source3/smbd/server.c

   1 /*
   2    Unix SMB/CIFS implementation.
   3    Main SMB server routines
   4    Copyright (C) Andrew Tridgell                1992-1998
   5    Copyright (C) Martin Pool                    2002
   6    Copyright (C) Jelmer Vernooij                2002-2003
   7    Copyright (C) Volker Lendecke                1993-2007
   8    Copyright (C) Jeremy Allison                 1993-2007
   9
  10    This program is free software; you can redistribute it and/or modify
  11    it under the terms of the GNU General Public License as published by
  12    the Free Software Foundation; either version 3 of the License, or
  13    (at your option) any later version.
  14
  15    This program is distributed in the hope that it will be useful,
  16    but WITHOUT ANY WARRANTY; without even the implied warranty of
  17    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  18    GNU General Public License for more details.
  19
  20    You should have received a copy of the GNU General Public License
  21    along with this program.  If not, see <http://www.gnu.org/licenses/>.
  22 */
  23
  24 #include "includes.h"
  25
  26 static_decl_rpc;
  27
  28 static int am_parent = 1;
  29
  30 extern struct auth_context *negprot_global_auth_context;
  31 extern SIG_ATOMIC_T got_sig_term;
  32 extern SIG_ATOMIC_T reload_after_sighup;
  33 static SIG_ATOMIC_T got_sig_cld;
  34
  35 #ifdef WITH_DFS
  36 extern int dcelogin_atmost_once;
  37 #endif /* WITH_DFS */
  38
  39 /* really we should have a top level context structure that has the
  40    client file descriptor as an element. That would require a major rewrite :(
  41
  42    the following 2 functions are an alternative - they make the file
  43    descriptor private to smbd
  44  */
  45 static int server_fd = -1;
  46
  47 int smbd_server_fd(void)
  48 {
  49         return server_fd;
  50 }
  51
  52 static void smbd_set_server_fd(int fd)
  53 {
  54         server_fd = fd;
  55 }
  56
  57 int get_client_fd(void)
  58 {
  59         return server_fd;
  60 }
  61
  62 int client_get_tcp_info(struct sockaddr_in *server, struct sockaddr_in *client)
  63 {
  64         socklen_t length;
  65         if (server_fd == -1) {
  66                 return -1;
  67         }
  68         length = sizeof(*server);
  69         if (getsockname(server_fd, (struct sockaddr *)server, &length) != 0) {
  70                 return -1;
  71         }
  72         length = sizeof(*client);
  73         if (getpeername(server_fd, (struct sockaddr *)client, &length) != 0) {
  74                 return -1;
  75         }
  76         return 0;
  77 }
  78
  79 struct event_context *smbd_event_context(void)
  80 {
  81         static struct event_context *ctx;
  82
  83         if (!ctx && !(ctx = event_context_init(NULL))) {
  84                 smb_panic("Could not init smbd event context");
  85         }
  86         return ctx;
  87 }
  88
  89 struct messaging_context *smbd_messaging_context(void)
  90 {
  91         static struct messaging_context *ctx;
  92
  93         if (ctx == NULL) {
  94                 ctx = messaging_init(NULL, server_id_self(),
  95                                      smbd_event_context());
  96         }
  97         if (ctx == NULL) {
  98                 DEBUG(0, ("Could not init smbd messaging context.\n"));
  99         }
 100         return ctx;
 101 }
 102
 103 struct memcache *smbd_memcache(void)
 104 {
 105         static struct memcache *cache;
 106
 107         if (!cache
 108             && !(cache = memcache_init(NULL,
 109                                        lp_max_stat_cache_size()*1024))) {
 110
 111                 smb_panic("Could not init smbd memcache");
 112         }
 113         return cache;
 114 }
 115
 116 /*******************************************************************
 117  What to do when smb.conf is updated.
 118  ********************************************************************/
 119
 120 static void smb_conf_updated(struct messaging_context *msg,
 121                              void *private_data,
 122                              uint32_t msg_type,
 123                              struct server_id server_id,
 124                              DATA_BLOB *data)
 125 {
 126         DEBUG(10,("smb_conf_updated: Got message saying smb.conf was "
 127                   "updated. Reloading.\n"));
 128         reload_services(False);
 129 }
 130
 131
 132 /*******************************************************************
 133  Delete a statcache entry.
 134  ********************************************************************/
 135
 136 static void smb_stat_cache_delete(struct messaging_context *msg,
 137                                   void *private_data,
 138                                   uint32_t msg_tnype,
 139                                   struct server_id server_id,
 140                                   DATA_BLOB *data)
 141 {
 142         const char *name = (const char *)data->data;
 143         DEBUG(10,("smb_stat_cache_delete: delete name %s\n", name));
 144         stat_cache_delete(name);
 145 }
 146
 147 /****************************************************************************
 148  Terminate signal.
 149 ****************************************************************************/
 150
 151 static void sig_term(void)
 152 {
 153         got_sig_term = 1;
 154         sys_select_signal(SIGTERM);
 155 }
 156
 157 /****************************************************************************
 158  Catch a sighup.
 159 ****************************************************************************/
 160
 161 static void sig_hup(int sig)
 162 {
 163         reload_after_sighup = 1;
 164         sys_select_signal(SIGHUP);
 165 }
 166
 167 /****************************************************************************
 168  Catch a sigcld
 169 ****************************************************************************/
 170 static void sig_cld(int sig)
 171 {
 172         got_sig_cld = 1;
 173         sys_select_signal(SIGCLD);
 174 }
 175
 176 /****************************************************************************
 177   Send a SIGTERM to our process group.
 178 *****************************************************************************/
 179
 180 static void  killkids(void)
 181 {
 182         if(am_parent) kill(0,SIGTERM);
 183 }
 184
 185 /****************************************************************************
 186  Process a sam sync message - not sure whether to do this here or
 187  somewhere else.
