r15053: fix portabilities issues between 32-bit winbind clients and a 64-bit winbindd...
[tprouty/samba.git] / source / nsswitch / winbindd_dual.c
index a7523138ea16c4f11ced19c1b5f39f6816908081..d978a6adf79deedc9f04adfe15d8501badd3f9a6 100644 (file)
@@ -1,9 +1,10 @@
 /* 
    Unix SMB/CIFS implementation.
 
-   Winbind background daemon
+   Winbind child daemons
 
    Copyright (C) Andrew Tridgell 2002
+   Copyright (C) Volker Lendecke 2004,2005
    
    This program is free software; you can redistribute it and/or modify
    it under the terms of the GNU General Public License as published by
 */
 
 /*
-  the idea of the optional dual daemon mode is ot prevent slow domain
-  responses from clagging up the rest of the system. When in dual
-  daemon mode winbindd always responds to requests from cache if the
-  request is in cache, and if the cached answer is stale then it asks
-  the "dual daemon" to update the cache for that request
-
+ * We fork a child per domain to be able to act non-blocking in the main
+ * winbind daemon. A domain controller thousands of miles away being being
+ * slow replying with a 10.000 user list should not hold up netlogon calls
+ * that can be handled locally.
  */
 
+#include "includes.h"
 #include "winbindd.h"
 
 #undef DBGC_CLASS
 #define DBGC_CLASS DBGC_WINBIND
 
-extern BOOL opt_dual_daemon;
-BOOL background_process = False;
-int dual_daemon_pipe = -1;
+/* Read some data from a client connection */
+
+static void child_read_request(struct winbindd_cli_state *state)
+{
+       ssize_t len;
 
+       /* Read data */
 
-/* a list of requests ready to be sent to the dual daemon */
-struct dual_list {
-       struct dual_list *next;
-       char *data;
-       int length;
-       int offset;
-};
+       len = read_data(state->sock, (char *)&state->request,
+                       sizeof(state->request));
+
+       if (len != sizeof(state->request)) {
+               DEBUG(0, ("Got invalid request length: %d\n", (int)len));
+               state->finished = True;
+               return;
+       }
+
+       if (state->request.extra_len == 0) {
+               state->request.extra_data.data = NULL;
+               return;
+       }
+
+       DEBUG(10, ("Need to read %d extra bytes\n", (int)state->request.extra_len));
+
+       state->request.extra_data.data =
+               SMB_MALLOC_ARRAY(char, state->request.extra_len + 1);
+
+       if (state->request.extra_data.data == NULL) {
+               DEBUG(0, ("malloc failed\n"));
+               state->finished = True;
+               return;
+       }
 
-static struct dual_list *dual_list;
-static struct dual_list *dual_list_end;
+       /* Ensure null termination */
+       state->request.extra_data.data[state->request.extra_len] = '\0';
+
+       len = read_data(state->sock, state->request.extra_data.data,
+                       state->request.extra_len);
+
+       if (len != state->request.extra_len) {
+               DEBUG(0, ("Could not read extra data\n"));
+               state->finished = True;
+               return;
+       }
+}
 
 /*
-  setup a select() including the dual daemon pipe
+ * Machinery for async requests sent to children. You set up a
+ * winbindd_request, select a child to query, and issue a async_request
+ * call. When the request is completed, the callback function you specified is
+ * called back with the private pointer you gave to async_request.
  */
-int dual_select_setup(fd_set *fds, int maxfd)
+
+struct winbindd_async_request {
+       struct winbindd_async_request *next, *prev;
+       TALLOC_CTX *mem_ctx;
+       struct winbindd_child *child;
+       struct winbindd_request *request;
+       struct winbindd_response *response;
+       void (*continuation)(void *private_data, BOOL success);
+       void *private_data;
+};
+
+static void async_main_request_sent(void *private_data, BOOL success);
+static void async_request_sent(void *private_data, BOOL success);
+static void async_reply_recv(void *private_data, BOOL success);
+static void schedule_async_request(struct winbindd_child *child);
+
+void async_request(TALLOC_CTX *mem_ctx, struct winbindd_child *child,
+                  struct winbindd_request *request,
+                  struct winbindd_response *response,
+                  void (*continuation)(void *private_data, BOOL success),
+                  void *private_data)
 {
-       if (dual_daemon_pipe == -1 ||
-           !dual_list) {
-               return maxfd;
+       struct winbindd_async_request *state, *tmp;
+
+       SMB_ASSERT(continuation != NULL);
+
+       state = TALLOC_P(mem_ctx, struct winbindd_async_request);
+
+       if (state == NULL) {
+               DEBUG(0, ("talloc failed\n"));
+               continuation(private_data, False);
+               return;
        }
 
