param: Add startup checks for valid server role/binary combinations
[ambi/samba-autobuild/.git] / source4 / smbd / server.c
index 149421532f2f4fd2bc9d7b9fd6968c017155816a..b3d8ae5f5da0681c822f932d26ace1960dcf98a5 100644 (file)
 #include "ntvfs/ntvfs.h"
 #include "ntptr/ntptr.h"
 #include "auth/gensec/gensec.h"
+#include "libcli/auth/schannel.h"
 #include "smbd/process_model.h"
 #include "param/secrets.h"
-#include "smbd/pidfile.h"
+#include "lib/util/pidfile.h"
 #include "param/param.h"
 #include "dsdb/samdb/samdb.h"
 #include "auth/session.h"
@@ -41,6 +42,7 @@
 #include "librpc/gen_ndr/ndr_irpc.h"
 #include "cluster/cluster.h"
 #include "dynconfig/dynconfig.h"
+#include "lib/util/samba_modules.h"
 
 /*
   recursively delete a directory tree
@@ -116,7 +118,7 @@ static void sig_term(int sig)
        }
 #endif
        DEBUG(0,("Exiting pid %d on SIGTERM\n", (int)getpid()));
-       exit(0);
+       exit(127);
 }
 
 /*
@@ -177,7 +179,8 @@ _NORETURN_ static void max_runtime_handler(struct tevent_context *ev,
                                           struct timeval t, void *private_data)
 {
        const char *binary_name = (const char *)private_data;
-       DEBUG(0,("%s: maximum runtime exceeded - terminating\n", binary_name));
+       DEBUG(0,("%s: maximum runtime exceeded - terminating at %llu, current ts: %llu\n",
+                binary_name, (unsigned long long)t.tv_sec, (unsigned long long) time(NULL)));
        exit(0);
 }
 
@@ -190,8 +193,8 @@ static void prime_ldb_databases(struct tevent_context *event_ctx)
        TALLOC_CTX *db_context;
        db_context = talloc_new(event_ctx);
 
-       samdb_connect(db_context, event_ctx, cmdline_lp_ctx, system_session(cmdline_lp_ctx));
-       privilege_connect(db_context, event_ctx, cmdline_lp_ctx);
+       samdb_connect(db_context, event_ctx, cmdline_lp_ctx, system_session(cmdline_lp_ctx), 0);
+       privilege_connect(db_context, cmdline_lp_ctx);
 
        /* we deliberately leave these open, which allows them to be
         * re-used in ldb_wrap_connect() */
@@ -214,17 +217,18 @@ static NTSTATUS samba_terminate(struct irpc_message *msg,
 static NTSTATUS setup_parent_messaging(struct tevent_context *event_ctx, 
                                       struct loadparm_context *lp_ctx)
 {
-       struct messaging_context *msg;
+       struct imessaging_context *msg;
        NTSTATUS status;
 
-       msg = messaging_init(talloc_autofree_context(), 
-                            lp_messaging_path(event_ctx, lp_ctx),
-                            cluster_id(0, SAMBA_PARENT_TASKID),
-                            lp_iconv_convenience(lp_ctx),
-                            event_ctx);
+       msg = imessaging_init(talloc_autofree_context(),
+                             lp_ctx,
+                             cluster_id(0, SAMBA_PARENT_TASKID), event_ctx, false);
        NT_STATUS_HAVE_NO_MEMORY(msg);
 
-       irpc_add_name(msg, "samba");
+       status = irpc_add_name(msg, "samba");
+       if (!NT_STATUS_IS_OK(status)) {
+               return status;
+       }
 
        status = IRPC_REGISTER(msg, irpc, SAMBA_TERMINATE,
                               samba_terminate, NULL);
@@ -252,9 +256,12 @@ static void show_build(void)
                CONFIG_OPTION(DATADIR),
                CONFIG_OPTION(MODULESDIR),
                CONFIG_OPTION(LOCKDIR),
+               CONFIG_OPTION(STATEDIR),
+               CONFIG_OPTION(CACHEDIR),
                CONFIG_OPTION(PIDDIR),
                CONFIG_OPTION(PRIVATE_DIR),
                CONFIG_OPTION(SWATDIR),
+               CONFIG_OPTION(CODEPAGEDIR),
                CONFIG_OPTION(SETUPDIR),
                CONFIG_OPTION(WINBINDD_SOCKET_DIR),
                CONFIG_OPTION(WINBINDD_PRIVILEGED_SOCKET_DIR),
@@ -263,6 +270,7 @@ static void show_build(void)
        };
        int i;
 
