2 Unix SMB/CIFS implementation.
3 Parameter loading functions
4 Copyright (C) Karl Auer 1993-1998
6 Largely re-written by Andrew Tridgell, September 1994
8 Copyright (C) Simo Sorce 2001
9 Copyright (C) Alexander Bokovoy 2002
10 Copyright (C) Stefan (metze) Metzmacher 2002
11 Copyright (C) Jim McDonough <jmcd@us.ibm.com> 2003
12 Copyright (C) Michael Adam 2008
13 Copyright (C) Jelmer Vernooij <jelmer@samba.org> 2007
14 Copyright (C) Andrew Bartlett 2011
16 This program is free software; you can redistribute it and/or modify
17 it under the terms of the GNU General Public License as published by
18 the Free Software Foundation; either version 3 of the License, or
19 (at your option) any later version.
21 This program is distributed in the hope that it will be useful,
22 but WITHOUT ANY WARRANTY; without even the implied warranty of
23 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
24 GNU General Public License for more details.
26 You should have received a copy of the GNU General Public License
27 along with this program. If not, see <http://www.gnu.org/licenses/>.
33 * This module provides suitable callback functions for the params
34 * module. It builds the internal table of service details which is
35 * then used by the rest of the server.
39 * 1) add it to the global or service structure definition
40 * 2) add it to the parm_table
41 * 3) add it to the list of available functions (eg: using FN_GLOBAL_STRING())
42 * 4) If it's a global then initialise it in init_globals. If a local
43 * (ie. service) parameter then initialise it in the sDefault structure
47 * The configuration file is processed sequentially for speed. It is NOT
48 * accessed randomly as happens in 'real' Windows. For this reason, there
49 * is a fair bit of sequence-dependent code here - ie., code which assumes
50 * that certain things happen before others. In particular, the code which
51 * happens at the boundary between sections is delicately poised, so be
57 #include "system/filesys.h"
59 #include "lib/param/loadparm.h"
60 #include "lib/param/param.h"
62 #include "lib/smbconf/smbconf.h"
63 #include "lib/smbconf/smbconf_init.h"
66 #include "../librpc/gen_ndr/svcctl.h"
68 #include "../libcli/smb/smb_signing.h"
69 #include "dbwrap/dbwrap.h"
70 #include "dbwrap/dbwrap_rbt.h"
71 #include "../lib/util/bitmap.h"
73 #ifdef HAVE_SYS_SYSCTL_H
74 #include <sys/sysctl.h>
77 #ifdef HAVE_HTTPCONNECTENCRYPT
78 #include <cups/http.h>
83 extern userdom_struct current_user_info
;
85 /* the special value for the include parameter
86 * to be interpreted not as a file name but to
87 * trigger loading of the global smb.conf options
89 #ifndef INCLUDE_REGISTRY_NAME
90 #define INCLUDE_REGISTRY_NAME "registry"
93 static bool in_client
= false; /* Not in the client by default */
94 static struct smbconf_csn conf_last_csn
;
96 static int config_backend
= CONFIG_BACKEND_FILE
;
98 /* some helpful bits */
99 #define LP_SNUM_OK(i) (((i) >= 0) && ((i) < iNumServices) && (ServicePtrs != NULL) && ServicePtrs[(i)]->valid)
100 #define VALID(i) (ServicePtrs != NULL && ServicePtrs[i]->valid)
102 #define USERSHARE_VALID 1
103 #define USERSHARE_PENDING_DELETE 2
105 static bool defaults_saved
= false;
107 #include "lib/param/param_global.h"
109 static struct loadparm_global Globals
;
111 /* This is a default service used to prime a services structure */
112 static struct loadparm_service sDefault
=
117 .usershare_last_mod
= {0, 0},
121 .invalid_users
= NULL
,
128 .root_preexec
= NULL
,
129 .root_postexec
= NULL
,
130 .cups_options
= NULL
,
131 .print_command
= NULL
,
133 .lprm_command
= NULL
,
134 .lppause_command
= NULL
,
135 .lpresume_command
= NULL
,
136 .queuepause_command
= NULL
,
137 .queueresume_command
= NULL
,
138 ._printername
= NULL
,
139 .printjob_username
= NULL
,
140 .dont_descend
= NULL
,
143 .magic_script
= NULL
,
144 .magic_output
= NULL
,
147 .veto_oplock_files
= NULL
,
157 .aio_write_behind
= NULL
,
158 .dfree_command
= NULL
,
159 .min_print_space
= 0,
160 .iMaxPrintJobs
= 1000,
161 .max_reported_print_jobs
= 0,
162 .write_cache_size
= 0,
164 .force_create_mode
= 0,
165 .directory_mask
= 0755,
166 .force_directory_mode
= 0,
167 .max_connections
= 0,
168 .default_case
= CASE_LOWER
,
169 .printing
= DEFAULT_PRINTING
,
170 .oplock_contention_limit
= 2,
173 .dfree_cache_time
= 0,
174 .preexec_close
= false,
175 .root_preexec_close
= false,
176 .case_sensitive
= Auto
,
177 .preserve_case
= true,
178 .short_preserve_case
= true,
179 .hide_dot_files
= true,
180 .hide_special_files
= false,
181 .hide_unreadable
= false,
182 .hide_unwriteable_files
= false,
184 .access_based_share_enum
= false,
188 .administrative_share
= false,
191 .print_notify_backchannel
= false,
195 .store_dos_attributes
= false,
196 .dmapi_support
= false,
198 .strict_locking
= Auto
,
199 .posix_locking
= true,
201 .kernel_oplocks
= false,
202 .level2_oplocks
= true,
204 .mangled_names
= true,
206 .follow_symlinks
= true,
207 .sync_always
= false,
208 .strict_allocate
= false,
209 .strict_sync
= false,
210 .mangling_char
= '~',
212 .delete_readonly
= false,
213 .fake_oplocks
= false,
214 .delete_veto_files
= false,
215 .dos_filemode
= false,
216 .dos_filetimes
= true,
217 .dos_filetime_resolution
= false,
218 .fake_directory_create_times
= false,
219 .blocking_locks
= true,
220 .inherit_permissions
= false,
221 .inherit_acls
= false,
222 .inherit_owner
= false,
224 .use_client_driver
= false,
225 .default_devmode
= true,
226 .force_printername
= false,
227 .nt_acl_support
= true,
228 .force_unknown_acl_user
= false,
229 ._use_sendfile
= false,
230 .profile_acls
= false,
231 .map_acl_inherit
= false,
234 .acl_check_permissions
= true,
235 .acl_map_full_control
= true,
236 .acl_group_control
= false,
237 .acl_allow_execute_always
= false,
238 .change_notify
= true,
239 .kernel_change_notify
= true,
240 .allocation_roundup_size
= SMB_ROUNDUP_ALLOCATION_SIZE
,
243 .map_readonly
= MAP_READONLY_YES
,
244 .directory_name_cache_size
= 100,
245 .smb_encrypt
= SMB_SIGNING_DEFAULT
,
246 .kernel_share_modes
= true,
247 .durable_handles
= true,
252 /* local variables */
253 static struct loadparm_service
**ServicePtrs
= NULL
;
254 static int iNumServices
= 0;
255 static int iServiceIndex
= 0;
256 static struct db_context
*ServiceHash
;
257 static bool bInGlobalSection
= true;
258 static bool bGlobalOnly
= false;
259 static struct file_lists
*file_lists
= NULL
;
261 static void set_allowed_client_auth(void);
263 static bool lp_set_cmdline_helper(const char *pszParmName
, const char *pszParmValue
);
264 static void free_param_opts(struct parmlist_entry
**popts
);
266 /* this is used to prevent lots of mallocs of size 1 */
267 static const char null_string
[] = "";
273 static void string_free(char **s
)
277 if (*s
== null_string
)
283 Set a string value, deallocating any existing space, and allocing the space
287 static bool string_set(TALLOC_CTX
*mem_ctx
, char **dest
,const char *src
)
295 (*dest
) = talloc_strdup(mem_ctx
, src
);
296 if ((*dest
) == NULL
) {
297 DEBUG(0,("Out of memory in string_init\n"));
304 bool lp_string_set(char **dest
, const char *src
) {
305 return string_set(Globals
.ctx
, dest
, src
);
308 /***************************************************************************
309 Initialise the sDefault parameter structure for the printer values.
310 ***************************************************************************/
312 void init_printer_values(TALLOC_CTX
*ctx
, struct loadparm_service
*pService
)
314 /* choose defaults depending on the type of printing */
315 switch (pService
->printing
) {
320 lpcfg_string_set(ctx
, &pService
->lpq_command
, "lpq -P'%p'");
321 lpcfg_string_set(ctx
, &pService
->lprm_command
, "lprm -P'%p' %j");
322 lpcfg_string_set(ctx
, &pService
->print_command
, "lpr -r -P'%p' %s");
327 lpcfg_string_set(ctx
, &pService
->lpq_command
, "lpq -P'%p'");
328 lpcfg_string_set(ctx
, &pService
->lprm_command
, "lprm -P'%p' %j");
329 lpcfg_string_set(ctx
, &pService
->print_command
, "lpr -r -P'%p' %s");
330 lpcfg_string_set(ctx
, &pService
->queuepause_command
, "lpc stop '%p'");
331 lpcfg_string_set(ctx
, &pService
->queueresume_command
, "lpc start '%p'");
332 lpcfg_string_set(ctx
, &pService
->lppause_command
, "lpc hold '%p' %j");
333 lpcfg_string_set(ctx
, &pService
->lpresume_command
, "lpc release '%p' %j");
338 /* set the lpq command to contain the destination printer
339 name only. This is used by cups_queue_get() */
340 lpcfg_string_set(ctx
, &pService
->lpq_command
, "%p");
341 lpcfg_string_set(ctx
, &pService
->lprm_command
, "");
342 lpcfg_string_set(ctx
, &pService
->print_command
, "");
343 lpcfg_string_set(ctx
, &pService
->lppause_command
, "");
344 lpcfg_string_set(ctx
, &pService
->lpresume_command
, "");
345 lpcfg_string_set(ctx
, &pService
->queuepause_command
, "");
346 lpcfg_string_set(ctx
, &pService
->queueresume_command
, "");
351 lpcfg_string_set(ctx
, &pService
->lpq_command
, "lpstat -o%p");
352 lpcfg_string_set(ctx
, &pService
->lprm_command
, "cancel %p-%j");
353 lpcfg_string_set(ctx
, &pService
->print_command
, "lp -c -d%p %s; rm %s");
354 lpcfg_string_set(ctx
, &pService
->queuepause_command
, "disable %p");
355 lpcfg_string_set(ctx
, &pService
->queueresume_command
, "enable %p");
357 lpcfg_string_set(ctx
, &pService
->lppause_command
, "lp -i %p-%j -H hold");
358 lpcfg_string_set(ctx
, &pService
->lpresume_command
, "lp -i %p-%j -H resume");
363 lpcfg_string_set(ctx
, &pService
->lpq_command
, "lpq -P%p");
364 lpcfg_string_set(ctx
, &pService
->lprm_command
, "lprm -P%p %j");
365 lpcfg_string_set(ctx
, &pService
->print_command
, "lp -r -P%p %s");
368 #if defined(DEVELOPER) || defined(ENABLE_SELFTEST)
373 TALLOC_CTX
*tmp_ctx
= talloc_new(ctx
);
376 tdbfile
= talloc_asprintf(
377 tmp_ctx
, "tdbfile=%s",
378 lp_parm_const_string(-1, "vlp", "tdbfile",
380 if (tdbfile
== NULL
) {
381 tdbfile
="tdbfile=/tmp/vlp.tdb";
384 tmp
= talloc_asprintf(tmp_ctx
, "vlp %s print %%p %%s",
386 lpcfg_string_set(ctx
, &pService
->print_command
,
387 tmp
? tmp
: "vlp print %p %s");
389 tmp
= talloc_asprintf(tmp_ctx
, "vlp %s lpq %%p",
391 lpcfg_string_set(ctx
, &pService
->lpq_command
,
392 tmp
? tmp
: "vlp lpq %p");
394 tmp
= talloc_asprintf(tmp_ctx
, "vlp %s lprm %%p %%j",
396 lpcfg_string_set(ctx
, &pService
->lprm_command
,
397 tmp
? tmp
: "vlp lprm %p %j");
399 tmp
= talloc_asprintf(tmp_ctx
, "vlp %s lppause %%p %%j",
401 lpcfg_string_set(ctx
, &pService
->lppause_command
,
402 tmp
? tmp
: "vlp lppause %p %j");
404 tmp
= talloc_asprintf(tmp_ctx
, "vlp %s lpresume %%p %%j",
406 lpcfg_string_set(ctx
, &pService
->lpresume_command
,
407 tmp
? tmp
: "vlp lpresume %p %j");
409 tmp
= talloc_asprintf(tmp_ctx
, "vlp %s queuepause %%p",
411 lpcfg_string_set(ctx
, &pService
->queuepause_command
,
412 tmp
? tmp
: "vlp queuepause %p");
414 tmp
= talloc_asprintf(tmp_ctx
, "vlp %s queueresume %%p",
416 lpcfg_string_set(ctx
, &pService
->queueresume_command
,
417 tmp
? tmp
: "vlp queueresume %p");
418 TALLOC_FREE(tmp_ctx
);
422 #endif /* DEVELOPER */
427 * Function to return the default value for the maximum number of open
428 * file descriptors permitted. This function tries to consult the
429 * kernel-level (sysctl) and ulimit (getrlimit()) values and goes
430 * the smaller of those.
432 static int max_open_files(void)
434 int sysctl_max
= MAX_OPEN_FILES
;
435 int rlimit_max
= MAX_OPEN_FILES
;
437 #ifdef HAVE_SYSCTLBYNAME
439 size_t size
= sizeof(sysctl_max
);
440 sysctlbyname("kern.maxfilesperproc", &sysctl_max
, &size
, NULL
,
445 #if (defined(HAVE_GETRLIMIT) && defined(RLIMIT_NOFILE))
451 if (getrlimit(RLIMIT_NOFILE
, &rl
) == 0)
452 rlimit_max
= rl
.rlim_cur
;
454 #if defined(RLIM_INFINITY)
455 if(rl
.rlim_cur
== RLIM_INFINITY
)
456 rlimit_max
= MAX_OPEN_FILES
;
461 if (sysctl_max
< MIN_OPEN_FILES_WINDOWS
) {
462 DEBUG(2,("max_open_files: increasing sysctl_max (%d) to "
463 "minimum Windows limit (%d)\n",
465 MIN_OPEN_FILES_WINDOWS
));
466 sysctl_max
= MIN_OPEN_FILES_WINDOWS
;
469 if (rlimit_max
< MIN_OPEN_FILES_WINDOWS
) {
470 DEBUG(2,("rlimit_max: increasing rlimit_max (%d) to "
471 "minimum Windows limit (%d)\n",
473 MIN_OPEN_FILES_WINDOWS
));
474 rlimit_max
= MIN_OPEN_FILES_WINDOWS
;
477 return MIN(sysctl_max
, rlimit_max
);
481 * Common part of freeing allocated data for one parameter.
483 static void free_one_parameter_common(void *parm_ptr
,
484 struct parm_struct parm
)
486 if ((parm
.type
== P_STRING
) ||
487 (parm
.type
== P_USTRING
))
489 string_free((char**)parm_ptr
);
490 } else if (parm
.type
== P_LIST
|| parm
.type
== P_CMDLIST
) {
491 TALLOC_FREE(*((char***)parm_ptr
));
496 * Free the allocated data for one parameter for a share
497 * given as a service struct.
499 static void free_one_parameter(struct loadparm_service
*service
,
500 struct parm_struct parm
)
504 if (parm
.p_class
!= P_LOCAL
) {
508 parm_ptr
= lp_parm_ptr(service
, &parm
);
510 free_one_parameter_common(parm_ptr
, parm
);
514 * Free the allocated parameter data of a share given
515 * as a service struct.
517 static void free_parameters(struct loadparm_service
*service
)
521 for (i
=0; parm_table
[i
].label
; i
++) {
522 free_one_parameter(service
, parm_table
[i
]);
527 * Free the allocated data for one parameter for a given share
528 * specified by an snum.
530 static void free_one_parameter_by_snum(int snum
, struct parm_struct parm
)
535 parm_ptr
= lp_parm_ptr(NULL
, &parm
);
536 } else if (parm
.p_class
!= P_LOCAL
) {
539 parm_ptr
= lp_local_ptr_by_snum(snum
, &parm
);
542 free_one_parameter_common(parm_ptr
, parm
);
546 * Free the allocated parameter data for a share specified
549 static void free_parameters_by_snum(int snum
)
553 for (i
=0; parm_table
[i
].label
; i
++) {
554 free_one_parameter_by_snum(snum
, parm_table
[i
]);
559 * Free the allocated global parameters.