-       FD_SET(dual_daemon_pipe, fds);
-       if (dual_daemon_pipe > maxfd) {
-               maxfd = dual_daemon_pipe;
+       state->mem_ctx = mem_ctx;
+       state->child = child;
+       state->request = request;
+       state->response = response;
+       state->continuation = continuation;
+       state->private_data = private_data;
+
+       DLIST_ADD_END(child->requests, state, tmp);
+
+       schedule_async_request(child);
+
+       return;
+}
+
+static void async_main_request_sent(void *private_data, BOOL success)
+{
+       struct winbindd_async_request *state =
+               talloc_get_type_abort(private_data, struct winbindd_async_request);
+
+       if (!success) {
+               DEBUG(5, ("Could not send async request\n"));
+
+               state->response->length = sizeof(struct winbindd_response);
+               state->response->result = WINBINDD_ERROR;
+               state->continuation(state->private_data, False);
+               return;
        }
-       return maxfd;
+
+       if (state->request->extra_len == 0) {
+               async_request_sent(private_data, True);
+               return;
+       }
+
+       setup_async_write(&state->child->event, state->request->extra_data.data,
+                         state->request->extra_len,
+                         async_request_sent, state);
 }
 
+static void async_request_sent(void *private_data_data, BOOL success)
+{
+       struct winbindd_async_request *state =
+               talloc_get_type_abort(private_data_data, struct winbindd_async_request);
 
-/*
-  a hook called from the main winbindd select() loop to handle writes
-  to the dual daemon pipe 
-*/
-void dual_select(fd_set *fds)
+       if (!success) {
+               DEBUG(5, ("Could not send async request\n"));
+
+               state->response->length = sizeof(struct winbindd_response);
+               state->response->result = WINBINDD_ERROR;
+               state->continuation(state->private_data, False);
+               return;
+       }
+
+       /* Request successfully sent to the child, setup the wait for reply */
+
+       setup_async_read(&state->child->event,
+                        &state->response->result,
+                        sizeof(state->response->result),
+                        async_reply_recv, state);
+}
+
+static void async_reply_recv(void *private_data, BOOL success)
 {
-       int n;
+       struct winbindd_async_request *state =
+               talloc_get_type_abort(private_data, struct winbindd_async_request);
+       struct winbindd_child *child = state->child;
+
+       state->response->length = sizeof(struct winbindd_response);
 
-       if (dual_daemon_pipe == -1 ||
-           !dual_list ||
-           !FD_ISSET(dual_daemon_pipe, fds)) {
+       if (!success) {
+               DEBUG(5, ("Could not receive async reply\n"));
+               state->response->result = WINBINDD_ERROR;
                return;
        }
 
-       n = sys_write(dual_daemon_pipe, 
-                 &dual_list->data[dual_list->offset],
-                 dual_list->length - dual_list->offset);
+       SMB_ASSERT(cache_retrieve_response(child->pid,
+                                          state->response));
 
-       if (n <= 0) {
-               /* the pipe is dead! fall back to normal operation */
-               dual_daemon_pipe = -1;
+       cache_cleanup_response(child->pid);
+       
+       DLIST_REMOVE(child->requests, state);
+
+       schedule_async_request(child);
+
+       state->continuation(state->private_data, True);
+}
+
+static BOOL fork_domain_child(struct winbindd_child *child);
+
+static void schedule_async_request(struct winbindd_child *child)
+{
+       struct winbindd_async_request *request = child->requests;
+
+       if (request == NULL) {
                return;
        }
 
-       dual_list->offset += n;
+       if (child->event.flags != 0) {
+               return;         /* Busy */
+       }
+
+       if ((child->pid == 0) && (!fork_domain_child(child))) {
+               /* Cancel all outstanding requests */
 
