s3:namecache: remove unused namecache_shutdown() function
[metze/samba/wip.git] / source3 / smbd / server.c
1 /*
2    Unix SMB/CIFS implementation.
3    Main SMB server routines
4    Copyright (C) Andrew Tridgell                1992-1998
5    Copyright (C) Martin Pool                    2002
6    Copyright (C) Jelmer Vernooij                2002-2003
7    Copyright (C) Volker Lendecke                1993-2007
8    Copyright (C) Jeremy Allison                 1993-2007
9
10    This program is free software; you can redistribute it and/or modify
11    it under the terms of the GNU General Public License as published by
12    the Free Software Foundation; either version 3 of the License, or
13    (at your option) any later version.
14
15    This program is distributed in the hope that it will be useful,
16    but WITHOUT ANY WARRANTY; without even the implied warranty of
17    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
18    GNU General Public License for more details.
19
20    You should have received a copy of the GNU General Public License
21    along with this program.  If not, see <http://www.gnu.org/licenses/>.
22 */
23
24 #include "includes.h"
25 #include "smbd/globals.h"
26
27 static_decl_rpc;
28
29 #ifdef WITH_DFS
30 extern int dcelogin_atmost_once;
31 #endif /* WITH_DFS */
32
33 int smbd_server_fd(void)
34 {
35         return server_fd;
36 }
37
38 static void smbd_set_server_fd(int fd)
39 {
40         server_fd = fd;
41 }
42
43 int get_client_fd(void)
44 {
45         return server_fd;
46 }
47
48 #ifdef CLUSTER_SUPPORT
49 static int client_get_tcp_info(struct sockaddr_storage *server,
50                                struct sockaddr_storage *client)
51 {
52         socklen_t length;
53         if (server_fd == -1) {
54                 return -1;
55         }
56         length = sizeof(*server);
57         if (getsockname(server_fd, (struct sockaddr *)server, &length) != 0) {
58                 return -1;
59         }
60         length = sizeof(*client);
61         if (getpeername(server_fd, (struct sockaddr *)client, &length) != 0) {
62                 return -1;
63         }
64         return 0;
65 }
66 #endif
67
68 struct event_context *smbd_event_context(void)
69 {
70         if (!smbd_event_ctx) {
71                 smbd_event_ctx = event_context_init(talloc_autofree_context());
72         }
73         if (!smbd_event_ctx) {
74                 smb_panic("Could not init smbd event context");
75         }
76         return smbd_event_ctx;
77 }
78
79 struct messaging_context *smbd_messaging_context(void)
80 {
81         if (smbd_msg_ctx == NULL) {
82                 smbd_msg_ctx = messaging_init(talloc_autofree_context(),
83                                               server_id_self(),
84                                               smbd_event_context());
85         }
86         if (smbd_msg_ctx == NULL) {
87                 DEBUG(0, ("Could not init smbd messaging context.\n"));
88         }
89         return smbd_msg_ctx;
90 }
91
92 struct memcache *smbd_memcache(void)
93 {
94         if (!smbd_memcache_ctx) {
95                 smbd_memcache_ctx = memcache_init(talloc_autofree_context(),
96                                                   lp_max_stat_cache_size()*1024);
97         }
98         if (!smbd_memcache_ctx) {
99                 smb_panic("Could not init smbd memcache");
100         }
101
102         return smbd_memcache_ctx;
103 }
104
105 /*******************************************************************
106  What to do when smb.conf is updated.
107  ********************************************************************/
108
109 static void smb_conf_updated(struct messaging_context *msg,
110                              void *private_data,
111                              uint32_t msg_type,
112                              struct server_id server_id,
113                              DATA_BLOB *data)
114 {
115         DEBUG(10,("smb_conf_updated: Got message saying smb.conf was "
116                   "updated. Reloading.\n"));
117         reload_services(False);
118 }
119
120
121 /*******************************************************************
122  Delete a statcache entry.
123  ********************************************************************/
124
125 static void smb_stat_cache_delete(struct messaging_context *msg,
126                                   void *private_data,
127                                   uint32_t msg_tnype,
128                                   struct server_id server_id,
129                                   DATA_BLOB *data)
130 {
131         const char *name = (const char *)data->data;
132         DEBUG(10,("smb_stat_cache_delete: delete name %s\n", name));
133         stat_cache_delete(name);
134 }
135
136 /****************************************************************************
137  Terminate signal.
138 ****************************************************************************/
139
140 static void sig_term(void)
141 {
142         got_sig_term = 1;
143         sys_select_signal(SIGTERM);
144 }
145
146 /****************************************************************************
147  Catch a sighup.
148 ****************************************************************************/
149
150 static void sig_hup(int sig)
151 {
152         reload_after_sighup = 1;
153         sys_select_signal(SIGHUP);
154 }
155
156 /****************************************************************************
157  Catch a sigcld
158 ****************************************************************************/
159 static void sig_cld(int sig)
160 {
161         got_sig_cld = 1;
162         sys_select_signal(SIGCLD);
163 }
164
165 /****************************************************************************
166   Send a SIGTERM to our process group.
167 *****************************************************************************/
168
169 static void  killkids(void)
170 {
171         if(am_parent) kill(0,SIGTERM);
172 }
173
174 /****************************************************************************
175  Process a sam sync message - not sure whether to do this here or
176  somewhere else.
