2 Unix SMB/CIFS implementation.
6 Copyright (C) Andrew Tridgell 2002
7 Copyright (C) Volker Lendecke 2004,2005
9 This program is free software; you can redistribute it and/or modify
10 it under the terms of the GNU General Public License as published by
11 the Free Software Foundation; either version 3 of the License, or
12 (at your option) any later version.
14 This program is distributed in the hope that it will be useful,
15 but WITHOUT ANY WARRANTY; without even the implied warranty of
16 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
17 GNU General Public License for more details.
19 You should have received a copy of the GNU General Public License
20 along with this program. If not, see <http://www.gnu.org/licenses/>.
24 * We fork a child per domain to be able to act non-blocking in the main
25 * winbind daemon. A domain controller thousands of miles away being being
26 * slow replying with a 10.000 user list should not hold up netlogon calls
27 * that can be handled locally.
34 #define DBGC_CLASS DBGC_WINBIND
36 extern bool override_logfile
;
37 extern struct winbindd_methods cache_methods
;
39 /* Read some data from a client connection */
41 static void child_read_request(struct winbindd_cli_state
*state
)
47 status
= read_data(state
->sock
, (char *)&state
->request
,
48 sizeof(state
->request
));
50 if (!NT_STATUS_IS_OK(status
)) {
51 DEBUG(3, ("child_read_request: read_data failed: %s\n",
53 state
->finished
= True
;
57 if (state
->request
.extra_len
== 0) {
58 state
->request
.extra_data
.data
= NULL
;
62 DEBUG(10, ("Need to read %d extra bytes\n", (int)state
->request
.extra_len
));
64 state
->request
.extra_data
.data
=
65 SMB_MALLOC_ARRAY(char, state
->request
.extra_len
+ 1);
67 if (state
->request
.extra_data
.data
== NULL
) {
68 DEBUG(0, ("malloc failed\n"));
69 state
->finished
= True
;
73 /* Ensure null termination */
74 state
->request
.extra_data
.data
[state
->request
.extra_len
] = '\0';
76 status
= read_data(state
->sock
, state
->request
.extra_data
.data
,
77 state
->request
.extra_len
);
79 if (!NT_STATUS_IS_OK(status
)) {
80 DEBUG(0, ("Could not read extra data: %s\n",
82 state
->finished
= True
;
88 * Machinery for async requests sent to children. You set up a
89 * winbindd_request, select a child to query, and issue a async_request
90 * call. When the request is completed, the callback function you specified is
91 * called back with the private pointer you gave to async_request.
94 struct winbindd_async_request
{
95 struct winbindd_async_request
*next
, *prev
;
97 struct winbindd_child
*child
;
98 struct winbindd_request
*request
;
99 struct winbindd_response
*response
;
100 void (*continuation
)(void *private_data
, bool success
);
101 struct timed_event
*reply_timeout_event
;
102 pid_t child_pid
; /* pid of the child we're waiting on. Used to detect
103 a restart of the child (child->pid != child_pid). */
107 static void async_main_request_sent(void *private_data
, bool success
);
108 static void async_request_sent(void *private_data
, bool success
);
109 static void async_reply_recv(void *private_data
, bool success
);
110 static void schedule_async_request(struct winbindd_child
*child
);
112 void async_request(TALLOC_CTX
*mem_ctx
, struct winbindd_child
*child
,
113 struct winbindd_request
*request
,
114 struct winbindd_response
*response
,
115 void (*continuation
)(void *private_data
, bool success
),
118 struct winbindd_async_request
*state
;
120 SMB_ASSERT(continuation
!= NULL
);
122 state
= TALLOC_P(mem_ctx
, struct winbindd_async_request
);
125 DEBUG(0, ("talloc failed\n"));
126 continuation(private_data
, False
);
130 state
->mem_ctx
= mem_ctx
;
131 state
->child
= child
;
132 state
->request
= request
;
133 state
->response
= response
;
134 state
->continuation
= continuation
;
135 state