 188 ****************************************************************************/
 189
 190 static void msg_sam_sync(struct messaging_context *msg,
 191                          void *private_data,
 192                          uint32_t msg_type,
 193                          struct server_id server_id,
 194                          DATA_BLOB *data)
 195 {
 196         DEBUG(10, ("** sam sync message received, ignoring\n"));
 197 }
 198
 199
 200 /****************************************************************************
 201  Open the socket communication - inetd.
 202 ****************************************************************************/
 203
 204 static bool open_sockets_inetd(void)
 205 {
 206         /* Started from inetd. fd 0 is the socket. */
 207         /* We will abort gracefully when the client or remote system
 208            goes away */
 209         smbd_set_server_fd(dup(0));
 210
 211         /* close our standard file descriptors */
 212         close_low_fds(False); /* Don't close stderr */
 213
 214         set_socket_options(smbd_server_fd(),"SO_KEEPALIVE");
 215         set_socket_options(smbd_server_fd(), lp_socket_options());
 216
 217         return True;
 218 }
 219
 220 static void msg_exit_server(struct messaging_context *msg,
 221                             void *private_data,
 222                             uint32_t msg_type,
 223                             struct server_id server_id,
 224                             DATA_BLOB *data)
 225 {
 226         DEBUG(3, ("got a SHUTDOWN message\n"));
 227         exit_server_cleanly(NULL);
 228 }
 229
 230 #ifdef DEVELOPER
 231 static void msg_inject_fault(struct messaging_context *msg,
 232                              void *private_data,
 233                              uint32_t msg_type,
 234                              struct server_id src,
 235                              DATA_BLOB *data)
 236 {
 237         int sig;
 238
 239         if (data->length != sizeof(sig)) {
 240
 241                 DEBUG(0, ("Process %s sent bogus signal injection request\n",
 242                           procid_str_static(&src)));
 243                 return;
 244         }
 245
 246         sig = *(int *)data->data;
 247         if (sig == -1) {
 248                 exit_server("internal error injected");
 249                 return;
 250         }
 251
 252 #if HAVE_STRSIGNAL
 253         DEBUG(0, ("Process %s requested injection of signal %d (%s)\n",
 254                   procid_str_static(&src), sig, strsignal(sig)));
 255 #else
 256         DEBUG(0, ("Process %s requested injection of signal %d\n",
 257                   procid_str_static(&src), sig));
 258 #endif
 259
 260         kill(sys_getpid(), sig);
 261 }
 262 #endif /* DEVELOPER */
 263
 264 struct child_pid {
 265         struct child_pid *prev, *next;
 266         pid_t pid;
 267 };
 268
 269 static struct child_pid *children;
 270 static int num_children;
 271
 272 static void add_child_pid(pid_t pid)
 273 {
 274         struct child_pid *child;
 275
 276         if (lp_max_smbd_processes() == 0) {
 277                 /* Don't bother with the child list if we don't care anyway */
 278                 return;
 279         }
 280
 281         child = SMB_MALLOC_P(struct child_pid);
 282         if (child == NULL) {
 283                 DEBUG(0, ("Could not add child struct -- malloc failed\n"));
 284                 return;
 285         }
 286         child->pid = pid;
 287         DLIST_ADD(children, child);
 288         num_children += 1;
 289 }
 290
 291 static void remove_child_pid(pid_t pid, bool unclean_shutdown)
 292 {
 293         struct child_pid *child;
 294
 295         if (unclean_shutdown) {
 296                 /* a child terminated uncleanly so tickle all processes to see
 297                    if they can grab any of the pending locks
 298                 */
 299                 DEBUG(3,(__location__ " Unclean shutdown of pid %u\n", pid));
 300                 messaging_send_buf(smbd_messaging_context(), procid_self(),
 301                                    MSG_SMB_BRL_VALIDATE, NULL, 0);
 302                 message_send_all(smbd_messaging_context(),
 303                                  MSG_SMB_UNLOCK, NULL, 0, NULL);
 304         }
 305
 306         if (lp_max_smbd_processes() == 0) {
 307                 /* Don't bother with the child list if we don't care anyway */
 308                 return;
 309         }
 310
 311         for (child = children; child != NULL; child = child->next) {
 312                 if (child->pid == pid) {
 313                         struct child_pid *tmp = child;
 314                         DLIST_REMOVE(children, child);
 315                         SAFE_FREE(tmp);
 316                         num_children -= 1;
 317                         return;
 318                 }
 319         }
 320
 321         DEBUG(0, ("Could not find child %d -- ignoring\n", (int)pid));
 322 }
 323
 324 /****************************************************************************
 325  Have we reached the process limit ?
 326 ****************************************************************************/
 327
 328 static bool allowable_number_of_smbd_processes(void)
 329 {
 330         int max_processes = lp_max_smbd_processes();
 331
 332         if (!max_processes)
 333                 return True;
 334
 335         return num_children < max_processes;
 336 }
 337
 338 /****************************************************************************
 339  Open the socket communication.
 340 ****************************************************************************/
 341
 342 static bool open_sockets_smbd(bool is_daemon, bool interactive, const char *smb_ports)
 343 {
 344         int num_interfaces = iface_count();
 345         int num_sockets = 0;
 346         int fd_listenset[FD_SETSIZE];
 347         fd_set listen_set;
 348         int s;
 349         int maxfd = 0;
 350         int i;
 351         char *ports;
 352         struct dns_reg_state * dns_reg = NULL;
 353         unsigned dns_port = 0;
 354
 355         if (!is_daemon) {
 356                 return open_sockets_inetd();
 357         }
 358
 359 #ifdef HAVE_ATEXIT
 360         {
 361                 static int atexit_set;
 362                 if(atexit_set == 0) {
 363                         atexit_set=1;
 364                         atexit(killkids);
 365                 }
 366         }
 367 #endif
 368
 369         /* Stop zombies */
 370         CatchSignal(SIGCLD, sig_cld);
 371
 372         FD_ZERO(&listen_set);
 373
 374         /* use a reasonable default set of ports - listing on 445 and 139 */
 375         if (!smb_ports) {
 376                 ports = lp_smb_ports();
 377                 if (!ports || !*ports) {
 378                         ports = smb_xstrdup(SMB_PORTS);
 379                 } else {
 380                         ports = smb_xstrdup(ports);
 381                 }
 382         } else {
 383                 ports = smb_xstrdup(smb_ports);
 384         }
 385
 386         if (lp_interfaces() && lp_bind_interfaces_only()) {
 387                 /* We have been given an interfaces line, and been
 388                    told to only bind to those interfaces. Create a
 389                    socket per interface and bind to only these.