177 ****************************************************************************/
178
179 static void msg_sam_sync(struct messaging_context *msg,
180                          void *private_data,
181                          uint32_t msg_type,
182                          struct server_id server_id,
183                          DATA_BLOB *data)
184 {
185         DEBUG(10, ("** sam sync message received, ignoring\n"));
186 }
187
188
189 /****************************************************************************
190  Open the socket communication - inetd.
191 ****************************************************************************/
192
193 static bool open_sockets_inetd(void)
194 {
195         /* Started from inetd. fd 0 is the socket. */
196         /* We will abort gracefully when the client or remote system 
197            goes away */
198         smbd_set_server_fd(dup(0));
199         
200         /* close our standard file descriptors */
201         close_low_fds(False); /* Don't close stderr */
202         
203         set_socket_options(smbd_server_fd(),"SO_KEEPALIVE");
204         set_socket_options(smbd_server_fd(), lp_socket_options());
205
206         return True;
207 }
208
209 static void msg_exit_server(struct messaging_context *msg,
210                             void *private_data,
211                             uint32_t msg_type,
212                             struct server_id server_id,
213                             DATA_BLOB *data)
214 {
215         DEBUG(3, ("got a SHUTDOWN message\n"));
216         exit_server_cleanly(NULL);
217 }
218
219 #ifdef DEVELOPER
220 static void msg_inject_fault(struct messaging_context *msg,
221                              void *private_data,
222                              uint32_t msg_type,
223                              struct server_id src,
224                              DATA_BLOB *data)
225 {
226         int sig;
227
228         if (data->length != sizeof(sig)) {
229                 
230                 DEBUG(0, ("Process %s sent bogus signal injection request\n",
231                           procid_str_static(&src)));
232                 return;
233         }
234
235         sig = *(int *)data->data;
236         if (sig == -1) {
237                 exit_server("internal error injected");
238                 return;
239         }
240
241 #if HAVE_STRSIGNAL
242         DEBUG(0, ("Process %s requested injection of signal %d (%s)\n",
243                   procid_str_static(&src), sig, strsignal(sig)));
244 #else
245         DEBUG(0, ("Process %s requested injection of signal %d\n",
246                   procid_str_static(&src), sig));
247 #endif
248
249         kill(sys_getpid(), sig);
250 }
251 #endif /* DEVELOPER */
252
253 struct child_pid {
254         struct child_pid *prev, *next;
255         pid_t pid;
256 };
257
258 static void add_child_pid(pid_t pid)
259 {
260         struct child_pid *child;
261
262         if (lp_max_smbd_processes() == 0) {
263                 /* Don't bother with the child list if we don't care anyway */
264                 return;
265         }
266
267         child = SMB_MALLOC_P(struct child_pid);
268         if (child == NULL) {
269                 DEBUG(0, ("Could not add child struct -- malloc failed\n"));
270                 return;
271         }
272         child->pid = pid;
273         DLIST_ADD(children, child);
274         num_children += 1;
275 }
276
277 static void remove_child_pid(pid_t pid, bool unclean_shutdown)
278 {
279         struct child_pid *child;
280
281         if (unclean_shutdown) {
282                 /* a child terminated uncleanly so tickle all processes to see 
283                    if they can grab any of the pending locks
284                 */
285                 DEBUG(3,(__location__ " Unclean shutdown of pid %u\n", pid));
286                 messaging_send_buf(smbd_messaging_context(), procid_self(), 
287                                    MSG_SMB_BRL_VALIDATE, NULL, 0);
288                 message_send_all(smbd_messaging_context(), 
289                                  MSG_SMB_UNLOCK, NULL, 0, NULL);
290         }
291
292         if (lp_max_smbd_processes() == 0) {
293                 /* Don't bother with the child list if we don't care anyway */
294                 return;
295         }
296
297         for (child = children; child != NULL; child = child->next) {
298                 if (child->pid == pid) {
299                         struct child_pid *tmp = child;
300                         DLIST_REMOVE(children, child);
301                         SAFE_FREE(tmp);
302                         num_children -= 1;
303                         return;
304                 }
305         }
306
307         DEBUG(0, ("Could not find child %d -- ignoring\n", (int)pid));
308 }
309
310 /****************************************************************************
311  Have we reached the process limit ?
312 ****************************************************************************/
313
314 static bool allowable_number_of_smbd_processes(void)
315 {
316         int max_processes = lp_max_smbd_processes();
317
318         if (!max_processes)
319                 return True;
320
321         return num_children < max_processes;
322 }
323
324 /****************************************************************************
325  Open the socket communication.
326 ****************************************************************************/
327
328 static bool open_sockets_smbd(bool is_daemon, bool interactive, const char *smb_ports)
329 {
330         int num_interfaces = iface_count();
331         int num_sockets = 0;
332         int fd_listenset[FD_SETSIZE];
333         fd_set listen_set;
334         int s;
335         int maxfd = 0;
336         int i;
337         char *ports;
338         struct dns_reg_state * dns_reg = NULL;
339         unsigned dns_port = 0;
340
341         if (!is_daemon) {
342                 return open_sockets_inetd();
343         }
344
345 #ifdef HAVE_ATEXIT
346         atexit(killkids);
347 #endif
348
349         /* Stop zombies */
350         CatchSignal(SIGCLD, sig_cld);
351
352         FD_ZERO(&listen_set);
353
354         /* use a reasonable default set of ports - listing on 445 and 139 */
355         if (!smb_ports) {
356                 ports = lp_smb_ports();
357                 if (!ports || !*ports) {
358                         ports = smb_xstrdup(SMB_PORTS);
359                 } else {
360                         ports = smb_xstrdup(ports);
361                 }
362         } else {
363                 ports = smb_xstrdup(smb_ports);
364         }
365
366         if (lp_interfaces() && lp_bind_interfaces_only()) {
367                 /* We have been given an interfaces line, and been
368                    told to only bind to those interfaces. Create a
369                    socket per interface and bind to only these.
370                 */
371
372                 /* Now open a listen socket for each of the
373                    interfaces. */
374                 for(i = 0; i < num_interfaces; i++) {
375                         TALLOC_CTX *frame = NULL;
376                         const struct sockaddr_storage *ifss =
377                                         iface_n_sockaddr_storage(i);
378                         char *tok;
379                         const char *ptr;
380
381                         if (ifss == NULL) {
382                                 DEBUG(0,("open_sockets_smbd: "
383                                         "interface %d has NULL IP address !\n",
384                                         i));
385                                 continue;
386                         }
387
388                         frame = talloc_stackframe();
389                         for (ptr=ports;
390                                         next_token_talloc(frame,&ptr, &tok, " \t,");) {
391                                 unsigned port = atoi(tok);
392                                 if (port == 0 || port > 0xffff) {
393                                         continue;
394                                 }
395
396                                 /* Keep the first port for mDNS service
397                                  * registration.