->private_data
= private_data
;
137 DLIST_ADD_END(child
->requests
, state
, struct winbindd_async_request
*);
139 schedule_async_request(child
);
144 static void async_main_request_sent(void *private_data
, bool success
)
146 struct winbindd_async_request
*state
=
147 talloc_get_type_abort(private_data
, struct winbindd_async_request
);
150 DEBUG(5, ("Could not send async request\n"));
152 state
->response
->length
= sizeof(struct winbindd_response
);
153 state
->response
->result
= WINBINDD_ERROR
;
154 state
->continuation(state
->private_data
, False
);
158 if (state
->request
->extra_len
== 0) {
159 async_request_sent(private_data
, True
);
163 setup_async_write(&state
->child
->event
, state
->request
->extra_data
.data
,
164 state
->request
->extra_len
,
165 async_request_sent
, state
);
168 /****************************************************************
169 Handler triggered if the child winbindd doesn't respond within
171 ****************************************************************/
173 static void async_request_timeout_handler(struct event_context
*ctx
,
174 struct timed_event
*te
,
175 const struct timeval
*now
,
178 struct winbindd_async_request
*state
=
179 talloc_get_type_abort(private_data
, struct winbindd_async_request
);
181 DEBUG(0,("async_request_timeout_handler: child pid %u is not responding. "
182 "Closing connection to it.\n",
185 /* Deal with the reply - set to error. */
186 async_reply_recv(private_data
, False
);
189 /**************************************************************
190 Common function called on both async send and recv fail.
191 Cleans up the child and schedules the next request.
192 **************************************************************/
194 static void async_request_fail(struct winbindd_async_request
*state
)
196 DLIST_REMOVE(state
->child
->requests
, state
);
198 TALLOC_FREE(state
->reply_timeout_event
);
200 SMB_ASSERT(state
->child_pid
!= (pid_t
)0);
202 /* If not already reaped, send kill signal to child. */
203 if (state
->child
->pid
== state
->child_pid
) {
204 kill(state
->child_pid
, SIGTERM
);
207 * Close the socket to the child.
209 winbind_child_died(state
->child_pid
);
212 state
->response
->length
= sizeof(struct winbindd_response
);
213 state
->response
->result
= WINBINDD_ERROR
;
214 state
->continuation(state
->private_data
, False
);
217 static void async_request_sent(void *private_data_data
, bool success
)
219 struct winbindd_async_request
*state
=
220 talloc_get_type_abort(private_data_data
, struct winbindd_async_request
);
223 DEBUG(5, ("Could not send async request to child pid %u\n",
224 (unsigned int)state
->child_pid
));
225 async_request_fail(state
);
229 /* Request successfully sent to the child, setup the wait for reply */
231 setup_async_read(&state
->child
->event
,
232 &state
->response
->result
,
233 sizeof(state
->response
->result
),
234 async_reply_recv
, state
);
237 * Set up a timeout of 300 seconds for the response.
238 * If we don't get it close the child socket and
242 state
->reply_timeout_event
= event_add_timed(winbind_event_context(),
244 timeval_current_ofs(300,0),
245 "async_request_timeout",
246 async_request_timeout_handler
,
248 if (!state
->reply_timeout_event
) {
249 smb_panic("async_request_sent: failed to add timeout handler.\n");
253 static void async_reply_recv(void *private_data
, bool success
)
255 struct winbindd_async_request
*state
=
256 talloc_get_type_abort(private_data
, struct winbindd_async_request
);
257 struct winbindd_child
*child
= state
->child
;
259 TALLOC_FREE(state
->reply_timeout_event
);
261 state
->response
->length
= sizeof(struct winbindd_response
);
264 DEBUG(5, ("Could not receive async reply from child pid %u\n",
265 (unsigned int)state
->child_pid
));
267 cache_cleanup_response(state
->child_pid