 390                 */
 391
 392                 /* Now open a listen socket for each of the
 393                    interfaces. */
 394                 for(i = 0; i < num_interfaces; i++) {
 395                         TALLOC_CTX *frame = NULL;
 396                         const struct sockaddr_storage *ifss =
 397                                         iface_n_sockaddr_storage(i);
 398                         char *tok;
 399                         const char *ptr;
 400
 401                         if (ifss == NULL) {
 402                                 DEBUG(0,("open_sockets_smbd: "
 403                                         "interface %d has NULL IP address !\n",
 404                                         i));
 405                                 continue;
 406                         }
 407
 408                         frame = talloc_stackframe();
 409                         for (ptr=ports;
 410                                         next_token_talloc(frame,&ptr, &tok, " \t,");) {
 411                                 unsigned port = atoi(tok);
 412                                 if (port == 0 || port > 0xffff) {
 413                                         continue;
 414                                 }
 415
 416                                 /* Keep the first port for mDNS service
 417                                  * registration.
 418                                  */
 419                                 if (dns_port == 0) {
 420                                         dns_port = port;
 421                                 }
 422
 423                                 s = fd_listenset[num_sockets] =
 424                                         open_socket_in(SOCK_STREAM,
 425                                                         port,
 426                                                         num_sockets == 0 ? 0 : 2,
 427                                                         ifss,
 428                                                         true);
 429                                 if(s == -1) {
 430                                         continue;
 431                                 }
 432
 433                                 /* ready to listen */
 434                                 set_socket_options(s,"SO_KEEPALIVE");
 435                                 set_socket_options(s,lp_socket_options());
 436
 437                                 /* Set server socket to
 438                                  * non-blocking for the accept. */
 439                                 set_blocking(s,False);
 440
 441                                 if (listen(s, SMBD_LISTEN_BACKLOG) == -1) {
 442                                         DEBUG(0,("open_sockets_smbd: listen: "
 443                                                 "%s\n", strerror(errno)));
 444                                         close(s);
 445                                         TALLOC_FREE(frame);
 446                                         return False;
 447                                 }
 448                                 FD_SET(s,&listen_set);
 449                                 maxfd = MAX( maxfd, s);
 450
 451                                 num_sockets++;
 452                                 if (num_sockets >= FD_SETSIZE) {
 453                                         DEBUG(0,("open_sockets_smbd: Too "
 454                                                 "many sockets to bind to\n"));
 455                                         TALLOC_FREE(frame);
 456                                         return False;
 457                                 }
 458                         }
 459                         TALLOC_FREE(frame);
 460                 }
 461         } else {
 462                 /* Just bind to 0.0.0.0 - accept connections
 463                    from anywhere. */
 464
 465                 TALLOC_CTX *frame = talloc_stackframe();
 466                 char *tok;
 467                 const char *ptr;
 468                 const char *sock_addr = lp_socket_address();
 469                 char *sock_tok;
 470                 const char *sock_ptr;
 471
 472                 if (strequal(sock_addr, "0.0.0.0") ||
 473                                 strequal(sock_addr, "::")) {
 474 #if HAVE_IPV6
 475                         sock_addr = "::,0.0.0.0";
 476 #else
 477                         sock_addr = "0.0.0.0";
 478 #endif
 479                 }
 480
 481                 for (sock_ptr=sock_addr;
 482                                 next_token_talloc(frame, &sock_ptr, &sock_tok, " \t,"); ) {
 483                         for (ptr=ports; next_token_talloc(frame, &ptr, &tok, " \t,"); ) {
 484                                 struct sockaddr_storage ss;
 485
 486                                 unsigned port = atoi(tok);
 487                                 if (port == 0 || port > 0xffff) {
 488                                         continue;
 489                                 }
 490
 491                                 /* Keep the first port for mDNS service
 492                                  * registration.
 493                                  */
 494                                 if (dns_port == 0) {
 495                                         dns_port = port;
 496                                 }
 497
 498                                 /* open an incoming socket */
 499                                 if (!interpret_string_addr(&ss, sock_tok,
 500                                                 AI_NUMERICHOST|AI_PASSIVE)) {
 501                                         continue;
 502                                 }
 503
 504                                 s = open_socket_in(SOCK_STREAM,
 505                                                 port,
 506                                                 num_sockets == 0 ? 0 : 2,
 507                                                 &ss,
 508                                                 true);
 509                                 if (s == -1) {
 510                                         continue;
 511                                 }
 512
 513                                 /* ready to listen */
 514                                 set_socket_options(s,"SO_KEEPALIVE");
 515                                 set_socket_options(s,lp_socket_options());
 516
 517                                 /* Set server socket to non-blocking
 518                                  * for the accept. */
 519                                 set_blocking(s,False);
 520
 521                                 if (listen(s, SMBD_LISTEN_BACKLOG) == -1) {
 522                                         DEBUG(0,("open_sockets_smbd: "
 523                                                 "listen: %s\n",
 524                                                  strerror(errno)));
 525                                         close(s);
 526                                         TALLOC_FREE(frame);
 527                                         return False;
 528                                 }
 529
 530                                 fd_listenset[num_sockets] = s;
 531                                 FD_SET(s,&listen_set);
 532                                 maxfd = MAX( maxfd, s);
 533
 534                                 num_sockets++;
 535
 536                                 if (num_sockets >= FD_SETSIZE) {
 537                                         DEBUG(0,("open_sockets_smbd: Too "
 538                                                 "many sockets to bind to\n"));
 539                                         TALLOC_FREE(frame);
 540                                         return False;
 541                                 }
 542                         }
 543                 }
 544                 TALLOC_FREE(frame);
 545         }
 546
 547         SAFE_FREE(ports);
 548
 549         if (num_sockets == 0) {
 550                 DEBUG(0,("open_sockets_smbd: No "
 551                         "sockets available to bind to.\n"));
 552                 return false;
 553         }
 554
 555         /* Setup the main smbd so that we can get messages. Note that
 556            do this after starting listening. This is needed as when in
 557            clustered mode, ctdb won't allow us to start doing database
 558            operations until it has gone thru a full startup, which
 559            includes checking to see that smbd is listening. */
 560         claim_connection(NULL,"",
 561                          FLAG_MSG_GENERAL|FLAG_MSG_SMBD|FLAG_MSG_DBWRAP);
 562
 563         /* Listen to messages */
 564
 565         messaging_register(smbd_messaging_context(), NULL,
 566                            MSG_SMB_SAM_SYNC, msg_sam_sync);
 567         messaging_register(smbd_messaging_context(), NULL,
 568                            MSG_SHUTDOWN, msg_exit_server);
 569         messaging_register(smbd_messaging_context(), NULL,
 570                            MSG_SMB_FILE_RENAME, msg_file_was_renamed);
 571         messaging_register(smbd_messaging_context(), NULL,
 572                            MSG_SMB_CONF_UPDATED, smb_conf_updated);
 573         messaging_register(smbd_messaging_context(), NULL,
 574                            MSG_SMB_STAT_CACHE_DELETE, smb_stat_cache_delete);