398                                  */
399                                 if (dns_port == 0) {
400                                         dns_port = port;
401                                 }
402
403                                 s = fd_listenset[num_sockets] =
404                                         open_socket_in(SOCK_STREAM,
405                                                         port,
406                                                         num_sockets == 0 ? 0 : 2,
407                                                         ifss,
408                                                         true);
409                                 if(s == -1) {
410                                         continue;
411                                 }
412
413                                 /* ready to listen */
414                                 set_socket_options(s,"SO_KEEPALIVE");
415                                 set_socket_options(s,lp_socket_options());
416
417                                 /* Set server socket to
418                                  * non-blocking for the accept. */
419                                 set_blocking(s,False);
420
421                                 if (listen(s, SMBD_LISTEN_BACKLOG) == -1) {
422                                         DEBUG(0,("open_sockets_smbd: listen: "
423                                                 "%s\n", strerror(errno)));
424                                         close(s);
425                                         TALLOC_FREE(frame);
426                                         return False;
427                                 }
428                                 FD_SET(s,&listen_set);
429                                 maxfd = MAX( maxfd, s);
430
431                                 num_sockets++;
432                                 if (num_sockets >= FD_SETSIZE) {
433                                         DEBUG(0,("open_sockets_smbd: Too "
434                                                 "many sockets to bind to\n"));
435                                         TALLOC_FREE(frame);
436                                         return False;
437                                 }
438                         }
439                         TALLOC_FREE(frame);
440                 }
441         } else {
442                 /* Just bind to 0.0.0.0 - accept connections
443                    from anywhere. */
444
445                 TALLOC_CTX *frame = talloc_stackframe();
446                 char *tok;
447                 const char *ptr;
448                 const char *sock_addr = lp_socket_address();
449                 char *sock_tok;
450                 const char *sock_ptr;
451
452                 if (strequal(sock_addr, "0.0.0.0") ||
453                     strequal(sock_addr, "::")) {
454 #if HAVE_IPV6
455                         sock_addr = "::,0.0.0.0";
456 #else
457                         sock_addr = "0.0.0.0";
458 #endif
459                 }
460
461                 for (sock_ptr=sock_addr;
462                                 next_token_talloc(frame, &sock_ptr, &sock_tok, " \t,"); ) {
463                         for (ptr=ports; next_token_talloc(frame, &ptr, &tok, " \t,"); ) {
464                                 struct sockaddr_storage ss;
465
466                                 unsigned port = atoi(tok);
467                                 if (port == 0 || port > 0xffff) {
468                                         continue;
469                                 }
470
471                                 /* Keep the first port for mDNS service
472                                  * registration.
473                                  */
474                                 if (dns_port == 0) {
475                                         dns_port = port;
476                                 }
477
478                                 /* open an incoming socket */
479                                 if (!interpret_string_addr(&ss, sock_tok,
480                                                 AI_NUMERICHOST|AI_PASSIVE)) {
481                                         continue;
482                                 }
483
484                                 s = open_socket_in(SOCK_STREAM,
485                                                 port,
486                                                 num_sockets == 0 ? 0 : 2,
487                                                 &ss,
488                                                 true);
489                                 if (s == -1) {
490                                         continue;
491                                 }
492
493                                 /* ready to listen */
494                                 set_socket_options(s,"SO_KEEPALIVE");
495                                 set_socket_options(s,lp_socket_options());
496
497                                 /* Set server socket to non-blocking
498                                  * for the accept. */
499                                 set_blocking(s,False);
500
501                                 if (listen(s, SMBD_LISTEN_BACKLOG) == -1) {
502                                         DEBUG(0,("open_sockets_smbd: "
503                                                 "listen: %s\n",
504                                                  strerror(errno)));
505                                         close(s);
506                                         TALLOC_FREE(frame);
507                                         return False;
508                                 }
509
510                                 fd_listenset[num_sockets] = s;
511                                 FD_SET(s,&listen_set);
512                                 maxfd = MAX( maxfd, s);
513
514                                 num_sockets++;
515
516                                 if (num_sockets >= FD_SETSIZE) {
517                                         DEBUG(0,("open_sockets_smbd: Too "
518                                                 "many sockets to bind to\n"));
519                                         TALLOC_FREE(frame);
520                                         return False;
521                                 }
522                         }
523                 }
524                 TALLOC_FREE(frame);
525         }
526
527         SAFE_FREE(ports);
528
529         if (num_sockets == 0) {
530                 DEBUG(0,("open_sockets_smbd: No "
531                         "sockets available to bind to.\n"));
532                 return false;
533         }
534
535         /* Setup the main smbd so that we can get messages. Note that
536            do this after starting listening. This is needed as when in
537            clustered mode, ctdb won't allow us to start doing database
538            operations until it has gone thru a full startup, which
539            includes checking to see that smbd is listening. */
540         claim_connection(NULL,"",
541                          FLAG_MSG_GENERAL|FLAG_MSG_SMBD|FLAG_MSG_DBWRAP);
542
543         /* Listen to messages */
544
545         messaging_register(smbd_messaging_context(), NULL,
546                            MSG_SMB_SAM_SYNC, msg_sam_sync);
547         messaging_register(smbd_messaging_context(), NULL,
548                            MSG_SHUTDOWN, msg_exit_server);
549         messaging_register(smbd_messaging_context(), NULL,
550                            MSG_SMB_FILE_RENAME, msg_file_was_renamed);
551         messaging_register(smbd_messaging_context(), NULL,
552                            MSG_SMB_CONF_UPDATED, smb_conf_updated);
553         messaging_register(smbd_messaging_context(), NULL,
554                            MSG_SMB_STAT_CACHE_DELETE, smb_stat_cache_delete);
555         brl_register_msgs(smbd_messaging_context());
556
557 #ifdef CLUSTER_SUPPORT
558         if (lp_clustering()) {
559                 ctdbd_register_reconfigure(messaging_ctdbd_connection());
560         }
561 #endif
562
563 #ifdef DEVELOPER
564         messaging_register(smbd_messaging_context(), NULL,
565                            MSG_SMB_INJECT_FAULT, msg_inject_fault);
566 #endif
567
568         /* now accept incoming connections - forking a new process
569            for each incoming connection */
570         DEBUG(2,("waiting for a connection\n"));
571         while (1) {
572                 struct timeval now, idle_timeout;
573                 fd_set r_fds, w_fds;
574                 int num;
575
576                 if (got_sig_cld) {
577                         pid_t pid;
578                         int status;
579
580                         got_sig_cld = False;
581
582                         while ((pid = sys_waitpid(-1, &status, WNOHANG)) > 0) {
583                                 bool unclean_shutdown = False;
584                                 
585                                 /* If the child terminated normally, assume
586                                    it was an unclean shutdown unless the
587                                    status is 0 
588                                 */
589                                 if (WIFEXITED(status)) {
590                                         unclean_shutdown = WEXITSTATUS(status);
591                                 }
592                                 /* If the child terminated due to a signal
593                                    we always assume it was unclean.
