s3-rpc_server: Implement an endpoint monitor loop.
[Samba.git] / source3 / smbd / server.c
blob5d2abc0bd9f8225142575dadda392458ba12068f
1 /*
2 Unix SMB/CIFS implementation.
3 Main SMB server routines
4 Copyright (C) Andrew Tridgell 1992-1998
5 Copyright (C) Martin Pool 2002
6 Copyright (C) Jelmer Vernooij 2002-2003
7 Copyright (C) Volker Lendecke 1993-2007
8 Copyright (C) Jeremy Allison 1993-2007
10 This program is free software; you can redistribute it and/or modify
11 it under the terms of the GNU General Public License as published by
12 the Free Software Foundation; either version 3 of the License, or
13 (at your option) any later version.
15 This program is distributed in the hope that it will be useful,
16 but WITHOUT ANY WARRANTY; without even the implied warranty of
17 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
18 GNU General Public License for more details.
20 You should have received a copy of the GNU General Public License
21 along with this program. If not, see <http://www.gnu.org/licenses/>.
24 #include "includes.h"
25 #include "popt_common.h"
26 #include "smbd/globals.h"
27 #include "librpc/gen_ndr/messaging.h"
28 #include "registry.h"
29 #include "registry/reg_init_full.h"
30 #include "libcli/auth/schannel.h"
31 #include "secrets.h"
32 #include "memcache.h"
33 #include "ctdbd_conn.h"
34 #include "printing/printer_list.h"
35 #include "rpc_server/rpc_ep_setup.h"
36 #include "printing/pcap.h"
37 #include "printing.h"
38 #include "serverid.h"
40 extern void start_epmd(struct tevent_context *ev_ctx,
41 struct messaging_context *msg_ctx);
43 #ifdef WITH_DFS
44 extern int dcelogin_atmost_once;
45 #endif /* WITH_DFS */
47 static void smbd_set_server_fd(int fd)
49 struct smbd_server_connection *sconn = smbd_server_conn;
50 char addr[INET6_ADDRSTRLEN];
51 const char *name;
53 sconn->sock = fd;
56 * Initialize sconn->client_id: If we can't find the client's
57 * name, default to its address.
60 client_addr(fd, sconn->client_id.addr, sizeof(sconn->client_id.addr));
62 name = client_name(sconn->sock);
63 if (strcmp(name, "UNKNOWN") != 0) {
64 name = talloc_strdup(sconn, name);
65 } else {
66 name = NULL;
68 sconn->client_id.name =
69 (name != NULL) ? name : sconn->client_id.addr;
71 sub_set_socket_ids(sconn->client_id.addr, sconn->client_id.name,
72 client_socket_addr(sconn->sock, addr,
73 sizeof(addr)));
76 struct event_context *smbd_event_context(void)
78 return server_event_context();
81 /*******************************************************************
82 What to do when smb.conf is updated.
83 ********************************************************************/
85 static void smb_conf_updated(struct messaging_context *msg,
86 void *private_data,
87 uint32_t msg_type,
88 struct server_id server_id,
89 DATA_BLOB *data)
91 struct tevent_context *ev_ctx =
92 talloc_get_type_abort(private_data, struct tevent_context);
94 DEBUG(10,("smb_conf_updated: Got message saying smb.conf was "
95 "updated. Reloading.\n"));
96 change_to_root_user();
97 reload_services(msg, smbd_server_conn->sock, False);
98 if (am_parent) {
99 pcap_cache_reload(ev_ctx, msg,
100 &reload_pcap_change_notify);
104 /*******************************************************************
105 What to do when printcap is updated.
106 ********************************************************************/
108 static void smb_pcap_updated(struct messaging_context *msg,
109 void *private_data,
110 uint32_t msg_type,
111 struct server_id server_id,
112 DATA_BLOB *data)
114 struct tevent_context *ev_ctx =
115 talloc_get_type_abort(private_data, struct tevent_context);
117 DEBUG(10,("Got message saying pcap was updated. Reloading.\n"));
118 change_to_root_user();
119 reload_printers(ev_ctx, msg);
122 /*******************************************************************
123 Delete a statcache entry.
124 ********************************************************************/
126 static void smb_stat_cache_delete(struct messaging_context *msg,
127 void *private_data,
128 uint32_t msg_tnype,
129 struct server_id server_id,
130 DATA_BLOB *data)
132 const char *name = (const char *)data->data;
133 DEBUG(10,("smb_stat_cache_delete: delete name %s\n", name));
134 stat_cache_delete(name);
137 /****************************************************************************
138 Send a SIGTERM to our process group.
139 *****************************************************************************/
141 static void killkids(void)
143 if(am_parent) kill(0,SIGTERM);
146 /****************************************************************************
147 Process a sam sync message - not sure whether to do this here or
148 somewhere else.
