s3-auth: Remove security=share (depricated since 3.6).
[ira/wip.git] / source3 / utils / status.c
1 /* 
2    Unix SMB/CIFS implementation.
3    status reporting
4    Copyright (C) Andrew Tridgell 1994-1998
5
6    This program is free software; you can redistribute it and/or modify
7    it under the terms of the GNU General Public License as published by
8    the Free Software Foundation; either version 3 of the License, or
9    (at your option) any later version.
10
11    This program is distributed in the hope that it will be useful,
12    but WITHOUT ANY WARRANTY; without even the implied warranty of
13    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
14    GNU General Public License for more details.
15
16    You should have received a copy of the GNU General Public License
17    along with this program.  If not, see <http://www.gnu.org/licenses/>.
18
19    Revision History:
20
21    12 aug 96: Erik.Devriendt@te6.siemens.be
22    added support for shared memory implementation of share mode locking
23
24    21-Jul-1998: rsharpe@ns.aus.com (Richard Sharpe)
25    Added -L (locks only) -S (shares only) flags and code
26
27 */
28
29 /*
30  * This program reports current SMB connections
31  */
32
33 #include "includes.h"
34 #include "system/filesys.h"
35 #include "popt_common.h"
36 #include "dbwrap/dbwrap.h"
37 #include "dbwrap/dbwrap_open.h"
38 #include "../libcli/security/security.h"
39 #include "session.h"
40 #include "locking/proto.h"
41 #include "messages.h"
42 #include "librpc/gen_ndr/open_files.h"
43
44 #define SMB_MAXPIDS             2048
45 static uid_t            Ucrit_uid = 0;               /* added by OH */
46 static struct server_id Ucrit_pid[SMB_MAXPIDS];  /* Ugly !!! */   /* added by OH */
47 static int              Ucrit_MaxPid=0;                    /* added by OH */
48 static unsigned int     Ucrit_IsActive = 0;                /* added by OH */
49
50 static bool verbose, brief;
51 static bool shares_only;            /* Added by RJS */
52 static bool locks_only;            /* Added by RJS */
53 static bool processes_only;
54 static bool show_brl;
55 static bool numeric_only;
56
57 const char *username = NULL;
58
59 extern bool status_profile_dump(bool be_verbose);
60 extern bool status_profile_rates(bool be_verbose);
61
62 /* added by OH */
63 static void Ucrit_addUid(uid_t uid)
64 {
65         Ucrit_uid = uid;
66         Ucrit_IsActive = 1;
67 }
68
69 static unsigned int Ucrit_checkUid(uid_t uid)
70 {
71         if ( !Ucrit_IsActive ) 
72                 return 1;
73
74         if ( uid == Ucrit_uid ) 
75                 return 1;
76
77         return 0;
78 }
79
80 static unsigned int Ucrit_checkPid(struct server_id pid)
81 {
82         int i;
83
84         if ( !Ucrit_IsActive ) 
85                 return 1;
86
87         for (i=0;i<Ucrit_MaxPid;i++) {
88                 if (cluster_id_equal(&pid, &Ucrit_pid[i])) 
89                         return 1;
90         }
91
92         return 0;
93 }
94
95 static bool Ucrit_addPid( struct server_id pid )
96 {
97         if ( !Ucrit_IsActive )
98                 return True;
99
100         if ( Ucrit_MaxPid >= SMB_MAXPIDS ) {
101                 d_printf("ERROR: More than %d pids for user %s!\n",
102                          SMB_MAXPIDS, uidtoname(Ucrit_uid));
103
104                 return False;
105         }
106
107         Ucrit_pid[Ucrit_MaxPid++] = pid;
108
109         return True;
110 }
111
112 static void print_share_mode(const struct share_mode_entry *e,
113                              const char *sharepath,
114                              const char *fname,
115                              void *dummy)
116 {
117         static int count;
118
119         if (!is_valid_share_mode_entry(e)) {
120                 return;
121         }
122
123         if (!process_exists(e->pid)) {
124                 return;
125         }
126
127         if (count==0) {
128                 d_printf("Locked files:\n");
129                 d_printf("Pid          Uid        DenyMode   Access      R/W        Oplock           SharePath   Name   Time\n");
130                 d_printf("--------------------------------------------------------------------------------------------------\n");
131         }
132         count++;
133
134         if (Ucrit_checkPid(e->pid)) {