-       if (dual_list->offset == dual_list->length) {
-               struct dual_list *next;
-               next = dual_list->next;
-               free(dual_list->data);
-               free(dual_list);
-               dual_list = next;
-               if (!dual_list) {
-                       dual_list_end = NULL;
+               while (request != NULL) {
+                       /* request might be free'd in the continuation */
+                       struct winbindd_async_request *next = request->next;
+                       request->continuation(request->private_data, False);
+                       request = next;
                }
+               return;
        }
+
+       setup_async_write(&child->event, request->request,
+                         sizeof(*request->request),
+                         async_main_request_sent, request);
+
+       talloc_destroy(child->mem_ctx);
+       return;
 }
 
-/* 
-   send a request to the background daemon 
-   this is called for stale cached entries
-*/
-void dual_send_request(struct winbindd_cli_state *state)
+struct domain_request_state {
+       TALLOC_CTX *mem_ctx;
+       struct winbindd_domain *domain;
+       struct winbindd_request *request;
+       struct winbindd_response *response;
+       void (*continuation)(void *private_data_data, BOOL success);
+       void *private_data_data;
+};
+
+static void domain_init_recv(void *private_data_data, BOOL success);
+
+void async_domain_request(TALLOC_CTX *mem_ctx,
+                         struct winbindd_domain *domain,
+                         struct winbindd_request *request,
+                         struct winbindd_response *response,
+                         void (*continuation)(void *private_data_data, BOOL success),
+                         void *private_data_data)
+{
+       struct domain_request_state *state;
+
+       if (domain->initialized) {
+               async_request(mem_ctx, &domain->child, request, response,
+                             continuation, private_data_data);
+               return;
+       }
+
+       state = TALLOC_P(mem_ctx, struct domain_request_state);
+       if (state == NULL) {
+               DEBUG(0, ("talloc failed\n"));
+               continuation(private_data_data, False);
+               return;
+       }
+
+       state->mem_ctx = mem_ctx;
+       state->domain = domain;
+       state->request = request;
+       state->response = response;
+       state->continuation = continuation;
+       state->private_data_data = private_data_data;
+
+       init_child_connection(domain, domain_init_recv, state);
+}
+
+static void recvfrom_child(void *private_data_data, BOOL success)
+{
+       struct winbindd_cli_state *state =
+               talloc_get_type_abort(private_data_data, struct winbindd_cli_state);
+       enum winbindd_result result = state->response.result;
+
+       /* This is an optimization: The child has written directly to the
+        * response buffer. The request itself is still in pending state,
+        * state that in the result code. */
+
+       state->response.result = WINBINDD_PENDING;
+
+       if ((!success) || (result != WINBINDD_OK)) {
+               request_error(state);
+               return;
+       }
+
+       request_ok(state);
+}
+
+void sendto_child(struct winbindd_cli_state *state,
+                 struct winbindd_child *child)
 {
-       struct dual_list *list;
+       async_request(state->mem_ctx, child, &state->request,
+                     &state->response, recvfrom_child, state);
+}
 
-       if (!background_process) return;
+void sendto_domain(struct winbindd_cli_state *state,
+                  struct winbindd_domain *domain)
+{
+       async_domain_request(state->mem_ctx, domain,
+                            &state->request, &state->response,
+                            recvfrom_child, state);
+}
 
-       list = malloc(sizeof(*list));
-       if (!list) return;
+static void domain_init_recv(void *private_data_data, BOOL success)
+{
+       struct domain_request_state *state =
+               talloc_get_type_abort(private_data_data, struct domain_request_state);
 
-       list->next = NULL;
-       list->data = memdup(&state->request, sizeof(state->request));
-       list->length = sizeof(state->request);
-       list->offset = 0;
+       if (!success) {
+               DEBUG(5, ("Domain init returned an error\n"));
+               state->continuation(state->private_data_data, False);
+               return;
+       }
+
+       async_request(state->mem_ctx, &state->domain->child,
+                     state->request, state->response,
+                     state->continuation, state->private_data_data);
+}
+
+struct winbindd_child_dispatch_table {
+       enum winbindd_cmd cmd;
+       enum winbindd_result (*fn)(struct winbindd_domain *domain,
+                                  struct winbindd_cli_state *state);
+       const char *winbindd_cmd_name;
+};
+
+static struct winbindd_child_dispatch_table child_dispatch_table[] = {
        