561 static void free_global_parameters(void)
563 free_param_opts(&Globals
.param_opt
);
564 free_parameters_by_snum(GLOBAL_SECTION_SNUM
);
565 TALLOC_FREE(Globals
.ctx
);
568 struct lp_stored_option
{
569 struct lp_stored_option
*prev
, *next
;
574 static struct lp_stored_option
*stored_options
;
577 save options set by lp_set_cmdline() into a list. This list is
578 re-applied when we do a globals reset, so that cmdline set options
579 are sticky across reloads of smb.conf
581 static bool store_lp_set_cmdline(const char *pszParmName
, const char *pszParmValue
)
583 struct lp_stored_option
*entry
, *entry_next
;
584 for (entry
= stored_options
; entry
!= NULL
; entry
= entry_next
) {
585 entry_next
= entry
->next
;
586 if (strcmp(pszParmName
, entry
->label
) == 0) {
587 DLIST_REMOVE(stored_options
, entry
);
593 entry
= talloc(NULL
, struct lp_stored_option
);
598 entry
->label
= talloc_strdup(entry
, pszParmName
);
604 entry
->value
= talloc_strdup(entry
, pszParmValue
);
610 DLIST_ADD_END(stored_options
, entry
, struct lp_stored_option
);
615 static bool apply_lp_set_cmdline(void)
617 struct lp_stored_option
*entry
= NULL
;
618 for (entry
= stored_options
; entry
!= NULL
; entry
= entry
->next
) {
619 if (!lp_set_cmdline_helper(entry
->label
, entry
->value
)) {
620 DEBUG(0, ("Failed to re-apply cmdline parameter %s = %s\n",
621 entry
->label
, entry
->value
));
628 /***************************************************************************
629 Initialise the global parameter structure.
630 ***************************************************************************/
632 static void init_globals(bool reinit_globals
)
634 static bool done_init
= false;
638 /* If requested to initialize only once and we've already done it... */
639 if (!reinit_globals
&& done_init
) {
640 /* ... then we have nothing more to do */
645 /* The logfile can be set before this is invoked. Free it if so. */
646 if (Globals
.logfile
!= NULL
) {
647 string_free(&Globals
.logfile
);
648 Globals
.logfile
= NULL
;
652 free_global_parameters();
655 /* This memset and the free_global_parameters() above will
656 * wipe out smb.conf options set with lp_set_cmdline(). The
657 * apply_lp_set_cmdline() call puts these values back in the
658 * table once the defaults are set */
659 ZERO_STRUCT(Globals
);
661 Globals
.ctx
= talloc_pooled_object(NULL
, char, 272, 2048);
663 for (i
= 0; parm_table
[i
].label
; i
++) {
664 if ((parm_table
[i
].type
== P_STRING
||
665 parm_table
[i
].type
== P_USTRING
))
667 string_set(Globals
.ctx
, (char **)lp_parm_ptr(NULL
, &parm_table
[i
]), "");
672 string_set(Globals
.ctx
, &sDefault
.fstype
, FSTYPE_STRING
);
673 string_set(Globals
.ctx
, &sDefault
.printjob_username
, "%U");
675 init_printer_values(Globals
.ctx
, &sDefault
);
677 sDefault
.ntvfs_handler
= (const char **)str_list_make_v3(NULL
, "unixuid default", NULL
);
679 DEBUG(3, ("Initialising global parameters\n"));
681 /* Must manually force to upper case here, as this does not go via the handler */
682 string_set(Globals
.ctx
, &Globals
.netbios_name
, myhostname_upper());
684 string_set(Globals
.ctx
, &Globals
.smb_passwd_file
, get_dyn_SMB_PASSWD_FILE());
685 string_set(Globals
.ctx
, &Globals
.private_dir
, get_dyn_PRIVATE_DIR());
687 /* use the new 'hash2' method by default, with a prefix of 1 */
688 string_set(Globals
.ctx
, &Globals
.mangling_method
, "hash2");
689 Globals
.mangle_prefix
= 1;
691 string_set(Globals
.ctx
, &Globals
.guest_account
, GUEST_ACCOUNT
);
693 /* using UTF8 by default allows us to support all chars */
694 string_set(Globals
.ctx
, &Globals
.unix_charset
, DEFAULT_UNIX_CHARSET
);
696 /* Use codepage 850 as a default for the dos character set */
697 string_set(Globals
.ctx
, &Globals
.dos_charset
, DEFAULT_DOS_CHARSET
);
700 * Allow the default PASSWD_CHAT to be overridden in local.h.
702 string_set(Globals
.ctx
, &Globals
.passwd_chat
, DEFAULT_PASSWD_CHAT
);
704 string_set(Globals
.ctx
, &Globals
.workgroup
, DEFAULT_WORKGROUP
);
706 string_set(Globals
.ctx
, &Globals
.passwd_program
, "");
707 string_set(Globals
.ctx
, &Globals
.lock_directory
, get_dyn_LOCKDIR());
708 string_set(Globals
.ctx
, &Globals
.state_directory
, get_dyn_STATEDIR());
709 string_set(Globals
.ctx
, &Globals
.cache_directory
, get_dyn_CACHEDIR());
710 string_set(Globals
.ctx
, &Globals
.pid_directory
, get_dyn_PIDDIR());
711 string_set(Globals
.ctx
, &Globals
.nbt_client_socket_address
, "0.0.0.0");
713 * By default support explicit binding to broadcast
716 Globals
.nmbd_bind_explicit_broadcast
= true;
718 s
= talloc_asprintf(talloc_tos(), "Samba %s", samba_version_string());
720 smb_panic("init_globals: ENOMEM");
722 string_set(Globals
.ctx
, &Globals
.server_string
, s
);
725 string_set(Globals
.ctx
, &Globals
.panic_action
, "/bin/sleep 999999999");
728 string_set(Globals
.ctx
, &Globals
.socket_options
, DEFAULT_SOCKET_OPTIONS
);
730 string_set(Globals
.ctx
, &Globals
.logon_drive
, "");
731 /* %N is the NIS auto.home server if -DAUTOHOME is used, else same as %L */
732 string_set(Globals
.ctx
, &Globals
.logon_home
, "\\\\%N\\%U");
733 string_set(Globals
.ctx
, &Globals
.logon_path
, "\\\\%N\\%U\\profile");
735 Globals
.name_resolve_order
= (const char **)str_list_make_v3(NULL
, "lmhosts wins host bcast", NULL
);
736 string_set(Globals
.ctx
, &Globals
.password_server
, "*");
738 Globals
.algorithmic_rid_base
= BASE_RID
;
740 Globals
.load_printers
= true;
741 Globals
.printcap_cache_time
= 750; /* 12.5 minutes */
743 Globals
.config_backend
= config_backend
;
744 Globals
._server_role
= ROLE_AUTO
;
746 /* Was 65535 (0xFFFF). 0x4101 matches W2K and causes major speed improvements... */
747 /* Discovered by 2 days of pain by Don McCall @ HP :-). */
748 Globals
.max_xmit
= 0x4104;
749 Globals
.max_mux
= 50; /* This is *needed* for profile support. */
750 Globals
.lpq_cache_time
= 30; /* changed to handle large print servers better -- jerry */
751 Globals
._disable_spoolss
= false;
752 Globals
.max_smbd_processes
= 0;/* no limit specified */
753 Globals
.username_level
= 0;
754 Globals
.deadtime
= 0;
755 Globals
.getwd_cache
= true;
756 Globals
.large_readwrite
= true;
757 Globals
.max_log_size
= 5000;
758 Globals
.max_open_files
= max_open_files();
759 Globals
.server_max_protocol
= PROTOCOL_SMB3_00
;
760 Globals
.server_min_protocol
= PROTOCOL_LANMAN1
;
761 Globals
.client_max_protocol
= PROTOCOL_NT1
;
762 Globals
.client_min_protocol
= PROTOCOL_CORE
;
763 Globals
._security
= SEC_AUTO
;
764 Globals
.encrypt_passwords
= true;
765 Globals
.client_schannel
= Auto
;
766 Globals
.winbind_sealed_pipes
= true;
767 Globals
.require_strong_key
= true;
768 Globals
.server_schannel
= Auto
;
769 Globals
.read_raw
= true;
770 Globals
.write_raw
= true;
771 Globals
.null_passwords
= false;
772 Globals
.old_password_allowed_period
= 60;
773 Globals
.obey_pam_restrictions
= false;
775 Globals
.syslog_only
= false;
776 Globals
.timestamp_logs
= true;
777 string_set(Globals
.ctx
, &Globals
.log_level
, "0");
778 Globals
.debug_prefix_timestamp
= false;
779 Globals
.debug_hires_timestamp
= true;
780 Globals
.debug_pid
= false;
781 Globals
.debug_uid
= false;
782 Globals
.debug_class
= false;
783 Globals
.enable_core_files
= true;
784 Globals
.max_ttl
= 60 * 60 * 24 * 3; /* 3 days default. */
785 Globals
.max_wins_ttl
= 60 * 60 * 24 * 6; /* 6 days default. */
786 Globals
.min_wins_ttl
= 60 * 60 * 6; /* 6 hours default. */
787 Globals
.machine_password_timeout
= 60 * 60 * 24 * 7; /* 7 days default. */
788 Globals
.lm_announce
= Auto
; /* = Auto: send only if LM clients found */
789 Globals
.lm_interval
= 60;
790 #if (defined(HAVE_NETGROUP) && defined(WITH_AUTOMOUNT))
791 Globals
.nis_homedir
= false;
792 #ifdef WITH_NISPLUS_HOME
793 string_set(Globals
.ctx
, &Globals
.homedir_map
, "auto_home.org_dir");
795 string_set(Globals
.ctx
, &Globals
.homedir_map
, "auto.home");
798 Globals
.time_server
= false;
799 Globals
.bind_interfaces_only
= false;
800 Globals
.unix_password_sync
= false;
801 Globals
.pam_password_change
= false;
802 Globals
.passwd_chat_debug
= false;
803 Globals
.passwd_chat_timeout
= 2; /* 2 second default. */
804 Globals
.nt_pipe_support
= true; /* Do NT pipes by default. */
805 Globals
.nt_status_support
= true; /* Use NT status by default. */
806 Globals
.stat_cache
= true; /* use stat cache by default */
807 Globals
.max_stat_cache_size
= 256; /* 256k by default */
808 Globals
.restrict_anonymous
= 0;
809 Globals
.client_lanman_auth
= false; /* Do NOT use the LanMan hash if it is available */
810 Globals
.client_plaintext_auth
= false; /* Do NOT use a plaintext password even if is requested by the server */
811 Globals
.lanman_auth
= false; /* Do NOT use the LanMan hash, even if it is supplied */
812 Globals
.ntlm_auth
= true; /* Do use NTLMv1 if it is supplied by the client (otherwise NTLMv2) */
813 Globals
.client_ntlmv2_auth
= true; /* Client should always use use NTLMv2, as we can't tell that the server supports it, but most modern servers do */
814 /* Note, that we will also use NTLM2 session security (which is different), if it is available */
816 Globals
.map_to_guest
= 0; /* By Default, "Never" */
817 Globals
.oplock_break_wait_time
= 0; /* By Default, 0 msecs. */
818 Globals
.enhanced_browsing
= true;
819 Globals
.lock_spin_time
= WINDOWS_MINIMUM_LOCK_TIMEOUT_MS
; /* msec. */
820 #ifdef MMAP_BLACKLIST
821 Globals
.use_mmap
= false;
823 Globals
.use_mmap
= true;
825 Globals
.unicode
= true;
826 Globals
.unix_extensions
= true;
827 Globals
.reset_on_zero_vc
= false;
828 Globals
.log_writeable_files_on_exit
= false;
829 Globals
.create_krb5_conf
= true;
830 Globals
.winbindMaxDomainConnections
= 1;
832 /* hostname lookups can be very expensive and are broken on
833 a large number of sites (tridge) */
834 Globals
.hostname_lookups
= false;
836 string_set(Globals
.ctx
, &Globals
.passdb_backend
, "tdbsam");
837 string_set(Globals
.ctx
, &Globals
.ldap_suffix
, "");
838 string_set(Globals
.ctx
, &Globals
.szLdapMachineSuffix
, "");
839 string_set(Globals
.ctx
, &Globals
.szLdapUserSuffix
, "");
840 string_set(Globals
.ctx
, &Globals
.szLdapGroupSuffix
, "");
841 string_set(Globals
.ctx
, &Globals
.szLdapIdmapSuffix
, "");
843 string_set(Globals
.ctx
, &Globals
.ldap_admin_dn
, "");
844 Globals
.ldap_ssl
= LDAP_SSL_START_TLS
;
845 Globals
.ldap_ssl_ads
= false;
846 Globals
.ldap_deref
= -1;
847 Globals
.ldap_passwd_sync
= LDAP_PASSWD_SYNC_OFF
;
848 Globals
.ldap_delete_dn
= false;
849 Globals
.ldap_replication_sleep
= 1000; /* wait 1 sec for replication */
850 Globals
.ldap_follow_referral
= Auto
;
851 Globals
.ldap_timeout
= LDAP_DEFAULT_TIMEOUT
;
852 Globals
.ldap_connection_timeout
= LDAP_CONNECTION_DEFAULT_TIMEOUT
;
853 Globals
.ldap_page_size
= LDAP_PAGE_SIZE
;
855 Globals
.ldap_debug_level
= 0;
856 Globals
.ldap_debug_threshold
= 10;
858 /* This is what we tell the afs client. in reality we set the token
859 * to never expire, though, when this runs out the afs client will
860 * forget the token. Set to 0 to get NEVERDATE.*/
861 Globals
.afs_token_lifetime
= 604800;
862 Globals
.cups_connection_timeout
= CUPS_DEFAULT_CONNECTION_TIMEOUT
;
864 /* these parameters are set to defaults that are more appropriate
865 for the increasing samba install base:
867 as a member of the workgroup, that will possibly become a
868 _local_ master browser (lm = true). this is opposed to a forced
869 local master browser startup (pm = true).
871 doesn't provide WINS server service by default (wsupp = false),
872 and doesn't provide domain master browser services by default, either.
876 Globals
.show_add_printer_wizard
= true;
877 Globals
.os_level
= 20;
878 Globals
.local_master
= true;
879 Globals
._domain_master
= Auto
; /* depending on _domain_logons */
880 Globals
._domain_logons
= false;
881 Globals
.browse_list
= true;
882 Globals
.we_are_a_wins_server
= false;
883 Globals
.wins_proxy
= false;
885 TALLOC_FREE(Globals
.init_logon_delayed_hosts
);
886 Globals
.init_logon_delay
= 100; /* 100 ms default delay */
888 Globals
.wins_dns_proxy
= true;
890 Globals
.allow_trusted_domains
= true;
891 string_set(Globals
.ctx
, &Globals
.szIdmapBackend
, "tdb");
893 string_set(Globals
.ctx
, &Globals
.template_shell
, "/bin/false");
894 string_set(Globals
.ctx
, &Globals
.template_homedir
, "/home/%D/%U");
895 string_set(Globals
.ctx
, &Globals
.winbind_separator
, "\\");
896 string_set(Globals
.ctx
, &Globals
.winbindd_socket_directory
, dyn_WINBINDD_SOCKET_DIR
);
898 string_set(Globals
.ctx
, &Globals
.cups_server
, "");
899 string_set(Globals
.ctx
, &Globals
.iprint_server
, "");
901 string_set(Globals
.ctx
, &Globals
._ctdbd_socket
, "");
903 Globals
.cluster_addresses
= NULL
;
904 Globals
.clustering
= false;
905 Globals
.ctdb_timeout
= 0;
906 Globals
.ctdb_locktime_warn_threshold
= 0;
908 Globals
.winbind_cache_time
= 300; /* 5 minutes */
909 Globals
.winbind_reconnect_delay
= 30; /* 30 seconds */
910 Globals
.winbind_max_clients
= 200;
911 Globals
.winbind_enum_users
= false;
912 Globals
.winbind_enum_groups
= false;
913 Globals
.winbind_use_default_domain
= false;
914 Globals
.winbind_trusted_domains_only
= false;
915 Globals
.winbind_nested_groups
= true;
916 Globals
.winbind_expand_groups
= 1;
917 Globals
.winbind_nss_info
= (const char **)str_list_make_v3(NULL
, "template", NULL
);
918 Globals
.winbind_refresh_tickets
= false;
919 Globals
.winbind_offline_logon
= false;
921 Globals
.idmap_cache_time
= 86400 * 7; /* a week by default */
922 Globals
.idmap_negative_cache_time
= 120; /* 2 minutes by default */
924 Globals
.passdb_expand_explicit
= false;
926 Globals
.name_cache_timeout
= 660; /* In seconds */
928 Globals
.use_spnego
= true;
929 Globals
.client_use_spnego
= true;
931 Globals
.client_signing
= SMB_SIGNING_DEFAULT
;
932 Globals
.server_signing
= SMB_SIGNING_DEFAULT
;
934 Globals
.defer_sharing_violations
= true;
935 Globals
.smb_ports
= (const char **)str_list_make_v3(NULL
, SMB_PORTS
, NULL
);
937 Globals
.enable_privileges
= true;
938 Globals
.host_msdfs
= true;
939 Globals
.enable_asu_support
= false;
941 /* User defined shares. */
942 s
= talloc_asprintf(talloc_tos(), "%s/usershares", get_dyn_STATEDIR());
944 smb_panic("init_globals: ENOMEM");
946 string_set(Globals
.ctx
, &Globals
.usershare_path
, s
);
948 string_set(Globals
.ctx
, &Globals
.usershare_template_share
, "");
949 Globals
.usershare_max_shares
= 0;
950 /* By default disallow sharing of directories not owned by the sharer. */
951 Globals
.usershare_owner_only
= true;
952 /* By default disallow guest access to usershares. */
953 Globals
.usershare_allow_guests
= false;
955 Globals
.keepalive
= DEFAULT_KEEPALIVE
;
957 /* By default no shares out of the registry */
958 Globals
.registry_shares
= false;
960 Globals
.iminreceivefile
= 0;
962 Globals
.map_untrusted_to_domain
= false;
963 Globals
.multicast_dns_register
= true;
965 Globals
.smb2_max_read
= DEFAULT_SMB2_MAX_READ
;
966 Globals
.smb2_max_write
= DEFAULT_SMB2_MAX_WRITE
;
967 Globals
.smb2_max_trans
= DEFAULT_SMB2_MAX_TRANSACT
;
968 Globals
.ismb2_max_credits
= DEFAULT_SMB2_MAX_CREDITS
;
970 string_set(Globals
.ctx
, &Globals
.ncalrpc_dir
, get_dyn_NCALRPCDIR());
972 Globals
.server_services
= (const char **)str_list_make_v3(NULL
, "s3fs rpc nbt wrepl ldap cldap kdc drepl winbindd ntp_signd kcc dnsupdate dns", NULL
);
974 Globals
.dcerpc_endpoint_servers
= (const char **)str_list_make_v3(NULL
, "epmapper wkssvc rpcecho samr netlogon lsarpc spoolss drsuapi dssetup unixinfo browser eventlog6 backupkey dnsserver", NULL
);
976 Globals
.tls_enabled
= true;
978 string_set(Globals
.ctx
, &Globals
._tls_keyfile
, "tls/key.pem");
979 string_set(Globals
.ctx
, &Globals
._tls_certfile
, "tls/cert.pem");
980 string_set(Globals
.ctx
, &Globals
._tls_cafile
, "tls/ca.pem");
982 string_set(Globals
.ctx
, &Globals
.share_backend
, "classic");
984 Globals
.iPreferredMaster
= Auto
;
986 Globals
.allow_dns_updates
= DNS_UPDATE_SIGNED
;
988 string_set(Globals
.ctx
, &Globals
.ntp_signd_socket_directory
, get_dyn_NTP_SIGND_SOCKET_DIR());
990 string_set(Globals
.ctx
, &Globals
.winbindd_privileged_socket_directory
, get_dyn_WINBINDD_PRIVILEGED_SOCKET_DIR());
992 s
= talloc_asprintf(talloc_tos(), "%s/samba_kcc", get_dyn_SCRIPTSBINDIR());
994 smb_panic("init_globals: ENOMEM");
996 Globals
.samba_kcc_command
= (const char **)str_list_make_v3(NULL
, s
, NULL
);
999 s
= talloc_asprintf(talloc_tos(), "%s/samba_dnsupdate", get_dyn_SCRIPTSBINDIR());
1001 smb_panic("init_globals: ENOMEM");
1003 Globals
.dns_update_command
= (const char **)str_list_make_v3(NULL
, s
, NULL
);
1006 s
= talloc_asprintf(talloc_tos(), "%s/samba_spnupdate", get_dyn_SCRIPTSBINDIR());
1008 smb_panic("init_globals: ENOMEM");
1010 Globals
.spn_update_command
= (const char **)str_list_make_v3(NULL
, s
, NULL
);
1013 Globals
.nsupdate_command
= (const char **)str_list_make_v3(NULL
, "/usr/bin/nsupdate -g", NULL
);
1015 Globals
.rndc_command
= (const char **)str_list_make_v3(NULL
, "/usr/sbin/rndc", NULL
);
1017 Globals
.cldap_port
= 389;
1019 Globals
.dgram_port
= 138;
1021 Globals
.nbt_port
= 137;
1023 Globals
.krb5_port
= 88;
1025 Globals
.kpasswd_port
= 464;
1027 Globals
.web_port
= 901;
1029 /* Now put back the settings that were set with lp_set_cmdline() */
1030 apply_lp_set_cmdline();
1033 /*******************************************************************
1034 Convenience routine to grab string parameters into talloced memory
1035 and run standard_sub_basic on them. The buffers can be written to by
1036 callers without affecting the source string.