);
268 async_request_fail(state
);
272 SMB_ASSERT(cache_retrieve_response(state
->child_pid
,
275 cache_cleanup_response(state
->child_pid
);
277 DLIST_REMOVE(child
->requests
, state
);
279 schedule_async_request(child
);
281 state
->continuation(state
->private_data
, True
);
284 static bool fork_domain_child(struct winbindd_child
*child
);
286 static void schedule_async_request(struct winbindd_child
*child
)
288 struct winbindd_async_request
*request
= child
->requests
;
290 if (request
== NULL
) {
294 if (child
->event
.flags
!= 0) {
298 if ((child
->pid
== 0) && (!fork_domain_child(child
))) {
299 /* Cancel all outstanding requests */
301 while (request
!= NULL
) {
302 /* request might be free'd in the continuation */
303 struct winbindd_async_request
*next
= request
->next
;
304 request
->continuation(request
->private_data
, False
);
310 /* Now we know who we're sending to - remember the pid. */
311 request
->child_pid
= child
->pid
;
313 setup_async_write(&child
->event
, request
->request
,
314 sizeof(*request
->request
),
315 async_main_request_sent
, request
);
320 struct domain_request_state
{
322 struct winbindd_domain
*domain
;
323 struct winbindd_request
*request
;
324 struct winbindd_response
*response
;
325 void (*continuation
)(void *private_data_data
, bool success
);
326 void *private_data_data
;
329 static void domain_init_recv(void *private_data_data
, bool success
);
331 void async_domain_request(TALLOC_CTX
*mem_ctx
,
332 struct winbindd_domain
*domain
,
333 struct winbindd_request
*request
,
334 struct winbindd_response
*response
,
335 void (*continuation
)(void *private_data_data
, bool success
),
336 void *private_data_data
)
338 struct domain_request_state
*state
;
340 if (domain
->initialized
) {
341 async_request(mem_ctx
, &domain
->child
, request
, response
,
342 continuation
, private_data_data
);
346 state
= TALLOC_P(mem_ctx
, struct domain_request_state
);
348 DEBUG(0, ("talloc failed\n"));
349 continuation(private_data_data
, False
);
353 state
->mem_ctx
= mem_ctx
;
354 state
->domain
= domain
;
355 state
->request
= request
;
356 state
->response
= response
;
357 state
->continuation
= continuation
;
358 state
->private_data_data
= private_data_data
;
360 init_child_connection(domain
, domain_init_recv
, state
);
363 static void domain_init_recv(void *private_data_data
, bool success
)
365 struct domain_request_state
*state
=
366 talloc_get_type_abort(private_data_data
, struct domain_request_state
);
369 DEBUG(5, ("Domain init returned an error\n"));
370 state
->continuation(state
->private_data_data
, False
);
374 async_request(state
->mem_ctx
, &state
->domain
->child
,
375 state
->request
, state
->response
,
376 state
->continuation
, state
->private_data_data
);
379 static void recvfrom_child(void *private_data_data
, bool success
)
381 struct winbindd_cli_state
*state
=
382 talloc_get_type_abort(private_data_data
, struct winbindd_cli_state
);
383 enum winbindd_result result
= state
->response
.result
;
385 /* This is an optimization: The child has written directly to the
386 * response buffer. The request itself is still in pending state,
387 * state that in the result code. */
389 state
->response
.result
= WINBINDD_PENDING
;
391 if ((!success
) || (result
!= WINBINDD_OK
)) {
392 request_error(state
);
399 void sendto_child(struct winbindd_cli_state
*state
,
400 struct winbindd_child
*child
)
402 async_request(state
->mem_ctx
, child
, &state
->request
,
403 &state
->response
, recvfrom_child
, state
);
406 void sendto_domain(struct winbindd_cli_state
*state
,
407 struct winbindd_domain
*domain
)
409 async_domain_request(state
->mem_ctx
, domain
,
410 &state
->request
, &state
->response
,
411 recvfrom_child
, state
);
414 static void child_process_request(struct winbindd_child
*child
,
