s3: In winbind, close parent/child sockets
[samba.git] / source3 / winbindd / winbindd_dual.c
index c8bd066747071c030bedd8fc41caf65e50dee598..47ab6c17b707991f5e43236ba9c9f3e2c3338470 100644 (file)
 
 #include "includes.h"
 #include "winbindd.h"
-#include "../../nsswitch/libwbclient/wbc_async.h"
-#include "librpc/gen_ndr/messaging.h"
+#include "nsswitch/wb_reqtrans.h"
 #include "secrets.h"
+#include "../lib/util/select.h"
+#include "../libcli/security/security.h"
+#include "system/select.h"
+#include "messages.h"
+#include "ntdomain.h"
+#include "../lib/util/tevent_unix.h"
 
 #undef DBGC_CLASS
 #define DBGC_CLASS DBGC_WINBIND
@@ -136,7 +141,7 @@ static void wb_child_request_trigger(struct tevent_req *req,
                req, struct wb_child_request_state);
        struct tevent_req *subreq;
 
-       if ((state->child->pid == 0) && (!fork_domain_child(state->child))) {
+       if ((state->child->sock == -1) && (!fork_domain_child(state->child))) {
                tevent_req_error(req, errno);
                return;
        }
@@ -147,12 +152,7 @@ static void wb_child_request_trigger(struct tevent_req *req,
                return;
        }
        tevent_req_set_callback(subreq, wb_child_request_done, req);
-
-       if (!tevent_req_set_endtime(req, state->ev,
-                                   timeval_current_ofs(300, 0))) {
-               tevent_req_nomem(NULL, req);
-                return;
-        }
+       tevent_req_set_endtime(req, state->ev, timeval_current_ofs(300, 0));
 }
 
 static void wb_child_request_done(struct tevent_req *subreq)
@@ -166,6 +166,12 @@ static void wb_child_request_done(struct tevent_req *subreq)
        ret = wb_simple_trans_recv(subreq, state, &state->response, &err);
        TALLOC_FREE(subreq);
        if (ret == -1) {
+               /*
+                * The basic parent/child communication broke, close
+                * our socket
+                */
+               close(state->child->sock);
+               state->child->sock = -1;
                tevent_req_error(req, err);
                return;
        }
@@ -185,9 +191,47 @@ int wb_child_request_recv(struct tevent_req *req, TALLOC_CTX *mem_ctx,
        return 0;
 }
 
+static bool winbindd_child_busy(struct winbindd_child *child)
+{
+       return tevent_queue_length(child->queue) > 0;
+}
+
+static struct winbindd_child *find_idle_child(struct winbindd_domain *domain)
+{
+       int i;
+
+       for (i=0; i<lp_winbind_max_domain_connections(); i++) {
+               if (!winbindd_child_busy(&domain->children[i])) {
+                       return &domain->children[i];
+               }
+       }
+
+       return NULL;
+}
+
+struct winbindd_child *choose_domain_child(struct winbindd_domain *domain)
+{
+       struct winbindd_child *result;
+
+       result = find_idle_child(domain);
+       if (result != NULL) {
+               return result;
+       }
+       return &domain->children[rand() % lp_winbind_max_domain_connections()];
+}
+
+struct dcerpc_binding_handle *dom_child_handle(struct winbindd_domain *domain)
+{
+       struct winbindd_child *child;
+
+       child = choose_domain_child(domain);
+       return child->binding_handle;
+}
+
 struct wb_domain_request_state {
        struct tevent_context *ev;
        struct winbindd_domain *domain;
+       struct winbindd_child *child;
        struct winbindd_request *request;
        struct winbindd_request *init_req;
        struct winbindd_response *response;
@@ -211,8 +255,10 @@ struct tevent_req *wb_domain_request_send(TALLOC_CTX *mem_ctx,
                return NULL;
        }
 
+       state->child = choose_domain_child(domain);
+
        if (domain->initialized) {
-               subreq = wb_child_request_send(state, ev, &domain->child,
+               subreq = wb_child_request_send(state, ev, state->child,
                                               request);
                if (tevent_req_nomem(subreq, req)) {
                        return tevent_req_post(req, ev);
@@ -234,11 +280,10 @@ struct tevent_req *wb_domain_request_send(TALLOC_CTX *mem_ctx,
                /* The primary domain has to find the DC name itself */
                state->init_req->cmd = WINBINDD_INIT_CONNECTION;
                fstrcpy(state->init_req->domain_name, domain->name);
-               state->init_req->data.init_conn.is_primary =
-                       domain->primary ? true : false;
+               state->init_req->data.init_conn.is_primary = domain->primary;
                fstrcpy(state->init_req->data.init_conn.dcname, "");
 
-               subreq = wb_child_request_send(state, ev, &domain->child,
+               subreq = wb_child_request_send(state, ev, state->child,
                                               state->init_req);
                if (tevent_req_nomem(subreq, req)) {
                        return tevent_req_post(req, ev);
@@ -259,7 +304,7 @@ struct tevent_req *wb_domain_request_send(TALLOC_CTX *mem_ctx,
        state->init_req->cmd = WINBINDD_GETDCNAME;
        fstrcpy(state->init_req->domain_name, domain->name);
 