1037 ********************************************************************/
1039 char *lp_string(TALLOC_CTX
*ctx
, const char *s
)
1043 /* The follow debug is useful for tracking down memory problems
1044 especially if you have an inner loop that is calling a lp_*()
1045 function that returns a string. Perhaps this debug should be
1046 present all the time? */
1049 DEBUG(10, ("lp_string(%s)\n", s
));
1055 ret
= talloc_sub_basic(ctx
,
1056 get_current_username(),
1057 current_user_info
.domain
,
1059 if (trim_char(ret
, '\"', '\"')) {
1060 if (strchr(ret
,'\"') != NULL
) {
1062 ret
= talloc_sub_basic(ctx
,
1063 get_current_username(),
1064 current_user_info
.domain
,
1072 In this section all the functions that are used to access the
1073 parameters from the rest of the program are defined
1076 #define FN_GLOBAL_STRING(fn_name,ptr) \
1077 char *lp_ ## fn_name(TALLOC_CTX *ctx) {return(lp_string((ctx), *(char **)(&Globals.ptr) ? *(char **)(&Globals.ptr) : ""));}
1078 #define FN_GLOBAL_CONST_STRING(fn_name,ptr) \
1079 const char *lp_ ## fn_name(void) {return(*(const char * const *)(&Globals.ptr) ? *(const char * const *)(&Globals.ptr) : "");}
1080 #define FN_GLOBAL_LIST(fn_name,ptr) \
1081 const char **lp_ ## fn_name(void) {return(*(const char ***)(&Globals.ptr));}
1082 #define FN_GLOBAL_BOOL(fn_name,ptr) \
1083 bool lp_ ## fn_name(void) {return(*(bool *)(&Globals.ptr));}
1084 #define FN_GLOBAL_CHAR(fn_name,ptr) \
1085 char lp_ ## fn_name(void) {return(*(char *)(&Globals.ptr));}
1086 #define FN_GLOBAL_INTEGER(fn_name,ptr) \
1087 int lp_ ## fn_name(void) {return(*(int *)(&Globals.ptr));}
1089 #define FN_LOCAL_STRING(fn_name,val) \
1090 char *lp_ ## fn_name(TALLOC_CTX *ctx,int i) {return(lp_string((ctx), (LP_SNUM_OK(i) && ServicePtrs[(i)]->val) ? ServicePtrs[(i)]->val : sDefault.val));}
1091 #define FN_LOCAL_CONST_STRING(fn_name,val) \
1092 const char *lp_ ## fn_name(int i) {return (const char *)((LP_SNUM_OK(i) && ServicePtrs[(i)]->val) ? ServicePtrs[(i)]->val : sDefault.val);}
1093 #define FN_LOCAL_LIST(fn_name,val) \
1094 const char **lp_ ## fn_name(int i) {return(const char **)(LP_SNUM_OK(i)? ServicePtrs[(i)]->val : sDefault.val);}
1095 #define FN_LOCAL_BOOL(fn_name,val) \
1096 bool lp_ ## fn_name(int i) {return(bool)(LP_SNUM_OK(i)? ServicePtrs[(i)]->val : sDefault.val);}
1097 #define FN_LOCAL_INTEGER(fn_name,val) \
1098 int lp_ ## fn_name(int i) {return(LP_SNUM_OK(i)? ServicePtrs[(i)]->val : sDefault.val);}
1100 #define FN_LOCAL_PARM_BOOL(fn_name,val) \
1101 bool lp_ ## fn_name(const struct share_params *p) {return(bool)(LP_SNUM_OK(p->service)? ServicePtrs[(p->service)]->val : sDefault.val);}
1102 #define FN_LOCAL_PARM_INTEGER(fn_name,val) \
1103 int lp_ ## fn_name(const struct share_params *p) {return(LP_SNUM_OK(p->service)? ServicePtrs[(p->service)]->val : sDefault.val);}
1104 #define FN_LOCAL_PARM_CHAR(fn_name,val) \
1105 char lp_ ## fn_name(const struct share_params *p) {return(LP_SNUM_OK(p->service)? ServicePtrs[(p->service)]->val : sDefault.val);}
1107 static FN_GLOBAL_INTEGER(winbind_max_domain_connections_int
,
1108 winbindMaxDomainConnections
)
1110 int lp_winbind_max_domain_connections(void)
1112 if (lp_winbind_offline_logon() &&
1113 lp_winbind_max_domain_connections_int() > 1) {
1114 DEBUG(1, ("offline logons active, restricting max domain "
1115 "connections to 1\n"));
1118 return MAX(1, lp_winbind_max_domain_connections_int());
1121 int lp_smb2_max_credits(void)
1123 if (Globals
.ismb2_max_credits
== 0) {
1124 Globals
.ismb2_max_credits
= DEFAULT_SMB2_MAX_CREDITS
;
1126 return Globals
.ismb2_max_credits
;
1128 int lp_cups_encrypt(void)
1131 #ifdef HAVE_HTTPCONNECTENCRYPT
1132 switch (Globals
.CupsEncrypt
) {
1134 result
= HTTP_ENCRYPT_REQUIRED
;
1137 result
= HTTP_ENCRYPT_ALWAYS
;
1140 result
= HTTP_ENCRYPT_NEVER
;
1147 /* These functions remain in source3/param for now */
1149 #include "lib/param/param_functions.c"
1151 FN_LOCAL_STRING(servicename
, szService
)
1152 FN_LOCAL_CONST_STRING(const_servicename
, szService
)
1154 /* These functions cannot be auto-generated */
1155 FN_LOCAL_BOOL(autoloaded
, autoloaded
)
1156 FN_GLOBAL_CONST_STRING(dnsdomain
, dnsdomain
)
1158 /* local prototypes */
1160 static int map_parameter_canonical(const char *pszParmName
, bool *inverse
);
1161 static const char *get_boolean(bool bool_value
);
1162 static bool do_parameter(const char *pszParmName
, const char *pszParmValue
,
1164 static bool do_section(const char *pszSectionName
, void *userdata
);
1165 static bool hash_a_service(const char *name
, int number
);
1166 static void free_service_byindex(int iService
);
1167 static void show_parameter(int parmIndex
);
1168 static bool is_synonym_of(int parm1
, int parm2
, bool *inverse
);
1171 * This is a helper function for parametrical options support. It returns a
1172 * pointer to parametrical option value if it exists or NULL otherwise. Actual
1173 * parametrical functions are quite simple
1175 static struct parmlist_entry
*get_parametrics(int snum
, const char *type
,
1178 if (snum
>= iNumServices
) return NULL
;
1181 return get_parametric_helper(NULL
, type
, option
, Globals
.param_opt
);
1183 return get_parametric_helper(ServicePtrs
[snum
],
1184 type
, option
, Globals
.param_opt
);
1189 #define MISSING_PARAMETER(name) \
1190 DEBUG(0, ("%s(): value is NULL or empty!\n", #name))
1192 /*******************************************************************
1193 convenience routine to return enum parameters.
1194 ********************************************************************/
1195 static int lp_enum(const char *s
,const struct enum_list
*_enum
)
1199 if (!s
|| !*s
|| !_enum
) {
1200 MISSING_PARAMETER(lp_enum
);
1204 for (i
=0; _enum
[i
].name
; i
++) {
1205 if (strequal(_enum
[i
].name
,s
))
1206 return _enum
[i
].value
;
1209 DEBUG(0,("lp_enum(%s,enum): value is not in enum_list!\n",s
));
1213 #undef MISSING_PARAMETER
1215 /* Return parametric option from a given service. Type is a part of option before ':' */
1216 /* Parametric option has following syntax: 'Type: option = value' */
1217 char *lp_parm_talloc_string(TALLOC_CTX
*ctx
, int snum
, const char *type
, const char *option
, const char *def
)
1219 struct parmlist_entry
*data
= get_parametrics(snum
, type
, option
);
1221 if (data
== NULL
||data
->value
==NULL
) {
1223 return lp_string(ctx
, def
);
1229 return lp_string(ctx
, data
->value
);
1232 /* Return parametric option from a given service. Type is a part of option before ':' */
1233 /* Parametric option has following syntax: 'Type: option = value' */
1234 const char *lp_parm_const_string(int snum
, const char *type
, const char *option
, const char *def
)
1236 struct parmlist_entry
*data
= get_parametrics(snum
, type
, option
);
1238 if (data
== NULL
||data
->value
==NULL
)
1245 /* Return parametric option from a given service. Type is a part of option before ':' */
1246 /* Parametric option has following syntax: 'Type: option = value' */
1248 const char **lp_parm_string_list(int snum
, const char *type
, const char *option
, const char **def
)
1250 struct parmlist_entry
*data
= get_parametrics(snum
, type
, option
);
1252 if (data
== NULL
||data
->value
==NULL
)
1253 return (const char **)def
;
1255 if (data
->list
==NULL
) {
1256 data
->list
= str_list_make_v3(NULL
, data
->value
, NULL
);
1259 return (const char **)data
->list
;
1262 /* Return parametric option from a given service. Type is a part of option before ':' */
1263 /* Parametric option has following syntax: 'Type: option = value' */
1265 int lp_parm_int(int snum
, const char *type
, const char *option
, int def
)
1267 struct parmlist_entry
*data
= get_parametrics(snum
, type
, option
);
1269 if (data
&& data
->value
&& *data
->value
)
1270 return lp_int(data
->value
);
1275 /* Return parametric option from a given service. Type is a part of option before ':' */
1276 /* Parametric option has following syntax: 'Type: option = value' */
1278 unsigned long lp_parm_ulong(int snum
, const char *type
, const char *option
, unsigned long def
)
1280 struct parmlist_entry
*data
= get_parametrics(snum
, type
, option
);
1282 if (data
&& data
->value
&& *data
->value
)
1283 return lp_ulong(data
->value
);
1288 /* Return parametric option from a given service. Type is a part of option before ':' */
1289 /* Parametric option has following syntax: 'Type: option = value' */
1291 bool lp_parm_bool(int snum
, const char *type
, const char *option
, bool def
)
1293 struct parmlist_entry
*data
= get_parametrics(snum
, type
, option
);
1295 if (data
&& data
->value
&& *data
->value
)
1296 return lp_bool(data
->value
);
1301 /* Return parametric option from a given service. Type is a part of option before ':' */
1302 /* Parametric option has following syntax: 'Type: option = value' */
1304 int lp_parm_enum(int snum
, const char *type
, const char *option
,
1305 const struct enum_list
*_enum
, int def
)
1307 struct parmlist_entry
*data
= get_parametrics(snum
, type
, option
);
1309 if (data
&& data
->value
&& *data
->value
&& _enum
)
1310 return lp_enum(data
->value
, _enum
);
1316 * free a param_opts structure.
1317 * param_opts handling should be moved to talloc;
1318 * then this whole functions reduces to a TALLOC_FREE().
1321 static void free_param_opts(struct parmlist_entry
**popts
)
1323 struct parmlist_entry
*opt
, *next_opt
;
1325 if (*popts
!= NULL
) {
1326 DEBUG(5, ("Freeing parametrics:\n"));
1329 while (opt
!= NULL
) {
1330 string_free(&opt
->key
);
1331 string_free(&opt
->value
);
1332 TALLOC_FREE(opt
->list
);
1333 next_opt
= opt
->next
;
1340 /***************************************************************************
1341 Free the dynamically allocated parts of a service struct.
1342 ***************************************************************************/
1344 static void free_service(struct loadparm_service
*pservice
)
1349 if (pservice
->szService
)
1350 DEBUG(5, ("free_service: Freeing service %s\n",
1351 pservice
->szService
));
1353 free_parameters(pservice
);
1355 string_free(&pservice
->szService
);
1356 TALLOC_FREE(pservice
->copymap
);
1358 free_param_opts(&pservice
->param_opt
);
1360 ZERO_STRUCTP(pservice
);
1364 /***************************************************************************
1365 remove a service indexed in the ServicePtrs array from the ServiceHash
1366 and free the dynamically allocated parts
1367 ***************************************************************************/
1369 static void free_service_byindex(int idx
)
1371 if ( !LP_SNUM_OK(idx
) )
1374 ServicePtrs
[idx
]->valid
= false;
1376 /* we have to cleanup the hash record */
1378 if (ServicePtrs
[idx
]->szService
) {
1379 char *canon_name
= canonicalize_servicename(
1381 ServicePtrs
[idx
]->szService
);
1383 dbwrap_delete_bystring(ServiceHash
, canon_name
);
1384 TALLOC_FREE(canon_name
);
1387 free_service(ServicePtrs
[idx
]);
1388 talloc_free_children(ServicePtrs
[idx
]);
1391 /***************************************************************************
1392 Add a new service to the services array initialising it with the given
1394 ***************************************************************************/
1396 static int add_a_service(const struct loadparm_service
*pservice
, const char *name
)
1399 int num_to_alloc
= iNumServices
+ 1;
1400 struct loadparm_service
**tsp
= NULL
;
1402 /* it might already exist */
1404 i
= getservicebyname(name
, NULL
);
1410 /* if not, then create one */
1412 tsp
= talloc_realloc(NULL
, ServicePtrs
, struct loadparm_service
*, num_to_alloc
);
1414 DEBUG(0,("add_a_service: failed to enlarge ServicePtrs!\n"));
1418 ServicePtrs
[iNumServices
] = talloc_zero(NULL
, struct loadparm_service
);
1419 if (!ServicePtrs
[iNumServices
]) {
1420 DEBUG(0,("add_a_service: out of memory!\n"));
1425 ServicePtrs
[i
]->valid
= true;
1427 copy_service(ServicePtrs
[i
], pservice
, NULL
);
1429 string_set(ServicePtrs
[i
], &ServicePtrs
[i
]->szService
, name
);
1431 DEBUG(8,("add_a_service: Creating snum = %d for %s\n",
1432 i
, ServicePtrs
[i
]->szService
));
1434 if (!hash_a_service(ServicePtrs
[i
]->szService
, i
)) {
1441 /***************************************************************************
1442 Convert a string to uppercase and remove whitespaces.
1443 ***************************************************************************/
1445 char *canonicalize_servicename(TALLOC_CTX
*ctx
, const char *src
)
1450 DEBUG(0,("canonicalize_servicename: NULL source name!\n"));
1454 result
= talloc_strdup(ctx
, src
);
1455 SMB_ASSERT(result
!= NULL
);
1457 if (!strlower_m(result
)) {
1458 TALLOC_FREE(result
);
1464 /***************************************************************************
1465 Add a name/index pair for the services array to the hash table.
1466 ***************************************************************************/
1468 static bool hash_a_service(const char *name
, int idx
)
1472 if ( !ServiceHash
) {
1473 DEBUG(10,("hash_a_service: creating servicehash\n"));
1474 ServiceHash
= db_open_rbt(NULL
);
1475 if ( !ServiceHash
) {
1476 DEBUG(0,("hash_a_service: open tdb servicehash failed!\n"));
1481 DEBUG(10,("hash_a_service: hashing index %d for service name %s\n",
1484 canon_name
= canonicalize_servicename(talloc_tos(), name
);
1486 dbwrap_store_bystring(ServiceHash
, canon_name
,
1487 make_tdb_data((uint8
*)&idx
, sizeof(idx
)),
1490 TALLOC_FREE(canon_name
);
1495 /***************************************************************************
1496 Add a new home service, with the specified home directory, defaults coming
1498 ***************************************************************************/
1500 bool lp_add_home(const char *pszHomename
, int iDefaultService
,
1501 const char *user
, const char *pszHomedir
)
1505 if (pszHomename
== NULL
|| user
== NULL
|| pszHomedir
== NULL
||
1506 pszHomedir
[0] == '\0') {
1510 i
= add_a_service(ServicePtrs
[iDefaultService
], pszHomename
);
1515 if (!(*(ServicePtrs
[iDefaultService
]->path
))
1516 || strequal(ServicePtrs
[iDefaultService
]->path
,
1517 lp_path(talloc_tos(), GLOBAL_SECTION_SNUM
))) {
1518 string_set(ServicePtrs
[i
], &ServicePtrs
[i
]->path
, pszHomedir
);
1521 if (!(*(ServicePtrs
[i
]->comment
))) {
1522 char *comment
= talloc_asprintf(talloc_tos(), "Home directory of %s", user
);
1523 if (comment
== NULL
) {
1526 string_set(ServicePtrs
[i
], &ServicePtrs
[i
]->comment
, comment
);
1527 TALLOC_FREE(comment
);
1530 /* set the browseable flag from the global default */
1532 ServicePtrs
[i
]->browseable
= sDefault
.browseable
;
1533 ServicePtrs
[i
]->access_based_share_enum
= sDefault
.access_based_share_enum
;
1535 ServicePtrs
[i
]->autoloaded
= true;
1537 DEBUG(3, ("adding home's share [%s] for user '%s' at '%s'\n", pszHomename
,
1538 user
, ServicePtrs
[i
]->path
));
1543 /***************************************************************************