135                 d_printf("%-11s  ",procid_str_static(&e->pid));
136                 d_printf("%-9u  ", (unsigned int)e->uid);
137                 switch (map_share_mode_to_deny_mode(e->share_access,
138                                                     e->private_options)) {
139                         case DENY_NONE: d_printf("DENY_NONE  "); break;
140                         case DENY_ALL:  d_printf("DENY_ALL   "); break;
141                         case DENY_DOS:  d_printf("DENY_DOS   "); break;
142                         case DENY_READ: d_printf("DENY_READ  "); break;
143                         case DENY_WRITE:printf("DENY_WRITE "); break;
144                         case DENY_FCB:  d_printf("DENY_FCB "); break;
145                         default: {
146                                 d_printf("unknown-please report ! "
147                                          "e->share_access = 0x%x, "
148                                          "e->private_options = 0x%x\n",
149                                          (unsigned int)e->share_access,
150                                          (unsigned int)e->private_options );
151                                 break;
152                         }
153                 }
154                 d_printf("0x%-8x  ",(unsigned int)e->access_mask);
155                 if ((e->access_mask & (FILE_READ_DATA|FILE_WRITE_DATA))==
156                                 (FILE_READ_DATA|FILE_WRITE_DATA)) {
157                         d_printf("RDWR       ");
158                 } else if (e->access_mask & FILE_WRITE_DATA) {
159                         d_printf("WRONLY     ");
160                 } else {
161                         d_printf("RDONLY     ");
162                 }
163
164                 if((e->op_type & (EXCLUSIVE_OPLOCK|BATCH_OPLOCK)) == 
165                                         (EXCLUSIVE_OPLOCK|BATCH_OPLOCK)) {
166                         d_printf("EXCLUSIVE+BATCH ");
167                 } else if (e->op_type & EXCLUSIVE_OPLOCK) {
168                         d_printf("EXCLUSIVE       ");
169                 } else if (e->op_type & BATCH_OPLOCK) {
170                         d_printf("BATCH           ");
171                 } else if (e->op_type & LEVEL_II_OPLOCK) {
172                         d_printf("LEVEL_II        ");
173                 } else {
174                         d_printf("NONE            ");
175                 }
176
177                 d_printf(" %s   %s   %s",sharepath, fname, time_to_asc((time_t)e->time.tv_sec));
178         }
179 }
180
181 static void print_brl(struct file_id id,
182                         struct server_id pid, 
183                         enum brl_type lock_type,
184                         enum brl_flavour lock_flav,
185                         br_off start,
186                         br_off size,
187                         void *private_data)
188 {
189         static int count;
190         int i;
191         static const struct {
192                 enum brl_type lock_type;
193                 const char *desc;
194         } lock_types[] = {
195                 { READ_LOCK, "R" },
196                 { WRITE_LOCK, "W" },
197                 { PENDING_READ_LOCK, "PR" },
198                 { PENDING_WRITE_LOCK, "PW" },
199                 { UNLOCK_LOCK, "U" }
200         };
201         const char *desc="X";
202         const char *sharepath = "";
203         char *fname = NULL;
204         struct share_mode_lock *share_mode;
205
206         if (count==0) {
207                 d_printf("Byte range locks:\n");
208                 d_printf("Pid        dev:inode       R/W  start     size      SharePath               Name\n");
209                 d_printf("--------------------------------------------------------------------------------\n");
210         }
211         count++;
212
213         share_mode = fetch_share_mode_unlocked(NULL, id);
214         if (share_mode) {
215                 bool has_stream = share_mode->data->stream_name != NULL;
216
217                 fname = talloc_asprintf(NULL, "%s%s%s",
218                                         share_mode->data->base_name,
219                                         has_stream ? ":" : "",
220                                         has_stream ?