 575         brl_register_msgs(smbd_messaging_context());
 576
 577 #ifdef CLUSTER_SUPPORT
 578         ctdbd_register_reconfigure(messaging_ctdbd_connection());
 579 #endif
 580
 581 #ifdef DEVELOPER
 582         messaging_register(smbd_messaging_context(), NULL,
 583                            MSG_SMB_INJECT_FAULT, msg_inject_fault);
 584 #endif
 585
 586         /* now accept incoming connections - forking a new process
 587            for each incoming connection */
 588         DEBUG(2,("waiting for a connection\n"));
 589         while (1) {
 590                 struct timeval now, idle_timeout;
 591                 fd_set r_fds, w_fds;
 592                 int num;
 593
 594                 /* Ensure we respond to PING and DEBUG messages from the main smbd. */
 595                 message_dispatch(smbd_messaging_context());
 596
 597                 if (got_sig_cld) {
 598                         pid_t pid;
 599                         int status;
 600
 601                         got_sig_cld = False;
 602
 603                         while ((pid = sys_waitpid(-1, &status, WNOHANG)) > 0) {
 604                                 bool unclean_shutdown = False;
 605
 606                                 /* If the child terminated normally, assume
 607                                    it was an unclean shutdown unless the
 608                                    status is 0
 609                                 */
 610                                 if (WIFEXITED(status)) {
 611                                         unclean_shutdown = WEXITSTATUS(status);
 612                                 }
 613                                 /* If the child terminated due to a signal
 614                                    we always assume it was unclean.
 615                                 */
 616                                 if (WIFSIGNALED(status)) {
 617                                         unclean_shutdown = True;
 618                                 }
 619                                 remove_child_pid(pid, unclean_shutdown);
 620                         }
 621                 }
 622
 623                 idle_timeout = timeval_zero();
 624
 625                 memcpy((char *)&r_fds, (char *)&listen_set,
 626                        sizeof(listen_set));
 627                 FD_ZERO(&w_fds);
 628                 GetTimeOfDay(&now);
 629
 630                 /* Kick off our mDNS registration. */
 631                 if (dns_port != 0) {
 632                         dns_register_smbd(&dns_reg, dns_port, &maxfd,
 633                                         &r_fds, &idle_timeout);
 634                 }
 635
 636                 event_add_to_select_args(smbd_event_context(), &now,
 637                                          &r_fds, &w_fds, &idle_timeout,
 638                                          &maxfd);
 639
 640                 num = sys_select(maxfd+1,&r_fds,&w_fds,NULL,
 641                                  timeval_is_zero(&idle_timeout) ?
 642                                  NULL : &idle_timeout);
 643
 644                 if (num == -1 && errno == EINTR) {
 645                         if (got_sig_term) {
 646                                 exit_server_cleanly(NULL);
 647                         }
 648
 649                         /* check for sighup processing */
 650                         if (reload_after_sighup) {
 651                                 change_to_root_user();
 652                                 DEBUG(1,("Reloading services after SIGHUP\n"));
 653                                 reload_services(False);
 654                                 reload_after_sighup = 0;
 655                         }
 656
 657                         continue;
 658                 }
 659
 660
 661                 /* If the idle timeout fired and we don't have any connected
 662                  * users, exit gracefully. We should be running under a process
 663                  * controller that will restart us if necessry.
 664                  */
 665                 if (num == 0 && count_all_current_connections() == 0) {
 666                         exit_server_cleanly("idle timeout");
 667                 }
 668
 669                 /* process pending nDNS responses */
 670                 if (dns_register_smbd_reply(dns_reg, &r_fds, &idle_timeout)) {
 671                         --num;
 672                 }
 673
 674                 if (run_events(smbd_event_context(), num, &r_fds, &w_fds)) {
 675                         continue;
 676                 }
 677
 678                 /* check if we need to reload services */
 679                 check_reload(time(NULL));
 680
 681                 /* Find the sockets that are read-ready -
 682                    accept on these. */
 683                 for( ; num > 0; num--) {
 684                         struct sockaddr addr;
 685                         socklen_t in_addrlen = sizeof(addr);
 686                         pid_t child = 0;
 687
 688                         s = -1;
 689                         for(i = 0; i < num_sockets; i++) {
 690                                 if(FD_ISSET(fd_listenset[i],&r_fds)) {
 691                                         s = fd_listenset[i];
 692                                         /* Clear this so we don't look
 693                                            at it again. */
 694                                         FD_CLR(fd_listenset[i],&r_fds);
 695                                         break;
 696                                 }
 697                         }
 698
 699                         smbd_set_server_fd(accept(s,&addr,&in_addrlen));
 700
 701                         if (smbd_server_fd() == -1 && errno == EINTR)
 702                                 continue;
 703
 704                         if (smbd_server_fd() == -1) {
 705                                 DEBUG(2,("open_sockets_smbd: accept: %s\n",
 706                                          strerror(errno)));
 707                                 continue;
 708                         }
 709
 710                         /* Ensure child is set to blocking mode */
 711                         set_blocking(smbd_server_fd(),True);
 712
 713                         if (smbd_server_fd() != -1 && interactive)
 714                                 return True;
 715
 716                         if (allowable_number_of_smbd_processes() &&
 717                             smbd_server_fd() != -1 &&
 718                             ((child = sys_fork())==0)) {
 719                                 char remaddr[INET6_ADDRSTRLEN];
 720
 721                                 /* Child code ... */
 722
 723                                 /* Stop zombies, the parent explicitly handles
 724                                  * them, counting worker smbds. */
 725                                 CatchChild();
 726
 727                                 /* close the listening socket(s) */
 728                                 for(i = 0; i < num_sockets; i++)
 729                                         close(fd_listenset[i]);
 730
 731                                 /* close our mDNS daemon handle */
 732                                 dns_register_close(&dns_reg);
 733
 734                                 /* close our standard file
 735                                    descriptors */
 736                                 close_low_fds(False);
 737                                 am_parent = 0;
 738
 739                                 set_socket_options(smbd_server_fd(),"SO_KEEPALIVE");
 740                                 set_socket_options(smbd_server_fd(),
 741                                                    lp_socket_options());
 742
 743                                 /* this is needed so that we get decent entries
 744                                    in smbstatus for port 445 connects */
 745                                 set_remote_machine_name(get_peer_addr(smbd_server_fd(),
 746                                                                 remaddr,
 747                                                                 sizeof(remaddr)),
 748                                                                 false);
 749
 750                                 if (!reinit_after_fork(
 751                                             smbd_messaging_context(), true)) {
 752                                         DEBUG(0,("reinit_after_fork() failed\n"));
 753                                         smb_panic("reinit_after_fork() failed");
 754                                 }
 755
 756                                 return True;
 757                         }
 758                         /* The parent doesn't need this socket */
 759                         close(smbd_server_fd());
 760
 761                         /* Sun May 6 18:56:14 2001 ackley@cs.unm.edu:
 762                                 Clear the closed fd info out of server_fd --
 763                                 and more importantly, out of client_fd in
 764                                 util_sock.c, to avoid a possible
 765                                 getpeername failure if we reopen the logs
 766                                 and use %I in the filename.