1544 Add a new service, based on an old one.
1545 ***************************************************************************/
1547 int lp_add_service(const char *pszService
, int iDefaultService
)
1549 if (iDefaultService
< 0) {
1550 return add_a_service(&sDefault
, pszService
);
1553 return (add_a_service(ServicePtrs
[iDefaultService
], pszService
));
1556 /***************************************************************************
1557 Add the IPC service.
1558 ***************************************************************************/
1560 static bool lp_add_ipc(const char *ipc_name
, bool guest_ok
)
1562 char *comment
= NULL
;
1563 int i
= add_a_service(&sDefault
, ipc_name
);
1568 comment
= talloc_asprintf(talloc_tos(), "IPC Service (%s)",
1569 Globals
.server_string
);
1570 if (comment
== NULL
) {
1574 string_set(ServicePtrs
[i
], &ServicePtrs
[i
]->path
, tmpdir());
1575 string_set(ServicePtrs
[i
], &ServicePtrs
[i
]->username
, "");
1576 string_set(ServicePtrs
[i
], &ServicePtrs
[i
]->comment
, comment
);
1577 string_set(ServicePtrs
[i
], &ServicePtrs
[i
]->fstype
, "IPC");
1578 ServicePtrs
[i
]->max_connections
= 0;
1579 ServicePtrs
[i
]->bAvailable
= true;
1580 ServicePtrs
[i
]->read_only
= true;
1581 ServicePtrs
[i
]->guest_only
= false;
1582 ServicePtrs
[i
]->administrative_share
= true;
1583 ServicePtrs
[i
]->guest_ok
= guest_ok
;
1584 ServicePtrs
[i
]->printable
= false;
1585 ServicePtrs
[i
]->browseable
= sDefault
.browseable
;
1587 DEBUG(3, ("adding IPC service\n"));
1589 TALLOC_FREE(comment
);
1593 /***************************************************************************
1594 Add a new printer service, with defaults coming from service iFrom.
1595 ***************************************************************************/
1597 bool lp_add_printer(const char *pszPrintername
, int iDefaultService
)
1599 const char *comment
= "From Printcap";
1600 int i
= add_a_service(ServicePtrs
[iDefaultService
], pszPrintername
);
1605 /* note that we do NOT default the availability flag to true - */
1606 /* we take it from the default service passed. This allows all */
1607 /* dynamic printers to be disabled by disabling the [printers] */
1608 /* entry (if/when the 'available' keyword is implemented!). */
1610 /* the printer name is set to the service name. */
1611 string_set(ServicePtrs
[i
], &ServicePtrs
[i
]->_printername
, pszPrintername
);
1612 string_set(ServicePtrs
[i
], &ServicePtrs
[i
]->comment
, comment
);
1614 /* set the browseable flag from the gloabl default */
1615 ServicePtrs
[i
]->browseable
= sDefault
.browseable
;
1617 /* Printers cannot be read_only. */
1618 ServicePtrs
[i
]->read_only
= false;
1619 /* No oplocks on printer services. */
1620 ServicePtrs
[i
]->oplocks
= false;
1621 /* Printer services must be printable. */
1622 ServicePtrs
[i
]->printable
= true;
1624 DEBUG(3, ("adding printer service %s\n", pszPrintername
));
1630 /***************************************************************************
1631 Check whether the given parameter name is valid.
1632 Parametric options (names containing a colon) are considered valid.
1633 ***************************************************************************/
1635 bool lp_parameter_is_valid(const char *pszParmName
)
1637 return ((lpcfg_map_parameter(pszParmName
) != -1) ||
1638 (strchr(pszParmName
, ':') != NULL
));
1641 /***************************************************************************
1642 Check whether the given name is the name of a global parameter.
1643 Returns true for strings belonging to parameters of class
1644 P_GLOBAL, false for all other strings, also for parametric options
1645 and strings not belonging to any option.
1646 ***************************************************************************/
1648 bool lp_parameter_is_global(const char *pszParmName
)
1650 int num
= lpcfg_map_parameter(pszParmName
);
1653 return (parm_table
[num
].p_class
== P_GLOBAL
);
1659 /**************************************************************************
1660 Check whether the given name is the canonical name of a parameter.
1661 Returns false if it is not a valid parameter Name.
1662 For parametric options, true is returned.
1663 **************************************************************************/
1665 bool lp_parameter_is_canonical(const char *parm_name
)
1667 if (!lp_parameter_is_valid(parm_name
)) {
1671 return (lpcfg_map_parameter(parm_name
) ==
1672 map_parameter_canonical(parm_name
, NULL
));
1675 /**************************************************************************
1676 Determine the canonical name for a parameter.
1677 Indicate when it is an inverse (boolean) synonym instead of a
1679 **************************************************************************/
1681 bool lp_canonicalize_parameter(const char *parm_name
, const char **canon_parm
,
1686 if (!lp_parameter_is_valid(parm_name
)) {
1691 num
= map_parameter_canonical(parm_name
, inverse
);
1693 /* parametric option */
1694 *canon_parm
= parm_name
;
1696 *canon_parm
= parm_table
[num
].label
;
1703 /**************************************************************************
1704 Determine the canonical name for a parameter.
1705 Turn the value given into the inverse boolean expression when
1706 the synonym is an invers boolean synonym.
1708 Return true if parm_name is a valid parameter name and
1709 in case it is an invers boolean synonym, if the val string could
1710 successfully be converted to the reverse bool.
1711 Return false in all other cases.
1712 **************************************************************************/
1714 bool lp_canonicalize_parameter_with_value(const char *parm_name
,
1716 const char **canon_parm
,
1717 const char **canon_val
)
1722 if (!lp_parameter_is_valid(parm_name
)) {
1728 num
= map_parameter_canonical(parm_name
, &inverse
);
1730 /* parametric option */
1731 *canon_parm
= parm_name
;
1734 *canon_parm
= parm_table
[num
].label
;
1736 if (!lp_invert_boolean(val
, canon_val
)) {
1748 /***************************************************************************
1749 Map a parameter's string representation to the index of the canonical
1750 form of the parameter (it might be a synonym).
1751 Returns -1 if the parameter string is not recognised.
1752 ***************************************************************************/
1754 static int map_parameter_canonical(const char *pszParmName
, bool *inverse
)
1756 int parm_num
, canon_num
;
1757 bool loc_inverse
= false;
1759 parm_num
= lpcfg_map_parameter(pszParmName
);
1760 if ((parm_num
< 0) || !(parm_table
[parm_num
].flags
& FLAG_HIDE
)) {
1761 /* invalid, parametric or no canidate for synonyms ... */
1765 for (canon_num
= 0; parm_table
[canon_num
].label
; canon_num
++) {
1766 if (is_synonym_of(parm_num
, canon_num
, &loc_inverse
)) {
1767 parm_num
= canon_num
;
1773 if (inverse
!= NULL
) {
1774 *inverse
= loc_inverse
;
1779 /***************************************************************************
1780 return true if parameter number parm1 is a synonym of parameter
1781 number parm2 (parm2 being the principal name).
1782 set inverse to true if parm1 is P_BOOLREV and parm2 is P_BOOL,
1784 ***************************************************************************/
1786 static bool is_synonym_of(int parm1
, int parm2
, bool *inverse
)
1788 if ((parm_table
[parm1
].offset
== parm_table
[parm2
].offset
) &&
1789 (parm_table
[parm1
].p_class
== parm_table
[parm2
].p_class
) &&
1790 (parm_table
[parm1
].flags
& FLAG_HIDE
) &&
1791 !(parm_table
[parm2
].flags
& FLAG_HIDE
))
1793 if (inverse
!= NULL
) {
1794 if ((parm_table
[parm1
].type
== P_BOOLREV
) &&
1795 (parm_table
[parm2
].type
== P_BOOL
))
1807 /***************************************************************************
1808 Show one parameter's name, type, [values,] and flags.
1809 (helper functions for show_parameter_list)
1810 ***************************************************************************/
1812 static void show_parameter(int parmIndex
)
1814 int enumIndex
, flagIndex
;
1819 const char *type
[] = { "P_BOOL", "P_BOOLREV", "P_CHAR", "P_INTEGER",
1820 "P_OCTAL", "P_LIST", "P_STRING", "P_USTRING",
1822 unsigned flags
[] = { FLAG_BASIC
, FLAG_SHARE
, FLAG_PRINT
, FLAG_GLOBAL
,
1823 FLAG_WIZARD
, FLAG_ADVANCED
, FLAG_DEVELOPER
, FLAG_DEPRECATED
,
1825 const char *flag_names
[] = { "FLAG_BASIC", "FLAG_SHARE", "FLAG_PRINT",
1826 "FLAG_GLOBAL", "FLAG_WIZARD", "FLAG_ADVANCED", "FLAG_DEVELOPER",
1827 "FLAG_DEPRECATED", "FLAG_HIDE", NULL
};
1829 printf("%s=%s", parm_table
[parmIndex
].label
,
1830 type
[parm_table
[parmIndex
].type
]);
1831 if (parm_table
[parmIndex
].type
== P_ENUM
) {
1834 parm_table
[parmIndex
].enum_list
[enumIndex
].name
;
1838 enumIndex
? "|" : "",
1839 parm_table
[parmIndex
].enum_list
[enumIndex
].name
);
1844 for (flagIndex
=0; flag_names
[flagIndex
]; flagIndex
++) {
1845 if (parm_table
[parmIndex
].flags
& flags
[flagIndex
]) {
1848 flag_names
[flagIndex
]);
1853 /* output synonyms */
1855 for (parmIndex2
=0; parm_table
[parmIndex2
].label
; parmIndex2
++) {
1856 if (is_synonym_of(parmIndex
, parmIndex2
, &inverse
)) {
1857 printf(" (%ssynonym of %s)", inverse
? "inverse " : "",
1858 parm_table
[parmIndex2
].label
);
1859 } else if (is_synonym_of(parmIndex2
, parmIndex
, &inverse
)) {
1861 printf(" (synonyms: ");
1866 printf("%s%s", parm_table
[parmIndex2
].label
,
1867 inverse
? "[i]" : "");
1877 /***************************************************************************
1878 Show all parameter's name, type, [values,] and flags.
1879 ***************************************************************************/
1881 void show_parameter_list(void)
1883 int classIndex
, parmIndex
;
1884 const char *section_names
[] = { "local", "global", NULL
};
1886 for (classIndex
=0; section_names
[classIndex
]; classIndex
++) {
1887 printf("[%s]\n", section_names
[classIndex
]);
1888 for (parmIndex
= 0; parm_table
[parmIndex
].label
; parmIndex
++) {
1889 if (parm_table
[parmIndex
].p_class
== classIndex
) {
1890 show_parameter(parmIndex
);
1896 /***************************************************************************
1897 Get the standard string representation of a boolean value ("yes" or "no")
1898 ***************************************************************************/
1900 static const char *get_boolean(bool bool_value
)
1902 static const char *yes_str
= "yes";
1903 static const char *no_str
= "no";
1905 return (bool_value
? yes_str
: no_str
);
1908 /***************************************************************************
1909 Provide the string of the negated boolean value associated to the boolean
1910 given as a string. Returns false if the passed string does not correctly
1911 represent a boolean.
1912 ***************************************************************************/
1914 bool lp_invert_boolean(const char *str
, const char **inverse_str
)
1918 if (!set_boolean(str
, &val
)) {
1922 *inverse_str
= get_boolean(!val
);
1926 /***************************************************************************
1927 Provide the canonical string representation of a boolean value given
1928 as a string. Return true on success, false if the string given does
1929 not correctly represent a boolean.
1930 ***************************************************************************/
1932 bool lp_canonicalize_boolean(const char *str
, const char**canon_str
)
1936 if (!set_boolean(str
, &val
)) {
1940 *canon_str
= get_boolean(val
);
1944 /***************************************************************************
1945 Find a service by name. Otherwise works like get_service.
1946 ***************************************************************************/
1948 int getservicebyname(const char *pszServiceName
, struct loadparm_service
*pserviceDest
)
1955 if (ServiceHash
== NULL
) {
1959 canon_name
= canonicalize_servicename(talloc_tos(), pszServiceName
);
1961 status
= dbwrap_fetch_bystring(ServiceHash
, canon_name
, canon_name
,
1964 if (NT_STATUS_IS_OK(status
) &&
1965 (data
.dptr
!= NULL
) &&
1966 (data
.dsize
== sizeof(iService
)))
1968 iService
= *(int *)data
.dptr
;
1971 TALLOC_FREE(canon_name
);
1973 if ((iService
!= -1) && (LP_SNUM_OK(iService
))
1974 && (pserviceDest
!= NULL
)) {
1975 copy_service(pserviceDest
, ServicePtrs
[iService
], NULL
);
1981 /* Return a pointer to a service by name. Unlike getservicebyname, it does not copy the service */
1982 struct loadparm_service
*lp_service(const char *pszServiceName
)
1984 int iService
= getservicebyname(pszServiceName
, NULL
);
1985 if (iService
== -1 || !LP_SNUM_OK(iService
)) {
1988 return ServicePtrs
[iService
];
1991 struct loadparm_service
*lp_servicebynum(int snum
)
1993 if ((snum
== -1) || !LP_SNUM_OK(snum
)) {
1996 return ServicePtrs
[snum
];
1999 struct loadparm_service
*lp_default_loadparm_service()
2004 /***************************************************************************
2005 Check a service for consistency. Return false if the service is in any way
2006 incomplete or faulty, else true.
2007 ***************************************************************************/
2009 bool service_ok(int iService
)
2014 if (ServicePtrs
[iService
]->szService
[0] == '\0') {
2015 DEBUG(0, ("The following message indicates an internal error:\n"));
2016 DEBUG(0, ("No service name in service entry.\n"));
2020 /* The [printers] entry MUST be printable. I'm all for flexibility, but */
2021 /* I can't see why you'd want a non-printable printer service... */
2022 if (strwicmp(ServicePtrs
[iService
]->szService
, PRINTERS_NAME
) == 0) {
2023 if (!ServicePtrs
[iService
]->printable
) {
2024 DEBUG(0, ("WARNING: [%s] service MUST be printable!\n",
2025 ServicePtrs
[iService
]->szService
));
2026 ServicePtrs
[iService
]->printable
= true;
2028 /* [printers] service must also be non-browsable. */
2029 if (ServicePtrs
[iService
]->browseable
)
2030 ServicePtrs
[iService
]->browseable
= false;
2033 if (ServicePtrs
[iService
]->path
[0] == '\0' &&
2034 strwicmp(ServicePtrs
[iService
]->szService
, HOMES_NAME
) != 0 &&
2035 ServicePtrs
[iService
]->msdfs_proxy
[0] == '\0'
2037 DEBUG(0, ("WARNING: No path in service %s - making it unavailable!\n",
2038 ServicePtrs
[iService
]->szService
));
2039 ServicePtrs
[iService
]->bAvailable
= false;
2042 /* If a service is flagged unavailable, log the fact at level 1. */
2043 if (!ServicePtrs
[iService
]->bAvailable
)
2044 DEBUG(1, ("NOTE: Service %s is flagged unavailable.\n",
2045 ServicePtrs
[iService
]->szService
));
2050 static struct smbconf_ctx
*lp_smbconf_ctx(void)
2053 static struct smbconf_ctx
*conf_ctx
= NULL
;
2055 if (conf_ctx
== NULL
) {
2056 err
= smbconf_init(NULL
, &conf_ctx
, "registry:");
2057 if (!SBC_ERROR_IS_OK(err
)) {
2058 DEBUG(1, ("error initializing registry configuration: "
2059 "%s\n", sbcErrorString(err
)));
2067 static bool process_smbconf_service(struct smbconf_service
*service
)
2072 if (service
== NULL
) {
2076 ret
= do_section(service
->name
, NULL
);
2080 for (count
= 0; count
< service
->num_params
; count
++) {
2081 ret
= do_parameter(service
->param_names
[count
],
2082 service
->param_values
[count
],
2088 if (iServiceIndex
>= 0) {
2089 return service_ok(iServiceIndex
);
2095 * load a service from registry and activate it
2097 bool process_registry_service(const char *service_name
)
2100 struct smbconf_service
*service
= NULL
;
2101 TALLOC_CTX
*mem_ctx
= talloc_stackframe();
2102 struct smbconf_ctx
*conf_ctx
= lp_smbconf_ctx();
2105 if (conf_ctx
== NULL
) {
2109 DEBUG(5, ("process_registry_service: service name %s\n", service_name
));
2111 if (!smbconf_share_exists(conf_ctx
, service_name
)) {
2113 * Registry does not contain data for this service (yet),
2114 * but make sure lp_load doesn't return false.
