s3-docs: Add missing para end tag.
[Samba.git] / source / smbd / server.c
blob23c8c12a62574de13992bf21784c181152915487
1 /*
2 Unix SMB/CIFS implementation.
3 Main SMB server routines
4 Copyright (C) Andrew Tridgell 1992-1998
5 Copyright (C) Martin Pool 2002
6 Copyright (C) Jelmer Vernooij 2002-2003
7 Copyright (C) Volker Lendecke 1993-2007
8 Copyright (C) Jeremy Allison 1993-2007
10 This program is free software; you can redistribute it and/or modify
11 it under the terms of the GNU General Public License as published by
12 the Free Software Foundation; either version 3 of the License, or
13 (at your option) any later version.
15 This program is distributed in the hope that it will be useful,
16 but WITHOUT ANY WARRANTY; without even the implied warranty of
17 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
18 GNU General Public License for more details.
20 You should have received a copy of the GNU General Public License
21 along with this program. If not, see <http://www.gnu.org/licenses/>.
24 #include "includes.h"
26 static_decl_rpc;
28 static int am_parent = 1;
30 extern struct auth_context *negprot_global_auth_context;
31 extern SIG_ATOMIC_T got_sig_term;
32 extern SIG_ATOMIC_T reload_after_sighup;
33 static SIG_ATOMIC_T got_sig_cld;
35 #ifdef WITH_DFS
36 extern int dcelogin_atmost_once;
37 #endif /* WITH_DFS */
39 /* really we should have a top level context structure that has the
40 client file descriptor as an element. That would require a major rewrite :(
42 the following 2 functions are an alternative - they make the file
43 descriptor private to smbd
45 static int server_fd = -1;
47 int smbd_server_fd(void)
49 return server_fd;
52 static void smbd_set_server_fd(int fd)
54 server_fd = fd;
57 int get_client_fd(void)
59 return server_fd;
62 #ifdef CLUSTER_SUPPORT
63 static int client_get_tcp_info(struct sockaddr_storage *server,
64 struct sockaddr_storage *client)
66 socklen_t length;
67 if (server_fd == -1) {
68 return -1;
70 length = sizeof(*server);
71 if (getsockname(server_fd, (struct sockaddr *)server, &length) != 0) {
72 return -1;
74 length = sizeof(*client);
75 if (getpeername(server_fd, (struct sockaddr *)client, &length) != 0) {
76 return -1;
78 return 0;
80 #endif
82 struct event_context *smbd_event_context(void)
84 static struct event_context *ctx;
86 if (!ctx && !(ctx = event_context_init(talloc_autofree_context()))) {
87 smb_panic("Could not init smbd event context");
89 return ctx;
92 struct messaging_context *smbd_messaging_context(void)
94 static struct messaging_context *ctx;
96 if (ctx == NULL) {
97 ctx = messaging_init(talloc_autofree_context(), server_id_self(),
98 smbd_event_context());
100 if (ctx == NULL) {
101 DEBUG(0, ("Could not init smbd messaging context.\n"));
103 return ctx;
106 struct memcache *smbd_memcache(void)
108 static struct memcache *cache;
110 if (!cache
111 && !(cache = memcache_init(talloc_autofree_context(),
112 lp_max_stat_cache_size()*1024))) {
114 smb_panic("Could not init smbd memcache");
116 return cache;
119 /*******************************************************************
120 What to do when smb.conf is updated.
121 ********************************************************************/
123 static void smb_conf_updated(struct messaging_context *msg,
124 void *private_data,
125 uint32_t msg_type,
126 struct server_id server_id,
127 DATA_BLOB *data)
129 DEBUG(10,("smb_conf_updated: Got message saying smb.conf was "
130 "updated. Reloading.\n"));
131 reload_services(False);
135 /*******************************************************************
136 Delete a statcache entry.
137 ********************************************************************/
139 static void smb_stat_cache_delete(struct messaging_context *msg,
140 void *private_data,
141 uint32_t msg_tnype,
142 struct server_id server_id,
143 DATA_BLOB *data)
145 const char *name = (const char *)data->data;
146 DEBUG(10,("smb_stat_cache_delete: delete name %s\n", name));
147 stat_cache_delete(name);
150 /****************************************************************************
151 Terminate signal.
152 ****************************************************************************/
154 static void sig_term(void)
156 got_sig_term = 1;
157 sys_select_signal(SIGTERM);
160 /****************************************************************************
161 Catch a sighup.
162 ****************************************************************************/
164 static void sig_hup(int sig)
166 reload_after_sighup = 1;
167 sys_select_signal(SIGHUP);
170 /****************************************************************************
171 Catch a sigcld
172 ****************************************************************************/
173 static void sig_cld(int sig)
175 got_sig_cld = 1;
176 sys_select_signal(SIGCLD);
179 /****************************************************************************
180 Send a SIGTERM to our process group.
181 *****************************************************************************/
183 static void killkids(void)
185 if(am_parent) kill(0,SIGTERM);
188 /****************************************************************************
189 Process a sam sync message - not sure whether to do this here or
190 somewhere else.
