG_SMB_RELEASE_IP, msg_release_ip);
-       messaging_register(smbd_messaging_context(), NULL,
+       messaging_register(sconn->msg_ctx, NULL,
                           MSG_SMB_CLOSE_FILE, msg_close_file);
 
        /*
         * Use the default MSG_DEBUG handler to avoid rebroadcasting
         * MSGs to all child processes
         */
-       messaging_deregister(smbd_messaging_context(),
+       messaging_deregister(sconn->msg_ctx,
                             MSG_DEBUG, NULL);
-       messaging_register(smbd_messaging_context(), NULL,
+       messaging_register(sconn->msg_ctx, NULL,
                           MSG_DEBUG, debug_message);
 
        if ((lp_keepalive() != 0)
@@ -2880,14 +3094,14 @@ void smbd_process(void)
 
        if (!(event_add_idle(smbd_event_context(), NULL,
                             timeval_set(IDLE_CLOSED_TIMEOUT, 0),
-                            "deadtime", deadtime_fn, NULL))) {
+                            "deadtime", deadtime_fn, sconn))) {
                DEBUG(0, ("Could not add deadtime event\n"));
                exit(1);
        }
 
        if (!(event_add_idle(smbd_event_context(), NULL,
                             timeval_set(SMBD_SELECT_TIMEOUT, 0),
-                            "housekeeping", housekeeping_fn, NULL))) {
+                            "housekeeping", housekeeping_fn, sconn))) {
                DEBUG(0, ("Could not add housekeeping event\n"));
                exit(1);
        }
@@ -2904,14 +3118,9 @@ void smbd_process(void)
 
                struct sockaddr_storage srv, clnt;
 
-               if (client_get_tcp_info(&srv, &clnt) == 0) {
-
+               if (client_get_tcp_info(sconn->sock, &srv, &clnt) == 0) {
                        NTSTATUS status;
-
-                       status = ctdbd_register_ips(
-                               messaging_ctdbd_connection(),
-                               &srv, &clnt, release_ip, NULL);
-
+                       status = smbd_register_ips(sconn, &srv, &clnt);
                        if (!NT_STATUS_IS_OK(status)) {
                                DEBUG(0, ("ctdbd_register_ips failed: %s\n",
                                          nt_errstr(status)));
@@ -2926,37 +3135,34 @@ void smbd_process(void)
 
 #endif
 
-       smbd_server_conn->nbt.got_session = false;
+       sconn->nbt.got_session = false;
 
-       smbd_server_conn->smb1.negprot.max_recv = MIN(lp_maxxmit(),BUFFER_SIZE);
+       sconn->smb1.negprot.max_recv = MIN(lp_maxxmit(),BUFFER_SIZE);
 
-       smbd_server_conn->smb1.sessions.done_sesssetup = false;
-       smbd_server_conn->smb1.sessions.max_send = BUFFER_SIZE;
-       smbd_server_conn->smb1.sessions.last_session_tag = UID_FIELD_INVALID;
+       sconn->smb1.sessions.done_sesssetup = false;
+       sconn->smb1.sessions.max_send = BUFFER_SIZE;
+       sconn->smb1.sessions.last_session_tag = UID_FIELD_INVALID;
        /* users from session setup */
-       smbd_server_conn->smb1.sessions.session_userlist = NULL;
+       sconn->smb1.sessions.session_userlist = NULL;
        /* workgroup from session setup. */
-       smbd_server_conn->smb1.sessions.session_workgroup = NULL;
+       sconn->smb1.sessions.session_workgroup = NULL;
        /* this holds info on user ids that are already validated for this VC */
-       smbd_server_conn->smb1.sessions.validated_users = NULL;
-       smbd_server_conn->smb1.sessions.next_vuid = VUID_OFFSET;
-       smbd_server_conn->smb1.sessions.num_validated_vuids = 0;
-#ifdef HAVE_NETGROUP
-       smbd_server_conn->smb1.sessions.my_yp_domain = NULL;
-#endif
+       sconn->smb1.sessions.validated_users = NULL;
+       sconn->smb1.sessions.next_vuid = VUID_OFFSET;
+       sconn->smb1.sessions.num_validated_vuids = 0;
 
-       conn_init(smbd_server_conn);
-       if (!init_dptrs(smbd_server_conn)) {
+       conn_init(sconn);
+       if (!init_dptrs(sconn)) {
                exit_server("init_dptrs() failed");
        }
 
-       smbd_server_conn->smb1.fde = event_add_fd(smbd_event_context(),
-                                                 smbd_server_conn,
-                                                 smbd_server_fd(),
+       sconn->smb1.fde = event_add_fd(smbd_event_context(),
+                                                 sconn,
+                                                 sconn->sock,
                                                  EVENT_FD_READ,
                                                  smbd_server_connection_handler,
-                                                 smbd_server_conn);
-       if (!smbd_server_conn->smb1.fde) {
+                                                 sconn);
+       if (!sconn->smb1.fde) {
                exit_server("failed to create smbd_server_connection fde");
        }
 
@@ -2969,7 +3175,7 @@ void smbd_process(void)
 
                errno = 0;
 
-               status = smbd_server_connection_loop_once(smbd_server_conn);
+               status = smbd_server_connection_loop_once(sconn);
                if (!NT_STATUS_EQUAL(status, NT_STATUS_RETRY) &&
                    !NT_STATUS_IS_OK(status)) {
                        DEBUG(3, ("smbd_server_connection_loop_once failed: %s,"