+       printf("Samba version: %s\n", SAMBA_VERSION_STRING);
        printf("Build environment:\n");
 #ifdef BUILD_SYSTEM
        printf("   Build host:  %s\n", BUILD_SYSTEM);
@@ -285,22 +293,8 @@ static int binary_smbd_main(const char *binary_name, int argc, const char *argv[
        bool opt_interactive = false;
        int opt;
        poptContext pc;
-       extern NTSTATUS server_service_wrepl_init(void);
-       extern NTSTATUS server_service_kdc_init(void);
-       extern NTSTATUS server_service_ldap_init(void);
-       extern NTSTATUS server_service_web_init(void);
-       extern NTSTATUS server_service_ldap_init(void);
-       extern NTSTATUS server_service_winbind_init(void);
-       extern NTSTATUS server_service_nbtd_init(void);
-       extern NTSTATUS server_service_auth_init(void);
-       extern NTSTATUS server_service_cldapd_init(void);
-       extern NTSTATUS server_service_smb_init(void);
-       extern NTSTATUS server_service_drepl_init(void);
-       extern NTSTATUS server_service_kcc_init(void);
-       extern NTSTATUS server_service_dnsupdate_init(void);
-       extern NTSTATUS server_service_rpc_init(void);
-       extern NTSTATUS server_service_ntp_signd_init(void);
-       extern NTSTATUS server_service_samba3_smb_init(void);
+#define _MODULE_PROTO(init) extern NTSTATUS init(void);
+       STATIC_service_MODULES_PROTO;
        init_module_fn static_init[] = { STATIC_service_MODULES };
        init_module_fn *shared_init;
        struct tevent_context *event_ctx;
@@ -373,7 +367,7 @@ static int binary_smbd_main(const char *binary_name, int argc, const char *argv[
        umask(0);
 
        DEBUG(0,("%s version %s started.\n", binary_name, SAMBA_VERSION_STRING));
-       DEBUGADD(0,("Copyright Andrew Tridgell and the Samba Team 1992-2010\n"));
+       DEBUGADD(0,("Copyright Andrew Tridgell and the Samba Team 1992-2012\n"));
 
        if (sizeof(uint16_t) < 2 || sizeof(uint32_t) < 4 || sizeof(uint64_t) < 8) {
                DEBUG(0,("ERROR: Samba is not configured correctly for the word size on your machine\n"));
@@ -389,22 +383,28 @@ static int binary_smbd_main(const char *binary_name, int argc, const char *argv[
 
        cleanup_tmp_files(cmdline_lp_ctx);
 
-       if (!directory_exist(lp_lockdir(cmdline_lp_ctx))) {
-               mkdir(lp_lockdir(cmdline_lp_ctx), 0755);
+       if (!directory_exist(lpcfg_lockdir(cmdline_lp_ctx))) {
+               mkdir(lpcfg_lockdir(cmdline_lp_ctx), 0755);
        }
 
-       pidfile_create(lp_piddir(cmdline_lp_ctx), binary_name);
+       pidfile_create(lpcfg_piddir(cmdline_lp_ctx), binary_name);
 
-       /* Do *not* remove this, until you have removed
-        * passdb/secrets.c, and proved that Samba still builds... */
-       /* Setup the SECRETS subsystem */
-       if (secrets_init(talloc_autofree_context(), cmdline_lp_ctx) == NULL) {
+       /* Set up a database to hold a random seed, in case we don't
+        * have /dev/urandom */
+       if (!randseed_init(talloc_autofree_context(), cmdline_lp_ctx)) {
                return 1;
        }
 