191 ****************************************************************************/
193 static void msg_sam_sync(struct messaging_context *msg,
194 void *private_data,
195 uint32_t msg_type,
196 struct server_id server_id,
197 DATA_BLOB *data)
199 DEBUG(10, ("** sam sync message received, ignoring\n"));
203 /****************************************************************************
204 Open the socket communication - inetd.
205 ****************************************************************************/
207 static bool open_sockets_inetd(void)
209 /* Started from inetd. fd 0 is the socket. */
210 /* We will abort gracefully when the client or remote system
211 goes away */
212 smbd_set_server_fd(dup(0));
214 /* close our standard file descriptors */
215 close_low_fds(False); /* Don't close stderr */
217 set_socket_options(smbd_server_fd(),"SO_KEEPALIVE");
218 set_socket_options(smbd_server_fd(), lp_socket_options());
220 return True;
223 static void msg_exit_server(struct messaging_context *msg,
224 void *private_data,
225 uint32_t msg_type,
226 struct server_id server_id,
227 DATA_BLOB *data)
229 DEBUG(3, ("got a SHUTDOWN message\n"));
230 exit_server_cleanly(NULL);
233 #ifdef DEVELOPER
234 static void msg_inject_fault(struct messaging_context *msg,
235 void *private_data,
236 uint32_t msg_type,
237 struct server_id src,
238 DATA_BLOB *data)
240 int sig;
242 if (data->length != sizeof(sig)) {
244 DEBUG(0, ("Process %s sent bogus signal injection request\n",
245 procid_str_static(&src)));
246 return;
249 sig = *(int *)data->data;
250 if (sig == -1) {
251 exit_server("internal error injected");
252 return;
255 #if HAVE_STRSIGNAL
256 DEBUG(0, ("Process %s requested injection of signal %d (%s)\n",
257 procid_str_static(&src), sig, strsignal(sig)));
258 #else
259 DEBUG(0, ("Process %s requested injection of signal %d\n",
260 procid_str_static(&src), sig));
261 #endif
263 kill(sys_getpid(), sig);
265 #endif /* DEVELOPER */
267 struct child_pid {
268 struct child_pid *prev, *next;
269 pid_t pid;
272 static struct child_pid *children;
273 static int num_children;
275 static void add_child_pid(pid_t pid)
277 struct child_pid *child;
279 if (lp_max_smbd_processes() == 0) {
280 /* Don't bother with the child list if we don't care anyway */
281 return;
284 child = SMB_MALLOC_P(struct child_pid);
285 if (child == NULL) {
286 DEBUG(0, ("Could not add child struct -- malloc failed\n"));
287 return;
289 child->pid = pid;
290 DLIST_ADD(children, child);
291 num_children += 1;
294 static void remove_child_pid(pid_t pid, bool unclean_shutdown)
296 struct child_pid *child;
298 if (unclean_shutdown) {
299 /* a child terminated uncleanly so tickle all processes to see
300 if they can grab any of the pending locks
302 DEBUG(3,(__location__ " Unclean shutdown of pid %u\n", (unsigned int)pid));
303 messaging_send_buf(smbd_messaging_context(), procid_self(),
304 MSG_SMB_BRL_VALIDATE, NULL, 0);
305 message_send_all(smbd_messaging_context(),
306 MSG_SMB_UNLOCK, NULL, 0, NULL);
309 if (lp_max_smbd_processes() == 0) {
310 /* Don't bother with the child list if we don't care anyway */
311 return;
314 for (child = children; child != NULL; child = child->next) {
315 if (child->pid == pid) {
316 struct child_pid *tmp = child;
317 DLIST_REMOVE(children, child);
318 SAFE_FREE(tmp);
319 num_children -= 1;
320 return;
324 DEBUG(0, ("Could not find child %d -- ignoring\n", (int)pid));
327 /****************************************************************************
328 Have we reached the process limit ?
329 ****************************************************************************/
331 static bool allowable_number_of_smbd_processes(void)
333 int max_processes = lp_max_smbd_processes();
335 if (!max_processes)
336 return True;
338 return num_children < max_processes;
341 /****************************************************************************
342 Open the socket communication.
343 ****************************************************************************/
345 static bool open_sockets_smbd(bool is_daemon, bool interactive, const char *smb_ports)
347 int num_interfaces = iface_count();
348 int num_sockets = 0;
349 int fd_listenset[FD_SETSIZE];
350 fd_set listen_set;
351 int s;
352 int maxfd = 0;
353 int i;
354 char *ports;
355 struct dns_reg_state * dns_reg = NULL;
356 unsigned dns_port = 0;
358 #ifdef HAVE_ATEXIT
360 static int atexit_set;
361 if(atexit_set == 0) {
362 atexit_set=1;
363 atexit(killkids);
366 #endif
368 if (!is_daemon) {
370 * Stop zombies the old way.
371 * We aren't forking any new
372 * 'normal' connections when
373 * run from [x]inetd.
375 CatchChild();
376 return open_sockets_inetd();
379 /* Stop zombies */
380 CatchSignal(SIGCLD, sig_cld);
382 FD_ZERO(&listen_set);
384 /* use a reasonable default set of ports - listing on 445 and 139 */
385 if (!smb_ports) {
386 ports = lp_smb_ports();
387 if (!ports || !*ports) {
388 ports = smb_xstrdup(SMB_PORTS);
389 } else {
390 ports = smb_xstrdup(ports);
392 } else {
393 ports = smb_xstrdup(smb_ports);
396 if (lp_interfaces() && lp_bind_interfaces_only()) {
397 /* We have been given an interfaces line, and been
398 told to only bind to those interfaces. Create a
399 socket per interface and bind to only these.
402 /* Now open a listen socket for each of the
403 interfaces. */
404 for(i = 0; i < num_interfaces; i++) {
405 TALLOC_CTX *frame = NULL;
406 const struct sockaddr_storage *ifss =
407 iface_n_sockaddr_storage(i);
408 char *tok;
409 const char *ptr;
411 if (ifss == NULL) {
412 DEBUG(0,("open_sockets_smbd: "
413 "interface %d has NULL IP address !\n",
414 i));
415 continue;
418 frame = talloc_stackframe();
419 for (ptr=ports;
420 next_token_talloc(frame,&ptr, &tok, " \t,");) {
421 unsigned port = atoi(tok);
422 if (port == 0 || port > 0xffff) {
423 continue;
426 /* Keep the first port for mDNS service
427 * registration.