221                                         share_mode->data->stream_name :
222                                         "");
223         } else {
224                 fname = talloc_strdup(NULL, "");
225                 if (fname == NULL) {
226                         return;
227                 }
228         }
229
230         for (i=0;i<ARRAY_SIZE(lock_types);i++) {
231                 if (lock_type == lock_types[i].lock_type) {
232                         desc = lock_types[i].desc;
233                 }
234         }
235
236         d_printf("%-10s %-15s %-4s %-9.0f %-9.0f %-24s %-24s\n", 
237                  procid_str_static(&pid), file_id_string_tos(&id),
238                  desc,
239                  (double)start, (double)size,
240                  sharepath, fname);
241
242         TALLOC_FREE(fname);
243         TALLOC_FREE(share_mode);
244 }
245
246 static int traverse_fn1(const struct connections_key *key,
247                         const struct connections_data *crec,
248                         void *state)
249 {
250         if (crec->cnum == -1)
251                 return 0;
252
253         if (!process_exists(crec->pid) || !Ucrit_checkUid(crec->uid)) {
254                 return 0;
255         }
256
257         d_printf("%-10s   %s   %-12s  %s",
258                  crec->servicename,procid_str_static(&crec->pid),
259                  crec->machine,
260                  time_to_asc(crec->start));
261
262         return 0;
263 }
264
265 static int traverse_sessionid(const char *key, struct sessionid *session,
266                               void *private_data)
267 {
268         fstring uid_str, gid_str;
269
270         if (!process_exists(session->pid)
271             || !Ucrit_checkUid(session->uid)) {
272                 return 0;
273         }
274
275         Ucrit_addPid(session->pid);
276
277         fstr_sprintf(uid_str, "%u", (unsigned int)session->uid);
278         fstr_sprintf(gid_str, "%u", (unsigned int)session->gid);
279
280         d_printf("%-7s   %-12s  %-12s  %-12s (%s)\n",
281                  procid_str_static(&session->pid),
282                  numeric_only ? uid_str : uidtoname(session->uid),
283                  numeric_only ? gid_str : gidtoname(session->gid),
284                  session->remote_machine, session->hostname);
285
286         return 0;
287 }
288
289
290
291
292  int main(int argc, char *argv[])
293 {
294         int c;
295         int profile_only = 0;
296         bool show_processes, show_locks, show_shares;
297         poptContext pc;
298         struct poptOption long_options[] = {
299                 POPT_AUTOHELP
300                 {"processes",   'p', POPT_ARG_NONE,     NULL, 'p', "Show processes only" },
301                 {"verbose",     'v', POPT_ARG_NONE,     NULL, 'v', "Be verbose" },
302                 {"locks",       'L', POPT_ARG_NONE,     NULL, 'L', "Show locks only" },
303                 {"shares",      'S', POPT_ARG_NONE,     NULL, 'S', "Show shares only" },
304                 {"user",        'u', POPT_ARG_STRING,   &username, 'u', "Switch to user" },
305                 {"brief",       'b', POPT_ARG_NONE,     NULL, 'b', "Be brief" },
306                 {"profile",     'P', POPT_ARG_NONE, NULL, 'P', "Do profiling" },
307                 {"profile-rates", 'R', POPT_ARG_NONE, NULL, 'R', "Show call rates" },
308                 {"byterange",   'B', POPT_ARG_NONE,     NULL, 'B', "Include byte range locks"},
309                 {"numeric",     'n', POPT_ARG_NONE,     NULL, 'n', "Numeric uid/gid"},
310                 POPT_COMMON_SAMBA
311                 POPT_TABLEEND
312         };
313         TALLOC_CTX *frame = talloc_stackframe();
314         int ret = 0;
315         struct messaging_context *msg_ctx;
316
317         sec_init();
318         load_case_tables();
319
320         setup_logging(argv[0], DEBUG_STDERR);
321
322         if (getuid() != geteuid()) {
323                 d_printf("smbstatus should not be run setuid\n");
324                 ret = 1;
325                 goto done;
326         }
327
328         pc = poptGetContext(NULL, argc, (const char **) argv, long_options, 
329                             POPT_CONTEXT_KEEP_FIRST);
330
331         while ((c = poptGetNextOpt(pc)) != -1) {
332                 switch (c) {
333                 case 'p':
334                         processes_only = true;
335                         break;
336                 case 'v':
337                         verbose = true;
338                         break;
339                 case 'L':
340                         locks_only = true;
341                         break;
342                 case 'S':
343                         shares_only = true;
344                         break;
345                 case 'b':
346                         brief = true;
347                         break;
348                 case 'u':
349                         Ucrit_addUid(nametouid(poptGetOptArg(pc)));
350                         break;
351                 case 'P':
352                 case 'R':
353                         profile_only = c;
354                         break;
355                 case 'B':
356                         show_brl = true;
357                         break;
358                 case 'n':
359                         numeric_only = true;
360                         break;
361                 }
362         }
363
364         /* setup the flags based on the possible combincations */
365
366         show_processes = !(shares_only || locks_only || profile_only) || processes_only;
367         show_locks     = !(shares_only || processes_only || profile_only) || locks_only;
368         show_shares    = !(processes_only || locks_only || profile_only) || shares_only;
369
370         if ( username )
371                 Ucrit_addUid( nametouid(username) );
372
373         if (verbose) {
374                 d_printf("using configfile = %s\n", get_dyn_CONFIGFILE());
375         }
376
377         if (!lp_load_initial_only(get_dyn_CONFIGFILE())) {
378                 fprintf(stderr, "Can't load %s - run testparm to debug it\n",
379                         get_dyn_CONFIGFILE());
380                 ret = -1;
381                 goto done;
382         }
383
384
385         if (lp_clustering()) {
386                 /*
387                  * This implicitly initializes the global ctdbd
388                  * connection, usable by the db_open() calls further
389                  * down.