415 struct winbindd_cli_state
*state
)
417 struct winbindd_domain
*domain
= child
->domain
;
418 const struct winbindd_child_dispatch_table
*table
= child
->table
;
420 /* Free response data - we may be interrupted and receive another
421 command before being able to send this data off. */
423 state
->response
.result
= WINBINDD_ERROR
;
424 state
->response
.length
= sizeof(struct winbindd_response
);
426 /* as all requests in the child are sync, we can use talloc_tos() */
427 state
->mem_ctx
= talloc_tos();
429 /* Process command */
431 for (; table
->name
; table
++) {
432 if (state
->request
.cmd
== table
->struct_cmd
) {
433 DEBUG(10,("child_process_request: request fn %s\n",
435 state
->response
.result
= table
->struct_fn(domain
, state
);
440 DEBUG(1 ,("child_process_request: unknown request fn number %d\n",
441 (int)state
->request
.cmd
));
442 state
->response
.result
= WINBINDD_ERROR
;
445 void setup_child(struct winbindd_child
*child
,
446 const struct winbindd_child_dispatch_table
*table
,
447 const char *logprefix
,
450 if (logprefix
&& logname
) {
451 if (asprintf(&child
->logfilename
, "%s/%s-%s",
452 get_dyn_LOGFILEBASE(), logprefix
, logname
) < 0) {
453 smb_panic("Internal error: asprintf failed");
456 smb_panic("Internal error: logprefix == NULL && "
460 child
->domain
= NULL
;
461 child
->table
= table
;
464 struct winbindd_child
*children
= NULL
;
466 void winbind_child_died(pid_t pid
)
468 struct winbindd_child
*child
;
470 for (child
= children
; child
!= NULL
; child
= child
->next
) {
471 if (child
->pid
== pid
) {
477 DEBUG(5, ("Already reaped child %u died\n", (unsigned int)pid
));
481 /* This will be re-added in fork_domain_child() */
483 DLIST_REMOVE(children
, child
);
485 remove_fd_event(&child
->event
);
486 close(child
->event
.fd
);
488 child
->event
.flags
= 0;
491 schedule_async_request(child
);
494 /* Ensure any negative cache entries with the netbios or realm names are removed. */
496 void winbindd_flush_negative_conn_cache(struct winbindd_domain
*domain
)
498 flush_negative_conn_cache_for_domain(domain
->name
);
499 if (*domain
->alt_name
) {
500 flush_negative_conn_cache_for_domain(domain
->alt_name
);
504 /* Set our domains as offline and forward the offline message to our children. */
506 void winbind_msg_offline(struct messaging_context
*msg_ctx
,
509 struct server_id server_id
,
512 struct winbindd_child
*child
;
513 struct winbindd_domain
*domain
;
515 DEBUG(10,("winbind_msg_offline: got offline message.\n"));
517 if (!lp_winbind_offline_logon()) {
518 DEBUG(10,("winbind_msg_offline: rejecting offline message.\n"));
522 /* Set our global state as offline. */
523 if (!set_global_winbindd_state_offline()) {
524 DEBUG(10,("winbind_msg_offline: offline request failed.\n"));
528 /* Set all our domains as offline. */
529 for (domain
= domain_list(); domain
; domain
= domain
->next
) {
530 if (domain
->internal
) {
533 DEBUG(5,("winbind_msg_offline: marking %s offline.\n", domain
->name
));
534 set_domain_offline(domain
);
537 for (child
= children
; child
!= NULL
; child
= child
->next
) {
538 /* Don't send message to internal childs. We've already
540 if (!child
->domain
|| winbindd_internal_child(child
)) {
544 /* Or internal domains (this should not be possible....) */
545 if (child
->domain
->internal
) {
549 /* Each winbindd child should only process requests for one domain - make sure
550 we only set it online / offline for that domain. */
552 DEBUG(10,("winbind_msg_offline: sending message to pid %u for domain %s.\n",
553 (unsigned int)child
->pid
, domain
->name
));
555 messaging_send_buf(msg_ctx
, pid_to_procid(child
->pid
),
557 (uint8
*)child
->domain
->name
,
558 strlen(child
->domain
->name
)+1);
562 /* Set our domains as online and forward the online message to our children. */