429 if (dns_port == 0) {
430 dns_port = port;
433 s = fd_listenset[num_sockets] =
434 open_socket_in(SOCK_STREAM,
435 port,
436 num_sockets == 0 ? 0 : 2,
437 ifss,
438 true);
439 if(s == -1) {
440 continue;
443 /* ready to listen */
444 set_socket_options(s,"SO_KEEPALIVE");
445 set_socket_options(s,lp_socket_options());
447 /* Set server socket to
448 * non-blocking for the accept. */
449 set_blocking(s,False);
451 if (listen(s, SMBD_LISTEN_BACKLOG) == -1) {
452 DEBUG(0,("open_sockets_smbd: listen: "
453 "%s\n", strerror(errno)));
454 close(s);
455 TALLOC_FREE(frame);
456 return False;
458 FD_SET(s,&listen_set);
459 maxfd = MAX( maxfd, s);
461 num_sockets++;
462 if (num_sockets >= FD_SETSIZE) {
463 DEBUG(0,("open_sockets_smbd: Too "
464 "many sockets to bind to\n"));
465 TALLOC_FREE(frame);
466 return False;
469 TALLOC_FREE(frame);
471 } else {
472 /* Just bind to 0.0.0.0 - accept connections
473 from anywhere. */
475 TALLOC_CTX *frame = talloc_stackframe();
476 char *tok;
477 const char *ptr;
478 const char *sock_addr = lp_socket_address();
479 char *sock_tok;
480 const char *sock_ptr;
482 if (strequal(sock_addr, "0.0.0.0") ||
483 strequal(sock_addr, "::")) {
484 #if HAVE_IPV6
485 sock_addr = "::,0.0.0.0";
486 #else
487 sock_addr = "0.0.0.0";
488 #endif
491 for (sock_ptr=sock_addr;
492 next_token_talloc(frame, &sock_ptr, &sock_tok, " \t,"); ) {
493 for (ptr=ports; next_token_talloc(frame, &ptr, &tok, " \t,"); ) {
494 struct sockaddr_storage ss;
496 unsigned port = atoi(tok);
497 if (port == 0 || port > 0xffff) {
498 continue;
501 /* Keep the first port for mDNS service
502 * registration.
504 if (dns_port == 0) {
505 dns_port = port;
508 /* open an incoming socket */
509 if (!interpret_string_addr(&ss, sock_tok,
510 AI_NUMERICHOST|AI_PASSIVE)) {
511 continue;
514 s = open_socket_in(SOCK_STREAM,
515 port,
516 num_sockets == 0 ? 0 : 2,
517 &ss,
518 true);
519 if (s == -1) {
520 continue;
523 /* ready to listen */
524 set_socket_options(s,"SO_KEEPALIVE");
525 set_socket_options(s,lp_socket_options());
527 /* Set server socket to non-blocking
528 * for the accept. */
529 set_blocking(s,False);
531 if (listen(s, SMBD_LISTEN_BACKLOG) == -1) {
532 DEBUG(0,("open_sockets_smbd: "
533 "listen: %s\n",
534 strerror(errno)));
535 close(s);
536 TALLOC_FREE(frame);
537 return False;
540 fd_listenset[num_sockets] = s;
541 FD_SET(s,&listen_set);
542 maxfd = MAX( maxfd, s);
544 num_sockets++;
546 if (num_sockets >= FD_SETSIZE) {
547 DEBUG(0,("open_sockets_smbd: Too "
548 "many sockets to bind to\n"));
549 TALLOC_FREE(frame);
550 return False;
554 TALLOC_FREE(frame);
557 SAFE_FREE(ports);
559 if (num_sockets == 0) {
560 DEBUG(0,("open_sockets_smbd: No "
561 "sockets available to bind to.\n"));
562 return false;
565 /* Setup the main smbd so that we can get messages. Note that
566 do this after starting listening. This is needed as when in
567 clustered mode, ctdb won't allow us to start doing database
568 operations until it has gone thru a full startup, which
569 includes checking to see that smbd is listening. */
570 claim_connection(NULL,"",
571 FLAG_MSG_GENERAL|FLAG_MSG_SMBD|FLAG_MSG_DBWRAP);
573 /* Listen to messages */
575 messaging_register(smbd_messaging_context(), NULL,
576 MSG_SMB_SAM_SYNC, msg_sam_sync);
577 messaging_register(smbd_messaging_context(), NULL,
578 MSG_SHUTDOWN, msg_exit_server);
579 messaging_register(smbd_messaging_context(), NULL,
580 MSG_SMB_FILE_RENAME, msg_file_was_renamed);
581 messaging_register(smbd_messaging_context(), NULL,
582 MSG_SMB_CONF_UPDATED, smb_conf_updated);
583 messaging_register(smbd_messaging_context(), NULL,
584 MSG_SMB_STAT_CACHE_DELETE, smb_stat_cache_delete);
585 brl_register_msgs(smbd_messaging_context());
587 #ifdef CLUSTER_SUPPORT
588 if (lp_clustering()) {
589 ctdbd_register_reconfigure(messaging_ctdbd_connection());
591 #endif
593 #ifdef DEVELOPER
594 messaging_register(smbd_messaging_context(), NULL,
595 MSG_SMB_INJECT_FAULT, msg_inject_fault);
596 #endif
598 /* Kick off our mDNS registration. */
599 if (dns_port != 0) {
600 #ifdef WITH_AVAHI_SUPPORT
601 void *avahi_conn;
602 avahi_conn = avahi_start_register(
603 smbd_event_context(), smbd_event_context(),
604 dns_port);
605 if (avahi_conn == NULL) {
606 DEBUG(10, ("avahi_start_register failed\n"));
608 #endif
611 /* now accept incoming connections - forking a new process
612 for each incoming connection */
613 DEBUG(2,("waiting for a connection\n"));
614 while (1) {
615 struct timeval now, idle_timeout;
616 fd_set r_fds, w_fds;
617 int num;
619 /* Ensure we respond to PING and DEBUG messages from the main smbd. */
620 message_dispatch(smbd_messaging_context());
622 if (got_sig_cld) {
623 pid_t pid;
624 int status;
626 got_sig_cld = False;
628 while ((pid = sys_waitpid(-1, &status, WNOHANG)) > 0) {
629 bool unclean_shutdown = False;
631 /* If the child terminated normally, assume
632 it was an unclean shutdown unless the
633 status is 0
635 if (WIFEXITED(status)) {
636 unclean_shutdown = WEXITSTATUS(status);
638 /* If the child terminated due to a signal
639 we always assume it was unclean.