-       if (!dual_list_end) {
-               dual_list = list;
-               dual_list_end = list;
+       { WINBINDD_LOOKUPSID,            winbindd_dual_lookupsid,             "LOOKUPSID" },
+       { WINBINDD_LOOKUPNAME,           winbindd_dual_lookupname,            "LOOKUPNAME" },
+       { WINBINDD_LIST_TRUSTDOM,        winbindd_dual_list_trusted_domains,  "LIST_TRUSTDOM" },
+       { WINBINDD_INIT_CONNECTION,      winbindd_dual_init_connection,       "INIT_CONNECTION" },
+       { WINBINDD_GETDCNAME,            winbindd_dual_getdcname,             "GETDCNAME" },
+       { WINBINDD_SHOW_SEQUENCE,        winbindd_dual_show_sequence,         "SHOW_SEQUENCE" },
+       { WINBINDD_PAM_AUTH,             winbindd_dual_pam_auth,              "PAM_AUTH" },
+       { WINBINDD_PAM_AUTH_CRAP,        winbindd_dual_pam_auth_crap,         "AUTH_CRAP" },
+       { WINBINDD_PAM_LOGOFF,           winbindd_dual_pam_logoff,            "PAM_LOGOFF" },
+       { WINBINDD_CHECK_MACHACC,        winbindd_dual_check_machine_acct,    "CHECK_MACHACC" },
+       { WINBINDD_DUAL_SID2UID,         winbindd_dual_sid2uid,               "DUAL_SID2UID" },
+       { WINBINDD_DUAL_SID2GID,         winbindd_dual_sid2gid,               "DUAL_SID2GID" },
+       { WINBINDD_DUAL_UID2NAME,        winbindd_dual_uid2name,              "DUAL_UID2NAME" },
+       { WINBINDD_DUAL_NAME2UID,        winbindd_dual_name2uid,              "DUAL_NAME2UID" },
+       { WINBINDD_DUAL_GID2NAME,        winbindd_dual_gid2name,              "DUAL_GID2NAME" },
+       { WINBINDD_DUAL_NAME2GID,        winbindd_dual_name2gid,              "DUAL_NAME2GID" },
+       { WINBINDD_DUAL_IDMAPSET,        winbindd_dual_idmapset,              "DUAL_IDMAPSET" },
+       { WINBINDD_DUAL_USERINFO,        winbindd_dual_userinfo,              "DUAL_USERINFO" },
+       { WINBINDD_ALLOCATE_UID,         winbindd_dual_allocate_uid,          "ALLOCATE_UID" },
+       { WINBINDD_ALLOCATE_GID,         winbindd_dual_allocate_gid,          "ALLOCATE_GID" },
+       { WINBINDD_GETUSERDOMGROUPS,     winbindd_dual_getuserdomgroups,      "GETUSERDOMGROUPS" },
+       { WINBINDD_DUAL_GETSIDALIASES,   winbindd_dual_getsidaliases,         "GETSIDALIASES" },
+       /* End of list */
+
+       { WINBINDD_NUM_CMDS, NULL, "NONE" }
+};
+
+static void child_process_request(struct winbindd_domain *domain,
+                                 struct winbindd_cli_state *state)
+{
+       struct winbindd_child_dispatch_table *table;
+
+       /* Free response data - we may be interrupted and receive another
+          command before being able to send this data off. */
+
+       state->response.result = WINBINDD_ERROR;
+       state->response.length = sizeof(struct winbindd_response);
+
+       state->mem_ctx = talloc_init("winbind request");
+       if (state->mem_ctx == NULL)
+               return;
+
+       /* Process command */
+
+       for (table = child_dispatch_table; table->fn; table++) {
+               if (state->request.cmd == table->cmd) {
+                       DEBUG(10,("process_request: request fn %s\n",
+                                 table->winbindd_cmd_name ));
+                       state->response.result = table->fn(domain, state);
+                       break;
+               }
+       }
+
+       if (!table->fn) {
+               DEBUG(10,("process_request: unknown request fn number %d\n",
+                         (int)state->request.cmd ));
+               state->response.result = WINBINDD_ERROR;
+       }
+
+       talloc_destroy(state->mem_ctx);
+}
+
+void setup_domain_child(struct winbindd_domain *domain,
+                       struct winbindd_child *child,
+                       const char *explicit_logfile)
+{
+       if (explicit_logfile != NULL) {
+               pstr_sprintf(child->logfilename, "%s/log.winbindd-%s",
+                            dyn_LOGFILEBASE, explicit_logfile);
+       } else if (domain != NULL) {
+               pstr_sprintf(child->logfilename, "%s/log.wb-%s",
+                            dyn_LOGFILEBASE, domain->name);
        } else {
-               dual_list_end->next = list;
-               dual_list_end = list;
+               smb_panic("Internal error: domain == NULL && "
+                         "explicit_logfile == NULL");
        }
 