2120 err
= smbconf_get_share(conf_ctx
, mem_ctx
, service_name
, &service
);
2121 if (!SBC_ERROR_IS_OK(err
)) {
2125 ret
= process_smbconf_service(service
);
2131 smbconf_changed(conf_ctx
, &conf_last_csn
, NULL
, NULL
);
2134 TALLOC_FREE(mem_ctx
);
2139 * process_registry_globals
2141 static bool process_registry_globals(void)
2145 add_to_file_list(NULL
, &file_lists
, INCLUDE_REGISTRY_NAME
, INCLUDE_REGISTRY_NAME
);
2147 ret
= do_parameter("registry shares", "yes", NULL
);
2152 return process_registry_service(GLOBAL_NAME
);
2155 bool process_registry_shares(void)
2159 struct smbconf_service
**service
= NULL
;
2160 uint32_t num_shares
= 0;
2161 TALLOC_CTX
*mem_ctx
= talloc_stackframe();
2162 struct smbconf_ctx
*conf_ctx
= lp_smbconf_ctx();
2165 if (conf_ctx
== NULL
) {
2169 err
= smbconf_get_config(conf_ctx
, mem_ctx
, &num_shares
, &service
);
2170 if (!SBC_ERROR_IS_OK(err
)) {
2176 for (count
= 0; count
< num_shares
; count
++) {
2177 if (strequal(service
[count
]->name
, GLOBAL_NAME
)) {
2180 ret
= process_smbconf_service(service
[count
]);
2187 smbconf_changed(conf_ctx
, &conf_last_csn
, NULL
, NULL
);
2190 TALLOC_FREE(mem_ctx
);
2195 * reload those shares from registry that are already
2196 * activated in the services array.
2198 static bool reload_registry_shares(void)
2203 for (i
= 0; i
< iNumServices
; i
++) {
2208 if (ServicePtrs
[i
]->usershare
== USERSHARE_VALID
) {
2212 ret
= process_registry_service(ServicePtrs
[i
]->szService
);
2223 #define MAX_INCLUDE_DEPTH 100
2225 static uint8_t include_depth
;
2228 * Free the file lists
2230 static void free_file_list(void)
2232 struct file_lists
*f
;
2233 struct file_lists
*next
;
2246 * Utility function for outsiders to check if we're running on registry.
2248 bool lp_config_backend_is_registry(void)
2250 return (lp_config_backend() == CONFIG_BACKEND_REGISTRY
);
2254 * Utility function to check if the config backend is FILE.
2256 bool lp_config_backend_is_file(void)
2258 return (lp_config_backend() == CONFIG_BACKEND_FILE
);
2261 /*******************************************************************
2262 Check if a config file has changed date.
2263 ********************************************************************/
2265 bool lp_file_list_changed(void)
2267 struct file_lists
*f
= file_lists
;
2269 DEBUG(6, ("lp_file_list_changed()\n"));
2274 if (strequal(f
->name
, INCLUDE_REGISTRY_NAME
)) {
2275 struct smbconf_ctx
*conf_ctx
= lp_smbconf_ctx();
2277 if (conf_ctx
== NULL
) {
2280 if (smbconf_changed(conf_ctx
, &conf_last_csn
, NULL
,
2283 DEBUGADD(6, ("registry config changed\n"));
2288 n2
= talloc_sub_basic(talloc_tos(),
2289 get_current_username(),
2290 current_user_info
.domain
,
2295 DEBUGADD(6, ("file %s -> %s last mod_time: %s\n",
2296 f
->name
, n2
, ctime(&f
->modtime
)));
2298 mod_time
= file_modtime(n2
);
2301 ((f
->modtime
!= mod_time
) ||
2302 (f
->subfname
== NULL
) ||
2303 (strcmp(n2
, f
->subfname
) != 0)))
2306 ("file %s modified: %s\n", n2
,
2308 f
->modtime
= mod_time
;
2309 TALLOC_FREE(f
->subfname
);
2310 f
->subfname
= talloc_strdup(f
, n2
);
2311 if (f
->subfname
== NULL
) {
2312 smb_panic("talloc_strdup failed");
2326 * Initialize iconv conversion descriptors.
2328 * This is called the first time it is needed, and also called again
2329 * every time the configuration is reloaded, because the charset or
2330 * codepage might have changed.
2332 static void init_iconv(void)
2334 global_iconv_handle
= smb_iconv_handle_reinit(NULL
, lp_dos_charset(),
2336 true, global_iconv_handle
);
2339 /***************************************************************************
2340 Handle the include operation.
2341 ***************************************************************************/
2342 static bool bAllowIncludeRegistry
= true;
2344 bool lp_include(struct loadparm_context
*unused
, int snum
, const char *pszParmValue
, char **ptr
)
2348 if (include_depth
>= MAX_INCLUDE_DEPTH
) {
2349 DEBUG(0, ("Error: Maximum include depth (%u) exceeded!\n",
2354 if (strequal(pszParmValue
, INCLUDE_REGISTRY_NAME
)) {
2355 if (!bAllowIncludeRegistry
) {
2358 if (bInGlobalSection
) {
2361 ret
= process_registry_globals();
2365 DEBUG(1, ("\"include = registry\" only effective "
2366 "in %s section\n", GLOBAL_NAME
));
2371 fname
= talloc_sub_basic(talloc_tos(), get_current_username(),
2372 current_user_info
.domain
,
2375 add_to_file_list(NULL
, &file_lists
, pszParmValue
, fname
);
2378 string_set(Globals
.ctx
, ptr
, fname
);
2380 string_set(ServicePtrs
[snum
], ptr
, fname
);
2383 if (file_exist(fname
)) {
2386 ret
= pm_process(fname
, do_section
, do_parameter
, NULL
);
2392 DEBUG(2, ("Can't find include file %s\n", fname
));
2397 bool lp_idmap_range(const char *domain_name
, uint32_t *low
, uint32_t *high
)
2399 char *config_option
= NULL
;
2400 const char *range
= NULL
;
2403 SMB_ASSERT(low
!= NULL
);
2404 SMB_ASSERT(high
!= NULL
);
2406 if ((domain_name
== NULL
) || (domain_name
[0] == '\0')) {
2410 config_option
= talloc_asprintf(talloc_tos(), "idmap config %s",
2412 if (config_option
== NULL
) {
2413 DEBUG(0, ("out of memory\n"));
2417 range
= lp_parm_const_string(-1, config_option
, "range", NULL
);
2418 if (range
== NULL
) {
2419 DEBUG(1, ("idmap range not specified for domain '%s'\n", domain_name
));
2423 if (sscanf(range
, "%u - %u", low
, high
) != 2) {
2424 DEBUG(1, ("error parsing idmap range '%s' for domain '%s'\n",
2425 range
, domain_name
));
2432 talloc_free(config_option
);
2437 bool lp_idmap_default_range(uint32_t *low
, uint32_t *high
)
2439 return lp_idmap_range("*", low
, high
);
2442 const char *lp_idmap_backend(const char *domain_name
)
2444 char *config_option
= NULL
;
2445 const char *backend
= NULL
;
2447 if ((domain_name
== NULL
) || (domain_name
[0] == '\0')) {
2451 config_option
= talloc_asprintf(talloc_tos(), "idmap config %s",
2453 if (config_option
== NULL
) {
2454 DEBUG(0, ("out of memory\n"));
2458 backend
= lp_parm_const_string(-1, config_option
, "backend", NULL
);
2459 if (backend
== NULL
) {
2460 DEBUG(1, ("idmap backend not specified for domain '%s'\n", domain_name
));
2465 talloc_free(config_option
);
2469 const char *lp_idmap_default_backend(void)
2471 return lp_idmap_backend("*");
2474 /***************************************************************************
2475 Handle ldap suffixes - default to ldapsuffix if sub-suffixes are not defined.
2476 ***************************************************************************/
2478 static const char *append_ldap_suffix(TALLOC_CTX
*ctx
, const char *str
)
2480 const char *suffix_string
;
2482 suffix_string
= talloc_asprintf(ctx
, "%s,%s", str
,
2483 Globals
.ldap_suffix
);
2484 if ( !suffix_string
) {
2485 DEBUG(0,("append_ldap_suffix: talloc_asprintf() failed!\n"));
2489 return suffix_string
;
2492 const char *lp_ldap_machine_suffix(TALLOC_CTX
*ctx
)
2494 if (Globals
.szLdapMachineSuffix
[0])
2495 return append_ldap_suffix(ctx
, Globals
.szLdapMachineSuffix
);
2497 return lp_string(ctx
, Globals
.ldap_suffix
);
2500 const char *lp_ldap_user_suffix(TALLOC_CTX
*ctx
)
2502 if (Globals
.szLdapUserSuffix
[0])
2503 return append_ldap_suffix(ctx
, Globals
.szLdapUserSuffix
);
2505 return lp_string(ctx
, Globals
.ldap_suffix
);
2508 const char *lp_ldap_group_suffix(TALLOC_CTX
*ctx
)
2510 if (Globals
.szLdapGroupSuffix
[0])
2511 return append_ldap_suffix(ctx
, Globals
.szLdapGroupSuffix
);
2513 return lp_string(ctx
, Globals
.ldap_suffix
);
2516 const char *lp_ldap_idmap_suffix(TALLOC_CTX
*ctx
)
2518 if (Globals
.szLdapIdmapSuffix
[0])
2519 return append_ldap_suffix(ctx
, Globals
.szLdapIdmapSuffix
);
2521 return lp_string(ctx
, Globals
.ldap_suffix
);
2525 return the parameter pointer for a parameter
2527 void *lp_parm_ptr(struct loadparm_service
*service
, struct parm_struct
*parm
)
2529 if (service
== NULL
) {
2530 if (parm
->p_class
== P_LOCAL
)
2531 return (void *)(((char *)&sDefault
)+parm
->offset
);
2532 else if (parm
->p_class
== P_GLOBAL
)
2533 return (void *)(((char *)&Globals
)+parm
->offset
);
2536 return (void *)(((char *)service
) + parm
->offset
);
2540 /***************************************************************************
2541 Return the local pointer to a parameter given the service number and parameter
2542 ***************************************************************************/
2544 void *lp_local_ptr_by_snum(int snum
, struct parm_struct
*parm
)
2546 return lp_parm_ptr(ServicePtrs
[snum
], parm
);
2549 /***************************************************************************
2550 Process a parameter for a particular service number. If snum < 0
2551 then assume we are in the globals.
2552 ***************************************************************************/
2554 bool lp_do_parameter(int snum
, const char *pszParmName
, const char *pszParmValue
)
2557 void *parm_ptr
= NULL
; /* where we are going to store the result */
2558 struct parmlist_entry
**opt_list
;
2559 TALLOC_CTX
*mem_ctx
;
2560 TALLOC_CTX
*frame
= talloc_stackframe();
2562 parmnum
= lpcfg_map_parameter(pszParmName
);
2565 if (strchr(pszParmName
, ':') == NULL
) {
2566 DEBUG(0, ("Ignoring unknown parameter \"%s\"\n",
2573 * We've got a parametric option
2577 opt_list
= &Globals
.param_opt
;
2578 set_param_opt(NULL
, opt_list
, pszParmName
, pszParmValue
, 0);
2580 opt_list
= &ServicePtrs
[snum
]->param_opt
;
2581 set_param_opt(ServicePtrs
[snum
], opt_list
, pszParmName
, pszParmValue
, 0);
2588 /* if it's already been set by the command line, then we don't
2590 if (parm_table
[parmnum
].flags
& FLAG_CMDLINE
) {
2595 if (parm_table
[parmnum
].flags
& FLAG_DEPRECATED
) {
2596 DEBUG(1, ("WARNING: The \"%s\" option is deprecated\n",
2600 /* we might point at a service, the default service or a global */
2602 parm_ptr
= lp_parm_ptr(NULL
, &parm_table
[parmnum
]);
2604 if (parm_table
[parmnum
].p_class
== P_GLOBAL
) {
2606 ("Global parameter %s found in service section!\n",
2611 parm_ptr
= lp_local_ptr_by_snum(snum
, &parm_table
[parmnum
]);
2615 if (!ServicePtrs
[snum
]->copymap
)
2616 init_copymap(ServicePtrs
[snum
]);
2618 /* this handles the aliases - set the copymap for other entries with
2619 the same data pointer */
2620 for (i
= 0; parm_table
[i
].label
; i
++) {
2621 if ((parm_table
[i
].offset
== parm_table
[parmnum
].offset
)
2622 && (parm_table
[i
].p_class
== parm_table
[parmnum
].p_class
)) {
2623 bitmap_clear(ServicePtrs
[snum
]->copymap
, i
);
2626 mem_ctx
= ServicePtrs
[snum
];
2628 mem_ctx
= Globals
.ctx
;
2631 /* if it is a special case then go ahead */
2632 if (parm_table
[parmnum
].special
) {
2634 struct loadparm_context
*lp_ctx
= loadparm_init_s3(frame
,
2635 loadparm_s3_helpers());
2636 lp_ctx
->sDefault
= &sDefault
;
2637 lp_ctx
->services
= ServicePtrs
;
2638 ok
= parm_table
[parmnum
].special(lp_ctx
, snum
, pszParmValue
,
2646 /* switch on the type of variable it is */
2647 switch (parm_table
[parmnum
].type
)
2651 if (!set_boolean(pszParmValue
, &b
)) {
2652 DEBUG(0, ("set_variable_helper(%s): value is not "
2653 "boolean!\n", pszParmValue
));
2656 *(bool *)parm_ptr
= b
;
2662 if (!set_boolean(pszParmValue
, &b
)) {
2663 DEBUG(0, ("set_variable_helper(%s): value is not "
2664 "boolean!\n", pszParmValue
));
2667 *(bool *)parm_ptr
= !b
;
2672 *(int *)parm_ptr
= lp_int(pszParmValue
);
2676 *(char *)parm_ptr
= *pszParmValue
;
2680 i
= sscanf(pszParmValue
, "%o", (int *)parm_ptr
);
2682 DEBUG ( 0, ("Invalid octal number %s\n", pszParmName
));
2690 if (conv_str_size_error(pszParmValue
, &val
)) {
2691 if (val
<= INT_MAX
) {
2692 *(int *)parm_ptr
= (int)val
;
2697 DEBUG(0, ("set_variable_helper(%s): value is not "
2698 "a valid size specifier!\n", pszParmValue
));
2703 TALLOC_FREE(*(char ***)parm_ptr
);
2704 *(const char * const **)parm_ptr
2705 = (const char * const *)str_list_make_v3(mem_ctx
,
2706 pszParmValue
, NULL
);
2711 char **new_list
= str_list_make_v3(mem_ctx
,
2712 pszParmValue
, NULL
);
2713 if (new_list
== NULL
) {
2717 for (i
=0; new_list
[i
]; i
++) {
2718 if (*(const char ***)parm_ptr
!= NULL
&&
2719 new_list
[i
][0] == '+' &&
2722 if (!str_list_check(*(const char ***)parm_ptr
,
2724 *(const char ***)parm_ptr
= str_list_add(*(const char ***)parm_ptr
,
2727 } else if (*(const char ***)parm_ptr
!= NULL
&&
2728 new_list
[i
][0] == '-' &&
2731 str_list_remove(*(const char ***)parm_ptr
,
2735 DEBUG(0, ("Unsupported list syntax for: %s = %s\n",
2736 pszParmName
, pszParmValue
));
2739 *(const char * const **)parm_ptr
= (const char * const *) new_list
;
2747 lpcfg_string_set(mem_ctx
, (char **)parm_ptr
, pszParmValue
);
2751 lpcfg_string_set_upper(mem_ctx
, (char **)parm_ptr
, pszParmValue
);
2755 if (!lp_set_enum_parm(&parm_table
[parmnum
], pszParmValue
, (int*)parm_ptr
)) {
2767 /***************************************************************************
2768 set a parameter, marking it with FLAG_CMDLINE. Parameters marked as
2769 FLAG_CMDLINE won't be overridden by loads from smb.conf.
2770 ***************************************************************************/
2772 static bool lp_set_cmdline_helper(const char *pszParmName
, const char *pszParmValue
)
2775 parmnum
= lpcfg_map_parameter(pszParmName
);
2777 parm_table
[parmnum
].flags
&= ~FLAG_CMDLINE
;
2778 if (!lp_do_parameter(-1, pszParmName
, pszParmValue
)) {
2781 parm_table
[parmnum
].flags
|= FLAG_CMDLINE
;
2783 /* we have to also set FLAG_CMDLINE on aliases. Aliases must
2784 * be grouped in the table, so we don't have to search the
2787 i
>=0 && parm_table
[i
].offset
== parm_table
[parmnum
].offset
2788 && parm_table
[i
].p_class
== parm_table
[parmnum
].p_class
;
2790 parm_table
[i
].flags
|= FLAG_CMDLINE
;
2792 for (i
=parmnum
+1;i
<num_parameters() && parm_table
[i
].offset
== parm_table
[parmnum
].offset
2793 && parm_table
[i
].p_class
== parm_table
[parmnum
].p_class
;i
++) {
2794 parm_table
[i
].flags
|= FLAG_CMDLINE
;
2800 /* it might be parametric */
2801 if (strchr(pszParmName
, ':') != NULL
) {
2802 set_param_opt(NULL
, &Globals
.param_opt
, pszParmName
, pszParmValue
, FLAG_CMDLINE
);
2806 DEBUG(0, ("Ignoring unknown parameter \"%s\"\n", pszParmName
));
2810 bool lp_set_cmdline(const char *pszParmName
, const char *pszParmValue
)
2813 TALLOC_CTX
*frame
= talloc_stackframe();
2815 ret
= lp_set_cmdline_helper(pszParmName
, pszParmValue
);
2817 store_lp_set_cmdline(pszParmName
, pszParmValue
);
2824 /***************************************************************************
2825 Process a parameter.
2826 ***************************************************************************/
2828 static bool do_parameter(const char *pszParmName
, const char *pszParmValue
,
2831 if (!bInGlobalSection
&& bGlobalOnly
)
2834 DEBUGADD(4, ("doing parameter %s = %s\n", pszParmName
, pszParmValue
));
2836 return (lp_do_parameter(bInGlobalSection
? -2 : iServiceIndex
,
2837 pszParmName
, pszParmValue
));
2840 /***************************************************************************
2841 Initialize any local variables in the sDefault table, after parsing a
2843 ***************************************************************************/
2845 static void init_locals(void)
2848 * We run this check once the [globals] is parsed, to force
2849 * the VFS objects and other per-share settings we need for
2850 * the standard way a AD DC is operated. We may change these
2851 * as our code evolves, which is why we force these settings.