149 ****************************************************************************/
151 static void msg_sam_sync(struct messaging_context *msg,
152 void *private_data,
153 uint32_t msg_type,
154 struct server_id server_id,
155 DATA_BLOB *data)
157 DEBUG(10, ("** sam sync message received, ignoring\n"));
160 static void msg_exit_server(struct messaging_context *msg,
161 void *private_data,
162 uint32_t msg_type,
163 struct server_id server_id,
164 DATA_BLOB *data)
166 DEBUG(3, ("got a SHUTDOWN message\n"));
167 exit_server_cleanly(NULL);
170 #ifdef DEVELOPER
171 static void msg_inject_fault(struct messaging_context *msg,
172 void *private_data,
173 uint32_t msg_type,
174 struct server_id src,
175 DATA_BLOB *data)
177 int sig;
179 if (data->length != sizeof(sig)) {
180 DEBUG(0, ("Process %s sent bogus signal injection request\n",
181 procid_str_static(&src)));
182 return;
185 sig = *(int *)data->data;
186 if (sig == -1) {
187 exit_server("internal error injected");
188 return;
191 #if HAVE_STRSIGNAL
192 DEBUG(0, ("Process %s requested injection of signal %d (%s)\n",
193 procid_str_static(&src), sig, strsignal(sig)));
194 #else
195 DEBUG(0, ("Process %s requested injection of signal %d\n",
196 procid_str_static(&src), sig));
197 #endif
199 kill(sys_getpid(), sig);
201 #endif /* DEVELOPER */
204 * Parent smbd process sets its own debug level first and then
205 * sends a message to all the smbd children to adjust their debug
206 * level to that of the parent.
209 static void smbd_msg_debug(struct messaging_context *msg_ctx,
210 void *private_data,
211 uint32_t msg_type,
212 struct server_id server_id,
213 DATA_BLOB *data)
215 struct child_pid *child;
217 debug_message(msg_ctx, private_data, MSG_DEBUG, server_id, data);
219 for (child = children; child != NULL; child = child->next) {
220 messaging_send_buf(msg_ctx, pid_to_procid(child->pid),
221 MSG_DEBUG,
222 data->data,
223 strlen((char *) data->data) + 1);
227 static void add_child_pid(pid_t pid)
229 struct child_pid *child;
231 child = SMB_MALLOC_P(struct child_pid);
232 if (child == NULL) {
233 DEBUG(0, ("Could not add child struct -- malloc failed\n"));
234 return;
236 child->pid = pid;
237 DLIST_ADD(children, child);
238 num_children += 1;
242 at most every smbd:cleanuptime seconds (default 20), we scan the BRL
243 and locking database for entries to cleanup. As a side effect this
244 also cleans up dead entries in the connections database (due to the
245 traversal in message_send_all()
247 Using a timer for this prevents a flood of traversals when a large
248 number of clients disconnect at the same time (perhaps due to a
249 network outage).
252 static void cleanup_timeout_fn(struct event_context *event_ctx,
253 struct timed_event *te,
254 struct timeval now,
255 void *private_data)
257 struct timed_event **cleanup_te = (struct timed_event **)private_data;
259 DEBUG(1,("Cleaning up brl and lock database after unclean shutdown\n"));
260 message_send_all(smbd_messaging_context(), MSG_SMB_UNLOCK, NULL, 0, NULL);
261 messaging_send_buf(smbd_messaging_context(), procid_self(),
262 MSG_SMB_BRL_VALIDATE, NULL, 0);
263 /* mark the cleanup as having been done */
264 (*cleanup_te) = NULL;
267 static void remove_child_pid(pid_t pid, bool unclean_shutdown)
269 struct child_pid *child;
270 static struct timed_event *cleanup_te;
271 struct server_id child_id;
273 if (unclean_shutdown) {
274 /* a child terminated uncleanly so tickle all
275 processes to see if they can grab any of the
276 pending locks
278 DEBUG(3,(__location__ " Unclean shutdown of pid %u\n",
279 (unsigned int)pid));
280 if (!cleanup_te) {
281 /* call the cleanup timer, but not too often */
282 int cleanup_time = lp_parm_int(-1, "smbd", "cleanuptime", 20);
283 cleanup_te = event_add_timed(smbd_event_context(), NULL,
284 timeval_current_ofs(cleanup_time, 0),
285 cleanup_timeout_fn,
286 &cleanup_te);
287 DEBUG(1,("Scheduled cleanup of brl and lock database after unclean shutdown\n"));
291 child_id = procid_self(); /* Just initialize pid and potentially vnn */
292 child_id.pid = pid;
294 if (!serverid_deregister(child_id)) {
295 DEBUG(1, ("Could not remove pid %d from serverid.tdb\n",
296 (int)pid));
299 for (child = children; child != NULL; child = child->next) {
300 if (child->pid == pid) {
301 struct child_pid *tmp = child;
302 DLIST_REMOVE(children, child);
303 SAFE_FREE(tmp);
304 num_children -= 1;
305 return;
309 /* not all forked child processes are added to the children list */
310 DEBUG(1, ("Could not find child %d -- ignoring\n", (int)pid));
313 /****************************************************************************