-       background_process = False;
+       child->domain = domain;
 }
 
+struct winbindd_child *children = NULL;
 
-/* 
-the main dual daemon 
-*/
-void do_dual_daemon(void)
+void winbind_child_died(pid_t pid)
+{
+       struct winbindd_child *child;
+
+       for (child = children; child != NULL; child = child->next) {
+               if (child->pid == pid) {
+                       break;
+               }
+       }
+
+       if (child == NULL) {
+               DEBUG(0, ("Unknown child %d died!\n", pid));
+               return;
+       }
+
+       remove_fd_event(&child->event);
+       close(child->event.fd);
+       child->event.fd = 0;
+       child->event.flags = 0;
+       child->pid = 0;
+
+       schedule_async_request(child);
+}
+
+/* Forward the online/offline messages to our children. */
+void winbind_msg_offline(int msg_type, struct process_id src, void *buf, size_t len)
+{
+       struct winbindd_child *child;
+
+       DEBUG(10,("winbind_msg_offline: got offline message.\n"));
+
+       if (!lp_winbind_offline_logon()) {
+               DEBUG(10,("winbind_msg_offline: rejecting offline message.\n"));
+               return;
+       }
+
+       /* Set our global state as offline. */
+       if (!set_global_winbindd_state_offline()) {
+               DEBUG(10,("winbind_msg_offline: offline request failed.\n"));
+               return;
+       }
+
+       for (child = children; child != NULL; child = child->next) {
+               DEBUG(10,("winbind_msg_offline: sending message to pid %u.\n",
+                       (unsigned int)child->pid ));
+               message_send_pid(pid_to_procid(child->pid), MSG_WINBIND_OFFLINE, NULL, 0, False);
+       }
+}
+
+/* Forward the online/offline messages to our children. */
+void winbind_msg_online(int msg_type, struct process_id src, void *buf, size_t len)
+{
+       struct winbindd_child *child;
+
+       DEBUG(10,("winbind_msg_online: got online message.\n"));
+
+       if (!lp_winbind_offline_logon()) {
+               DEBUG(10,("winbind_msg_online: rejecting online message.\n"));
+               return;
+       }
+
+       /* Set our global state as online. */
+       set_global_winbindd_state_online();
+
+       for (child = children; child != NULL; child = child->next) {
+               DEBUG(10,("winbind_msg_online: sending message to pid %u.\n",
+                       (unsigned int)child->pid ));
+               message_send_pid(pid_to_procid(child->pid), MSG_WINBIND_ONLINE, NULL, 0, False);
+       }
+}
+
+static void account_lockout_policy_handler(struct timed_event *te,
+                                          const struct timeval *now,
+                                          void *private_data)
+{
+       struct winbindd_child *child = private_data;
+
+       struct winbindd_methods *methods;
+       SAM_UNK_INFO_12 lockout_policy;
+       NTSTATUS result;
+
+       DEBUG(10,("account_lockout_policy_handler called\n"));
+
+       if (child->lockout_policy_event) {
+               TALLOC_FREE(child->lockout_policy_event);
+       }
+
+       methods = child->domain->methods;
+
+       result = methods->lockout_policy(child->domain, child->mem_ctx, &lockout_policy);
+       if (!NT_STATUS_IS_OK(result)) {
+               DEBUG(10,("account_lockout_policy_handler: failed to call lockout_policy\n"));
+               return;
+       }
+
+       child->lockout_policy_event = add_timed_event(child->mem_ctx, 
+                                                     timeval_current_ofs(3600, 0),
+                                                     "account_lockout_policy_handler",
+                                                     account_lockout_policy_handler,
+                                                     child);
+}
+
+/* Deal with a request to go offline. */
+
+static void child_msg_offline(int msg_type, struct process_id src, void *buf, size_t len)
+{
+       struct winbindd_domain *domain;
+
+       DEBUG(5,("child_msg_offline received.\n"));
+
+       if (!lp_winbind_offline_logon()) {
+               DEBUG(10,("child_msg_offline: rejecting offline message.\n"));
+               return;
+       }
+
+       /* Set our global state as offline. */
+       if (!set_global_winbindd_state_offline()) {
+               DEBUG(10,("child_msg_offline: offline request failed.\n"));
+               return;
+       }
+
+       /* Mark all our domains as offline. */
+
+       for (domain = domain_list(); domain; domain = domain->next) {
+               DEBUG(5,("child_msg_offline: marking %s offline.\n", domain->name));
+               domain->online = False;
+       }
+}
+
+/* Deal with a request to go online. */
+
+static void child_msg_online(int msg_type, struct process_id src, void *buf, size_t len)
+{
+       struct winbindd_domain *domain;
+
+       DEBUG(5,("child_msg_online received.\n"));
+
+       if (!lp_winbind_offline_logon()) {
+               DEBUG(10,("child_msg_online: rejecting online message.\n"));
+               return;
+       }
+
+       /* Set our global state as online. */
+       set_global_winbindd_state_online();
+
+       winbindd_flush_nscd_cache();
+
+       /* Mark everything online - delete any negative cache entries
+          to force an immediate reconnect. */
+
+       for (domain = domain_list(); domain; domain = domain->next) {
+               DEBUG(5,("child_msg_online: marking %s online.\n", domain->name));
+               domain->online = True;
+               check_negative_conn_cache_timeout(domain->name, domain->dcname, 0);
+       }
+}
+
+static BOOL fork_domain_child(struct winbindd_child *child)
 {
        int fdpair[2];
        struct winbindd_cli_state state;
+       extern BOOL override_logfile;
 