594                                 */
595                                 if (WIFSIGNALED(status)) {
596                                         unclean_shutdown = True;
597                                 }
598                                 remove_child_pid(pid, unclean_shutdown);
599                         }
600                 }
601
602                 if (run_events(smbd_event_context(), 0, NULL, NULL)) {
603                         continue;
604                 }
605
606                 idle_timeout = timeval_zero();
607
608                 memcpy((char *)&r_fds, (char *)&listen_set,
609                        sizeof(listen_set));
610                 FD_ZERO(&w_fds);
611                 GetTimeOfDay(&now);
612
613                 /* Kick off our mDNS registration. */
614                 if (dns_port != 0) {
615                         dns_register_smbd(&dns_reg, dns_port, &maxfd,
616                                         &r_fds, &idle_timeout);
617                 }
618
619                 event_add_to_select_args(smbd_event_context(), &now,
620                                          &r_fds, &w_fds, &idle_timeout,
621                                          &maxfd);
622
623                 num = sys_select(maxfd+1,&r_fds,&w_fds,NULL,
624                                  timeval_is_zero(&idle_timeout) ?
625                                  NULL : &idle_timeout);
626
627                 if (run_events(smbd_event_context(), num, &r_fds, &w_fds)) {
628                         continue;
629                 }
630
631                 if (num == -1 && errno == EINTR) {
632                         if (got_sig_term) {
633                                 exit_server_cleanly(NULL);
634                         }
635
636                         /* check for sighup processing */
637                         if (reload_after_sighup) {
638                                 change_to_root_user();
639                                 DEBUG(1,("Reloading services after SIGHUP\n"));
640                                 reload_services(False);
641                                 reload_after_sighup = 0;
642                         }
643
644                         continue;
645                 }
646                 
647
648                 /* If the idle timeout fired and we don't have any connected
649                  * users, exit gracefully. We should be running under a process
650                  * controller that will restart us if necessry.
651                  */
652                 if (num == 0 && count_all_current_connections() == 0) {
653                         exit_server_cleanly("idle timeout");
654                 }
655
656                 /* process pending nDNS responses */
657                 if (dns_register_smbd_reply(dns_reg, &r_fds, &idle_timeout)) {
658                         --num;
659                 }
660
661                 /* check if we need to reload services */
662                 check_reload(time(NULL));
663
664                 /* Find the sockets that are read-ready -
665                    accept on these. */
666                 for( ; num > 0; num--) {
667                         struct sockaddr addr;
668                         socklen_t in_addrlen = sizeof(addr);
669                         pid_t child = 0;
670
671                         s = -1;
672                         for(i = 0; i < num_sockets; i++) {
673                                 if(FD_ISSET(fd_listenset[i],&r_fds)) {
674                                         s = fd_listenset[i];
675                                         /* Clear this so we don't look
676                                            at it again. */
677                                         FD_CLR(fd_listenset[i],&r_fds);
678                                         break;
679                                 }
680                         }
681
682                         smbd_set_server_fd(accept(s,&addr,&in_addrlen));
683
684                         if (smbd_server_fd() == -1 && errno == EINTR)
685                                 continue;
686
687                         if (smbd_server_fd() == -1) {
688                                 DEBUG(2,("open_sockets_smbd: accept: %s\n",
689                                          strerror(errno)));
690                                 continue;
691                         }
692
693                         /* Ensure child is set to blocking mode */
694                         set_blocking(smbd_server_fd(),True);
695
696                         if (smbd_server_fd() != -1 && interactive)
697                                 return True;
698
699                         if (allowable_number_of_smbd_processes() &&
700                             smbd_server_fd() != -1 &&
701                             ((child = sys_fork())==0)) {
702                                 char remaddr[INET6_ADDRSTRLEN];
703
704                                 /* Child code ... */
705
706                                 /* Stop zombies, the parent explicitly handles
707                                  * them, counting worker smbds. */
708                                 CatchChild();
709
710                                 /* close the listening socket(s) */
711                                 for(i = 0; i < num_sockets; i++)
712                                         close(fd_listenset[i]);
713
714                                 /* close our mDNS daemon handle */
715                                 dns_register_close(&dns_reg);
716
717                                 /* close our standard file
718                                    descriptors */
719                                 close_low_fds(False);
720                                 am_parent = 0;
721
722                                 set_socket_options(smbd_server_fd(),"SO_KEEPALIVE");
723                                 set_socket_options(smbd_server_fd(),
724                                                    lp_socket_options());
725
726                                 /* this is needed so that we get decent entries
727                                    in smbstatus for port 445 connects */
728                                 set_remote_machine_name(get_peer_addr(smbd_server_fd(),
729                                                                 remaddr,
730                                                                 sizeof(remaddr)),
731                                                                 false);
732
733                                 if (!reinit_after_fork(
734                                             smbd_messaging_context(),
735                                             smbd_event_context(),
736                                             true)) {
737                                         DEBUG(0,("reinit_after_fork() failed\n"));
738                                         smb_panic("reinit_after_fork() failed");
739                                 }
740
741                                 return True;
742                         }
743                         /* The parent doesn't need this socket */
744                         close(smbd_server_fd());
745
746                         /* Sun May 6 18:56:14 2001 ackley@cs.unm.edu:
747                                 Clear the closed fd info out of server_fd --
748                                 and more importantly, out of client_fd in
749                                 util_sock.c, to avoid a possible
750                                 getpeername failure if we reopen the logs
751                                 and use %I in the filename.