 767                         */
 768
 769                         smbd_set_server_fd(-1);
 770
 771                         if (child != 0) {
 772                                 add_child_pid(child);
 773                         }
 774
 775                         /* Force parent to check log size after
 776                          * spawning child.  Fix from
 777                          * klausr@ITAP.Physik.Uni-Stuttgart.De.  The
 778                          * parent smbd will log to logserver.smb.  It
 779                          * writes only two messages for each child
 780                          * started/finished. But each child writes,
 781                          * say, 50 messages also in logserver.smb,
 782                          * begining with the debug_count of the
 783                          * parent, before the child opens its own log
 784                          * file logserver.client. In a worst case
 785                          * scenario the size of logserver.smb would be
 786                          * checked after about 50*50=2500 messages
 787                          * (ca. 100kb).
 788                          * */
 789                         force_check_log_size();
 790
 791                 } /* end for num */
 792         } /* end while 1 */
 793
 794 /* NOTREACHED   return True; */
 795 }
 796
 797 /****************************************************************************
 798  Reload printers
 799 **************************************************************************/
 800 void reload_printers(void)
 801 {
 802         int snum;
 803         int n_services = lp_numservices();
 804         int pnum = lp_servicenumber(PRINTERS_NAME);
 805         const char *pname;
 806
 807         pcap_cache_reload();
 808
 809         /* remove stale printers */
 810         for (snum = 0; snum < n_services; snum++) {
 811                 /* avoid removing PRINTERS_NAME or non-autoloaded printers */
 812                 if (snum == pnum || !(lp_snum_ok(snum) && lp_print_ok(snum) &&
 813                                       lp_autoloaded(snum)))
 814                         continue;
 815
 816                 pname = lp_printername(snum);
 817                 if (!pcap_printername_ok(pname)) {
 818                         DEBUG(3, ("removing stale printer %s\n", pname));
 819
 820                         if (is_printer_published(NULL, snum, NULL))
 821                                 nt_printer_publish(NULL, snum, SPOOL_DS_UNPUBLISH);
 822                         del_a_printer(pname);
 823                         lp_killservice(snum);
 824                 }
 825         }
 826
 827         load_printers();
 828 }
 829
 830 /****************************************************************************
 831  Reload the services file.
 832 **************************************************************************/
 833
 834 bool reload_services(bool test)
 835 {
 836         bool ret;
 837
 838         if (lp_loaded()) {
 839                 char *fname = lp_configfile();
 840                 if (file_exist(fname, NULL) &&
 841                     !strcsequal(fname, get_dyn_CONFIGFILE())) {
 842                         set_dyn_CONFIGFILE(fname);
 843                         test = False;
 844                 }
 845         }
 846
 847         reopen_logs();
 848
 849         if (test && !lp_file_list_changed())
 850                 return(True);
 851
 852         lp_killunused(conn_snum_used);
 853
 854         ret = lp_load(get_dyn_CONFIGFILE(), False, False, True, True);
 855
 856         reload_printers();
 857
 858         /* perhaps the config filename is now set */
 859         if (!test)
 860                 reload_services(True);
 861
 862         reopen_logs();
 863
 864         load_interfaces();
 865
 866         if (smbd_server_fd() != -1) {
 867                 set_socket_options(smbd_server_fd(),"SO_KEEPALIVE");
 868                 set_socket_options(smbd_server_fd(), lp_socket_options());
 869         }
 870
 871         mangle_reset_cache();
 872         reset_stat_cache();
 873
 874         /* this forces service parameters to be flushed */
 875         set_current_service(NULL,0,True);
 876
 877         return(ret);
 878 }
 879
 880 /****************************************************************************