314 Have we reached the process limit ?
315 ****************************************************************************/
317 static bool allowable_number_of_smbd_processes(void)
319 int max_processes = lp_max_smbd_processes();
321 if (!max_processes)
322 return True;
324 return num_children < max_processes;
327 static void smbd_sig_chld_handler(struct tevent_context *ev,
328 struct tevent_signal *se,
329 int signum,
330 int count,
331 void *siginfo,
332 void *private_data)
334 pid_t pid;
335 int status;
337 while ((pid = sys_waitpid(-1, &status, WNOHANG)) > 0) {
338 bool unclean_shutdown = False;
340 /* If the child terminated normally, assume
341 it was an unclean shutdown unless the
342 status is 0
344 if (WIFEXITED(status)) {
345 unclean_shutdown = WEXITSTATUS(status);
347 /* If the child terminated due to a signal
348 we always assume it was unclean.
350 if (WIFSIGNALED(status)) {
351 unclean_shutdown = True;
353 remove_child_pid(pid, unclean_shutdown);
357 static void smbd_setup_sig_chld_handler(void)
359 struct tevent_signal *se;
361 se = tevent_add_signal(smbd_event_context(),
362 smbd_event_context(),
363 SIGCHLD, 0,
364 smbd_sig_chld_handler,
365 NULL);
366 if (!se) {
367 exit_server("failed to setup SIGCHLD handler");
371 struct smbd_open_socket;
373 struct smbd_parent_context {
374 bool interactive;
376 /* the list of listening sockets */
377 struct smbd_open_socket *sockets;
380 struct smbd_open_socket {
381 struct smbd_open_socket *prev, *next;
382 struct smbd_parent_context *parent;
383 int fd;
384 struct tevent_fd *fde;
387 static void smbd_open_socket_close_fn(struct tevent_context *ev,
388 struct tevent_fd *fde,
389 int fd,
390 void *private_data)
392 /* this might be the socket_wrapper swrap_close() */
393 close(fd);
396 static void smbd_accept_connection(struct tevent_context *ev,
397 struct tevent_fd *fde,
398 uint16_t flags,
399 void *private_data)
401 struct smbd_open_socket *s = talloc_get_type_abort(private_data,
402 struct smbd_open_socket);
403 struct sockaddr_storage addr;
404 socklen_t in_addrlen = sizeof(addr);
405 int fd;
406 pid_t pid = 0;
407 uint64_t unique_id;
409 fd = accept(s->fd, (struct sockaddr *)(void *)&addr,&in_addrlen);
410 smbd_set_server_fd(fd);
412 if (fd == -1 && errno == EINTR)
413 return;
415 if (fd == -1) {
416 DEBUG(0,("open_sockets_smbd: accept: %s\n",
417 strerror(errno)));
418 return;
421 if (s->parent->interactive) {
422 smbd_process(smbd_server_conn);
423 exit_server_cleanly("end of interactive mode");
424 return;
427 if (!allowable_number_of_smbd_processes()) {
428 close(fd);
429 smbd_set_server_fd(-1);
430 return;
434 * Generate a unique id in the parent process so that we use
435 * the global random state in the parent.
437 generate_random_buffer((uint8_t *)&unique_id, sizeof(unique_id));
439 pid = sys_fork();
440 if (pid == 0) {
441 NTSTATUS status = NT_STATUS_OK;
443 /* Child code ... */
444 am_parent = 0;
446 set_my_unique_id(unique_id);
448 /* Stop zombies, the parent explicitly handles
449 * them, counting worker smbds. */
450 CatchChild();
452 /* close our standard file
453 descriptors */
454 close_low_fds(False);
457 * Can't use TALLOC_FREE here. Nulling out the argument to it
458 * would overwrite memory we've just freed.
460 talloc_free(s->parent);
461 s = NULL;
463 status = reinit_after_fork(smbd_messaging_context(),
464 smbd_event_context(), procid_self(),
465 true);
466 if (!NT_STATUS_IS_OK(status)) {
467 if (NT_STATUS_EQUAL(status,
468 NT_STATUS_TOO_MANY_OPENED_FILES)) {
469 DEBUG(0,("child process cannot initialize "
470 "because too many files are open\n"));
471 goto exit;
473 DEBUG(0,("reinit_after_fork() failed\n"));
474 smb_panic("reinit_after_fork() failed");
477 smbd_setup_sig_term_handler();
478 smbd_setup_sig_hup_handler(server_event_context(),
479 server_messaging_context());
481 if (!serverid_register(procid_self(),
482 FLAG_MSG_GENERAL|FLAG_MSG_SMBD
483 |FLAG_MSG_DBWRAP
484 |FLAG_MSG_PRINT_GENERAL)) {
485 exit_server_cleanly("Could not register myself in "
486 "serverid.tdb");
489 smbd_process(smbd_server_conn);
490 exit:
491 exit_server_cleanly("end of child");
492 return;
495 if (pid < 0) {
496 DEBUG(0,("smbd_accept_connection: sys_fork() failed: %s\n",
497 strerror(errno)));
500 /* The parent doesn't need this socket */
501 close(fd);
503 /* Sun May 6 18:56:14 2001 ackley@cs.unm.edu:
504 Clear the closed fd info out of server_fd --
505 and more importantly, out of client_fd in
506 util_sock.c, to avoid a possible
507 getpeername failure if we reopen the logs
508 and use %I in the filename.