-       subreq = wb_child_request_send(state, ev, &domain->child, request);
+       subreq = wb_child_request_send(state, ev, state->child, request);
        if (tevent_req_nomem(subreq, req)) {
                return tevent_req_post(req, ev);
        }
@@ -290,7 +335,7 @@ static void wb_domain_request_gotdc(struct tevent_req *subreq)
 
        TALLOC_FREE(response);
 
-       subreq = wb_child_request_send(state, state->ev, &state->domain->child,
+       subreq = wb_child_request_send(state, state->ev, state->child,
                                       state->init_req);
        if (tevent_req_nomem(subreq, req)) {
                return;
@@ -330,7 +375,7 @@ static void wb_domain_request_initialized(struct tevent_req *subreq)
 
        TALLOC_FREE(response);
 
-       subreq = wb_child_request_send(state, state->ev, &state->domain->child,
+       subreq = wb_child_request_send(state, state->ev, state->child,
                                       state->request);
        if (tevent_req_nomem(subreq, req)) {
                return;
@@ -395,7 +440,7 @@ static void child_process_request(struct winbindd_child *child,
                }
        }
 
-       DEBUG(1 ,("child_process_request: unknown request fn number %d\n",
+       DEBUG(1("child_process_request: unknown request fn number %d\n",
                  (int)state->request->cmd));
        state->response->result = WINBINDD_ERROR;
 }
@@ -436,12 +481,13 @@ void setup_child(struct winbindd_domain *domain, struct winbindd_child *child,
                          "logname == NULL");
        }
 
+       child->sock = -1;
        child->domain = domain;
        child->table = table;
        child->queue = tevent_queue_create(NULL, "winbind_child");
        SMB_ASSERT(child->queue != NULL);
-       child->rpccli = wbint_rpccli_create(NULL, domain, child);
-       SMB_ASSERT(child->rpccli != NULL);
+       child->binding_handle = wbint_binding_handle(NULL, domain, child);
+       SMB_ASSERT(child->binding_handle != NULL);
 }
 
 static struct winbindd_child *winbindd_children = NULL;
@@ -464,9 +510,6 @@ void winbind_child_died(pid_t pid)
        /* This will be re-added in fork_domain_child() */
 
        DLIST_REMOVE(winbindd_children, child);
-
-       close(child->sock);
-       child->sock = -1;
        child->pid = 0;
 }
 
@@ -1124,7 +1167,8 @@ static void child_msg_dump_event_list(struct messaging_context *msg,
        dump_event_list(winbind_event_context());
 }
 
-bool winbindd_reinit_after_fork(const char *logfilename)
+bool winbindd_reinit_after_fork(const struct winbindd_child *myself,
+                               const char *logfilename)
 {
        struct winbindd_domain *domain;
        struct winbindd_child *cl;
@@ -1133,7 +1177,7 @@ bool winbindd_reinit_after_fork(const char *logfilename)
        status = reinit_after_fork(
                winbind_messaging_context(),
                winbind_event_context(),
-               messaging_server_id(winbind_messaging_context()),
+               procid_self(),
                true);
        if (!NT_STATUS_IS_OK(status)) {
                DEBUG(0,("reinit_after_fork() failed\n"));
@@ -1199,6 +1243,14 @@ bool winbindd_reinit_after_fork(const char *logfilename)
                 * go through the parent.
                 */
                cl->pid = (pid_t)0;
+
+               /*
+                * Close service sockets to all other children
+                */
+               if ((cl != myself) && (cl->sock != -1)) {
+                       close(cl->sock);
+                       cl->sock = -1;
+               }
         }
        /*
         * This is a little tricky, children must not
@@ -1282,7 +1334,7 @@ static bool fork_domain_child(struct winbindd_child *child)
        state.sock = fdpair[0];
        close(fdpair[1]);
 
-       if (!winbindd_reinit_after_fork(child->logfilename)) {
+       if (!winbindd_reinit_after_fork(child, child->logfilename)) {
                _exit(0);
        }
 
@@ -1295,6 +1347,10 @@ static bool fork_domain_child(struct winbindd_child *child)
                           MSG_DUMP_EVENT_LIST, child_msg_dump_event_list);
        messaging_register(winbind_messaging_context(), NULL,
                           MSG_DEBUG, debug_message);
+       messaging_register(winbind_messaging_context(), NULL,
+                          MSG_WINBIND_IP_DROPPED,
+                          winbind_msg_ip_dropped);
+
 
        primary_domain = find_our_domain();
 