641 if (WIFSIGNALED(status)) {
642 unclean_shutdown = True;
644 remove_child_pid(pid, unclean_shutdown);
648 idle_timeout = timeval_zero();
650 memcpy((char *)&r_fds, (char *)&listen_set,
651 sizeof(listen_set));
652 FD_ZERO(&w_fds);
653 GetTimeOfDay(&now);
655 /* Kick off our mDNS registration. */
656 if (dns_port != 0) {
657 dns_register_smbd(&dns_reg, dns_port, &maxfd,
658 &r_fds, &idle_timeout);
661 event_add_to_select_args(smbd_event_context(), &now,
662 &r_fds, &w_fds, &idle_timeout,
663 &maxfd);
665 num = sys_select(maxfd+1,&r_fds,&w_fds,NULL,
666 timeval_is_zero(&idle_timeout) ?
667 NULL : &idle_timeout);
669 if (num == -1 && errno == EINTR) {
670 if (got_sig_term) {
671 exit_server_cleanly(NULL);
674 /* check for sighup processing */
675 if (reload_after_sighup) {
676 change_to_root_user();
677 DEBUG(1,("Reloading services after SIGHUP\n"));
678 reload_services(False);
679 reload_after_sighup = 0;
682 continue;
686 /* If the idle timeout fired and we don't have any connected
687 * users, exit gracefully. We should be running under a process
688 * controller that will restart us if necessry.
690 if (num == 0 && count_all_current_connections() == 0) {
691 exit_server_cleanly("idle timeout");
694 /* process pending nDNS responses */
695 if (dns_register_smbd_reply(dns_reg, &r_fds, &idle_timeout)) {
696 --num;
699 if (run_events(smbd_event_context(), num, &r_fds, &w_fds)) {
700 continue;
703 /* check if we need to reload services */
704 check_reload(time(NULL));
706 /* Find the sockets that are read-ready -
707 accept on these. */
708 for( ; num > 0; num--) {
709 struct sockaddr addr;
710 socklen_t in_addrlen = sizeof(addr);
711 pid_t child = 0;
713 s = -1;
714 for(i = 0; i < num_sockets; i++) {
715 if(FD_ISSET(fd_listenset[i],&r_fds)) {
716 s = fd_listenset[i];
717 /* Clear this so we don't look
718 at it again. */
719 FD_CLR(fd_listenset[i],&r_fds);
720 break;
724 smbd_set_server_fd(accept(s,&addr,&in_addrlen));
726 if (smbd_server_fd() == -1 && errno == EINTR)
727 continue;
729 if (smbd_server_fd() == -1) {
730 DEBUG(2,("open_sockets_smbd: accept: %s\n",
731 strerror(errno)));
732 continue;
735 /* Ensure child is set to blocking mode */
736 set_blocking(smbd_server_fd(),True);
738 if (smbd_server_fd() != -1 && interactive)
739 return True;
741 if (allowable_number_of_smbd_processes() &&
742 smbd_server_fd() != -1 &&
743 ((child = sys_fork())==0)) {
744 char remaddr[INET6_ADDRSTRLEN];
746 /* Child code ... */
748 /* Stop zombies, the parent explicitly handles
749 * them, counting worker smbds. */
750 CatchChild();
752 /* close the listening socket(s) */
753 for(i = 0; i < num_sockets; i++)
754 close(fd_listenset[i]);
756 /* close our mDNS daemon handle */
757 dns_register_close(&dns_reg);
759 /* close our standard file
760 descriptors */
761 close_low_fds(False);
762 am_parent = 0;
764 set_socket_options(smbd_server_fd(),"SO_KEEPALIVE");
765 set_socket_options(smbd_server_fd(),
766 lp_socket_options());
768 /* this is needed so that we get decent entries
769 in smbstatus for port 445 connects */
770 set_remote_machine_name(get_peer_addr(smbd_server_fd(),
771 remaddr,
772 sizeof(remaddr)),
773 false);
775 if (!reinit_after_fork(
776 smbd_messaging_context(),
777 smbd_event_context(),
778 true)) {
779 DEBUG(0,("reinit_after_fork() failed\n"));
780 smb_panic("reinit_after_fork() failed");
783 return True;
785 /* The parent doesn't need this socket */
786 close(smbd_server_fd());
788 /* Sun May 6 18:56:14 2001 ackley@cs.unm.edu:
789 Clear the closed fd info out of server_fd --
790 and more importantly, out of client_fd in
791 util_sock.c, to avoid a possible
792 getpeername failure if we reopen the logs
793 and use %I in the filename.