511 smbd_set_server_fd(-1);
513 if (pid != 0) {
514 add_child_pid(pid);
517 /* Force parent to check log size after
518 * spawning child. Fix from
519 * klausr@ITAP.Physik.Uni-Stuttgart.De. The
520 * parent smbd will log to logserver.smb. It
521 * writes only two messages for each child
522 * started/finished. But each child writes,
523 * say, 50 messages also in logserver.smb,
524 * begining with the debug_count of the
525 * parent, before the child opens its own log
526 * file logserver.client. In a worst case
527 * scenario the size of logserver.smb would be
528 * checked after about 50*50=2500 messages
529 * (ca. 100kb).
530 * */
531 force_check_log_size();
534 static bool smbd_open_one_socket(struct smbd_parent_context *parent,
535 const struct sockaddr_storage *ifss,
536 uint16_t port)
538 struct smbd_open_socket *s;
540 s = talloc(parent, struct smbd_open_socket);
541 if (!s) {
542 return false;
545 s->parent = parent;
546 s->fd = open_socket_in(SOCK_STREAM,
547 port,
548 parent->sockets == NULL ? 0 : 2,
549 ifss,
550 true);
551 if (s->fd == -1) {
552 DEBUG(0,("smbd_open_once_socket: open_socket_in: "
553 "%s\n", strerror(errno)));
554 TALLOC_FREE(s);
556 * We ignore an error here, as we've done before
558 return true;
561 /* ready to listen */
562 set_socket_options(s->fd, "SO_KEEPALIVE");
563 set_socket_options(s->fd, lp_socket_options());
565 /* Set server socket to
566 * non-blocking for the accept. */
567 set_blocking(s->fd, False);
569 if (listen(s->fd, SMBD_LISTEN_BACKLOG) == -1) {
570 DEBUG(0,("open_sockets_smbd: listen: "
571 "%s\n", strerror(errno)));
572 close(s->fd);
573 TALLOC_FREE(s);
574 return false;
577 s->fde = tevent_add_fd(smbd_event_context(),
579 s->fd, TEVENT_FD_READ,
580 smbd_accept_connection,
582 if (!s->fde) {
583 DEBUG(0,("open_sockets_smbd: "
584 "tevent_add_fd: %s\n",
585 strerror(errno)));
586 close(s->fd);
587 TALLOC_FREE(s);
588 return false;
590 tevent_fd_set_close_fn(s->fde, smbd_open_socket_close_fn);
592 DLIST_ADD_END(parent->sockets, s, struct smbd_open_socket *);
594 return true;
597 static bool smbd_parent_housekeeping(const struct timeval *now, void *private_data)
599 time_t printcap_cache_time = (time_t)lp_printcap_cache_time();
600 time_t t = time_mono(NULL);
602 DEBUG(5, ("parent housekeeping\n"));
604 /* if periodic printcap rescan is enabled, see if it's time to reload */
605 if ((printcap_cache_time != 0)
606 && (t >= (last_printer_reload_time + printcap_cache_time))) {
607 DEBUG( 3,( "Printcap cache time expired.\n"));
608 pcap_cache_reload(server_event_context(),
609 smbd_messaging_context(),
610 &reload_pcap_change_notify);
611 last_printer_reload_time = t;
614 return true;
617 /****************************************************************************
618 Open the socket communication.
619 ****************************************************************************/
621 static bool open_sockets_smbd(struct smbd_parent_context *parent,
622 struct messaging_context *msg_ctx,
623 const char *smb_ports)
625 int num_interfaces = iface_count();
626 int i;
627 char *ports;
628 unsigned dns_port = 0;
630 #ifdef HAVE_ATEXIT
631 atexit(killkids);
632 #endif
634 /* Stop zombies */
635 smbd_setup_sig_chld_handler();
637 /* use a reasonable default set of ports - listing on 445 and 139 */
638 if (!smb_ports) {
639 ports = lp_smb_ports();
640 if (!ports || !*ports) {
641 ports = talloc_strdup(talloc_tos(), SMB_PORTS);
642 } else {
643 ports = talloc_strdup(talloc_tos(), ports);
645 } else {
646 ports = talloc_strdup(talloc_tos(), smb_ports);
649 if (lp_interfaces() && lp_bind_interfaces_only()) {
650 /* We have been given an interfaces line, and been
651 told to only bind to those interfaces. Create a
652 socket per interface and bind to only these.