-       if (pipe(fdpair) != 0) {
-               return;
+       if (socketpair(AF_UNIX, SOCK_STREAM, 0, fdpair) != 0) {
+               DEBUG(0, ("Could not open child pipe: %s\n",
+                         strerror(errno)));
+               return False;
        }
 
        ZERO_STRUCT(state);
        state.pid = getpid();
 
-       dual_daemon_pipe = fdpair[1];
-       state.sock = fdpair[0];
+       /* Ensure we don't process messages whilst we're
+          changing the disposition for the child. */
+       message_block();
+
+       child->pid = sys_fork();
 
-       if (fork() != 0) {
+       if (child->pid == -1) {
+               DEBUG(0, ("Could not fork: %s\n", strerror(errno)));
+               message_unblock();
+               return False;
+       }
+
+       if (child->pid != 0) {
+               /* Parent */
                close(fdpair[0]);
-               return;
+               child->next = child->prev = NULL;
+               DLIST_ADD(children, child);
+               child->event.fd = fdpair[1];
+               child->event.flags = 0;
+               child->requests = NULL;
+               add_fd_event(&child->event);
+               /* We're ok with online/offline messages now. */
+               message_unblock();
+               return True;
        }
+
+       /* Child */
+
+       state.sock = fdpair[0];
        close(fdpair[1]);
 