796 smbd_set_server_fd(-1);
798 if (child != 0) {
799 add_child_pid(child);
802 /* Force parent to check log size after
803 * spawning child. Fix from
804 * klausr@ITAP.Physik.Uni-Stuttgart.De. The
805 * parent smbd will log to logserver.smb. It
806 * writes only two messages for each child
807 * started/finished. But each child writes,
808 * say, 50 messages also in logserver.smb,
809 * begining with the debug_count of the
810 * parent, before the child opens its own log
811 * file logserver.client. In a worst case
812 * scenario the size of logserver.smb would be
813 * checked after about 50*50=2500 messages
814 * (ca. 100kb).
815 * */
816 force_check_log_size();
818 } /* end for num */
819 } /* end while 1 */
821 /* NOTREACHED return True; */
824 /****************************************************************************
825 Reload printers
826 **************************************************************************/
827 void reload_printers(void)
829 int snum;
830 int n_services = lp_numservices();
831 int pnum = lp_servicenumber(PRINTERS_NAME);
832 const char *pname;
834 pcap_cache_reload();
836 /* remove stale printers */
837 for (snum = 0; snum < n_services; snum++) {
838 /* avoid removing PRINTERS_NAME or non-autoloaded printers */
839 if (snum == pnum || !(lp_snum_ok(snum) && lp_print_ok(snum) &&
840 lp_autoloaded(snum)))
841 continue;
843 pname = lp_printername(snum);
844 if (!pcap_printername_ok(pname)) {
845 DEBUG(3, ("removing stale printer %s\n", pname));
847 if (is_printer_published(NULL, snum, NULL))
848 nt_printer_publish(NULL, snum, SPOOL_DS_UNPUBLISH);
849 del_a_printer(pname);
850 lp_killservice(snum);
854 load_printers();
857 /****************************************************************************
858 Reload the services file.
859 **************************************************************************/
861 bool reload_services(bool test)
863 bool ret;
865 if (lp_loaded()) {
866 char *fname = lp_configfile();
867 if (file_exist(fname, NULL) &&
868 !strcsequal(fname, get_dyn_CONFIGFILE())) {
869 set_dyn_CONFIGFILE(fname);
870 test = False;
874 reopen_logs();
876 if (test && !lp_file_list_changed())
877 return(True);
879 lp_killunused(conn_snum_used);
881 ret = lp_load(get_dyn_CONFIGFILE(), False, False, True, True);
883 reload_printers();
885 /* perhaps the config filename is now set */
886 if (!test)
887 reload_services(True);
889 reopen_logs();
891 load_interfaces();
893 if (smbd_server_fd() != -1) {
894 set_socket_options(smbd_server_fd(),"SO_KEEPALIVE");
895 set_socket_options(smbd_server_fd(), lp_socket_options());
898 mangle_reset_cache();
899 reset_stat_cache();
901 /* this forces service parameters to be flushed */
902 set_current_service(NULL,0,True);
904 return(ret);
907 /****************************************************************************
908 Exit the server.
909 ****************************************************************************/
911 /* Reasons for shutting down a server process. */
912 enum server_exit_reason { SERVER_EXIT_NORMAL, SERVER_EXIT_ABNORMAL };
914 static void exit_server_common(enum server_exit_reason how,
915 const char *const reason) NORETURN_ATTRIBUTE;
917 static void exit_server_common(enum server_exit_reason how,
918 const char *const reason)
920 static int firsttime=1;
921 bool had_open_conn;
923 if (!firsttime)
924 exit(0);
925 firsttime = 0;
927 change_to_root_user();
929 if (negprot_global_auth_context) {
930 (negprot_global_auth_context->free)(&negprot_global_auth_context);
933 had_open_conn = conn_close_all();
935 invalidate_all_vuids();
937 /* 3 second timeout. */
938 print_notify_send_messages(smbd_messaging_context(), 3);
940 /* delete our entry in the connections database. */
941 yield_connection(NULL,"");
943 respond_to_all_remaining_local_messages();
945 #ifdef WITH_DFS
946 if (dcelogin_atmost_once) {
947 dfs_unlogin();
949 #endif
951 #ifdef USE_DMAPI
952 /* Destroy Samba DMAPI session only if we are master smbd process */
953 if (am_parent) {
954 if (!dmapi_destroy_session()) {
955 DEBUG(0,("Unable to close Samba DMAPI session\n"));
958 #endif
960 locking_end();
961 printing_end();
963 if (how != SERVER_EXIT_NORMAL) {
964 int oldlevel = DEBUGLEVEL;
966 DEBUGLEVEL = 10;
968 DEBUGSEP(0);
969 DEBUG(0,("Abnormal server exit: %s\n",
970 reason ? reason : "no explanation provided"));
971 DEBUGSEP(0);
973 log_stack_trace();
975 DEBUGLEVEL = oldlevel;
976 dump_core();
978 } else {
979 DEBUG(3,("Server exit (%s)\n",
980 (reason ? reason : "normal exit")));
983 /* if we had any open SMB connections when we exited then we
984 need to tell the parent smbd so that it can trigger a retry
985 of any locks we may have been holding or open files we were
986 blocking */
987 if (had_open_conn) {
988 exit(1);
989 } else {
990 exit(0);
994 void exit_server(const char *const explanation)
996 exit_server_common(SERVER_EXIT_ABNORMAL, explanation);
999 void exit_server_cleanly(const char *const explanation)
1001 exit_server_common(SERVER_EXIT_NORMAL, explanation);
1004 void exit_server_fault(void)
1006 exit_server("critical server fault");
1010 /****************************************************************************
1011 received when we should release a specific IP
1012 ****************************************************************************/
1013 static void release_ip(const char *ip, void *priv)
1015 char addr[INET6_ADDRSTRLEN];
1017 if (strcmp(client_socket_addr(get_client_fd(),addr,sizeof(addr)), ip) == 0) {
1018 /* we can't afford to do a clean exit - that involves
1019 database writes, which would potentially mean we
1020 are still running after the failover has finished -
1021 we have to get rid of this process ID straight
1022 away */
1023 DEBUG(0,("Got release IP message for our IP %s - exiting immediately\n",
1024 ip));
1025 /* note we must exit with non-zero status so the unclean handler gets
1026 called in the parent, so that the brl database is tickled */
1027 _exit(1);
1031 static void msg_release_ip(struct messaging_context *msg_ctx, void *private_data,
1032 uint32_t msg_type, struct server_id server_id, DATA_BLOB *data)
1034 release_ip((char *)data->data, NULL);
1037 /****************************************************************************