655 /* Now open a listen socket for each of the
656 interfaces. */
657 for(i = 0; i < num_interfaces; i++) {
658 const struct sockaddr_storage *ifss =
659 iface_n_sockaddr_storage(i);
660 char *tok;
661 const char *ptr;
663 if (ifss == NULL) {
664 DEBUG(0,("open_sockets_smbd: "
665 "interface %d has NULL IP address !\n",
666 i));
667 continue;
670 for (ptr=ports;
671 next_token_talloc(talloc_tos(),&ptr, &tok, " \t,");) {
672 unsigned port = atoi(tok);
673 if (port == 0 || port > 0xffff) {
674 continue;
677 if (!smbd_open_one_socket(parent, ifss, port)) {
678 return false;
682 } else {
683 /* Just bind to 0.0.0.0 - accept connections
684 from anywhere. */
686 char *tok;
687 const char *ptr;
688 const char *sock_addr = lp_socket_address();
689 char *sock_tok;
690 const char *sock_ptr;
692 if (strequal(sock_addr, "0.0.0.0") ||
693 strequal(sock_addr, "::")) {
694 #if HAVE_IPV6
695 sock_addr = "::,0.0.0.0";
696 #else
697 sock_addr = "0.0.0.0";
698 #endif
701 for (sock_ptr=sock_addr;
702 next_token_talloc(talloc_tos(), &sock_ptr, &sock_tok, " \t,"); ) {
703 for (ptr=ports; next_token_talloc(talloc_tos(), &ptr, &tok, " \t,"); ) {
704 struct sockaddr_storage ss;
706 unsigned port = atoi(tok);
707 if (port == 0 || port > 0xffff) {
708 continue;
711 /* Keep the first port for mDNS service
712 * registration.
714 if (dns_port == 0) {
715 dns_port = port;
718 /* open an incoming socket */
719 if (!interpret_string_addr(&ss, sock_tok,
720 AI_NUMERICHOST|AI_PASSIVE)) {
721 continue;
724 if (!smbd_open_one_socket(parent, &ss, port)) {
725 return false;
731 if (parent->sockets == NULL) {
732 DEBUG(0,("open_sockets_smbd: No "
733 "sockets available to bind to.\n"));
734 return false;
737 /* Setup the main smbd so that we can get messages. Note that
738 do this after starting listening. This is needed as when in
739 clustered mode, ctdb won't allow us to start doing database
740 operations until it has gone thru a full startup, which
741 includes checking to see that smbd is listening. */
743 if (!serverid_register(procid_self(),
744 FLAG_MSG_GENERAL|FLAG_MSG_SMBD
745 |FLAG_MSG_DBWRAP)) {
746 DEBUG(0, ("open_sockets_smbd: Failed to register "
747 "myself in serverid.tdb\n"));
748 return false;
751 if (!(event_add_idle(smbd_event_context(), NULL,
752 timeval_set(SMBD_HOUSEKEEPING_INTERVAL, 0),
753 "parent_housekeeping", smbd_parent_housekeeping,
754 NULL))) {
755 DEBUG(0, ("Could not add parent_housekeeping event\n"));
756 return false;
759 /* Listen to messages */
761 messaging_register(msg_ctx, NULL, MSG_SMB_SAM_SYNC, msg_sam_sync);
762 messaging_register(msg_ctx, NULL, MSG_SHUTDOWN, msg_exit_server);
763 messaging_register(msg_ctx, NULL, MSG_SMB_FILE_RENAME,
764 msg_file_was_renamed);
765 messaging_register(msg_ctx, server_event_context(), MSG_SMB_CONF_UPDATED,
766 smb_conf_updated);
767 messaging_register(msg_ctx, NULL, MSG_SMB_STAT_CACHE_DELETE,
768 smb_stat_cache_delete);
769 messaging_register(msg_ctx, NULL, MSG_DEBUG, smbd_msg_debug);
770 messaging_register(msg_ctx, server_event_context(), MSG_PRINTER_PCAP,
771 smb_pcap_updated);
772 brl_register_msgs(msg_ctx);
774 msg_idmap_register_msgs(msg_ctx);
776 #ifdef CLUSTER_SUPPORT
777 if (lp_clustering()) {
778 ctdbd_register_reconfigure(messaging_ctdbd_connection());
780 #endif
782 #ifdef DEVELOPER
783 messaging_register(msg_ctx, NULL, MSG_SMB_INJECT_FAULT,
784 msg_inject_fault);
785 #endif
787 if (lp_multicast_dns_register() && (dns_port != 0)) {
788 #ifdef WITH_DNSSD_SUPPORT
789 smbd_setup_mdns_registration(smbd_event_context(),
790 parent, dns_port);
791 #endif
792 #ifdef WITH_AVAHI_SUPPORT
793 void *avahi_conn;
795 avahi_conn = avahi_start_register(
796 smbd_event_context(), smbd_event_context(), dns_port);
797 if (avahi_conn == NULL) {
798 DEBUG(10, ("avahi_start_register failed\n"));
800 #endif
803 return true;
806 static void smbd_parent_loop(struct smbd_parent_context *parent)
808 /* now accept incoming connections - forking a new process
809 for each incoming connection */
810 DEBUG(2,("waiting for connections\n"));
811 while (1) {
812 int ret;
813 TALLOC_CTX *frame = talloc_stackframe();
815 ret = tevent_loop_once(smbd_event_context());
816 if (ret != 0) {
817 exit_server_cleanly("tevent_loop_once() error");
820 TALLOC_FREE(frame);
821 } /* end while 1 */
823 /* NOTREACHED return True; */
827 /****************************************************************************
828 Initialise connect, service and file structs.
829 ****************************************************************************/
831 static bool init_structs(void )
834 * Set the machine NETBIOS name if not already
835 * set from the config file.