-       gensec_init(cmdline_lp_ctx); /* FIXME: */
+       if (lpcfg_server_role(cmdline_lp_ctx) == ROLE_ACTIVE_DIRECTORY_DC) {
+               if (!open_schannel_session_store(talloc_autofree_context(), cmdline_lp_ctx)) {
+                       DEBUG(0,("ERROR: Samba cannot open schannel store for secured NETLOGON operations.\n"));
+                       exit(1);
+               }
+       }
 
-       ntptr_init(cmdline_lp_ctx);     /* FIXME: maybe run this in the initialization function 
+       gensec_init(); /* FIXME: */
+
+       ntptr_init();   /* FIXME: maybe run this in the initialization function 
                                                of the spoolss RPC server instead? */
 
        ntvfs_init(cmdline_lp_ctx);     /* FIXME: maybe run this in the initialization functions 
@@ -412,7 +412,7 @@ static int binary_smbd_main(const char *binary_name, int argc, const char *argv[
 
        process_model_init(cmdline_lp_ctx); 
 
-       shared_init = load_samba_modules(NULL, cmdline_lp_ctx, "service");
+       shared_init = load_samba_modules(NULL, "service");
 
        run_init_functions(static_init);
        run_init_functions(shared_init);
@@ -423,9 +423,6 @@ static int binary_smbd_main(const char *binary_name, int argc, const char *argv[
           should hang off that */
        event_ctx = s4_event_context_init(talloc_autofree_context());
 
-       /* setup this as the default context */
-       s4_event_context_set_default(event_ctx);
-
        if (event_ctx == NULL) {
                DEBUG(0,("Initializing event context failed\n"));
                return 1;
@@ -448,12 +445,25 @@ static int binary_smbd_main(const char *binary_name, int argc, const char *argv[
                      discard_const(binary_name));
 
        if (max_runtime) {
+               DEBUG(0,("Called with maxruntime %d - current ts %llu\n",
+                     max_runtime, (unsigned long long) time(NULL)));
                tevent_add_timer(event_ctx, event_ctx,
                                 timeval_current_ofs(max_runtime, 0),
                                 max_runtime_handler,
                                 discard_const(binary_name));
        }
 
+       if (lpcfg_server_role(cmdline_lp_ctx) != ROLE_ACTIVE_DIRECTORY_DC
+           && !lpcfg_parm_bool(cmdline_lp_ctx, NULL, "server role check", "inhibit", false)
+           && !str_list_check_ci(lpcfg_server_services(cmdline_lp_ctx), "smb") 
+           && !str_list_check_ci(lpcfg_dcerpc_endpoint_servers(cmdline_lp_ctx), "remote")
+           && !str_list_check_ci(lpcfg_dcerpc_endpoint_servers(cmdline_lp_ctx), "mapiproxy")) {
+               DEBUG(0, ("At this time the 'samba' binary should only be used for either:\n"));
+               DEBUGADD(0, ("'server role = active directory domain controller' or to access the ntvfs file server with 'server services = +smb' or the rpc proxy with 'dcerpc endpoint servers = remote'\n"));
+               DEBUGADD(0, ("You should start smbd/nmbd/winbindd instead for domain member and standalone file server tasks\n"));
+               exit(1);
+       };
+
        prime_ldb_databases(event_ctx);
 
        status = setup_parent_messaging(event_ctx, cmdline_lp_ctx);
@@ -465,7 +475,7 @@ static int binary_smbd_main(const char *binary_name, int argc, const char *argv[
        DEBUG(0,("%s: using '%s' process model\n", binary_name, model));
 
        status = server_service_startup(event_ctx, cmdline_lp_ctx, model, 
-                                       lp_server_services(cmdline_lp_ctx));
+                                       lpcfg_server_services(cmdline_lp_ctx));
        if (!NT_STATUS_IS_OK(status)) {
                DEBUG(0,("Starting Services failed - %s\n", nt_errstr(status)));
                return 1;