 881  Exit the server.
 882 ****************************************************************************/
 883
 884 /* Reasons for shutting down a server process. */
 885 enum server_exit_reason { SERVER_EXIT_NORMAL, SERVER_EXIT_ABNORMAL };
 886
 887 static void exit_server_common(enum server_exit_reason how,
 888         const char *const reason) NORETURN_ATTRIBUTE;
 889
 890 static void exit_server_common(enum server_exit_reason how,
 891         const char *const reason)
 892 {
 893         static int firsttime=1;
 894         bool had_open_conn;
 895
 896         if (!firsttime)
 897                 exit(0);
 898         firsttime = 0;
 899
 900         change_to_root_user();
 901
 902         if (negprot_global_auth_context) {
 903                 (negprot_global_auth_context->free)(&negprot_global_auth_context);
 904         }
 905
 906         had_open_conn = conn_close_all();
 907
 908         invalidate_all_vuids();
 909
 910         /* 3 second timeout. */
 911         print_notify_send_messages(smbd_messaging_context(), 3);
 912
 913         /* delete our entry in the connections database. */
 914         yield_connection(NULL,"");
 915
 916         respond_to_all_remaining_local_messages();
 917
 918 #ifdef WITH_DFS
 919         if (dcelogin_atmost_once) {
 920                 dfs_unlogin();
 921         }
 922 #endif
 923
 924 #ifdef USE_DMAPI
 925         /* Destroy Samba DMAPI session only if we are master smbd process */
 926         if (am_parent) {
 927                 if (!dmapi_destroy_session()) {
 928                         DEBUG(0,("Unable to close Samba DMAPI session\n"));
 929                 }
 930         }
 931 #endif
 932
 933         locking_end();
 934         printing_end();
 935
 936         if (how != SERVER_EXIT_NORMAL) {
 937                 int oldlevel = DEBUGLEVEL;
 938
 939                 DEBUGLEVEL = 10;
 940
 941                 DEBUGSEP(0);
 942                 DEBUG(0,("Abnormal server exit: %s\n",
 943                         reason ? reason : "no explanation provided"));
 944                 DEBUGSEP(0);
 945
 946                 log_stack_trace();
 947
 948                 DEBUGLEVEL = oldlevel;
 949                 dump_core();
 950
 951         } else {
 952                 DEBUG(3,("Server exit (%s)\n",
 953                         (reason ? reason : "normal exit")));
 954         }
 955
 956         /* if we had any open SMB connections when we exited then we
 957            need to tell the parent smbd so that it can trigger a retry
 958            of any locks we may have been holding or open files we were
 959            blocking */
 960         if (had_open_conn) {
 961                 exit(1);
 962         } else {
 963                 exit(0);
 964         }
 965 }
 966
 967 void exit_server(const char *const explanation)
 968 {
 969         exit_server_common(SERVER_EXIT_ABNORMAL, explanation);
 970 }
 971
 972 void exit_server_cleanly(const char *const explanation)
 973 {
 974         exit_server_common(SERVER_EXIT_NORMAL, explanation);
 975 }
 976
 977 void exit_server_fault(void)
 978 {
 979         exit_server("critical server fault");
 980 }
 981
 982
 983 /****************************************************************************
 984 received when we should release a specific IP
 985 ****************************************************************************/
 986 static void release_ip(const char *ip, void *priv)
 987 {
 988         char addr[INET6_ADDRSTRLEN];
 989
 990         if (strcmp(client_socket_addr(get_client_fd(),addr,sizeof(addr)), ip) == 0) {
 991                 /* we can't afford to do a clean exit - that involves
 992                    database writes, which would potentially mean we
 993                    are still running after the failover has finished -
 994                    we have to get rid of this process ID straight
 995                    away */
 996                 DEBUG(0,("Got release IP message for our IP %s - exiting immediately\n",
 997                         ip));
 998                 /* note we must exit with non-zero status so the unclean handler gets
 999                    called in the parent, so that the brl database is tickled */
1000                 _exit(1);
1001         }
1002 }
1003
1004 static void msg_release_ip(struct messaging_context *msg_ctx, void *private_data,
1005                            uint32_t msg_type, struct server_id server_id, DATA_BLOB *data)
1006 {
1007         release_ip((char *)data->data, NULL);
1008 }
1009
1010 /****************************************************************************
1011  Initialise connect, service and file structs.
1012 ****************************************************************************/
1013
1014 static bool init_structs(void )
1015 {
1016         /*
1017          * Set the machine NETBIOS name if not already
1018          * set from the config file.
1019          */
1020
1021         if (!init_names())
1022                 return False;
1023
1024         conn_init();
1025
1026         file_init();
1027
1028         /* for RPC pipes */
1029         init_rpc_pipe_hnd();
1030
1031         init_dptrs();
1032
1033         if (!secrets_init())
1034                 return False;
1035
1036         return True;
1037 }
1038
1039 /*
1040  * Send keepalive packets to our client
1041  */
1042 static bool keepalive_fn(const struct timeval *now, void *private_data)
1043 {
1044         if (!send_keepalive(smbd_server_fd())) {
1045                 DEBUG( 2, ( "Keepalive failed - exiting.\n" ) );
1046                 return False;
1047         }
1048         return True;
1049 }
1050
1051 /*
1052  * Do the recurring check if we're idle
1053  */
1054 static bool deadtime_fn(const struct timeval *now, void *private_data)
1055 {
1056         if ((conn_num_open() == 0)
1057             || (conn_idle_all(now->tv_sec))) {
1058                 DEBUG( 2, ( "Closing idle connection\n" ) );
1059                 messaging_send(smbd_messaging_context(), procid_self(),
1060                                MSG_SHUTDOWN, &data_blob_null);
1061                 return False;
1062         }
1063
1064         return True;
1065 }
1066
1067
1068 /****************************************************************************
1069  main program.