838 if (!init_names())
839 return False;
841 if (!secrets_init())
842 return False;
844 return True;
847 /****************************************************************************
848 main program.
849 ****************************************************************************/
851 /* Declare prototype for build_options() to avoid having to run it through
852 mkproto.h. Mixing $(builddir) and $(srcdir) source files in the current
853 prototype generation system is too complicated. */
855 extern void build_options(bool screen);
857 int main(int argc,const char *argv[])
859 /* shall I run as a daemon */
860 bool is_daemon = false;
861 bool interactive = false;
862 bool Fork = true;
863 bool no_process_group = false;
864 bool log_stdout = false;
865 char *ports = NULL;
866 char *profile_level = NULL;
867 int opt;
868 poptContext pc;
869 bool print_build_options = False;
870 enum {
871 OPT_DAEMON = 1000,
872 OPT_INTERACTIVE,
873 OPT_FORK,
874 OPT_NO_PROCESS_GROUP,
875 OPT_LOG_STDOUT
877 struct poptOption long_options[] = {
878 POPT_AUTOHELP
879 {"daemon", 'D', POPT_ARG_NONE, NULL, OPT_DAEMON, "Become a daemon (default)" },
880 {"interactive", 'i', POPT_ARG_NONE, NULL, OPT_INTERACTIVE, "Run interactive (not a daemon)"},
881 {"foreground", 'F', POPT_ARG_NONE, NULL, OPT_FORK, "Run daemon in foreground (for daemontools, etc.)" },
882 {"no-process-group", '\0', POPT_ARG_NONE, NULL, OPT_NO_PROCESS_GROUP, "Don't create a new process group" },
883 {"log-stdout", 'S', POPT_ARG_NONE, NULL, OPT_LOG_STDOUT, "Log to stdout" },
884 {"build-options", 'b', POPT_ARG_NONE, NULL, 'b', "Print build options" },
885 {"port", 'p', POPT_ARG_STRING, &ports, 0, "Listen on the specified ports"},
886 {"profiling-level", 'P', POPT_ARG_STRING, &profile_level, 0, "Set profiling level","PROFILE_LEVEL"},
887 POPT_COMMON_SAMBA
888 POPT_COMMON_DYNCONFIG
889 POPT_TABLEEND
891 struct smbd_parent_context *parent = NULL;
892 TALLOC_CTX *frame;
893 NTSTATUS status;
894 uint64_t unique_id;
897 * Do this before any other talloc operation
899 talloc_enable_null_tracking();
900 frame = talloc_stackframe();
902 load_case_tables();
904 /* Initialize the event context, it will panic on error */
905 smbd_event_context();
907 smbd_init_globals();
909 TimeInit();
911 #ifdef HAVE_SET_AUTH_PARAMETERS
912 set_auth_parameters(argc,argv);
913 #endif
915 pc = poptGetContext("smbd", argc, argv, long_options, 0);
916 while((opt = poptGetNextOpt(pc)) != -1) {
917 switch (opt) {
918 case OPT_DAEMON:
919 is_daemon = true;
920 break;
921 case OPT_INTERACTIVE:
922 interactive = true;
923 break;
924 case OPT_FORK:
925 Fork = false;
926 break;
927 case OPT_NO_PROCESS_GROUP:
928 no_process_group = true;
929 break;
930 case OPT_LOG_STDOUT:
931 log_stdout = true;
932 break;
933 case 'b':
934 print_build_options = True;
935 break;
936 default:
937 d_fprintf(stderr, "\nInvalid option %s: %s\n\n",
938 poptBadOption(pc, 0), poptStrerror(opt));
939 poptPrintUsage(pc, stderr, 0);
940 exit(1);
943 poptFreeContext(pc);
945 if (interactive) {
946 Fork = False;
947 log_stdout = True;
950 if (log_stdout) {
951 setup_logging(argv[0], DEBUG_STDOUT);
952 } else {
953 setup_logging(argv[0], DEBUG_FILE);
956 if (print_build_options) {
957 build_options(True); /* Display output to screen as well as debug */
958 exit(0);
961 #ifdef HAVE_SETLUID
962 /* needed for SecureWare on SCO */
963 setluid(0);
964 #endif
966 set_remote_machine_name("smbd", False);
968 if (interactive && (DEBUGLEVEL >= 9)) {
969 talloc_enable_leak_report();