1038 Initialise connect, service and file structs.
1039 ****************************************************************************/
1041 static bool init_structs(void )
1044 * Set the machine NETBIOS name if not already
1045 * set from the config file.
1048 if (!init_names())
1049 return False;
1051 conn_init();
1053 file_init();
1055 /* for RPC pipes */
1056 init_rpc_pipe_hnd();
1058 init_dptrs();
1060 if (!secrets_init())
1061 return False;
1063 return True;
1067 * Send keepalive packets to our client
1069 static bool keepalive_fn(const struct timeval *now, void *private_data)
1071 if (!send_keepalive(smbd_server_fd())) {
1072 DEBUG( 2, ( "Keepalive failed - exiting.\n" ) );
1073 return False;
1075 return True;
1079 * Do the recurring check if we're idle
1081 static bool deadtime_fn(const struct timeval *now, void *private_data)
1083 if ((conn_num_open() == 0)
1084 || (conn_idle_all(now->tv_sec))) {
1085 DEBUG( 2, ( "Closing idle connection\n" ) );
1086 messaging_send(smbd_messaging_context(), procid_self(),
1087 MSG_SHUTDOWN, &data_blob_null);
1088 return False;
1091 return True;
1095 * Do the recurring log file and smb.conf reload checks.
1098 static bool housekeeping_fn(const struct timeval *now, void *private_data)
1100 change_to_root_user();
1102 /* update printer queue caches if necessary */
1103 update_monitored_printq_cache();
1105 /* check if we need to reload services */
1106 check_reload(time(NULL));
1108 /* Change machine password if neccessary. */
1109 attempt_machine_password_change();
1112 * Force a log file check.
1114 force_check_log_size();
1115 check_log_size();
1116 return true;
1119 /****************************************************************************
1120 main program.
1121 ****************************************************************************/
1123 /* Declare prototype for build_options() to avoid having to run it through
1124 mkproto.h. Mixing $(builddir) and $(srcdir) source files in the current
1125 prototype generation system is too complicated. */
1127 extern void build_options(bool screen);
1129 int main(int argc,const char *argv[])
1131 /* shall I run as a daemon */
1132 static bool is_daemon = False;
1133 static bool interactive = False;
1134 static bool Fork = True;
1135 static bool no_process_group = False;
1136 static bool log_stdout = False;
1137 static char *ports = NULL;
1138 static char *profile_level = NULL;
1139 int opt;
1140 poptContext pc;
1141 bool print_build_options = False;
1142 enum {
1143 OPT_DAEMON = 1000,
1144 OPT_INTERACTIVE,
1145 OPT_FORK,
1146 OPT_NO_PROCESS_GROUP,
1147 OPT_LOG_STDOUT
1149 struct poptOption long_options[] = {
1150 POPT_AUTOHELP
1151 {"daemon", 'D', POPT_ARG_NONE, NULL, OPT_DAEMON, "Become a daemon (default)" },
1152 {"interactive", 'i', POPT_ARG_NONE, NULL, OPT_INTERACTIVE, "Run interactive (not a daemon)"},
1153 {"foreground", 'F', POPT_ARG_NONE, NULL, OPT_FORK, "Run daemon in foreground (for daemontools, etc.)" },
1154 {"no-process-group", '\0', POPT_ARG_NONE, NULL, OPT_NO_PROCESS_GROUP, "Don't create a new process group" },
1155 {"log-stdout", 'S', POPT_ARG_NONE, NULL, OPT_LOG_STDOUT, "Log to stdout" },
1156 {"build-options", 'b', POPT_ARG_NONE, NULL, 'b', "Print build options" },
1157 {"port", 'p', POPT_ARG_STRING, &ports, 0, "Listen on the specified ports"},
1158 {"profiling-level", 'P', POPT_ARG_STRING, &profile_level, 0, "Set profiling level","PROFILE_LEVEL"},
1159 POPT_COMMON_SAMBA
1160 POPT_COMMON_DYNCONFIG
1161 POPT_TABLEEND
1163 TALLOC_CTX *frame = talloc_stackframe(); /* Setup tos. */
1165 TimeInit();
1167 #ifdef HAVE_SET_AUTH_PARAMETERS
1168 set_auth_parameters(argc,argv);
1169 #endif
1171 pc = poptGetContext("smbd", argc, argv, long_options, 0);
1172 while((opt = poptGetNextOpt(pc)) != -1) {
1173 switch (opt) {
1174 case OPT_DAEMON:
1175 is_daemon = true;
1176 break;
1177 case OPT_INTERACTIVE:
1178 interactive = true;
1179 break;
1180 case OPT_FORK:
1181 Fork = false;
1182 break;
1183 case OPT_NO_PROCESS_GROUP:
1184 no_process_group = true;
1185 break;
1186 case OPT_LOG_STDOUT:
1187 log_stdout = true;
1188 break;
1189 case 'b':