390                  */
391                 msg_ctx = messaging_init(NULL, event_context_init(NULL));
392                 if (msg_ctx == NULL) {
393                         fprintf(stderr, "messaging_init failed\n");
394                         ret = -1;
395                         goto done;
396                 }
397         }
398
399         if (!lp_load_global(get_dyn_CONFIGFILE())) {
400                 fprintf(stderr, "Can't load %s - run testparm to debug it\n",
401                         get_dyn_CONFIGFILE());
402                 ret = -1;
403                 goto done;
404         }
405
406         switch (profile_only) {
407                 case 'P':
408                         /* Dump profile data */
409                         return status_profile_dump(verbose);
410                 case 'R':
411                         /* Continuously display rate-converted data */
412                         return status_profile_rates(verbose);
413                 default:
414                         break;
415         }
416
417         if ( show_processes ) {
418                 d_printf("\nSamba version %s\n",samba_version_string());
419                 d_printf("PID     Username      Group         Machine                        \n");
420                 d_printf("-------------------------------------------------------------------\n");
421
422                 sessionid_traverse_read(traverse_sessionid, NULL);
423
424                 if (processes_only) {
425                         goto done;
426                 }
427         }
428
429         if ( show_shares ) {
430                 if (verbose) {
431                         d_printf("Opened %s\n", lock_path("connections.tdb"));
432                 }
433
434                 if (brief) {
435                         goto done;
436                 }
437
438                 d_printf("\nService      pid     machine       Connected at\n");
439                 d_printf("-------------------------------------------------------\n");
440
441                 connections_forall_read(traverse_fn1, NULL);
442
443                 d_printf("\n");
444
445                 if ( shares_only ) {
446                         goto done;
447                 }
448         }
449
450         if ( show_locks ) {
451                 int result;
452                 struct db_context *db;
453                 db = db_open(NULL, lock_path("locking.tdb"), 0,
454                              TDB_CLEAR_IF_FIRST|TDB_INCOMPATIBLE_HASH, O_RDONLY, 0,
455                              DBWRAP_LOCK_ORDER_1);
456
457                 if (!db) {
458                         d_printf("%s not initialised\n",
459                                  lock_path("locking.tdb"));
460                         d_printf("This is normal if an SMB client has never "
461                                  "connected to your server.\n");
462                         exit(0);
463                 } else {
464                         TALLOC_FREE(db);
465                 }
466
467                 if (!locking_init_readonly()) {
468                         d_printf("Can't initialise locking module - exiting\n");
469                         ret = 1;
470                         goto done;
471                 }
472
473                 result = share_mode_forall(print_share_mode, NULL);
474
475                 if (result == 0) {
476                         d_printf("No locked files\n");
477                 } else if (result < 0) {
478                         d_printf("locked file list truncated\n");
479                 }
480
481                 d_printf("\n");
482
483                 if (show_brl) {
484                         brl_forall(print_brl, NULL);
485                 }
486
487                 locking_end();
488         }
489
490 done:
491         TALLOC_FREE(frame);
492         return ret;
493 }