752                         */
753
754                         smbd_set_server_fd(-1);
755
756                         if (child != 0) {
757                                 add_child_pid(child);
758                         }
759
760                         /* Force parent to check log size after
761                          * spawning child.  Fix from
762                          * klausr@ITAP.Physik.Uni-Stuttgart.De.  The
763                          * parent smbd will log to logserver.smb.  It
764                          * writes only two messages for each child
765                          * started/finished. But each child writes,
766                          * say, 50 messages also in logserver.smb,
767                          * begining with the debug_count of the
768                          * parent, before the child opens its own log
769                          * file logserver.client. In a worst case
770                          * scenario the size of logserver.smb would be
771                          * checked after about 50*50=2500 messages
772                          * (ca. 100kb).
773                          * */
774                         force_check_log_size();
775
776                 } /* end for num */
777         } /* end while 1 */
778
779 /* NOTREACHED   return True; */
780 }
781
782 /****************************************************************************
783  Reload printers
784 **************************************************************************/
785 void reload_printers(void)
786 {
787         int snum;
788         int n_services = lp_numservices();
789         int pnum = lp_servicenumber(PRINTERS_NAME);
790         const char *pname;
791
792         pcap_cache_reload();
793
794         /* remove stale printers */
795         for (snum = 0; snum < n_services; snum++) {
796                 /* avoid removing PRINTERS_NAME or non-autoloaded printers */
797                 if (snum == pnum || !(lp_snum_ok(snum) && lp_print_ok(snum) &&
798                                       lp_autoloaded(snum)))
799                         continue;
800
801                 pname = lp_printername(snum);
802                 if (!pcap_printername_ok(pname)) {
803                         DEBUG(3, ("removing stale printer %s\n", pname));
804
805                         if (is_printer_published(NULL, snum, NULL))
806                                 nt_printer_publish(NULL, snum, SPOOL_DS_UNPUBLISH);
807                         del_a_printer(pname);
808                         lp_killservice(snum);
809                 }
810         }
811
812         load_printers();
813 }
814
815 /****************************************************************************
816  Reload the services file.
817 **************************************************************************/
818
819 bool reload_services(bool test)
820 {
821         bool ret;
822
823         if (lp_loaded()) {
824                 char *fname = lp_configfile();
825                 if (file_exist(fname) &&
826                     !strcsequal(fname, get_dyn_CONFIGFILE())) {
827                         set_dyn_CONFIGFILE(fname);
828                         test = False;
829                 }
830         }
831
832         reopen_logs();
833
834         if (test && !lp_file_list_changed())
835                 return(True);
836
837         lp_killunused(conn_snum_used);
838
839         ret = lp_load(get_dyn_CONFIGFILE(), False, False, True, True);
840
841         reload_printers();
842
843         /* perhaps the config filename is now set */
844         if (!test)
845                 reload_services(True);
846
847         reopen_logs();
848
849         load_interfaces();
850
851         if (smbd_server_fd() != -1) {
852                 set_socket_options(smbd_server_fd(),"SO_KEEPALIVE");
853                 set_socket_options(smbd_server_fd(), lp_socket_options());
854         }
855
856         mangle_reset_cache();
857         reset_stat_cache();
858
859         /* this forces service parameters to be flushed */
860         set_current_service(NULL,0,True);
861
862         return(ret);
863 }
864
865 /****************************************************************************
866  Exit the server.
867 ****************************************************************************/
868
869 /* Reasons for shutting down a server process. */
870 enum server_exit_reason { SERVER_EXIT_NORMAL, SERVER_EXIT_ABNORMAL };
871
872 static void exit_server_common(enum server_exit_reason how,
873         const char *const reason) _NORETURN_;
874
875 static void exit_server_common(enum server_exit_reason how,
876         const char *const reason)
877 {
878         bool had_open_conn;
879
880         if (!exit_firsttime)
881                 exit(0);
882         exit_firsttime = false;
883
884         change_to_root_user();
885
886         if (negprot_global_auth_context) {
887                 (negprot_global_auth_context->free)(&negprot_global_auth_context);
888         }
889
890         had_open_conn = conn_close_all();
891
892         invalidate_all_vuids();
893
894         /* 3 second timeout. */
895         print_notify_send_messages(smbd_messaging_context(), 3);
896
897         /* delete our entry in the connections database. */
898         yield_connection(NULL,"");
899
900         respond_to_all_remaining_local_messages();
901
902 #ifdef WITH_DFS
903         if (dcelogin_atmost_once) {
904                 dfs_unlogin();
905         }
906 #endif
907
908 #ifdef USE_DMAPI
909         /* Destroy Samba DMAPI session only if we are master smbd process */
910         if (am_parent) {
911                 if (!dmapi_destroy_session()) {
912                         DEBUG(0,("Unable to close Samba DMAPI session\n"));
913                 }
914         }
915 #endif
916
917         locking_end();
918         printing_end();
919
920         if (how != SERVER_EXIT_NORMAL) {
921                 int oldlevel = DEBUGLEVEL;
922
923                 DEBUGLEVEL = 10;
924
925                 DEBUGSEP(0);
926                 DEBUG(0,("Abnormal server exit: %s\n",
927                         reason ? reason : "no explanation provided"));
928                 DEBUGSEP(0);
929
930                 log_stack_trace();
931
932                 DEBUGLEVEL = oldlevel;
933                 dump_core();
934
935         } else {    
936                 DEBUG(3,("Server exit (%s)\n",
937                         (reason ? reason : "normal exit")));
938         }
939
940         /* if we had any open SMB connections when we exited then we
941            need to tell the parent smbd so that it can trigger a retry
942            of any locks we may have been holding or open files we were
943            blocking */
944         if (had_open_conn) {
945                 exit(1);
946         } else {
947                 exit(0);
948         }
949 }
950
951 void exit_server(const char *const explanation)
952 {
953         exit_server_common(SERVER_EXIT_ABNORMAL, explanation);
954 }
955
956 void exit_server_cleanly(const char *const explanation)
957 {
958         exit_server_common(SERVER_EXIT_NORMAL, explanation);
959 }
960
961 void exit_server_fault(void)
962 {
963         exit_server("critical server fault");
964 }
965
966
967 /****************************************************************************
968 received when we should release a specific IP
969 ****************************************************************************/
970 static void release_ip(const char *ip, void *priv)
971 {
972         char addr[INET6_ADDRSTRLEN];
973
974         if (strcmp(client_socket_addr(get_client_fd(),addr,sizeof(addr)), ip) == 0) {
975                 /* we can't afford to do a clean exit - that involves
976                    database writes, which would potentially mean we
977                    are still running after the failover has finished -
978                    we have to get rid of this process ID straight
979                    away */
980                 DEBUG(0,("Got release IP message for our IP %s - exiting immediately\n",
981                         ip));
982                 /* note we must exit with non-zero status so the unclean handler gets
983                    called in the parent, so that the brl database is tickled */
984                 _exit(1);
985         }
986 }
987
988 static void msg_release_ip(struct messaging_context *msg_ctx, void *private_data,
989                            uint32_t msg_type, struct server_id server_id, DATA_BLOB *data)
990 {
991         release_ip((char *)data->data, NULL);
992 }
993
994 /****************************************************************************