1190 print_build_options = True;
1191 break;
1192 default:
1193 d_fprintf(stderr, "\nInvalid option %s: %s\n\n",
1194 poptBadOption(pc, 0), poptStrerror(opt));
1195 poptPrintUsage(pc, stderr, 0);
1196 exit(1);
1199 poptFreeContext(pc);
1201 if (interactive) {
1202 Fork = False;
1203 log_stdout = True;
1206 setup_logging(argv[0],log_stdout);
1208 if (print_build_options) {
1209 build_options(True); /* Display output to screen as well as debug */
1210 exit(0);
1213 load_case_tables();
1215 #ifdef HAVE_SETLUID
1216 /* needed for SecureWare on SCO */
1217 setluid(0);
1218 #endif
1220 sec_init();
1222 set_remote_machine_name("smbd", False);
1224 if (interactive && (DEBUGLEVEL >= 9)) {
1225 talloc_enable_leak_report();
1228 if (log_stdout && Fork) {
1229 DEBUG(0,("ERROR: Can't log to stdout (-S) unless daemon is in foreground (-F) or interactive (-i)\n"));
1230 exit(1);
1233 /* we want to re-seed early to prevent time delays causing
1234 client problems at a later date. (tridge) */
1235 generate_random_buffer(NULL, 0);
1237 /* make absolutely sure we run as root - to handle cases where people
1238 are crazy enough to have it setuid */
1240 gain_root_privilege();
1241 gain_root_group_privilege();
1244 * Ensure we have CAP_KILL capability set on Linux,
1245 * where we need this to communicate with threads.
1246 * This is inherited by new threads, but not by new
1247 * processes across exec().
1249 set_effective_capability(KILL_CAPABILITY);
1251 fault_setup((void (*)(void *))exit_server_fault);
1252 dump_core_setup("smbd");
1254 CatchSignal(SIGTERM , SIGNAL_CAST sig_term);
1255 CatchSignal(SIGHUP,SIGNAL_CAST sig_hup);
1257 /* we are never interested in SIGPIPE */
1258 BlockSignals(True,SIGPIPE);
1260 #if defined(SIGFPE)
1261 /* we are never interested in SIGFPE */
1262 BlockSignals(True,SIGFPE);
1263 #endif
1265 #if defined(SIGUSR2)
1266 /* We are no longer interested in USR2 */
1267 BlockSignals(True,SIGUSR2);
1268 #endif
1270 /* POSIX demands that signals are inherited. If the invoking process has
1271 * these signals masked, we will have problems, as we won't recieve them. */
1272 BlockSignals(False, SIGHUP);
1273 BlockSignals(False, SIGUSR1);
1274 BlockSignals(False, SIGTERM);
1276 /* Ensure we leave no zombies until we
1277 * correctly set up child handling below. */
1278 CatchChild();
1280 /* we want total control over the permissions on created files,
1281 so set our umask to 0 */
1282 umask(0);
1284 init_sec_ctx();
1286 reopen_logs();
1288 DEBUG(0,("smbd version %s started.\n", SAMBA_VERSION_STRING));
1289 DEBUGADD(0,("%s\n", COPYRIGHT_STARTUP_MESSAGE));
1291 DEBUG(2,("uid=%d gid=%d euid=%d egid=%d\n",
1292 (int)getuid(),(int)getgid(),(int)geteuid(),(int)getegid()));
1294 /* Output the build options to the debug log */
1295 build_options(False);
1297 if (sizeof(uint16) < 2 || sizeof(uint32) < 4) {
1298 DEBUG(0,("ERROR: Samba is not configured correctly for the word size on your machine\n"));
1299 exit(1);
1302 if (!lp_load_initial_only(get_dyn_CONFIGFILE())) {
1303 DEBUG(0, ("error opening config file\n"));
1304 exit(1);
1307 if (smbd_messaging_context() == NULL)
1308 exit(1);
1310 if (!reload_services(False))
1311 return(-1);
1313 init_structs();
1315 #ifdef WITH_PROFILE
1316 if (!profile_setup(smbd_messaging_context(), False)) {
1317 DEBUG(0,("ERROR: failed to setup profiling\n"));
1318 return -1;
1320 if (profile_level != NULL) {
1321 int pl = atoi(profile_level);
1322 struct server_id src;
1324 DEBUG(1, ("setting profiling level: %s\n",profile_level));
1325 src.pid = getpid();
1326 set_profile_level(pl, src);
1328 #endif
1330 DEBUG(3,( "loaded services\n"));
1332 if (!is_daemon && !is_a_socket(0)) {
1333 if (!interactive)
1334 DEBUG(0,("standard input is not a socket, assuming -D option\n"));
1337 * Setting is_daemon here prevents us from eventually calling
1338 * the open_sockets_inetd()
1341 is_daemon = True;
1344 if (is_daemon && !interactive) {
1345 DEBUG( 3, ( "Becoming a daemon.\n" ) );
1346 become_daemon(Fork, no_process_group);
1349 #if HAVE_SETPGID
1351 * If we're interactive we want to set our own process group for
1352 * signal management.