2853 * We can't do this at the end of lp_load_ex(), as by that
2854 * point the services have been loaded and they will already
2855 * have "" as their vfs objects.
2857 if (lp_server_role() == ROLE_ACTIVE_DIRECTORY_DC
) {
2858 const char **vfs_objects
= lp_vfs_objects(-1);
2859 if (!vfs_objects
|| !vfs_objects
[0]) {
2860 if (lp_parm_const_string(-1, "xattr_tdb", "file", NULL
)) {
2861 lp_do_parameter(-1, "vfs objects", "dfs_samba4 acl_xattr xattr_tdb");
2862 } else if (lp_parm_const_string(-1, "posix", "eadb", NULL
)) {
2863 lp_do_parameter(-1, "vfs objects", "dfs_samba4 acl_xattr posix_eadb");
2865 lp_do_parameter(-1, "vfs objects", "dfs_samba4 acl_xattr");
2869 lp_do_parameter(-1, "map hidden", "no");
2870 lp_do_parameter(-1, "map system", "no");
2871 lp_do_parameter(-1, "map readonly", "no");
2872 lp_do_parameter(-1, "map archive", "no");
2873 lp_do_parameter(-1, "store dos attributes", "yes");
2877 /***************************************************************************
2878 Process a new section (service). At this stage all sections are services.
2879 Later we'll have special sections that permit server parameters to be set.
2880 Returns true on success, false on failure.
2881 ***************************************************************************/
2883 static bool do_section(const char *pszSectionName
, void *userdata
)
2886 bool isglobal
= ((strwicmp(pszSectionName
, GLOBAL_NAME
) == 0) ||
2887 (strwicmp(pszSectionName
, GLOBAL_NAME2
) == 0));
2890 /* if we were in a global section then do the local inits */
2891 if (bInGlobalSection
&& !isglobal
)
2894 /* if we've just struck a global section, note the fact. */
2895 bInGlobalSection
= isglobal
;
2897 /* check for multiple global sections */
2898 if (bInGlobalSection
) {
2899 DEBUG(3, ("Processing section \"[%s]\"\n", pszSectionName
));
2903 if (!bInGlobalSection
&& bGlobalOnly
)
2906 /* if we have a current service, tidy it up before moving on */
2909 if (iServiceIndex
>= 0)
2910 bRetval
= service_ok(iServiceIndex
);
2912 /* if all is still well, move to the next record in the services array */
2914 /* We put this here to avoid an odd message order if messages are */
2915 /* issued by the post-processing of a previous section. */
2916 DEBUG(2, ("Processing section \"[%s]\"\n", pszSectionName
));
2918 iServiceIndex
= add_a_service(&sDefault
, pszSectionName
);
2919 if (iServiceIndex
< 0) {
2920 DEBUG(0, ("Failed to add a new service\n"));
2923 /* Clean all parametric options for service */
2924 /* They will be added during parsing again */
2925 free_param_opts(&ServicePtrs
[iServiceIndex
]->param_opt
);
2932 /***************************************************************************
2933 Determine if a partcular base parameter is currentl set to the default value.
2934 ***************************************************************************/
2936 static bool is_default(int i
)
2938 switch (parm_table
[i
].type
) {
2941 return str_list_equal((const char * const *)parm_table
[i
].def
.lvalue
,
2942 *(const char ***)lp_parm_ptr(NULL
,
2946 return strequal(parm_table
[i
].def
.svalue
,
2947 *(char **)lp_parm_ptr(NULL
,
2951 return parm_table
[i
].def
.bvalue
==
2952 *(bool *)lp_parm_ptr(NULL
,
2955 return parm_table
[i
].def
.cvalue
==
2956 *(char *)lp_parm_ptr(NULL
,
2962 return parm_table
[i
].def
.ivalue
==
2963 *(int *)lp_parm_ptr(NULL
,
2971 /***************************************************************************
2972 Display the contents of the global structure.
2973 ***************************************************************************/
2975 static void dump_globals(FILE *f
)
2978 struct parmlist_entry
*data
;
2980 fprintf(f
, "[global]\n");
2982 for (i
= 0; parm_table
[i
].label
; i
++)
2983 if (parm_table
[i
].p_class
== P_GLOBAL
&&
2984 !(parm_table
[i
].flags
& FLAG_META
) &&
2985 (i
== 0 || (parm_table
[i
].offset
!= parm_table
[i
- 1].offset
))) {
2986 if (defaults_saved
&& is_default(i
))
2988 fprintf(f
, "\t%s = ", parm_table
[i
].label
);
2989 lpcfg_print_parameter(&parm_table
[i
], lp_parm_ptr(NULL
,
2994 if (Globals
.param_opt
!= NULL
) {
2995 data
= Globals
.param_opt
;
2997 fprintf(f
, "\t%s = %s\n", data
->key
, data
->value
);
3004 /***************************************************************************
3005 Display the contents of a single services record.
3006 ***************************************************************************/
3008 static void dump_a_service(struct loadparm_service
*pService
, FILE * f
, bool show_defaults
)
3010 return lpcfg_dump_a_service(pService
, &sDefault
, f
, NULL
, show_defaults
);
3013 /***************************************************************************
3014 Display the contents of a parameter of a single services record.
3015 ***************************************************************************/
3017 bool dump_a_parameter(int snum
, char *parm_name
, FILE * f
, bool isGlobal
)
3019 bool result
= false;
3021 struct loadparm_context
*lp_ctx
;
3023 lp_ctx
= loadparm_init_s3(talloc_tos(), loadparm_s3_helpers());
3024 if (lp_ctx
== NULL
) {
3029 result
= lpcfg_dump_a_parameter(lp_ctx
, NULL
, parm_name
, f
);
3031 result
= lpcfg_dump_a_parameter(lp_ctx
, ServicePtrs
[snum
], parm_name
, f
);
3033 TALLOC_FREE(lp_ctx
);
3037 /***************************************************************************
3038 Return info about the requested parameter (given as a string).
3039 Return NULL when the string is not a valid parameter name.
3040 ***************************************************************************/
3042 struct parm_struct
*lp_get_parameter(const char *param_name
)
3044 int num
= lpcfg_map_parameter(param_name
);
3050 return &parm_table
[num
];
3054 /***************************************************************************
3055 Display the contents of a single copy structure.
3056 ***************************************************************************/
3057 static void dump_copy_map(bool *pcopymap
)
3063 printf("\n\tNon-Copied parameters:\n");
3065 for (i
= 0; parm_table
[i
].label
; i
++)
3066 if (parm_table
[i
].p_class
== P_LOCAL
&&
3067 parm_table
[i
].ptr
&& !pcopymap
[i
] &&
3068 (i
== 0 || (parm_table
[i
].ptr
!= parm_table
[i
- 1].ptr
)))
3070 printf("\t\t%s\n", parm_table
[i
].label
);
3075 /***************************************************************************
3076 Return TRUE if the passed service number is within range.
3077 ***************************************************************************/
3079 bool lp_snum_ok(int iService
)
3081 return (LP_SNUM_OK(iService
) && ServicePtrs
[iService
]->bAvailable
);
3084 /***************************************************************************
3085 Auto-load some home services.
3086 ***************************************************************************/
3088 static void lp_add_auto_services(char *str
)
3098 s
= talloc_strdup(talloc_tos(), str
);
3100 smb_panic("talloc_strdup failed");
3104 homes
= lp_servicenumber(HOMES_NAME
);
3106 for (p
= strtok_r(s
, LIST_SEP
, &saveptr
); p
;
3107 p
= strtok_r(NULL
, LIST_SEP
, &saveptr
)) {
3110 if (lp_servicenumber(p
) >= 0)
3113 home
= get_user_home_dir(talloc_tos(), p
);
3115 if (home
&& home
[0] && homes
>= 0)
3116 lp_add_home(p
, homes
, p
, home
);
3123 /***************************************************************************
3124 Auto-load one printer.
3125 ***************************************************************************/
3127 void lp_add_one_printer(const char *name
, const char *comment
,
3128 const char *location
, void *pdata
)
3130 int printers
= lp_servicenumber(PRINTERS_NAME
);
3133 if (lp_servicenumber(name
) < 0) {
3134 lp_add_printer(name
, printers
);
3135 if ((i
= lp_servicenumber(name
)) >= 0) {
3136 string_set(ServicePtrs
[i
], &ServicePtrs
[i
]->comment
, comment
);
3137 ServicePtrs
[i
]->autoloaded
= true;
3142 /***************************************************************************
3143 Have we loaded a services file yet?
3144 ***************************************************************************/
3146 bool lp_loaded(void)
3151 /***************************************************************************
3152 Unload unused services.
3153 ***************************************************************************/
3155 void lp_killunused(struct smbd_server_connection
*sconn
,
3156 bool (*snumused
) (struct smbd_server_connection
*, int))
3159 for (i
= 0; i
< iNumServices
; i
++) {
3163 /* don't kill autoloaded or usershare services */
3164 if ( ServicePtrs
[i
]->autoloaded
||
3165 ServicePtrs
[i
]->usershare
== USERSHARE_VALID
) {
3169 if (!snumused
|| !snumused(sconn
, i
)) {
3170 free_service_byindex(i
);
3176 * Kill all except autoloaded and usershare services - convenience wrapper
3178 void lp_kill_all_services(void)
3180 lp_killunused(NULL
, NULL
);
3183 /***************************************************************************
3185 ***************************************************************************/
3187 void lp_killservice(int iServiceIn
)
3189 if (VALID(iServiceIn
)) {
3190 free_service_byindex(iServiceIn
);
3194 /***************************************************************************
3195 Save the curent values of all global and sDefault parameters into the
3196 defaults union. This allows testparm to show only the
3197 changed (ie. non-default) parameters.
3198 ***************************************************************************/
3200 static void lp_save_defaults(void)
3203 for (i
= 0; parm_table
[i
].label
; i
++) {
3204 if (i
> 0 && parm_table
[i
].offset
== parm_table
[i
- 1].offset
3205 && parm_table
[i
].p_class
== parm_table
[i
- 1].p_class
)
3207 switch (parm_table
[i
].type
) {
3210 parm_table
[i
].def
.lvalue
= str_list_copy(
3211 NULL
, *(const char ***)lp_parm_ptr(NULL
, &parm_table
[i
]));
3215 parm_table
[i
].def
.svalue
= talloc_strdup(Globals
.ctx
, *(char **)lp_parm_ptr(NULL
, &parm_table
[i
]));
3216 if (parm_table
[i
].def
.svalue
== NULL
) {
3217 smb_panic("talloc_strdup failed");
3222 parm_table
[i
].def
.bvalue
=
3223 *(bool *)lp_parm_ptr(NULL
, &parm_table
[i
]);
3226 parm_table
[i
].def
.cvalue
=
3227 *(char *)lp_parm_ptr(NULL
, &parm_table
[i
]);
3233 parm_table
[i
].def
.ivalue
=
3234 *(int *)lp_parm_ptr(NULL
, &parm_table
[i
]);
3240 defaults_saved
= true;
3243 /***********************************************************
3244 If we should send plaintext/LANMAN passwords in the clinet
3245 ************************************************************/
3247 static void set_allowed_client_auth(void)
3249 if (Globals
.client_ntlmv2_auth
) {
3250 Globals
.client_lanman_auth
= false;
3252 if (!Globals
.client_lanman_auth
) {
3253 Globals
.client_plaintext_auth
= false;
3257 /***************************************************************************
3259 The following code allows smbd to read a user defined share file.
3260 Yes, this is my intent. Yes, I'm comfortable with that...
3262 THE FOLLOWING IS SECURITY CRITICAL CODE.
3264 It washes your clothes, it cleans your house, it guards you while you sleep...
3265 Do not f%^k with it....
3266 ***************************************************************************/
3268 #define MAX_USERSHARE_FILE_SIZE (10*1024)
3270 /***************************************************************************
3271 Check allowed stat state of a usershare file.
3272 Ensure we print out who is dicking with us so the admin can
3273 get their sorry ass fired.
3274 ***************************************************************************/
3276 static bool check_usershare_stat(const char *fname
,
3277 const SMB_STRUCT_STAT
*psbuf
)
3279 if (!S_ISREG(psbuf
->st_ex_mode
)) {
3280 DEBUG(0,("check_usershare_stat: file %s owned by uid %u is "
3281 "not a regular file\n",
3282 fname
, (unsigned int)psbuf
->st_ex_uid
));
3286 /* Ensure this doesn't have the other write bit set. */
3287 if (psbuf
->st_ex_mode
& S_IWOTH
) {
3288 DEBUG(0,("check_usershare_stat: file %s owned by uid %u allows "
3289 "public write. Refusing to allow as a usershare file.\n",
3290 fname
, (unsigned int)psbuf
->st_ex_uid
));
3294 /* Should be 10k or less. */
3295 if (psbuf
->st_ex_size
> MAX_USERSHARE_FILE_SIZE
) {
3296 DEBUG(0,("check_usershare_stat: file %s owned by uid %u is "
3297 "too large (%u) to be a user share file.\n",
3298 fname
, (unsigned int)psbuf
->st_ex_uid
,
3299 (unsigned int)psbuf
->st_ex_size
));
3306 /***************************************************************************
3307 Parse the contents of a usershare file.
3308 ***************************************************************************/
3310 enum usershare_err
parse_usershare_file(TALLOC_CTX
*ctx
,
3311 SMB_STRUCT_STAT
*psbuf
,
3312 const char *servicename
,
3316 char **pp_sharepath
,
3318 char **pp_cp_servicename
,
3319 struct security_descriptor
**ppsd
,
3322 const char **prefixallowlist
= lp_usershare_prefix_allow_list();
3323 const char **prefixdenylist
= lp_usershare_prefix_deny_list();
3326 SMB_STRUCT_STAT sbuf
;
3327 char *sharepath
= NULL
;
3328 char *comment
= NULL
;
3330 *pp_sharepath
= NULL
;
3333 *pallow_guest
= false;
3336 return USERSHARE_MALFORMED_FILE
;
3339 if (strcmp(lines
[0], "#VERSION 1") == 0) {
3341 } else if (strcmp(lines
[0], "#VERSION 2") == 0) {
3344 return USERSHARE_MALFORMED_FILE
;
3347 return USERSHARE_BAD_VERSION
;
3350 if (strncmp(lines
[1], "path=", 5) != 0) {
3351 return USERSHARE_MALFORMED_PATH
;
3354 sharepath
= talloc_strdup(ctx
, &lines
[1][5]);
3356 return USERSHARE_POSIX_ERR
;
3358 trim_string(sharepath
, " ", " ");
3360 if (strncmp(lines
[2], "comment=", 8) != 0) {
3361 return USERSHARE_MALFORMED_COMMENT_DEF
;
3364 comment
= talloc_strdup(ctx
, &lines
[2][8]);
3366 return USERSHARE_POSIX_ERR
;
3368 trim_string(comment
, " ", " ");
3369 trim_char(comment
, '"', '"');
3371 if (strncmp(lines
[3], "usershare_acl=", 14) != 0) {
3372 return USERSHARE_MALFORMED_ACL_DEF
;
3375 if (!parse_usershare_acl(ctx
, &lines
[3][14], ppsd
)) {
3376 return USERSHARE_ACL_ERR
;
3380 if (strncmp(lines
[4], "guest_ok=", 9) != 0) {
3381 return USERSHARE_MALFORMED_ACL_DEF
;
3383 if (lines
[4][9] == 'y') {
3384 *pallow_guest
= true;
3387 /* Backwards compatible extension to file version #2. */
3389 if (strncmp(lines
[5], "sharename=", 10) != 0) {
3390 return USERSHARE_MALFORMED_SHARENAME_DEF
;
3392 if (!strequal(&lines
[5][10], servicename
)) {
3393 return USERSHARE_BAD_SHARENAME
;
3395 *pp_cp_servicename
= talloc_strdup(ctx
, &lines
[5][10]);
3396 if (!*pp_cp_servicename
) {
3397 return USERSHARE_POSIX_ERR
;
3402 if (*pp_cp_servicename
== NULL
) {
3403 *pp_cp_servicename
= talloc_strdup(ctx
, servicename
);
3404 if (!*pp_cp_servicename
) {
3405 return USERSHARE_POSIX_ERR
;
3409 if (snum
!= -1 && (strcmp(sharepath
, ServicePtrs
[snum
]->path
) == 0)) {
3410 /* Path didn't change, no checks needed. */
3411 *pp_sharepath
= sharepath
;
3412 *pp_comment
= comment
;
3413 return USERSHARE_OK
;
3416 /* The path *must* be absolute. */
3417 if (sharepath
[0] != '/') {
3418 DEBUG(2,("parse_usershare_file: share %s: path %s is not an absolute path.\n",
3419 servicename
, sharepath
));
3420 return USERSHARE_PATH_NOT_ABSOLUTE
;
3423 /* If there is a usershare prefix deny list ensure one of these paths
3424 doesn't match the start of the user given path. */
3425 if (prefixdenylist
) {
3427 for ( i
=0; prefixdenylist
[i
]; i
++ ) {
3428 DEBUG(10,("parse_usershare_file: share %s : checking prefixdenylist[%d]='%s' against %s\n",
3429 servicename
, i
, prefixdenylist
[i
], sharepath
));
3430 if (memcmp( sharepath
, prefixdenylist
[i
], strlen(prefixdenylist
[i
])) == 0) {
3431 DEBUG(2,("parse_usershare_file: share %s path %s starts with one of the "
3432 "usershare prefix deny list entries.\n",
3433 servicename
, sharepath
));
3434 return USERSHARE_PATH_IS_DENIED
;
3439 /* If there is a usershare prefix allow list ensure one of these paths
3440 does match the start of the user given path. */
3442 if (prefixallowlist
) {
3444 for ( i
=0; prefixallowlist
[i
]; i
++ ) {
3445 DEBUG(10,("parse_usershare_file: share %s checking prefixallowlist[%d]='%s' against %s\n",
3446 servicename
, i
, prefixallowlist
[i
], sharepath
));
3447 if (memcmp( sharepath
, prefixallowlist
[i
], strlen(prefixallowlist
[i
])) == 0) {
3451 if (prefixallowlist
[i
] == NULL
) {
3452 DEBUG(2,("parse_usershare_file: share %s path %s doesn't start with one of the "
3453 "usershare prefix allow list entries.\n",
3454 servicename
, sharepath
));
3455 return USERSHARE_PATH_NOT_ALLOWED
;
3459 /* Ensure this is pointing to a directory. */
3460 dp
= opendir(sharepath
);
3463 DEBUG(2,("parse_usershare_file: share %s path %s is not a directory.\n",
3464 servicename
, sharepath
));
3465 return USERSHARE_PATH_NOT_DIRECTORY
;
3468 /* Ensure the owner of the usershare file has permission to share
3471 if (sys_stat(sharepath
, &sbuf
, false) == -1) {
3472 DEBUG(2,("parse_usershare_file: share %s : stat failed on path %s. %s\n",
3473 servicename
, sharepath
, strerror(errno
) ));
3475 return USERSHARE_POSIX_ERR
;
3480 if (!S_ISDIR(sbuf
.st_ex_mode
)) {
3481 DEBUG(2,("parse_usershare_file: share %s path %s is not a directory.\n",
3482 servicename
, sharepath
));
3483 return USERSHARE_PATH_NOT_DIRECTORY
;
3486 /* Check if sharing is restricted to owner-only. */
3487 /* psbuf is the stat of the usershare definition file,
3488 sbuf is the stat of the target directory to be shared. */
3490 if (lp_usershare_owner_only()) {
3491 /* root can share anything. */
3492 if ((psbuf
->st_ex_uid
!= 0) && (sbuf
.st_ex_uid
!= psbuf
->st_ex_uid
)) {
3493 return USERSHARE_PATH_NOT_ALLOWED
;
3497 *pp_sharepath
= sharepath
;
3498 *pp_comment
= comment
;
3499 return USERSHARE_OK
;
3502 /***************************************************************************
3503 Deal with a usershare file.
3506 -1 - Bad name, invalid contents.