995  Initialise connect, service and file structs.
996 ****************************************************************************/
997
998 static bool init_structs(void )
999 {
1000         /*
1001          * Set the machine NETBIOS name if not already
1002          * set from the config file.
1003          */
1004
1005         if (!init_names())
1006                 return False;
1007
1008         conn_init();
1009
1010         file_init();
1011
1012         init_dptrs();
1013
1014         if (!secrets_init())
1015                 return False;
1016
1017         return True;
1018 }
1019
1020 /*
1021  * Send keepalive packets to our client
1022  */
1023 static bool keepalive_fn(const struct timeval *now, void *private_data)
1024 {
1025         if (!send_keepalive(smbd_server_fd())) {
1026                 DEBUG( 2, ( "Keepalive failed - exiting.\n" ) );
1027                 return False;
1028         }
1029         return True;
1030 }
1031
1032 /*
1033  * Do the recurring check if we're idle
1034  */
1035 static bool deadtime_fn(const struct timeval *now, void *private_data)
1036 {
1037         if ((conn_num_open() == 0)
1038             || (conn_idle_all(now->tv_sec))) {
1039                 DEBUG( 2, ( "Closing idle connection\n" ) );
1040                 messaging_send(smbd_messaging_context(), procid_self(),
1041                                MSG_SHUTDOWN, &data_blob_null);
1042                 return False;
1043         }
1044
1045         return True;
1046 }
1047
1048 /*
1049  * Do the recurring log file and smb.conf reload checks.
1050  */
1051
1052 static bool housekeeping_fn(const struct timeval *now, void *private_data)
1053 {
1054         change_to_root_user();
1055
1056         /* update printer queue caches if necessary */
1057         update_monitored_printq_cache();
1058
1059         /* check if we need to reload services */
1060         check_reload(time(NULL));
1061
1062         /* Change machine password if neccessary. */
1063         attempt_machine_password_change();
1064
1065         /*
1066          * Force a log file check.
1067          */
1068         force_check_log_size();
1069         check_log_size();
1070         return true;
1071 }
1072
1073 /****************************************************************************
1074  main program.
1075 ****************************************************************************/
1076
1077 /* Declare prototype for build_options() to avoid having to run it through
1078    mkproto.h.  Mixing $(builddir) and $(srcdir) source files in the current
1079    prototype generation system is too complicated. */
1080
1081 extern void build_options(bool screen);
1082
1083  int main(int argc,const char *argv[])
1084 {
1085         /* shall I run as a daemon */
1086         bool is_daemon = false;
1087         bool interactive = false;
1088         bool Fork = true;
1089         bool no_process_group = false;
1090         bool log_stdout = false;
1091         char *ports = NULL;
1092         char *profile_level = NULL;
1093         int opt;
1094         poptContext pc;
1095         bool print_build_options = False;
1096         enum {
1097                 OPT_DAEMON = 1000,
1098                 OPT_INTERACTIVE,
1099                 OPT_FORK,
1100                 OPT_NO_PROCESS_GROUP,
1101                 OPT_LOG_STDOUT
1102         };
1103         struct poptOption long_options[] = {
1104         POPT_AUTOHELP
1105         {"daemon", 'D', POPT_ARG_NONE, NULL, OPT_DAEMON, "Become a daemon (default)" },
1106         {"interactive", 'i', POPT_ARG_NONE, NULL, OPT_INTERACTIVE, "Run interactive (not a daemon)"},
1107         {"foreground", 'F', POPT_ARG_NONE, NULL, OPT_FORK, "Run daemon in foreground (for daemontools, etc.)" },
1108         {"no-process-group", '\0', POPT_ARG_NONE, NULL, OPT_NO_PROCESS_GROUP, "Don't create a new process group" },
1109         {"log-stdout", 'S', POPT_ARG_NONE, NULL, OPT_LOG_STDOUT, "Log to stdout" },
1110         {"build-options", 'b', POPT_ARG_NONE, NULL, 'b', "Print build options" },
1111         {"port", 'p', POPT_ARG_STRING, &ports, 0, "Listen on the specified ports"},
1112         {"profiling-level", 'P', POPT_ARG_STRING, &profile_level, 0, "Set profiling level","PROFILE_LEVEL"},
1113         POPT_COMMON_SAMBA
1114         POPT_COMMON_DYNCONFIG
1115         POPT_TABLEEND
1116         };
1117         TALLOC_CTX *frame = talloc_stackframe(); /* Setup tos. */
1118
1119         smbd_init_globals();
1120
1121         TimeInit();
1122
1123 #ifdef HAVE_SET_AUTH_PARAMETERS
1124         set_auth_parameters(argc,argv);
1125 #endif
1126
1127         pc = poptGetContext("smbd", argc, argv, long_options, 0);
1128         while((opt = poptGetNextOpt(pc)) != -1) {
1129                 switch (opt)  {
1130                 case OPT_DAEMON:
1131                         is_daemon = true;
1132                         break;
1133                 case OPT_INTERACTIVE:
1134                         interactive = true;
1135                         break;
1136                 case OPT_FORK:
1137                         Fork = false;
1138                         break;
1139                 case OPT_NO_PROCESS_GROUP:
1140                         no_process_group = true;
1141                         break;
1142                 case OPT_LOG_STDOUT:
1143                         log_stdout = true;