1354 if (interactive && !no_process_group)
1355 setpgid( (pid_t)0, (pid_t)0);
1356 #endif
1358 if (!directory_exist(lp_lockdir(), NULL))
1359 mkdir(lp_lockdir(), 0755);
1361 if (is_daemon)
1362 pidfile_create("smbd");
1364 if (!reinit_after_fork(smbd_messaging_context(),
1365 smbd_event_context(), false)) {
1366 DEBUG(0,("reinit_after_fork() failed\n"));
1367 exit(1);
1370 /* Setup all the TDB's - including CLEAR_IF_FIRST tdb's. */
1372 if (smbd_memcache() == NULL) {
1373 exit(1);
1376 memcache_set_global(smbd_memcache());
1378 /* Initialise the password backed before the global_sam_sid
1379 to ensure that we fetch from ldap before we make a domain sid up */
1381 if(!initialize_password_db(False, smbd_event_context()))
1382 exit(1);
1384 if (!secrets_init()) {
1385 DEBUG(0, ("ERROR: smbd can not open secrets.tdb\n"));
1386 exit(1);
1389 if(!get_global_sam_sid()) {
1390 DEBUG(0,("ERROR: Samba cannot create a SAM SID.\n"));
1391 exit(1);
1394 if (!session_init())
1395 exit(1);
1397 if (!connections_init(True))
1398 exit(1);
1400 if (!locking_init())
1401 exit(1);
1403 namecache_enable();
1405 if (!W_ERROR_IS_OK(registry_init_full()))
1406 exit(1);
1408 #if 0
1409 if (!init_svcctl_db())
1410 exit(1);
1411 #endif
1413 if (!print_backend_init(smbd_messaging_context()))
1414 exit(1);
1416 if (!init_guest_info()) {
1417 DEBUG(0,("ERROR: failed to setup guest info.\n"));
1418 return -1;
1421 /* only start the background queue daemon if we are
1422 running as a daemon -- bad things will happen if
1423 smbd is launched via inetd and we fork a copy of
1424 ourselves here */
1426 if (is_daemon && !interactive
1427 && lp_parm_bool(-1, "smbd", "backgroundqueue", true)) {
1428 start_background_queue();
1431 if (!open_sockets_smbd(is_daemon, interactive, ports))
1432 exit(1);
1435 * everything after this point is run after the fork()
1438 static_init_rpc;
1440 init_modules();
1442 /* Possibly reload the services file. Only worth doing in
1443 * daemon mode. In inetd mode, we know we only just loaded this.
1445 if (is_daemon) {
1446 reload_services(True);
1449 if (!init_account_policy()) {
1450 DEBUG(0,("Could not open account policy tdb.\n"));
1451 exit(1);
1454 if (*lp_rootdir()) {
1455 if (sys_chroot(lp_rootdir()) != 0) {
1456 DEBUG(0,("Failed to change root to %s\n", lp_rootdir()));
1457 exit(1);
1459 if (chdir("/") == -1) {
1460 DEBUG(0,("Failed to chdir to / on chroot to %s\n", lp_rootdir()));
1461 exit(1);
1463 DEBUG(0,("Changed root to %s\n", lp_rootdir()));
1466 /* Setup oplocks */
1467 if (!init_oplocks(smbd_messaging_context()))
1468 exit(1);
1470 /* Setup aio signal handler. */
1471 initialize_async_io_handler();
1473 /* register our message handlers */
1474 messaging_register(smbd_messaging_context(), NULL,
1475 MSG_SMB_FORCE_TDIS, msg_force_tdis);
1476 messaging_register(smbd_messaging_context(), NULL,
1477 MSG_SMB_RELEASE_IP, msg_release_ip);
1478 messaging_register(smbd_messaging_context(), NULL,
1479 MSG_SMB_CLOSE_FILE, msg_close_file);
1481 if ((lp_keepalive() != 0)
1482 && !(event_add_idle(smbd_event_context(), NULL,
1483 timeval_set(lp_keepalive(), 0),
1484 "keepalive", keepalive_fn,
1485 NULL))) {
1486 DEBUG(0, ("Could not add keepalive event\n"));
1487 exit(1);
1490 if (!(event_add_idle(smbd_event_context(), NULL,
1491 timeval_set(IDLE_CLOSED_TIMEOUT, 0),
1492 "deadtime", deadtime_fn, NULL))) {
1493 DEBUG(0, ("Could not add deadtime event\n"));
1494 exit(1);
1497 if (!(event_add_idle(smbd_event_context(), NULL,
1498 timeval_set(SMBD_SELECT_TIMEOUT, 0),
1499 "housekeeping", housekeeping_fn, NULL))) {
1500 DEBUG(0, ("Could not add housekeeping event\n"));
1501 exit(1);
1504 #ifdef CLUSTER_SUPPORT
1506 if (lp_clustering()) {
1508 * We need to tell ctdb about our client's TCP
1509 * connection, so that for failover ctdbd can send
1510 * tickle acks, triggering a reconnection by the
1511 * client.
1514 struct sockaddr_storage srv, clnt;
1516 if (client_get_tcp_info(&srv, &clnt) == 0) {
1518 NTSTATUS status;
1520 status = ctdbd_register_ips(
1521 messaging_ctdbd_connection(),
1522 &srv, &clnt, release_ip, NULL);
1524 if (!NT_STATUS_IS_OK(status)) {
1525 DEBUG(0, ("ctdbd_register_ips failed: %s\n",
1526 nt_errstr(status)));
1528 } else
1530 DEBUG(0,("Unable to get tcp info for "
1531 "CTDB_CONTROL_TCP_CLIENT: %s\n",
1532 strerror(errno)));
1536 #endif
1538 TALLOC_FREE(frame);
1540 smbd_process();
1542 namecache_shutdown();
1544 exit_server_cleanly(NULL);
1545 return(0);