-       if (winbind_setup_common() != 0) _exit(0);
+       /* tdb needs special fork handling */
+       if (tdb_reopen_all(1) == -1) {
+               DEBUG(0,("tdb_reopen_all failed.\n"));
+               _exit(0);
+       }
+
+       close_conns_after_fork();
+
+       if (!override_logfile) {
+               lp_set_logfile(child->logfilename);
+               reopen_logs();
+       }
+
+       /* Don't handle the same messages as our parent. */
+       message_deregister(MSG_SMB_CONF_UPDATED);
+       message_deregister(MSG_SHUTDOWN);
+       message_deregister(MSG_WINBIND_OFFLINE);
+       message_deregister(MSG_WINBIND_ONLINE);
+
+       /* The child is ok with online/offline messages now. */
+       message_unblock();
+
+       child->mem_ctx = talloc_init("child_mem_ctx");
+       if (child->mem_ctx == NULL) {
+               return False;
+       }
+
+       if (child->domain != NULL) {
+               /* We might be in the idmap child...*/
+               child->lockout_policy_event = add_timed_event(
+                       child->mem_ctx, timeval_zero(),
+                       "account_lockout_policy_handler",
+                       account_lockout_policy_handler,
+                       child);
+       }
 
-       dual_daemon_pipe = -1;
-       opt_dual_daemon = False;
+       /* Handle online/offline messages. */
+       message_register(MSG_WINBIND_OFFLINE,child_msg_offline);
+       message_register(MSG_WINBIND_ONLINE,child_msg_online);
 
        while (1) {
+
+               int ret;
+               fd_set read_fds;
+               struct timeval t;
+               struct timeval *tp;
+               struct timeval now;
+
                /* free up any talloc memory */
-               lp_talloc_free();
-               main_loop_talloc_free();
+               lp_TALLOC_FREE();
+               main_loop_TALLOC_FREE();
+
+               run_events();
+
+               GetTimeOfDay(&now);
+
+               tp = get_timed_events_timeout(&t, (time_t)-1);
+               if (tp) {
+                       DEBUG(11,("select will use timeout of %d seconds\n", (int)tp->tv_sec));
+               }
+
+               /* Handle messages */
+
+               message_dispatch();
+
+               FD_ZERO(&read_fds);
+               FD_SET(state.sock, &read_fds);
+
+               ret = sys_select(state.sock + 1, &read_fds, NULL, NULL, tp);
+
+               if (ret == 0) {
+                       DEBUG(11,("nothing is ready yet, continue\n"));
+                       continue;
+               }
+
+               if (ret == -1 && errno == EINTR) {
+                       /* We got a signal - continue. */
+                       continue;
+               }
+
+               if (ret == -1 && errno != EINTR) {
+                       DEBUG(0,("select error occured\n"));
+                       perror("select");
+                       return False;
+               }
 
                /* fetch a request from the main daemon */
-               winbind_client_read(&state);
+               child_read_request(&state);
 
                if (state.finished) {
                        /* we lost contact with our parent */
                        exit(0);
                }
 
-               /* process full rquests */
-               if (state.read_buf_len == sizeof(state.request)) {
-                       DEBUG(4,("dual daemon request %d\n", (int)state.request.cmd));
-
-                       /* special handling for the stateful requests */
-                       switch (state.request.cmd) {
-                       case WINBINDD_GETPWENT:
-                               winbindd_setpwent(&state);
-                               break;
-                               
-                       case WINBINDD_GETGRENT:
-                       case WINBINDD_GETGRLST:
-                               winbindd_setgrent(&state);
-                               break;
-                       default:
-                               break;
-                       }
-
-                       winbind_process_packet(&state);
-                       SAFE_FREE(state.response.extra_data);
-
-                       free_getent_state(state.getpwent_state);
-                       free_getent_state(state.getgrent_state);
-                       state.getpwent_state = NULL;
-                       state.getgrent_state = NULL;
+               DEBUG(4,("child daemon request %d\n", (int)state.request.cmd));
+
+               ZERO_STRUCT(state.response);
+               state.request.null_term = '\0';
+               child_process_request(child->domain, &state);
+
+               SAFE_FREE(state.request.extra_data.data);
+
+               cache_store_response(sys_getpid(), &state.response);
+
+               SAFE_FREE(state.response.extra_data.data);
+
+               /* We just send the result code back, the result
+                * structure needs to be fetched via the
+                * winbindd_cache. Hmm. That needs fixing... */
+
+               if (write_data(state.sock, (void *)&state.response.result,
+                              sizeof(state.response.result)) !=
+                   sizeof(state.response.result)) {
+                       DEBUG(0, ("Could not write result\n"));
+                       exit(1);
                }
        }
 }
-