1144                         break;
1145                 case 'b':
1146                         print_build_options = True;
1147                         break;
1148                 default:
1149                         d_fprintf(stderr, "\nInvalid option %s: %s\n\n",
1150                                   poptBadOption(pc, 0), poptStrerror(opt));
1151                         poptPrintUsage(pc, stderr, 0);
1152                         exit(1);
1153                 }
1154         }
1155         poptFreeContext(pc);
1156
1157         if (interactive) {
1158                 Fork = False;
1159                 log_stdout = True;
1160         }
1161
1162         setup_logging(argv[0],log_stdout);
1163
1164         if (print_build_options) {
1165                 build_options(True); /* Display output to screen as well as debug */
1166                 exit(0);
1167         }
1168
1169         load_case_tables();
1170
1171 #ifdef HAVE_SETLUID
1172         /* needed for SecureWare on SCO */
1173         setluid(0);
1174 #endif
1175
1176         sec_init();
1177
1178         set_remote_machine_name("smbd", False);
1179
1180         if (interactive && (DEBUGLEVEL >= 9)) {
1181                 talloc_enable_leak_report();
1182         }
1183
1184         if (log_stdout && Fork) {
1185                 DEBUG(0,("ERROR: Can't log to stdout (-S) unless daemon is in foreground (-F) or interactive (-i)\n"));
1186                 exit(1);
1187         }
1188
1189         /* we want to re-seed early to prevent time delays causing
1190            client problems at a later date. (tridge) */
1191         generate_random_buffer(NULL, 0);
1192
1193         /* make absolutely sure we run as root - to handle cases where people
1194            are crazy enough to have it setuid */
1195
1196         gain_root_privilege();
1197         gain_root_group_privilege();
1198
1199         fault_setup((void (*)(void *))exit_server_fault);
1200         dump_core_setup("smbd");
1201
1202         CatchSignal(SIGTERM , SIGNAL_CAST sig_term);
1203         CatchSignal(SIGHUP,SIGNAL_CAST sig_hup);
1204         
1205         /* we are never interested in SIGPIPE */
1206         BlockSignals(True,SIGPIPE);
1207
1208 #if defined(SIGFPE)
1209         /* we are never interested in SIGFPE */
1210         BlockSignals(True,SIGFPE);
1211 #endif
1212
1213 #if defined(SIGUSR2)
1214         /* We are no longer interested in USR2 */
1215         BlockSignals(True,SIGUSR2);
1216 #endif
1217
1218         /* POSIX demands that signals are inherited. If the invoking process has
1219          * these signals masked, we will have problems, as we won't recieve them. */
1220         BlockSignals(False, SIGHUP);
1221         BlockSignals(False, SIGUSR1);
1222         BlockSignals(False, SIGTERM);
1223
1224         /* we want total control over the permissions on created files,
1225            so set our umask to 0 */
1226         umask(0);
1227
1228         init_sec_ctx();
1229
1230         reopen_logs();
1231
1232         DEBUG(0,("smbd version %s started.\n", samba_version_string()));
1233         DEBUGADD(0,("%s\n", COPYRIGHT_STARTUP_MESSAGE));
1234
1235         DEBUG(2,("uid=%d gid=%d euid=%d egid=%d\n",
1236                  (int)getuid(),(int)getgid(),(int)geteuid(),(int)getegid()));
1237
1238         /* Output the build options to the debug log */ 
1239         build_options(False);
1240
1241         if (sizeof(uint16) < 2 || sizeof(uint32) < 4) {
1242                 DEBUG(0,("ERROR: Samba is not configured correctly for the word size on your machine\n"));
1243                 exit(1);
1244         }
1245
1246         if (!lp_load_initial_only(get_dyn_CONFIGFILE())) {
1247                 DEBUG(0, ("error opening config file\n"));
1248                 exit(1);
1249         }
1250
1251         if (smbd_messaging_context() == NULL)
1252                 exit(1);
1253
1254         if (!reload_services(False))
1255                 return(-1);     
1256
1257         init_structs();
1258
1259 #ifdef WITH_PROFILE
1260         if (!profile_setup(smbd_messaging_context(), False)) {
1261                 DEBUG(0,("ERROR: failed to setup profiling\n"));
1262                 return -1;
1263         }
1264         if (profile_level != NULL) {
1265                 int pl = atoi(profile_level);
1266                 struct server_id src;
1267
1268                 DEBUG(1, ("setting profiling level: %s\n",profile_level));
1269                 src.pid = getpid();
1270                 set_profile_level(pl, src);
1271         }
1272 #endif
1273
1274         DEBUG(3,( "loaded services\n"));
1275
1276         if (!is_daemon && !is_a_socket(0)) {
1277                 if (!interactive)
1278                         DEBUG(0,("standard input is not a socket, assuming -D option\n"));
1279
1280                 /*
1281                  * Setting is_daemon here prevents us from eventually calling
1282                  * the open_sockets_inetd()
1283                  */
1284
1285                 is_daemon = True;
1286         }
1287
1288         if (is_daemon && !interactive) {
1289                 DEBUG( 3, ( "Becoming a daemon.\n" ) );
1290                 become_daemon(Fork, no_process_group);
1291         }
1292
1293 #if HAVE_SETPGID
1294         /*
1295          * If we're interactive we want to set our own process group for
1296          * signal management.