1070 ****************************************************************************/
1071
1072 /* Declare prototype for build_options() to avoid having to run it through
1073    mkproto.h.  Mixing $(builddir) and $(srcdir) source files in the current
1074    prototype generation system is too complicated. */
1075
1076 extern void build_options(bool screen);
1077
1078  int main(int argc,const char *argv[])
1079 {
1080         /* shall I run as a daemon */
1081         static bool is_daemon = False;
1082         static bool interactive = False;
1083         static bool Fork = True;
1084         static bool no_process_group = False;
1085         static bool log_stdout = False;
1086         static char *ports = NULL;
1087         static char *profile_level = NULL;
1088         int opt;
1089         poptContext pc;
1090         bool print_build_options = False;
1091         enum {
1092                 OPT_DAEMON = 1000,
1093                 OPT_INTERACTIVE,
1094                 OPT_FORK,
1095                 OPT_NO_PROCESS_GROUP,
1096                 OPT_LOG_STDOUT
1097         };
1098         struct poptOption long_options[] = {
1099         POPT_AUTOHELP
1100         {"daemon", 'D', POPT_ARG_NONE, NULL, OPT_DAEMON, "Become a daemon (default)" },
1101         {"interactive", 'i', POPT_ARG_NONE, NULL, OPT_INTERACTIVE, "Run interactive (not a daemon)"},
1102         {"foreground", 'F', POPT_ARG_NONE, NULL, OPT_FORK, "Run daemon in foreground (for daemontools, etc.)" },
1103         {"no-process-group", '\0', POPT_ARG_NONE, NULL, OPT_NO_PROCESS_GROUP, "Don't create a new process group" },
1104         {"log-stdout", 'S', POPT_ARG_NONE, NULL, OPT_LOG_STDOUT, "Log to stdout" },
1105         {"build-options", 'b', POPT_ARG_NONE, NULL, 'b', "Print build options" },
1106         {"port", 'p', POPT_ARG_STRING, &ports, 0, "Listen on the specified ports"},
1107         {"profiling-level", 'P', POPT_ARG_STRING, &profile_level, 0, "Set profiling level","PROFILE_LEVEL"},
1108         POPT_COMMON_SAMBA
1109         POPT_COMMON_DYNCONFIG
1110         POPT_TABLEEND
1111         };
1112         TALLOC_CTX *frame = talloc_stackframe(); /* Setup tos. */
1113
1114         TimeInit();
1115
1116 #ifdef HAVE_SET_AUTH_PARAMETERS
1117         set_auth_parameters(argc,argv);
1118 #endif
1119
1120         pc = poptGetContext("smbd", argc, argv, long_options, 0);
1121         while((opt = poptGetNextOpt(pc)) != -1) {
1122                 switch (opt)  {
1123                 case OPT_DAEMON:
1124                         is_daemon = true;
1125                         break;
1126                 case OPT_INTERACTIVE:
1127                         interactive = true;
1128                         break;
1129                 case OPT_FORK:
1130                         Fork = false;
1131                         break;
1132                 case OPT_NO_PROCESS_GROUP:
1133                         no_process_group = true;
1134                         break;
1135                 case OPT_LOG_STDOUT:
1136                         log_stdout = true;
1137                         break;
1138                 case 'b':
1139                         print_build_options = True;
1140                         break;
1141                 default:
1142                         d_fprintf(stderr, "\nInvalid option %s: %s\n\n",
1143                                   poptBadOption(pc, 0), poptStrerror(opt));
1144                         poptPrintUsage(pc, stderr, 0);
1145                         exit(1);
1146                 }
1147         }
1148         poptFreeContext(pc);
1149
1150         if (interactive) {
1151                 Fork = False;
1152                 log_stdout = True;
1153         }
1154
1155         setup_logging(argv[0],log_stdout);
1156
1157         if (print_build_options) {
1158                 build_options(True); /* Display output to screen as well as debug */
1159                 exit(0);
1160         }
1161
1162         load_case_tables();
1163
1164 #ifdef HAVE_SETLUID
1165         /* needed for SecureWare on SCO */
1166         setluid(0);
1167 #endif
1168
1169         sec_init();
1170
1171         set_remote_machine_name("smbd", False);
1172
1173         if (interactive && (DEBUGLEVEL >= 9)) {
1174                 talloc_enable_leak_report();
1175         }
1176
1177         if (log_stdout && Fork) {
1178                 DEBUG(0,("ERROR: Can't log to stdout (-S) unless daemon is in foreground (-F) or interactive (-i)\n"));
1179                 exit(1);
1180         }
1181
1182         /* we want to re-seed early to prevent time delays causing
1183            client problems at a later date. (tridge) */
1184         generate_random_buffer(NULL, 0);
1185
1186         /* make absolutely sure we run as root - to handle cases where people
1187            are crazy enough to have it setuid */
1188
1189         gain_root_privilege();
1190         gain_root_group_privilege();
1191
1192         fault_setup((void (*)(void *))exit_server_fault);
1193         dump_core_setup("smbd");
1194
1195         CatchSignal(SIGTERM , SIGNAL_CAST sig_term);
1196         CatchSignal(SIGHUP,SIGNAL_CAST sig_hup);
1197
1198         /* we are never interested in SIGPIPE */
1199         BlockSignals(True,SIGPIPE);
1200
1201 #if defined(SIGFPE)
1202         /* we are never interested in SIGFPE */
1203         BlockSignals(True,SIGFPE);
1204 #endif
1205
1206 #if defined(SIGUSR2)
1207         /* We are no longer interested in USR2 */
1208         BlockSignals(True,SIGUSR2);
1209 #endif
1210
1211         /* POSIX demands that signals are inherited. If the invoking process has
1212          * these signals masked, we will have problems, as we won't recieve them. */
1213         BlockSignals(False, SIGHUP);
1214         BlockSignals(False, SIGUSR1);
1215         BlockSignals(False, SIGTERM);
1216
1217         /* we want total control over the permissions on created files,
1218            so set our umask to 0 */
1219         umask(0);
1220
1221         init_sec_ctx();
1222
1223         reopen_logs();
1224
1225         DEBUG(0,("smbd version %s started.\n", SAMBA_VERSION_STRING));
1226         DEBUGADD(0,("%s\n", COPYRIGHT_STARTUP_MESSAGE));
1227
1228         DEBUG(2,("uid=%d gid=%d euid=%d egid=%d\n",
1229                  (int)getuid(),(int)getgid(),(int)geteuid(),(int)getegid()));
1230
1231         /* Output the build options to the debug log */
1232         build_options(False);
1233
1234         if (sizeof(uint16) < 2 || sizeof(uint32) < 4) {
1235                 DEBUG(0,("ERROR: Samba is not configured correctly for the word size on your machine\n"));
1236                 exit(1);
1237         }
1238
1239         if (!lp_load_initial_only(get_dyn_CONFIGFILE())) {
1240                 DEBUG(0, ("error opening config file\n"));
1241                 exit(1);
1242         }
1243
1244         if (smbd_messaging_context() == NULL)
1245                 exit(1);
1246
1247         if (!reload_services(False))
1248                 return(-1);
1249
1250         init_structs();
1251
1252 #ifdef WITH_PROFILE
1253         if (!profile_setup(smbd_messaging_context(), False)) {
1254                 DEBUG(0,("ERROR: failed to setup profiling\n"));
1255                 return -1;
1256         }
1257         if (profile_level != NULL) {
1258                 int pl = atoi(profile_level);
1259                 struct server_id src;
1260
1261                 DEBUG(1, ("setting profiling level: %s\n",profile_level));
1262                 src.pid = getpid();
1263                 set_profile_level(pl, src);
1264         }
1265 #endif
1266
1267         DEBUG(3,( "loaded services\n"));
1268
1269         if (!is_daemon && !is_a_socket(0)) {
1270                 if (!interactive)
1271                         DEBUG(0,("standard input is not a socket, assuming -D option\n"));
1272
1273                 /*
1274                  * Setting is_daemon here prevents us from eventually calling
1275                  * the open_sockets_inetd()
1276                  */
1277
1278                 is_daemon = True;
1279         }
1280
1281         if (is_daemon && !interactive) {
1282                 DEBUG( 3, ( "Becoming a daemon.\n" ) );
1283                 become_daemon(Fork, no_process_group);
1284         }
1285
1286 #if HAVE_SETPGID
1287         /*
1288          * If we're interactive we want to set our own process group for
1289          * signal management.