972 if (log_stdout && Fork) {
973 DEBUG(0,("ERROR: Can't log to stdout (-S) unless daemon is in foreground (-F) or interactive (-i)\n"));
974 exit(1);
977 /* we want to re-seed early to prevent time delays causing
978 client problems at a later date. (tridge) */
979 generate_random_buffer(NULL, 0);
981 /* get initial effective uid and gid */
982 sec_init();
984 /* make absolutely sure we run as root - to handle cases where people
985 are crazy enough to have it setuid */
986 gain_root_privilege();
987 gain_root_group_privilege();
989 fault_setup((void (*)(void *))exit_server_fault);
990 dump_core_setup("smbd");
992 /* we are never interested in SIGPIPE */
993 BlockSignals(True,SIGPIPE);
995 #if defined(SIGFPE)
996 /* we are never interested in SIGFPE */
997 BlockSignals(True,SIGFPE);
998 #endif
1000 #if defined(SIGUSR2)
1001 /* We are no longer interested in USR2 */
1002 BlockSignals(True,SIGUSR2);
1003 #endif
1005 /* POSIX demands that signals are inherited. If the invoking process has
1006 * these signals masked, we will have problems, as we won't recieve them. */
1007 BlockSignals(False, SIGHUP);
1008 BlockSignals(False, SIGUSR1);
1009 BlockSignals(False, SIGTERM);
1011 /* Ensure we leave no zombies until we
1012 * correctly set up child handling below. */
1014 CatchChild();
1016 /* we want total control over the permissions on created files,
1017 so set our umask to 0 */
1018 umask(0);
1020 reopen_logs();
1022 DEBUG(0,("smbd version %s started.\n", samba_version_string()));
1023 DEBUGADD(0,("%s\n", COPYRIGHT_STARTUP_MESSAGE));
1025 DEBUG(2,("uid=%d gid=%d euid=%d egid=%d\n",
1026 (int)getuid(),(int)getgid(),(int)geteuid(),(int)getegid()));
1028 /* Output the build options to the debug log */
1029 build_options(False);
1031 if (sizeof(uint16) < 2 || sizeof(uint32) < 4) {
1032 DEBUG(0,("ERROR: Samba is not configured correctly for the word size on your machine\n"));
1033 exit(1);
1036 if (!lp_load_initial_only(get_dyn_CONFIGFILE())) {
1037 DEBUG(0, ("error opening config file\n"));
1038 exit(1);
1041 /* Init the security context and global current_user */
1042 init_sec_ctx();
1044 if (smbd_messaging_context() == NULL)
1045 exit(1);
1048 * Reloading of the printers will not work here as we don't have a
1049 * server info and rpc services set up. It will be called later.
1051 if (!reload_services(smbd_messaging_context(), -1, False)) {
1052 exit(1);
1055 /* ...NOTE... Log files are working from this point! */
1057 DEBUG(3,("loaded services\n"));
1059 init_structs();
1061 #ifdef WITH_PROFILE
1062 if (!profile_setup(smbd_messaging_context(), False)) {
1063 DEBUG(0,("ERROR: failed to setup profiling\n"));
1064 return -1;
1066 if (profile_level != NULL) {
1067 int pl = atoi(profile_level);
1068 struct server_id src;
1070 DEBUG(1, ("setting profiling level: %s\n",profile_level));
1071 src.pid = getpid();
1072 set_profile_level(pl, src);
1074 #endif
1076 if (!is_daemon && !is_a_socket(0)) {
1077 if (!interactive)
1078 DEBUG(0,("standard input is not a socket, assuming -D option\n"));
1081 * Setting is_daemon here prevents us from eventually calling
1082 * the open_sockets_inetd()
1085 is_daemon = True;
1088 if (is_daemon && !interactive) {
1089 DEBUG( 3, ( "Becoming a daemon.\n" ) );
1090 become_daemon(Fork, no_process_group, log_stdout);
1093 generate_random_buffer((uint8_t *)&unique_id, sizeof(unique_id));
1094 set_my_unique_id(unique_id);
1096 #if HAVE_SETPGID
1098 * If we're interactive we want to set our own process group for
1099 * signal management.