564 void winbind_msg_online(struct messaging_context
*msg_ctx
,
567 struct server_id server_id
,
570 struct winbindd_child
*child
;
571 struct winbindd_domain
*domain
;
573 DEBUG(10,("winbind_msg_online: got online message.\n"));
575 if (!lp_winbind_offline_logon()) {
576 DEBUG(10,("winbind_msg_online: rejecting online message.\n"));
580 /* Set our global state as online. */
581 set_global_winbindd_state_online();
583 smb_nscd_flush_user_cache();
584 smb_nscd_flush_group_cache();
586 /* Set all our domains as online. */
587 for (domain
= domain_list(); domain
; domain
= domain
->next
) {
588 if (domain
->internal
) {
591 DEBUG(5,("winbind_msg_online: requesting %s to go online.\n", domain
->name
));
593 winbindd_flush_negative_conn_cache(domain
);
594 set_domain_online_request(domain
);
596 /* Send an online message to the idmap child when our
597 primary domain comes back online */
599 if ( domain
->primary
) {
600 struct winbindd_child
*idmap
= idmap_child();
602 if ( idmap
->pid
!= 0 ) {
603 messaging_send_buf(msg_ctx
,
604 pid_to_procid(idmap
->pid
),
606 (uint8
*)domain
->name
,
607 strlen(domain
->name
)+1);
613 for (child
= children
; child
!= NULL
; child
= child
->next
) {
614 /* Don't send message to internal childs. */
615 if (!child
->domain
|| winbindd_internal_child(child
)) {
619 /* Or internal domains (this should not be possible....) */
620 if (child
->domain
->internal
) {
624 /* Each winbindd child should only process requests for one domain - make sure
625 we only set it online / offline for that domain. */
627 DEBUG(10,("winbind_msg_online: sending message to pid %u for domain %s.\n",
628 (unsigned int)child
->pid
, child
->domain
->name
));
630 messaging_send_buf(msg_ctx
, pid_to_procid(child
->pid
),
632 (uint8
*)child
->domain
->name
,
633 strlen(child
->domain
->name
)+1);
637 /* Forward the online/offline messages to our children. */
638 void winbind_msg_onlinestatus(struct messaging_context
*msg_ctx
,
641 struct server_id server_id
,
644 struct winbindd_child
*child
;
646 DEBUG(10,("winbind_msg_onlinestatus: got onlinestatus message.\n"));
648 for (child
= children
; child
!= NULL
; child
= child
->next
) {
649 if (child
->domain
&& child
->domain
->primary
) {
650 DEBUG(10,("winbind_msg_onlinestatus: "
651 "sending message to pid %u of primary domain.\n",
652 (unsigned int)child
->pid
));
653 messaging_send_buf(msg_ctx
, pid_to_procid(child
->pid
),
654 MSG_WINBIND_ONLINESTATUS
,
662 void winbind_msg_dump_event_list(struct messaging_context
*msg_ctx
,
665 struct server_id server_id
,
668 struct winbindd_child
*child
;
670 DEBUG(10,("winbind_msg_dump_event_list received\n"));
672 dump_event_list(winbind_event_context());
674 for (child
= children
; child
!= NULL
; child
= child
->next
) {
676 DEBUG(10,("winbind_msg_dump_event_list: sending message to pid %u\n",
677 (unsigned int)child
->pid
));
679 messaging_send_buf(msg_ctx
, pid_to_procid(child
->pid
),
686 void winbind_msg_dump_domain_list(struct messaging_context
*msg_ctx
,
689 struct server_id server_id
,
693 const char *message
= NULL
;
694 struct server_id
*sender
= NULL
;
695 const char *domain
= NULL
;
698 struct winbindd_domain
*dom
= NULL
;
700 DEBUG(5,("winbind_msg_dump_domain_list received.\n"));
702 if (!data
|| !data
->data
) {
706 if (data
->length
< sizeof(struct server_id
)) {
710 mem_ctx
= talloc_init("winbind_msg_dump_domain_list");
715 sender
= (struct server_id
*)data
->data
;
716 if (data
->length
> sizeof(struct server_id
)) {
717 domain
= (const char *)data
->data
+sizeof(struct server_id
);
722 DEBUG(5,("winbind_msg_dump_domain_list for domain: %s\n",
725 message
= NDR_PRINT_STRUCT_STRING(mem_ctx
, winbindd_domain
,
726 find_domain_from_name_noinit(domain
));
728 talloc_destroy(mem_ctx
);
732 messaging_send_buf(msg_ctx
, *sender
,