1290          */
1291         if (interactive && !no_process_group)
1292                 setpgid( (pid_t)0, (pid_t)0);
1293 #endif
1294
1295         if (!directory_exist(lp_lockdir(), NULL))
1296                 mkdir(lp_lockdir(), 0755);
1297
1298         if (is_daemon)
1299                 pidfile_create("smbd");
1300
1301         if (!reinit_after_fork(smbd_messaging_context(), false)) {
1302                 DEBUG(0,("reinit_after_fork() failed\n"));
1303                 exit(1);
1304         }
1305
1306         /* Setup all the TDB's - including CLEAR_IF_FIRST tdb's. */
1307
1308         if (smbd_memcache() == NULL) {
1309                 exit(1);
1310         }
1311
1312         memcache_set_global(smbd_memcache());
1313
1314         /* Initialise the password backed before the global_sam_sid
1315            to ensure that we fetch from ldap before we make a domain sid up */
1316
1317         if(!initialize_password_db(False, smbd_event_context()))
1318                 exit(1);
1319
1320         if (!secrets_init()) {
1321                 DEBUG(0, ("ERROR: smbd can not open secrets.tdb\n"));
1322                 exit(1);
1323         }
1324
1325         if(!get_global_sam_sid()) {
1326                 DEBUG(0,("ERROR: Samba cannot create a SAM SID.\n"));
1327                 exit(1);
1328         }
1329
1330         if (!session_init())
1331                 exit(1);
1332
1333         if (!connections_init(True))
1334                 exit(1);
1335
1336         if (!locking_init())
1337                 exit(1);
1338
1339         namecache_enable();
1340
1341         if (!W_ERROR_IS_OK(registry_init_full()))
1342                 exit(1);
1343
1344 #if 0
1345         if (!init_svcctl_db())
1346                 exit(1);
1347 #endif
1348
1349         if (!print_backend_init(smbd_messaging_context()))
1350                 exit(1);
1351
1352         if (!init_guest_info()) {
1353                 DEBUG(0,("ERROR: failed to setup guest info.\n"));
1354                 return -1;
1355         }
1356
1357         /* only start the background queue daemon if we are
1358            running as a daemon -- bad things will happen if
1359            smbd is launched via inetd and we fork a copy of
1360            ourselves here */
1361
1362         if (is_daemon && !interactive
1363             && lp_parm_bool(-1, "smbd", "backgroundqueue", true)) {
1364                 start_background_queue();
1365         }
1366
1367         if (!open_sockets_smbd(is_daemon, interactive, ports))
1368                 exit(1);
1369
1370         /*
1371          * everything after this point is run after the fork()
1372          */
1373
1374         static_init_rpc;
1375
1376         init_modules();
1377
1378         /* Possibly reload the services file. Only worth doing in
1379          * daemon mode. In inetd mode, we know we only just loaded this.
1380          */
1381         if (is_daemon) {
1382                 reload_services(True);
1383         }
1384
1385         if (!init_account_policy()) {
1386                 DEBUG(0,("Could not open account policy tdb.\n"));
1387                 exit(1);
1388         }
1389
1390         if (*lp_rootdir()) {
1391                 if (sys_chroot(lp_rootdir()) == 0)
1392                         DEBUG(2,("Changed root to %s\n", lp_rootdir()));
1393         }
1394
1395         /* Setup oplocks */
1396         if (!init_oplocks(smbd_messaging_context()))
1397                 exit(1);
1398
1399         /* Setup aio signal handler. */
1400         initialize_async_io_handler();
1401
1402         /* register our message handlers */
1403         messaging_register(smbd_messaging_context(), NULL,
1404                            MSG_SMB_FORCE_TDIS, msg_force_tdis);
1405         messaging_register(smbd_messaging_context(), NULL,
1406                            MSG_SMB_RELEASE_IP, msg_release_ip);
1407         messaging_register(smbd_messaging_context(), NULL,
1408                            MSG_SMB_CLOSE_FILE, msg_close_file);
1409
1410         if ((lp_keepalive() != 0)
1411             && !(event_add_idle(smbd_event_context(), NULL,
1412                                 timeval_set(lp_keepalive(), 0),
1413                                 "keepalive", keepalive_fn,
1414                                 NULL))) {
1415                 DEBUG(0, ("Could not add keepalive event\n"));
1416                 exit(1);
1417         }
1418
1419         if (!(event_add_idle(smbd_event_context(), NULL,
1420                              timeval_set(IDLE_CLOSED_TIMEOUT, 0),
1421                              "deadtime", deadtime_fn, NULL))) {
1422                 DEBUG(0, ("Could not add deadtime event\n"));
1423                 exit(1);
1424         }
1425
1426 #ifdef CLUSTER_SUPPORT
1427
1428         if (lp_clustering()) {
1429                 /*
1430                  * We need to tell ctdb about our client's TCP
1431                  * connection, so that for failover ctdbd can send
1432                  * tickle acks, triggering a reconnection by the
1433                  * client.
1434                  */
1435
1436                 struct sockaddr_in srv, clnt;
1437
1438                 if (client_get_tcp_info(&srv, &clnt) == 0) {
1439
1440                         NTSTATUS status;
1441
1442                         status = ctdbd_register_ips(
1443                                 messaging_ctdbd_connection(),
1444                                 &srv, &clnt, release_ip, NULL);
1445
1446                         if (!NT_STATUS_IS_OK(status)) {
1447                                 DEBUG(0, ("ctdbd_register_ips failed: %s\n",
1448                                           nt_errstr(status)));
1449                         }
1450                 } else
1451                 {
1452                         DEBUG(0,("Unable to get tcp info for "
1453                                  "CTDB_CONTROL_TCP_CLIENT: %s\n",
1454                                  strerror(errno)));
1455                 }
1456         }
1457
1458 #endif
1459
1460         TALLOC_FREE(frame);
1461
1462         smbd_process();
1463
1464         namecache_shutdown();
1465
1466         exit_server_cleanly(NULL);
1467         return(0);
1468 }