3507 - service name already existed and not a usershare, problem
3508 with permissions to share directory etc.
3509 ***************************************************************************/
3511 static int process_usershare_file(const char *dir_name
, const char *file_name
, int snum_template
)
3513 SMB_STRUCT_STAT sbuf
;
3514 SMB_STRUCT_STAT lsbuf
;
3516 char *sharepath
= NULL
;
3517 char *comment
= NULL
;
3518 char *cp_service_name
= NULL
;
3519 char **lines
= NULL
;
3523 TALLOC_CTX
*ctx
= talloc_stackframe();
3524 struct security_descriptor
*psd
= NULL
;
3525 bool guest_ok
= false;
3526 char *canon_name
= NULL
;
3527 bool added_service
= false;
3530 /* Ensure share name doesn't contain invalid characters. */
3531 if (!validate_net_name(file_name
, INVALID_SHARENAME_CHARS
, strlen(file_name
))) {
3532 DEBUG(0,("process_usershare_file: share name %s contains "
3533 "invalid characters (any of %s)\n",
3534 file_name
, INVALID_SHARENAME_CHARS
));
3538 canon_name
= canonicalize_servicename(ctx
, file_name
);
3543 fname
= talloc_asprintf(ctx
, "%s/%s", dir_name
, file_name
);
3548 /* Minimize the race condition by doing an lstat before we
3549 open and fstat. Ensure this isn't a symlink link. */
3551 if (sys_lstat(fname
, &lsbuf
, false) != 0) {
3552 DEBUG(0,("process_usershare_file: stat of %s failed. %s\n",
3553 fname
, strerror(errno
) ));
3557 /* This must be a regular file, not a symlink, directory or
3558 other strange filetype. */
3559 if (!check_usershare_stat(fname
, &lsbuf
)) {
3567 status
= dbwrap_fetch_bystring(ServiceHash
, canon_name
,
3572 if (NT_STATUS_IS_OK(status
) &&
3573 (data
.dptr
!= NULL
) &&
3574 (data
.dsize
== sizeof(iService
))) {
3575 memcpy(&iService
, data
.dptr
, sizeof(iService
));
3579 if (iService
!= -1 &&
3580 timespec_compare(&ServicePtrs
[iService
]->usershare_last_mod
,
3581 &lsbuf
.st_ex_mtime
) == 0) {
3582 /* Nothing changed - Mark valid and return. */
3583 DEBUG(10,("process_usershare_file: service %s not changed.\n",
3585 ServicePtrs
[iService
]->usershare
= USERSHARE_VALID
;
3590 /* Try and open the file read only - no symlinks allowed. */
3592 fd
= open(fname
, O_RDONLY
|O_NOFOLLOW
, 0);
3594 fd
= open(fname
, O_RDONLY
, 0);
3598 DEBUG(0,("process_usershare_file: unable to open %s. %s\n",
3599 fname
, strerror(errno
) ));
3603 /* Now fstat to be *SURE* it's a regular file. */
3604 if (sys_fstat(fd
, &sbuf
, false) != 0) {
3606 DEBUG(0,("process_usershare_file: fstat of %s failed. %s\n",
3607 fname
, strerror(errno
) ));
3611 /* Is it the same dev/inode as was lstated ? */
3612 if (!check_same_stat(&lsbuf
, &sbuf
)) {
3614 DEBUG(0,("process_usershare_file: fstat of %s is a different file from lstat. "
3615 "Symlink spoofing going on ?\n", fname
));
3619 /* This must be a regular file, not a symlink, directory or
3620 other strange filetype. */
3621 if (!check_usershare_stat(fname
, &sbuf
)) {
3626 lines
= fd_lines_load(fd
, &numlines
, MAX_USERSHARE_FILE_SIZE
, NULL
);
3629 if (lines
== NULL
) {
3630 DEBUG(0,("process_usershare_file: loading file %s owned by %u failed.\n",
3631 fname
, (unsigned int)sbuf
.st_ex_uid
));
3635 if (parse_usershare_file(ctx
, &sbuf
, file_name
,
3636 iService
, lines
, numlines
, &sharepath
,
3637 &comment
, &cp_service_name
,
3638 &psd
, &guest_ok
) != USERSHARE_OK
) {
3642 /* Everything ok - add the service possibly using a template. */
3644 const struct loadparm_service
*sp
= &sDefault
;
3645 if (snum_template
!= -1) {
3646 sp
= ServicePtrs
[snum_template
];
3649 if ((iService
= add_a_service(sp
, cp_service_name
)) < 0) {
3650 DEBUG(0, ("process_usershare_file: Failed to add "
3651 "new service %s\n", cp_service_name
));
3655 added_service
= true;
3657 /* Read only is controlled by usershare ACL below. */
3658 ServicePtrs
[iService
]->read_only
= false;
3661 /* Write the ACL of the new/modified share. */
3662 if (!set_share_security(canon_name
, psd
)) {
3663 DEBUG(0, ("process_usershare_file: Failed to set share "
3664 "security for user share %s\n",
3669 /* If from a template it may be marked invalid. */
3670 ServicePtrs
[iService
]->valid
= true;
3672 /* Set the service as a valid usershare. */
3673 ServicePtrs
[iService
]->usershare
= USERSHARE_VALID
;
3675 /* Set guest access. */
3676 if (lp_usershare_allow_guests()) {
3677 ServicePtrs
[iService
]->guest_ok
= guest_ok
;
3680 /* And note when it was loaded. */
3681 ServicePtrs
[iService
]->usershare_last_mod
= sbuf
.st_ex_mtime
;
3682 string_set(ServicePtrs
[iService
], &ServicePtrs
[iService
]->path
, sharepath
);
3683 string_set(ServicePtrs
[iService
], &ServicePtrs
[iService
]->comment
, comment
);
3689 if (ret
== -1 && iService
!= -1 && added_service
) {
3690 lp_remove_service(iService
);
3698 /***************************************************************************
3699 Checks if a usershare entry has been modified since last load.
3700 ***************************************************************************/
3702 static bool usershare_exists(int iService
, struct timespec
*last_mod
)
3704 SMB_STRUCT_STAT lsbuf
;
3705 const char *usersharepath
= Globals
.usershare_path
;
3708 fname
= talloc_asprintf(talloc_tos(),
3711 ServicePtrs
[iService
]->szService
);
3712 if (fname
== NULL
) {
3716 if (sys_lstat(fname
, &lsbuf
, false) != 0) {
3721 if (!S_ISREG(lsbuf
.st_ex_mode
)) {
3727 *last_mod
= lsbuf
.st_ex_mtime
;
3731 /***************************************************************************
3732 Load a usershare service by name. Returns a valid servicenumber or -1.
3733 ***************************************************************************/
3735 int load_usershare_service(const char *servicename
)
3737 SMB_STRUCT_STAT sbuf
;
3738 const char *usersharepath
= Globals
.usershare_path
;
3739 int max_user_shares
= Globals
.usershare_max_shares
;
3740 int snum_template
= -1;
3742 if (*usersharepath
== 0 || max_user_shares
== 0) {
3746 if (sys_stat(usersharepath
, &sbuf
, false) != 0) {
3747 DEBUG(0,("load_usershare_service: stat of %s failed. %s\n",
3748 usersharepath
, strerror(errno
) ));
3752 if (!S_ISDIR(sbuf
.st_ex_mode
)) {
3753 DEBUG(0,("load_usershare_service: %s is not a directory.\n",
3759 * This directory must be owned by root, and have the 't' bit set.
3760 * It also must not be writable by "other".
3764 if (sbuf
.st_ex_uid
!= 0 || !(sbuf
.st_ex_mode
& S_ISVTX
) || (sbuf
.st_ex_mode
& S_IWOTH
)) {
3766 if (sbuf
.st_ex_uid
!= 0 || (sbuf
.st_ex_mode
& S_IWOTH
)) {
3768 DEBUG(0,("load_usershare_service: directory %s is not owned by root "
3769 "or does not have the sticky bit 't' set or is writable by anyone.\n",
3774 /* Ensure the template share exists if it's set. */
3775 if (Globals
.usershare_template_share
[0]) {
3776 /* We can't use lp_servicenumber here as we are recommending that
3777 template shares have -valid=false set. */
3778 for (snum_template
= iNumServices
- 1; snum_template
>= 0; snum_template
--) {
3779 if (ServicePtrs
[snum_template
]->szService
&&
3780 strequal(ServicePtrs
[snum_template
]->szService
,
3781 Globals
.usershare_template_share
)) {
3786 if (snum_template
== -1) {
3787 DEBUG(0,("load_usershare_service: usershare template share %s "
3788 "does not exist.\n",
3789 Globals
.usershare_template_share
));
3794 return process_usershare_file(usersharepath
, servicename
, snum_template
);
3797 /***************************************************************************
3798 Load all user defined shares from the user share directory.
3799 We only do this if we're enumerating the share list.
3800 This is the function that can delete usershares that have
3802 ***************************************************************************/
3804 int load_usershare_shares(struct smbd_server_connection
*sconn
,
3805 bool (*snumused
) (struct smbd_server_connection
*, int))
3808 SMB_STRUCT_STAT sbuf
;
3810 int num_usershares
= 0;
3811 int max_user_shares
= Globals
.usershare_max_shares
;
3812 unsigned int num_dir_entries
, num_bad_dir_entries
, num_tmp_dir_entries
;
3813 unsigned int allowed_bad_entries
= ((2*max_user_shares
)/10);
3814 unsigned int allowed_tmp_entries
= ((2*max_user_shares
)/10);
3816 int snum_template
= -1;
3817 const char *usersharepath
= Globals
.usershare_path
;
3818 int ret
= lp_numservices();
3819 TALLOC_CTX
*tmp_ctx
;
3821 if (max_user_shares
== 0 || *usersharepath
== '\0') {
3822 return lp_numservices();
3825 if (sys_stat(usersharepath
, &sbuf
, false) != 0) {
3826 DEBUG(0,("load_usershare_shares: stat of %s failed. %s\n",
3827 usersharepath
, strerror(errno
) ));
3832 * This directory must be owned by root, and have the 't' bit set.
3833 * It also must not be writable by "other".
3837 if (sbuf
.st_ex_uid
!= 0 || !(sbuf
.st_ex_mode
& S_ISVTX
) || (sbuf
.st_ex_mode
& S_IWOTH
)) {
3839 if (sbuf
.st_ex_uid
!= 0 || (sbuf
.st_ex_mode
& S_IWOTH
)) {
3841 DEBUG(0,("load_usershare_shares: directory %s is not owned by root "
3842 "or does not have the sticky bit 't' set or is writable by anyone.\n",
3847 /* Ensure the template share exists if it's set. */
3848 if (Globals
.usershare_template_share
[0]) {
3849 /* We can't use lp_servicenumber here as we are recommending that
3850 template shares have -valid=false set. */
3851 for (snum_template
= iNumServices
- 1; snum_template
>= 0; snum_template
--) {
3852 if (ServicePtrs
[snum_template
]->szService
&&
3853 strequal(ServicePtrs
[snum_template
]->szService
,
3854 Globals
.usershare_template_share
)) {
3859 if (snum_template
== -1) {
3860 DEBUG(0,("load_usershare_shares: usershare template share %s "
3861 "does not exist.\n",
3862 Globals
.usershare_template_share
));
3867 /* Mark all existing usershares as pending delete. */
3868 for (iService
= iNumServices
- 1; iService
>= 0; iService
--) {
3869 if (VALID(iService
) && ServicePtrs
[iService
]->usershare
) {
3870 ServicePtrs
[iService
]->usershare
= USERSHARE_PENDING_DELETE
;
3874 dp
= opendir(usersharepath
);
3876 DEBUG(0,("load_usershare_shares:: failed to open directory %s. %s\n",
3877 usersharepath
, strerror(errno
) ));
3881 for (num_dir_entries
= 0, num_bad_dir_entries
= 0, num_tmp_dir_entries
= 0;
3883 num_dir_entries
++ ) {
3885 const char *n
= de
->d_name
;
3887 /* Ignore . and .. */
3889 if ((n
[1] == '\0') || (n
[1] == '.' && n
[2] == '\0')) {
3895 /* Temporary file used when creating a share. */
3896 num_tmp_dir_entries
++;
3899 /* Allow 20% tmp entries. */
3900 if (num_tmp_dir_entries
> allowed_tmp_entries
) {
3901 DEBUG(0,("load_usershare_shares: too many temp entries (%u) "
3902 "in directory %s\n",
3903 num_tmp_dir_entries
, usersharepath
));
3907 r
= process_usershare_file(usersharepath
, n
, snum_template
);
3909 /* Update the services count. */
3911 if (num_usershares
>= max_user_shares
) {
3912 DEBUG(0,("load_usershare_shares: max user shares reached "
3913 "on file %s in directory %s\n",
3914 n
, usersharepath
));
3917 } else if (r
== -1) {
3918 num_bad_dir_entries
++;
3921 /* Allow 20% bad entries. */
3922 if (num_bad_dir_entries
> allowed_bad_entries
) {
3923 DEBUG(0,("load_usershare_shares: too many bad entries (%u) "
3924 "in directory %s\n",
3925 num_bad_dir_entries
, usersharepath
));
3929 /* Allow 20% bad entries. */
3930 if (num_dir_entries
> max_user_shares
+ allowed_bad_entries
) {
3931 DEBUG(0,("load_usershare_shares: too many total entries (%u) "
3932 "in directory %s\n",
3933 num_dir_entries
, usersharepath
));
3940 /* Sweep through and delete any non-refreshed usershares that are
3941 not currently in use. */
3942 tmp_ctx
= talloc_stackframe();
3943 for (iService
= iNumServices
- 1; iService
>= 0; iService
--) {
3944 if (VALID(iService
) && (ServicePtrs
[iService
]->usershare
== USERSHARE_PENDING_DELETE
)) {
3947 if (snumused
&& snumused(sconn
, iService
)) {
3951 servname
= lp_servicename(tmp_ctx
, iService
);
3953 /* Remove from the share ACL db. */
3954 DEBUG(10,("load_usershare_shares: Removing deleted usershare %s\n",
3956 delete_share_security(servname
);
3957 free_service_byindex(iService
);
3960 talloc_free(tmp_ctx
);
3962 return lp_numservices();
3965 /********************************************************
3966 Destroy global resources allocated in this file
3967 ********************************************************/
3969 void gfree_loadparm(void)
3975 /* Free resources allocated to services */
3977 for ( i
= 0; i
< iNumServices
; i
++ ) {
3979 free_service_byindex(i
);
3983 TALLOC_FREE( ServicePtrs
);
3986 /* Now release all resources allocated to global
3987 parameters and the default service */
3989 free_global_parameters();
3993 /***************************************************************************
3994 Allow client apps to specify that they are a client
3995 ***************************************************************************/
3996 static void lp_set_in_client(bool b
)
4002 /***************************************************************************
4003 Determine if we're running in a client app
4004 ***************************************************************************/
4005 static bool lp_is_in_client(void)
4010 /***************************************************************************
4011 Load the services array from the services file. Return true on success,
4013 ***************************************************************************/
4015 static bool lp_load_ex(const char *pszFname
,
4019 bool initialize_globals
,
4020 bool allow_include_registry
,
4021 bool load_all_shares
)
4025 TALLOC_CTX
*frame
= talloc_stackframe();
4029 DEBUG(3, ("lp_load_ex: refreshing parameters\n"));
4031 bInGlobalSection
= true;
4032 bGlobalOnly
= global_only
;
4033 bAllowIncludeRegistry
= allow_include_registry
;
4035 init_globals(initialize_globals
);
4039 if (save_defaults
) {
4044 if (!initialize_globals
) {
4045 free_param_opts(&Globals
.param_opt
);
4046 apply_lp_set_cmdline();
4049 lp_do_parameter(-1, "idmap config * : backend", Globals
.szIdmapBackend
);
4051 /* We get sections first, so have to start 'behind' to make up */
4054 if (lp_config_backend_is_file()) {
4055 n2
= talloc_sub_basic(talloc_tos(), get_current_username(),
4056 current_user_info
.domain
,
4059 smb_panic("lp_load_ex: out of memory");
4062 add_to_file_list(NULL
, &file_lists
, pszFname
, n2
);
4064 bRetval
= pm_process(n2
, do_section
, do_parameter
, NULL
);
4067 /* finish up the last section */
4068 DEBUG(4, ("pm_process() returned %s\n", BOOLSTR(bRetval
)));
4070 if (iServiceIndex
>= 0) {
4071 bRetval
= service_ok(iServiceIndex
);
4075 if (lp_config_backend_is_registry()) {
4077 /* config backend changed to registry in config file */
4079 * We need to use this extra global variable here to
4080 * survive restart: init_globals uses this as a default
4081 * for config_backend. Otherwise, init_globals would
4082 * send us into an endless loop here.