733 MSG_WINBIND_DUMP_DOMAIN_LIST
,
734 (uint8_t *)message
, strlen(message
) + 1);
736 talloc_destroy(mem_ctx
);
741 DEBUG(5,("winbind_msg_dump_domain_list all domains\n"));
743 for (dom
= domain_list(); dom
; dom
=dom
->next
) {
744 message
= NDR_PRINT_STRUCT_STRING(mem_ctx
, winbindd_domain
, dom
);
746 talloc_destroy(mem_ctx
);
750 s
= talloc_asprintf_append(s
, "%s\n", message
);
752 talloc_destroy(mem_ctx
);
757 status
= messaging_send_buf(msg_ctx
, *sender
,
758 MSG_WINBIND_DUMP_DOMAIN_LIST
,
759 (uint8_t *)s
, strlen(s
) + 1);
760 if (!NT_STATUS_IS_OK(status
)) {
761 DEBUG(0,("failed to send message: %s\n",
765 talloc_destroy(mem_ctx
);
768 static void account_lockout_policy_handler(struct event_context
*ctx
,
769 struct timed_event
*te
,
770 const struct timeval
*now
,
773 struct winbindd_child
*child
=
774 (struct winbindd_child
*)private_data
;
775 TALLOC_CTX
*mem_ctx
= NULL
;
776 struct winbindd_methods
*methods
;
777 struct samr_DomInfo12 lockout_policy
;
780 DEBUG(10,("account_lockout_policy_handler called\n"));
782 TALLOC_FREE(child
->lockout_policy_event
);
784 if ( !winbindd_can_contact_domain( child
->domain
) ) {
785 DEBUG(10,("account_lockout_policy_handler: Removing myself since I "
786 "do not have an incoming trust to domain %s\n",
787 child
->domain
->name
));
792 methods
= child
->domain
->methods
;
794 mem_ctx
= talloc_init("account_lockout_policy_handler ctx");
796 result
= NT_STATUS_NO_MEMORY
;
798 result
= methods
->lockout_policy(child
->domain
, mem_ctx
, &lockout_policy
);
800 TALLOC_FREE(mem_ctx
);
802 if (!NT_STATUS_IS_OK(result
)) {
803 DEBUG(10,("account_lockout_policy_handler: lockout_policy failed error %s\n",
807 child
->lockout_policy_event
= event_add_timed(winbind_event_context(), NULL
,
808 timeval_current_ofs(3600, 0),
809 "account_lockout_policy_handler",
810 account_lockout_policy_handler
,
814 /* Deal with a request to go offline. */
816 static void child_msg_offline(struct messaging_context
*msg
,
819 struct server_id server_id
,
822 struct winbindd_domain
*domain
;
823 const char *domainname
= (const char *)data
->data
;
825 if (data
->data
== NULL
|| data
->length
== 0) {
829 DEBUG(5,("child_msg_offline received for domain %s.\n", domainname
));
831 if (!lp_winbind_offline_logon()) {
832 DEBUG(10,("child_msg_offline: rejecting offline message.\n"));
836 /* Mark the requested domain offline. */
838 for (domain
= domain_list(); domain
; domain
= domain
->next
) {
839 if (domain
->internal
) {
842 if (strequal(domain
->name
, domainname
)) {
843 DEBUG(5,("child_msg_offline: marking %s offline.\n", domain
->name
));
844 set_domain_offline(domain
);
849 /* Deal with a request to go online. */
851 static void child_msg_online(struct messaging_context
*msg
,
854 struct server_id server_id
,
857 struct winbindd_domain
*domain
;
858 const char *domainname
= (const char *)data
->data
;
860 if (data
->data
== NULL
|| data
->length
== 0) {
864 DEBUG(5,("child_msg_online received for domain %s.\n", domainname
));
866 if (!lp_winbind_offline_logon()) {
867 DEBUG(10,("child_msg_online: rejecting online message.\n"));
871 /* Set our global state as online. */
872 set_global_winbindd_state_online();
874 /* Try and mark everything online - delete any negative cache entries
875 to force a reconnect now. */
877 for (domain
= domain_list(); domain
; domain
= domain
->next
) {
878 if (domain
->internal
) {
881 if (strequal(domain
->name
, domainname
)) {
882 DEBUG(5,("child_msg_online: requesting %s to go online.\n", domain
->name
));
883 winbindd_flush_negative_conn_cache(domain
);
884 set_domain_online_request(domain
);
889 static const char *collect_onlinestatus(TALLOC_CTX
*mem_ctx
)
891 struct winbindd_domain
*domain
;
894 if ((buf
= talloc_asprintf(mem_ctx
, "global:%s ",
895 get_global_winbindd_state_offline() ?