1101 if (interactive && !no_process_group)
1102 setpgid( (pid_t)0, (pid_t)0);
1103 #endif
1105 if (!directory_exist(lp_lockdir()))
1106 mkdir(lp_lockdir(), 0755);
1108 if (is_daemon)
1109 pidfile_create("smbd");
1111 status = reinit_after_fork(smbd_messaging_context(),
1112 smbd_event_context(),
1113 procid_self(), false);
1114 if (!NT_STATUS_IS_OK(status)) {
1115 DEBUG(0,("reinit_after_fork() failed\n"));
1116 exit(1);
1119 smbd_server_conn->msg_ctx = smbd_messaging_context();
1121 smbd_setup_sig_term_handler();
1122 smbd_setup_sig_hup_handler(smbd_event_context(),
1123 smbd_server_conn->msg_ctx);
1125 /* Setup all the TDB's - including CLEAR_IF_FIRST tdb's. */
1127 if (smbd_memcache() == NULL) {
1128 exit(1);
1131 memcache_set_global(smbd_memcache());
1133 /* Initialise the password backed before the global_sam_sid
1134 to ensure that we fetch from ldap before we make a domain sid up */
1136 if(!initialize_password_db(False, smbd_event_context()))
1137 exit(1);
1139 if (!secrets_init()) {
1140 DEBUG(0, ("ERROR: smbd can not open secrets.tdb\n"));
1141 exit(1);
1144 if (lp_server_role() == ROLE_DOMAIN_BDC || lp_server_role() == ROLE_DOMAIN_PDC) {
1145 if (!open_schannel_session_store(NULL, lp_private_dir())) {
1146 DEBUG(0,("ERROR: Samba cannot open schannel store for secured NETLOGON operations.\n"));
1147 exit(1);
1151 if(!get_global_sam_sid()) {
1152 DEBUG(0,("ERROR: Samba cannot create a SAM SID.\n"));
1153 exit(1);
1156 if (!sessionid_init()) {
1157 exit(1);
1160 if (!connections_init(True))
1161 exit(1);
1163 if (!locking_init())
1164 exit(1);
1166 if (!messaging_tdb_parent_init(smbd_event_context())) {
1167 exit(1);
1170 if (!notify_internal_parent_init(smbd_event_context())) {
1171 exit(1);
1174 if (!serverid_parent_init(smbd_event_context())) {
1175 exit(1);
1178 if (!printer_list_parent_init()) {
1179 exit(1);
1182 if (!W_ERROR_IS_OK(registry_init_full()))
1183 exit(1);
1185 if (!print_backend_init(smbd_messaging_context()))
1186 exit(1);
1188 /* Open the share_info.tdb here, so we don't have to open
1189 after the fork on every single connection. This is a small
1190 performance improvment and reduces the total number of system
1191 fds used. */
1192 if (!share_info_db_init()) {
1193 DEBUG(0,("ERROR: failed to load share info db.\n"));
1194 exit(1);
1197 status = init_system_info();
1198 if (!NT_STATUS_IS_OK(status)) {
1199 DEBUG(1, ("ERROR: failed to setup system user info: %s.\n",
1200 nt_errstr(status)));
1201 return -1;
1204 if (!init_guest_info()) {
1205 DEBUG(0,("ERROR: failed to setup guest info.\n"));
1206 return -1;
1209 if (!file_init(smbd_server_conn)) {
1210 DEBUG(0, ("ERROR: file_init failed\n"));
1211 return -1;
1214 if (is_daemon && !interactive) {
1215 const char *rpcsrv_type;
1217 rpcsrv_type = lp_parm_const_string(GLOBAL_SECTION_SNUM,
1218 "rpc_server", "epmapper",
1219 "none");
1220 if (StrCaseCmp(rpcsrv_type, "daemon") == 0) {
1221 start_epmd(smbd_event_context(),
1222 smbd_server_conn->msg_ctx);
1226 if (!dcesrv_ep_setup(smbd_event_context(), smbd_server_conn->msg_ctx)) {
1227 exit(1);
1230 /* Publish nt printers, this requires a working winreg pipe */
1231 pcap_cache_reload(server_event_context(), smbd_messaging_context(),
1232 &reload_printers);
1234 /* only start the background queue daemon if we are
1235 running as a daemon -- bad things will happen if
1236 smbd is launched via inetd and we fork a copy of
1237 ourselves here */
1239 if (is_daemon && !interactive
1240 && lp_parm_bool(-1, "smbd", "backgroundqueue", true)) {
1241 start_background_queue(smbd_event_context(),
1242 smbd_messaging_context());
1245 if (!is_daemon) {
1246 /* inetd mode */
1247 TALLOC_FREE(frame);
1249 /* Started from inetd. fd 0 is the socket. */
1250 /* We will abort gracefully when the client or remote system
1251 goes away */
1252 smbd_set_server_fd(dup(0));
1254 /* close our standard file descriptors */
1255 close_low_fds(False); /* Don't close stderr */
1257 #ifdef HAVE_ATEXIT
1258 atexit(killkids);
1259 #endif
1261 /* Stop zombies */
1262 smbd_setup_sig_chld_handler();
1264 smbd_process(smbd_server_conn);
1266 exit_server_cleanly(NULL);
1267 return(0);
1270 parent = talloc_zero(smbd_event_context(), struct smbd_parent_context);
1271 if (!parent) {
1272 exit_server("talloc(struct smbd_parent_context) failed");
1274 parent->interactive = interactive;
1276 if (!open_sockets_smbd(parent, smbd_messaging_context(), ports))
1277 exit_server("open_sockets_smbd() failed");
1279 TALLOC_FREE(frame);
1280 /* make sure we always have a valid stackframe */
1281 frame = talloc_stackframe();
1283 smbd_parent_loop(parent);
1285 exit_server_cleanly(NULL);
1286 TALLOC_FREE(frame);
1287 return(0);