4084 config_backend
= CONFIG_BACKEND_REGISTRY
;
4086 DEBUG(1, ("lp_load_ex: changing to config backend "
4089 lp_kill_all_services();
4090 ok
= lp_load_ex(pszFname
, global_only
, save_defaults
,
4091 add_ipc
, initialize_globals
,
4092 allow_include_registry
,
4097 } else if (lp_config_backend_is_registry()) {
4098 bRetval
= process_registry_globals();
4100 DEBUG(0, ("Illegal config backend given: %d\n",
4101 lp_config_backend()));
4105 if (bRetval
&& lp_registry_shares()) {
4106 if (load_all_shares
) {
4107 bRetval
= process_registry_shares();
4109 bRetval
= reload_registry_shares();
4114 char *serv
= lp_auto_services(talloc_tos());
4115 lp_add_auto_services(serv
);
4120 /* When 'restrict anonymous = 2' guest connections to ipc$
4122 lp_add_ipc("IPC$", (lp_restrict_anonymous() < 2));
4123 if ( lp_enable_asu_support() ) {
4124 lp_add_ipc("ADMIN$", false);
4128 set_allowed_client_auth();
4130 if (lp_security() == SEC_ADS
&& strchr(lp_password_server(), ':')) {
4131 DEBUG(1, ("WARNING: The optional ':port' in password server = %s is deprecated\n",
4132 lp_password_server()));
4137 /* Now we check we_are_a_wins_server and set szWINSserver to 127.0.0.1 */
4138 /* if we_are_a_wins_server is true and we are in the client */
4139 if (lp_is_in_client() && Globals
.we_are_a_wins_server
) {
4140 lp_do_parameter(GLOBAL_SECTION_SNUM
, "wins server", "127.0.0.1");
4145 fault_configure(smb_panic_s3
);
4148 * We run this check once the whole smb.conf is parsed, to
4149 * force some settings for the standard way a AD DC is
4150 * operated. We may changed these as our code evolves, which
4151 * is why we force these settings.
4153 if (lp_server_role() == ROLE_ACTIVE_DIRECTORY_DC
) {
4154 lp_do_parameter(-1, "passdb backend", "samba_dsdb");
4156 lp_do_parameter(-1, "winbindd:use external pipes", "true");
4158 lp_do_parameter(-1, "rpc_server:default", "external");
4159 lp_do_parameter(-1, "rpc_server:svcctl", "embedded");
4160 lp_do_parameter(-1, "rpc_server:srvsvc", "embedded");
4161 lp_do_parameter(-1, "rpc_server:eventlog", "embedded");
4162 lp_do_parameter(-1, "rpc_server:ntsvcs", "embedded");
4163 lp_do_parameter(-1, "rpc_server:winreg", "embedded");
4164 lp_do_parameter(-1, "rpc_server:spoolss", "embedded");
4165 lp_do_parameter(-1, "rpc_daemon:spoolssd", "embedded");
4166 lp_do_parameter(-1, "rpc_server:tcpip", "no");
4169 bAllowIncludeRegistry
= true;
4175 bool lp_load(const char *pszFname
,
4179 bool initialize_globals
)
4181 return lp_load_ex(pszFname
,
4186 true, /* allow_include_registry */
4187 false); /* load_all_shares*/
4190 bool lp_load_initial_only(const char *pszFname
)
4192 return lp_load_ex(pszFname
,
4193 true, /* global only */
4194 false, /* save_defaults */
4195 false, /* add_ipc */
4196 true, /* initialize_globals */
4197 false, /* allow_include_registry */
4198 false); /* load_all_shares*/
4202 * most common lp_load wrapper, loading only the globals
4204 bool lp_load_global(const char *file_name
)
4206 return lp_load_ex(file_name
,
4207 true, /* global_only */
4208 false, /* save_defaults */
4209 false, /* add_ipc */
4210 true, /* initialize_globals */
4211 true, /* allow_include_registry */
4212 false); /* load_all_shares*/
4216 * lp_load wrapper, especially for clients
4218 bool lp_load_client(const char *file_name
)
4220 lp_set_in_client(true);
4222 return lp_load_global(file_name
);
4226 * lp_load wrapper, loading only globals, but intended
4227 * for subsequent calls, not reinitializing the globals
4230 bool lp_load_global_no_reinit(const char *file_name
)
4232 return lp_load_ex(file_name
,
4233 true, /* global_only */
4234 false, /* save_defaults */
4235 false, /* add_ipc */
4236 false, /* initialize_globals */
4237 true, /* allow_include_registry */
4238 false); /* load_all_shares*/
4242 * lp_load wrapper, especially for clients, no reinitialization
4244 bool lp_load_client_no_reinit(const char *file_name
)
4246 lp_set_in_client(true);
4248 return lp_load_global_no_reinit(file_name
);
4251 bool lp_load_with_registry_shares(const char *pszFname
,
4255 bool initialize_globals
)
4257 return lp_load_ex(pszFname
,
4262 true, /* allow_include_registry */
4263 true); /* load_all_shares*/
4266 /***************************************************************************
4267 Return the max number of services.
4268 ***************************************************************************/
4270 int lp_numservices(void)
4272 return (iNumServices
);
4275 /***************************************************************************
4276 Display the contents of the services array in human-readable form.
4277 ***************************************************************************/
4279 void lp_dump(FILE *f
, bool show_defaults
, int maxtoprint
)
4284 defaults_saved
= false;
4288 dump_a_service(&sDefault
, f
, show_defaults
);
4290 for (iService
= 0; iService
< maxtoprint
; iService
++) {
4292 lp_dump_one(f
, show_defaults
, iService
);
4296 /***************************************************************************
4297 Display the contents of one service in human-readable form.
4298 ***************************************************************************/
4300 void lp_dump_one(FILE * f
, bool show_defaults
, int snum
)
4303 if (ServicePtrs
[snum
]->szService
[0] == '\0')
4305 dump_a_service(ServicePtrs
[snum
], f
, show_defaults
);
4309 /***************************************************************************
4310 Return the number of the service with the given name, or -1 if it doesn't
4311 exist. Note that this is a DIFFERENT ANIMAL from the internal function
4312 getservicebyname()! This works ONLY if all services have been loaded, and
4313 does not copy the found service.
4314 ***************************************************************************/
4316 int lp_servicenumber(const char *pszServiceName
)
4319 fstring serviceName
;
4321 if (!pszServiceName
) {
4322 return GLOBAL_SECTION_SNUM
;
4325 for (iService
= iNumServices
- 1; iService
>= 0; iService
--) {
4326 if (VALID(iService
) && ServicePtrs
[iService
]->szService
) {
4328 * The substitution here is used to support %U is
4331 fstrcpy(serviceName
, ServicePtrs
[iService
]->szService
);
4332 standard_sub_basic(get_current_username(),
4333 current_user_info
.domain
,
4334 serviceName
,sizeof(serviceName
));
4335 if (strequal(serviceName
, pszServiceName
)) {
4341 if (iService
>= 0 && ServicePtrs
[iService
]->usershare
== USERSHARE_VALID
) {
4342 struct timespec last_mod
;
4344 if (!usershare_exists(iService
, &last_mod
)) {
4345 /* Remove the share security tdb entry for it. */
4346 delete_share_security(lp_servicename(talloc_tos(), iService
));
4347 /* Remove it from the array. */
4348 free_service_byindex(iService
);
4349 /* Doesn't exist anymore. */
4350 return GLOBAL_SECTION_SNUM
;
4353 /* Has it been modified ? If so delete and reload. */
4354 if (timespec_compare(&ServicePtrs
[iService
]->usershare_last_mod
,
4356 /* Remove it from the array. */
4357 free_service_byindex(iService
);
4358 /* and now reload it. */
4359 iService
= load_usershare_service(pszServiceName
);
4364 DEBUG(7,("lp_servicenumber: couldn't find %s\n", pszServiceName
));
4365 return GLOBAL_SECTION_SNUM
;
4371 /*******************************************************************
4372 A useful volume label function.
4373 ********************************************************************/
4375 const char *volume_label(TALLOC_CTX
*ctx
, int snum
)
4378 const char *label
= lp_volume(ctx
, snum
);
4380 label
= lp_servicename(ctx
, snum
);
4383 /* This returns a 33 byte guarenteed null terminated string. */
4384 ret
= talloc_strndup(ctx
, label
, 32);
4391 /*******************************************************************
4392 Get the default server type we will announce as via nmbd.
4393 ********************************************************************/
4395 int lp_default_server_announce(void)
4397 int default_server_announce
= 0;
4398 default_server_announce
|= SV_TYPE_WORKSTATION
;
4399 default_server_announce
|= SV_TYPE_SERVER
;
4400 default_server_announce
|= SV_TYPE_SERVER_UNIX
;
4402 /* note that the flag should be set only if we have a
4403 printer service but nmbd doesn't actually load the
4404 services so we can't tell --jerry */
4406 default_server_announce
|= SV_TYPE_PRINTQ_SERVER
;
4408 default_server_announce
|= SV_TYPE_SERVER_NT
;
4409 default_server_announce
|= SV_TYPE_NT
;
4411 switch (lp_server_role()) {
4412 case ROLE_DOMAIN_MEMBER
:
4413 default_server_announce
|= SV_TYPE_DOMAIN_MEMBER
;
4415 case ROLE_DOMAIN_PDC
:
4416 default_server_announce
|= SV_TYPE_DOMAIN_CTRL
;
4418 case ROLE_DOMAIN_BDC
:
4419 default_server_announce
|= SV_TYPE_DOMAIN_BAKCTRL
;
4421 case ROLE_STANDALONE
:
4425 if (lp_time_server())
4426 default_server_announce
|= SV_TYPE_TIME_SOURCE
;
4428 if (lp_host_msdfs())
4429 default_server_announce
|= SV_TYPE_DFS_SERVER
;
4431 return default_server_announce
;
4434 /***********************************************************
4435 If we are PDC then prefer us as DMB
4436 ************************************************************/
4438 bool lp_domain_master(void)
4440 if (Globals
._domain_master
== Auto
)
4441 return (lp_server_role() == ROLE_DOMAIN_PDC
);
4443 return (bool)Globals
._domain_master
;
4446 /***********************************************************
4447 If we are PDC then prefer us as DMB
4448 ************************************************************/
4450 static bool lp_domain_master_true_or_auto(void)
4452 if (Globals
._domain_master
) /* auto or yes */
4458 /***********************************************************
4459 If we are DMB then prefer us as LMB
4460 ************************************************************/
4462 bool lp_preferred_master(void)
4464 if (Globals
.iPreferredMaster
== Auto
)
4465 return (lp_local_master() && lp_domain_master());
4467 return (bool)Globals
.iPreferredMaster
;
4470 /*******************************************************************
4472 ********************************************************************/
4474 void lp_remove_service(int snum
)
4476 ServicePtrs
[snum
]->valid
= false;
4479 const char *lp_printername(TALLOC_CTX
*ctx
, int snum
)
4481 const char *ret
= lp__printername(ctx
, snum
);
4482 if (ret
== NULL
|| *ret
== '\0') {
4483 ret
= lp_const_servicename(snum
);
4490 /***********************************************************
4491 Allow daemons such as winbindd to fix their logfile name.
4492 ************************************************************/
4494 void lp_set_logfile(const char *name
)
4496 string_set(Globals
.ctx
, &Globals
.logfile
, name
);
4497 debug_set_logfile(name
);
4500 /*******************************************************************
4501 Return the max print jobs per queue.
4502 ********************************************************************/
4504 int lp_maxprintjobs(int snum
)
4506 int maxjobs
= LP_SNUM_OK(snum
) ? ServicePtrs
[snum
]->iMaxPrintJobs
: sDefault
.iMaxPrintJobs
;
4507 if (maxjobs
<= 0 || maxjobs
>= PRINT_MAX_JOBID
)
4508 maxjobs
= PRINT_MAX_JOBID
- 1;
4513 const char *lp_printcapname(void)
4515 if ((Globals
.szPrintcapname
!= NULL
) &&
4516 (Globals
.szPrintcapname
[0] != '\0'))
4517 return Globals
.szPrintcapname
;
4519 if (sDefault
.printing
== PRINT_CUPS
) {
4523 if (sDefault
.printing
== PRINT_BSD
)
4524 return "/etc/printcap";
4526 return PRINTCAP_NAME
;
4529 static uint32 spoolss_state
;
4531 bool lp_disable_spoolss( void )
4533 if ( spoolss_state
== SVCCTL_STATE_UNKNOWN
)
4534 spoolss_state
= lp__disable_spoolss() ? SVCCTL_STOPPED
: SVCCTL_RUNNING
;
4536 return spoolss_state
== SVCCTL_STOPPED
? true : false;
4539 void lp_set_spoolss_state( uint32 state
)
4541 SMB_ASSERT( (state
== SVCCTL_STOPPED
) || (state
== SVCCTL_RUNNING
) );
4543 spoolss_state
= state
;
4546 uint32
lp_get_spoolss_state( void )
4548 return lp_disable_spoolss() ? SVCCTL_STOPPED
: SVCCTL_RUNNING
;
4551 /*******************************************************************
4552 Ensure we don't use sendfile if server smb signing is active.
4553 ********************************************************************/
4555 bool lp_use_sendfile(int snum
, struct smb_signing_state
*signing_state
)
4557 bool sign_active
= false;
4559 /* Using sendfile blows the brains out of any DOS or Win9x TCP stack... JRA. */
4560 if (get_Protocol() < PROTOCOL_NT1
) {
4563 if (signing_state
) {
4564 sign_active
= smb_signing_is_active(signing_state
);
4566 return (lp__use_sendfile(snum
) &&
4567 (get_remote_arch() != RA_WIN95
) &&
4571 /*******************************************************************
4572 Turn off sendfile if we find the underlying OS doesn't support it.
4573 ********************************************************************/
4575 void set_use_sendfile(int snum
, bool val
)
4577 if (LP_SNUM_OK(snum
))
4578 ServicePtrs
[snum
]->_use_sendfile
= val
;
4580 sDefault
._use_sendfile
= val
;
4583 /*******************************************************************
4584 Turn off storing DOS attributes if this share doesn't support it.
4585 ********************************************************************/
4587 void set_store_dos_attributes(int snum
, bool val
)
4589 if (!LP_SNUM_OK(snum
))
4591 ServicePtrs
[(snum
)]->store_dos_attributes
= val
;
4594 void lp_set_mangling_method(const char *new_method
)
4596 string_set(Globals
.ctx
, &Globals
.mangling_method
, new_method
);
4599 /*******************************************************************
4600 Global state for POSIX pathname processing.
4601 ********************************************************************/
4603 static bool posix_pathnames
;
4605 bool lp_posix_pathnames(void)
4607 return posix_pathnames
;
4610 /*******************************************************************
4611 Change everything needed to ensure POSIX pathname processing (currently
4613 ********************************************************************/
4615 void lp_set_posix_pathnames(void)
4617 posix_pathnames
= true;
4620 /*******************************************************************
4621 Global state for POSIX lock processing - CIFS unix extensions.
4622 ********************************************************************/
4624 bool posix_default_lock_was_set
;
4625 static enum brl_flavour posix_cifsx_locktype
; /* By default 0 == WINDOWS_LOCK */
4627 enum brl_flavour
lp_posix_cifsu_locktype(files_struct
*fsp
)
4629 if (posix_default_lock_was_set
) {
4630 return posix_cifsx_locktype
;
4632 return fsp
->posix_open
? POSIX_LOCK
: WINDOWS_LOCK
;
4636 /*******************************************************************
4637 ********************************************************************/
4639 void lp_set_posix_default_cifsx_readwrite_locktype(enum brl_flavour val
)
4641 posix_default_lock_was_set
= true;
4642 posix_cifsx_locktype
= val
;
4645 int lp_min_receive_file_size(void)
4647 if (Globals
.iminreceivefile
< 0) {
4650 return Globals
.iminreceivefile
;
4653 /*******************************************************************
4654 Safe wide links checks.
4655 This helper function always verify the validity of wide links,
4656 even after a configuration file reload.
4657 ********************************************************************/
4659 static bool lp_widelinks_internal(int snum
)
4661 return (bool)(LP_SNUM_OK(snum
)? ServicePtrs
[(snum
)]->bWidelinks
:
4662 sDefault
.bWidelinks
);
4665 void widelinks_warning(int snum
)
4667 if (lp_allow_insecure_wide_links()) {
4671 if (lp_unix_extensions() && lp_widelinks_internal(snum
)) {
4672 DEBUG(0,("Share '%s' has wide links and unix extensions enabled. "
4673 "These parameters are incompatible. "
4674 "Wide links will be disabled for this share.\n",
4675 lp_servicename(talloc_tos(), snum
) ));
4679 bool lp_widelinks(int snum
)
4681 /* wide links is always incompatible with unix extensions */
4682 if (lp_unix_extensions()) {
4684 * Unless we have "allow insecure widelinks"
4687 if (!lp_allow_insecure_wide_links()) {
4692 return lp_widelinks_internal(snum
);
4695 int lp_server_role(void)
4697 return lp_find_server_role(lp__server_role(),
4699 lp__domain_logons(),
4700 lp_domain_master_true_or_auto());
4703 int lp_security(void)
4705 return lp_find_security(lp__server_role(),
4709 struct loadparm_global
* get_globals(void)