@@ -1306,7 +1362,7 @@ static bool fork_domain_child(struct winbindd_child *child)
         * try to bring domain online after fork. */
        if ( child->domain ) {
                child->domain->startup = True;
-               child->domain->startup_time = time(NULL);
+               child->domain->startup_time = time_mono(NULL);
                /* we can be in primary domain or in trusted domain
                 * If we are in trusted domain, set the primary domain
                 * in start-up mode */
@@ -1314,7 +1370,7 @@ static bool fork_domain_child(struct winbindd_child *child)
                        set_domain_online_request(child->domain);
                        if (!(child->domain->primary)) {
                                primary_domain->startup = True;
-                               primary_domain->startup_time = time(NULL);
+                               primary_domain->startup_time = time_mono(NULL);
                                set_domain_online_request(primary_domain);
                        }
                }
@@ -1370,61 +1426,64 @@ static bool fork_domain_child(struct winbindd_child *child)
        while (1) {
 
                int ret;
-               fd_set r_fds;
-               fd_set w_fds;
-               int maxfd;
+               struct pollfd *pfds;
+               int num_pfds;
+               int timeout;
                struct timeval t;
                struct timeval *tp;
-               struct timeval now;
                TALLOC_CTX *frame = talloc_stackframe();
                struct iovec iov[2];
                int iov_count;
                NTSTATUS status;
 
-               if (run_events(winbind_event_context(), 0, NULL, NULL)) {
+               if (run_events_poll(winbind_event_context(), 0, NULL, 0)) {
                        TALLOC_FREE(frame);
                        continue;
                }
 
-               GetTimeOfDay(&now);
-
                if (child->domain && child->domain->startup &&
-                               (now.tv_sec > child->domain->startup_time + 30)) {
+                               (time_mono(NULL) > child->domain->startup_time + 30)) {
                        /* No longer in "startup" mode. */
                        DEBUG(10,("fork_domain_child: domain %s no longer in 'startup' mode.\n",
                                child->domain->name ));
                        child->domain->startup = False;
                }
 
-               FD_ZERO(&r_fds);
-               FD_ZERO(&w_fds);
-               FD_SET(state.sock, &r_fds);
-               maxfd = state.sock;
+               pfds = TALLOC_ZERO_P(talloc_tos(), struct pollfd);
+               if (pfds == NULL) {
+                       DEBUG(1, ("talloc failed\n"));
+                       _exit(1);
+               }
 
-               /*
-                * Initialize this high as event_add_to_select_args()
-                * uses a timeval_min() on this and next_event. Fix
-                * from Roel van Meer <rolek@alt001.com>.
-                */
-               t.tv_sec = 999999;
-               t.tv_usec = 0;
-
-               event_add_to_select_args(winbind_event_context(), &now,
-                                        &r_fds, &w_fds, &t, &maxfd);
+               pfds->fd = state.sock;
+               pfds->events = POLLIN|POLLHUP;
+               num_pfds = 1;
+
+               timeout = INT_MAX;
+
+               if (!event_add_to_poll_args(
+                           winbind_event_context(), talloc_tos(),
+                           &pfds, &num_pfds, &timeout)) {
+                       DEBUG(1, ("event_add_to_poll_args failed\n"));
+                       _exit(1);
+               }
                tp = get_timed_events_timeout(winbind_event_context(), &t);
                if (tp) {
                        DEBUG(11,("select will use timeout of %u.%u seconds\n",
                                (unsigned int)tp->tv_sec, (unsigned int)tp->tv_usec ));
                }
 
-               ret = sys_select(maxfd + 1, &r_fds, &w_fds, NULL, tp);
+               ret = sys_poll(pfds, num_pfds, timeout);
 
-               if (run_events(winbind_event_context(), ret, &r_fds, &w_fds)) {
+               if (run_events_poll(winbind_event_context(), ret,
+                                   pfds, num_pfds)) {
                        /* We got a signal - continue. */
                        TALLOC_FREE(frame);
                        continue;
                }
 
+               TALLOC_FREE(pfds);
+
                if (ret == 0) {
                        DEBUG(11,("nothing is ready yet, continue\n"));
                        TALLOC_FREE(frame);
@@ -1438,9 +1497,9 @@ static bool fork_domain_child(struct winbindd_child *child)
                }
 
                if (ret == -1 && errno != EINTR) {
-                       DEBUG(0,("select error occured\n"));
+                       DEBUG(0,("poll error occured\n"));
                        TALLOC_FREE(frame);
-                       perror("select");
+                       perror("poll");
                        _exit(1);
                }
 
@@ -1486,3 +1545,21 @@ static bool fork_domain_child(struct winbindd_child *child)
                TALLOC_FREE(frame);
        }
 }
+
+void winbind_msg_ip_dropped_parent(struct messaging_context *msg_ctx,
+                                  void *private_data,
+                                  uint32_t msg_type,
+                                  struct server_id server_id,
+                                  DATA_BLOB *data)
+{
+       struct winbindd_child *child;
+
+       winbind_msg_ip_dropped(msg_ctx, private_data, msg_type,
+                              server_id, data);
+
+
+       for (child = winbindd_children; child != NULL; child = child->next) {
+               messaging_send_buf(msg_ctx, pid_to_procid(child->pid),
+                                  msg_type, data->data, data->length);
+       }
+}