1297          */
1298         if (interactive && !no_process_group)
1299                 setpgid( (pid_t)0, (pid_t)0);
1300 #endif
1301
1302         if (!directory_exist(lp_lockdir()))
1303                 mkdir(lp_lockdir(), 0755);
1304
1305         if (is_daemon)
1306                 pidfile_create("smbd");
1307
1308         if (!reinit_after_fork(smbd_messaging_context(),
1309                                smbd_event_context(), false)) {
1310                 DEBUG(0,("reinit_after_fork() failed\n"));
1311                 exit(1);
1312         }
1313
1314         /* Setup all the TDB's - including CLEAR_IF_FIRST tdb's. */
1315
1316         if (smbd_memcache() == NULL) {
1317                 exit(1);
1318         }
1319
1320         memcache_set_global(smbd_memcache());
1321
1322         /* Initialise the password backed before the global_sam_sid
1323            to ensure that we fetch from ldap before we make a domain sid up */
1324
1325         if(!initialize_password_db(False, smbd_event_context()))
1326                 exit(1);
1327
1328         if (!secrets_init()) {
1329                 DEBUG(0, ("ERROR: smbd can not open secrets.tdb\n"));
1330                 exit(1);
1331         }
1332
1333         if(!get_global_sam_sid()) {
1334                 DEBUG(0,("ERROR: Samba cannot create a SAM SID.\n"));
1335                 exit(1);
1336         }
1337
1338         if (!session_init())
1339                 exit(1);
1340
1341         if (!connections_init(True))
1342                 exit(1);
1343
1344         if (!locking_init())
1345                 exit(1);
1346
1347         namecache_enable();
1348
1349         if (!W_ERROR_IS_OK(registry_init_full()))
1350                 exit(1);
1351
1352 #if 0
1353         if (!init_svcctl_db())
1354                 exit(1);
1355 #endif
1356
1357         if (!print_backend_init(smbd_messaging_context()))
1358                 exit(1);
1359
1360         if (!init_guest_info()) {
1361                 DEBUG(0,("ERROR: failed to setup guest info.\n"));
1362                 return -1;
1363         }
1364
1365         /* only start the background queue daemon if we are 
1366            running as a daemon -- bad things will happen if
1367            smbd is launched via inetd and we fork a copy of 
1368            ourselves here */
1369
1370         if (is_daemon && !interactive
1371             && lp_parm_bool(-1, "smbd", "backgroundqueue", true)) {
1372                 start_background_queue();
1373         }
1374
1375         if (!open_sockets_smbd(is_daemon, interactive, ports))
1376                 exit(1);
1377
1378         /*
1379          * everything after this point is run after the fork()
1380          */ 
1381
1382         static_init_rpc;
1383
1384         init_modules();
1385
1386         /* Possibly reload the services file. Only worth doing in
1387          * daemon mode. In inetd mode, we know we only just loaded this.
1388          */
1389         if (is_daemon) {
1390                 reload_services(True);
1391         }
1392
1393         if (!init_account_policy()) {
1394                 DEBUG(0,("Could not open account policy tdb.\n"));
1395                 exit(1);
1396         }
1397
1398         if (*lp_rootdir()) {
1399                 if (chroot(lp_rootdir()) == 0)
1400                         DEBUG(2,("Changed root to %s\n", lp_rootdir()));
1401         }
1402
1403         /* Setup oplocks */
1404         if (!init_oplocks(smbd_messaging_context()))
1405                 exit(1);
1406
1407         /* Setup aio signal handler. */
1408         initialize_async_io_handler();
1409
1410         /* register our message handlers */
1411         messaging_register(smbd_messaging_context(), NULL,
1412                            MSG_SMB_FORCE_TDIS, msg_force_tdis);
1413         messaging_register(smbd_messaging_context(), NULL,
1414                            MSG_SMB_RELEASE_IP, msg_release_ip);
1415         messaging_register(smbd_messaging_context(), NULL,
1416                            MSG_SMB_CLOSE_FILE, msg_close_file);
1417
1418         if ((lp_keepalive() != 0)
1419             && !(event_add_idle(smbd_event_context(), NULL,
1420                                 timeval_set(lp_keepalive(), 0),
1421                                 "keepalive", keepalive_fn,
1422                                 NULL))) {
1423                 DEBUG(0, ("Could not add keepalive event\n"));
1424                 exit(1);
1425         }
1426
1427         if (!(event_add_idle(smbd_event_context(), NULL,
1428                              timeval_set(IDLE_CLOSED_TIMEOUT, 0),
1429                              "deadtime", deadtime_fn, NULL))) {
1430                 DEBUG(0, ("Could not add deadtime event\n"));
1431                 exit(1);
1432         }
1433
1434         if (!(event_add_idle(smbd_event_context(), NULL,
1435                              timeval_set(SMBD_SELECT_TIMEOUT, 0),
1436                              "housekeeping", housekeeping_fn, NULL))) {
1437                 DEBUG(0, ("Could not add housekeeping event\n"));
1438                 exit(1);
1439         }
1440
1441 #ifdef CLUSTER_SUPPORT
1442
1443         if (lp_clustering()) {
1444                 /*
1445                  * We need to tell ctdb about our client's TCP
1446                  * connection, so that for failover ctdbd can send
1447                  * tickle acks, triggering a reconnection by the
1448                  * client.
1449                  */
1450
1451                 struct sockaddr_storage srv, clnt;
1452
1453                 if (client_get_tcp_info(&srv, &clnt) == 0) {
1454
1455                         NTSTATUS status;
1456
1457                         status = ctdbd_register_ips(
1458                                 messaging_ctdbd_connection(),
1459                                 &srv, &clnt, release_ip, NULL);
1460
1461                         if (!NT_STATUS_IS_OK(status)) {
1462                                 DEBUG(0, ("ctdbd_register_ips failed: %s\n",
1463                                           nt_errstr(status)));
1464                         }
1465                 } else
1466                 {
1467                         DEBUG(0,("Unable to get tcp info for "
1468                                  "CTDB_CONTROL_TCP_CLIENT: %s\n",
1469                                  strerror(errno)));
1470                 }
1471         }
1472
1473 #endif
1474
1475         TALLOC_FREE(frame);
1476
1477         smbd_process();
1478
1479         exit_server_cleanly(NULL);
1480         return(0);
1481 }