896 "Offline":"Online")) == NULL
) {
900 for (domain
= domain_list(); domain
; domain
= domain
->next
) {
901 if ((buf
= talloc_asprintf_append_buffer(buf
, "%s:%s ",
904 "Online":"Offline")) == NULL
) {
909 buf
= talloc_asprintf_append_buffer(buf
, "\n");
911 DEBUG(5,("collect_onlinestatus: %s", buf
));
916 static void child_msg_onlinestatus(struct messaging_context
*msg_ctx
,
919 struct server_id server_id
,
924 struct server_id
*sender
;
926 DEBUG(5,("winbind_msg_onlinestatus received.\n"));
932 sender
= (struct server_id
*)data
->data
;
934 mem_ctx
= talloc_init("winbind_msg_onlinestatus");
935 if (mem_ctx
== NULL
) {
939 message
= collect_onlinestatus(mem_ctx
);
940 if (message
== NULL
) {
941 talloc_destroy(mem_ctx
);
945 messaging_send_buf(msg_ctx
, *sender
, MSG_WINBIND_ONLINESTATUS
,
946 (uint8
*)message
, strlen(message
) + 1);
948 talloc_destroy(mem_ctx
);
951 static void child_msg_dump_event_list(struct messaging_context
*msg
,
954 struct server_id server_id
,
957 DEBUG(5,("child_msg_dump_event_list received\n"));
959 dump_event_list(winbind_event_context());
963 static bool fork_domain_child(struct winbindd_child
*child
)
966 struct winbindd_cli_state state
;
967 struct winbindd_domain
*domain
;
970 DEBUG(10, ("fork_domain_child called for domain '%s'\n",
971 child
->domain
->name
));
973 DEBUG(10, ("fork_domain_child called without domain.\n"));
976 if (socketpair(AF_UNIX
, SOCK_STREAM
, 0, fdpair
) != 0) {
977 DEBUG(0, ("Could not open child pipe: %s\n",
983 state
.pid
= sys_getpid();
985 child
->pid
= sys_fork();
987 if (child
->pid
== -1) {
988 DEBUG(0, ("Could not fork: %s\n", strerror(errno
)));
992 if (child
->pid
!= 0) {
995 child
->next
= child
->prev
= NULL
;
996 DLIST_ADD(children
, child
);
997 child
->event
.fd
= fdpair
[1];
998 child
->event
.flags
= 0;
999 child
->requests
= NULL
;
1000 add_fd_event(&child
->event
);
1006 /* Stop zombies in children */
1009 state
.sock
= fdpair
[0];
1012 if (!reinit_after_fork(winbind_messaging_context(), true)) {
1013 DEBUG(0,("reinit_after_fork() failed\n"));
1017 close_conns_after_fork();
1019 if (!override_logfile
) {
1020 lp_set_logfile(child
->logfilename
);
1025 * For clustering, we need to re-init our ctdbd connection after the
1028 if (!NT_STATUS_IS_OK(messaging_reinit(winbind_messaging_context())))
1031 /* Don't handle the same messages as our parent. */
1032 messaging_deregister(winbind_messaging_context(),
1033 MSG_SMB_CONF_UPDATED
, NULL
);
1034 messaging_deregister(winbind_messaging_context(),
1035 MSG_SHUTDOWN
, NULL
);
1036 messaging_deregister(winbind_messaging_context(),
1037 MSG_WINBIND_OFFLINE
, NULL
);
1038 messaging_deregister(winbind_messaging_context(),
1039 MSG_WINBIND_ONLINE
, NULL
);
1040 messaging_deregister(winbind_messaging_context(),
1041 MSG_WINBIND_ONLINESTATUS
, NULL
);
1042 messaging_deregister(winbind_messaging_context(),
1043 MSG_DUMP_EVENT_LIST
, NULL
);
1044 messaging_deregister(winbind_messaging_context(),
1045 MSG_WINBIND_DUMP_DOMAIN_LIST
, NULL
);
1047 /* Handle online/offline messages. */
1048 messaging_register(winbind_messaging_context(), NULL
,
1049 MSG_WINBIND_OFFLINE
, child_msg_offline
);
1050 messaging_register(winbind_messaging_context(), NULL
,
1051 MSG_WINBIND_ONLINE
, child_msg_online
);
1052 messaging_register(winbind_messaging_context(), NULL
,
1053 MSG_WINBIND_ONLINESTATUS
, child_msg_onlinestatus
);
1054 messaging_register(winbind_messaging_context(), NULL
,
1055 MSG_DUMP_EVENT_LIST
, child_msg_dump_event_list
);
1057 if ( child
->domain
) {
1058 child
->domain
->startup
= True
;
1059 child
->domain
->startup_time
= time(NULL
);
1062 /* Ensure we have no pending check_online events other
1063 than one for this domain. */
1065 for (domain
= domain_list(); domain
; domain
= domain
->next
) {
1066 if (domain
!= child
->domain
) {
1067 TALLOC_FREE(domain
->check_online_event
);
1071 /* Ensure we're not handling an event inherited from
1074 cancel_named_event(winbind_event_context(),
1075 "krb5_ticket_refresh_handler");
1077 /* We might be in the idmap child...*/
1078 if (child
->domain
&& !(child
->domain
->internal
) &&
1079 lp_winbind_offline_logon()) {
1081 set_domain_online_request(child
->domain
);
1083 child
->lockout_policy_event
= event_add_timed(
1084 winbind_event_context(), NULL
, timeval_zero(),
1085 "account_lockout_policy_handler",
1086 account_lockout_policy_handler
,
1097 TALLOC_CTX
*frame
= talloc_stackframe();
1099 /* check for signals */
1100 winbind_check_sigterm(false);
1101 winbind_check_sighup();
1103 run_events(winbind_event_context(), 0, NULL
, NULL
);
1107 if (child
->domain
&& child
->domain
->startup
&&
1108 (now
.tv_sec
> child
->domain
->startup_time
+ 30)) {
1109 /* No longer in "startup" mode. */
1110 DEBUG(10,("fork_domain_child: domain %s no longer in 'startup' mode.\n",
1111 child
->domain
->name
));
1112 child
->domain
->startup
= False
;
1115 tp
= get_timed_events_timeout(winbind_event_context(), &t
);
1117 DEBUG(11,("select will use timeout of %u.%u seconds\n",
1118 (unsigned int)tp
->tv_sec
, (unsigned int)tp
->tv_usec
));
1121 /* Handle messages */
1123 message_dispatch(winbind_messaging_context());
1126 FD_SET(state
.sock
, &read_fds
);
1128 ret
= sys_select(state
.sock
+ 1, &read_fds
, NULL
, NULL
, tp
);
1131 DEBUG(11,("nothing is ready yet, continue\n"));
1136 if (ret
== -1 && errno
== EINTR
) {
1137 /* We got a signal - continue. */
1142 if (ret
== -1 && errno
!= EINTR
) {
1143 DEBUG(0,("select error occured\n"));
1149 /* fetch a request from the main daemon */
1150 child_read_request(&state
);
1152 if (state
.finished
) {
1153 /* we lost contact with our parent */
1157 DEBUG(4,("child daemon request %d\n", (int)state
.request
.cmd
));
1159 ZERO_STRUCT(state
.response
);
1160 state
.request
.null_term
= '\0';
1161 child_process_request(child
, &state
);
1163 SAFE_FREE(state
.request
.extra_data
.data
);
1165 cache_store_response(sys_getpid(), &state
.response
);
1167 SAFE_FREE(state
.response
.extra_data
.data
);
1169 /* We just send the result code back, the result
1170 * structure needs to be fetched via the
1171 * winbindd_cache. Hmm. That needs fixing... */
1173 if (write_data(state
.sock
,
1174 (const char *)&state
.response
.result
,
1175 sizeof(state
.response
.result
)) !=
1176 sizeof(state
.response
.result
)) {
1177 DEBUG(0, ("Could not write result\n"));