?  search:
summary | log | graphiclog1 | graphiclog2 | commit | commitdiff | tree | refs | edit | fork
blame | history | raw | HEAD
param: Add default for rndc command to s3 loadparm
[Samba.git] / source3 / param / loadparm.c
blobc5528d1c0079f2d55fad528b2ee2a0888fe60141
1 /*
2 Unix SMB/CIFS implementation.
3 Parameter loading functions
4 Copyright (C) Karl Auer 1993-1998
5
6 Largely re-written by Andrew Tridgell, September 1994
7
8 Copyright (C) Simo Sorce 2001
9 Copyright (C) Alexander Bokovoy 2002
10 Copyright (C) Stefan (metze) Metzmacher 2002
11 Copyright (C) Jim McDonough <jmcd@us.ibm.com> 2003
12 Copyright (C) Michael Adam 2008
13 Copyright (C) Jelmer Vernooij <jelmer@samba.org> 2007
14 Copyright (C) Andrew Bartlett 2011
15
16 This program is free software; you can redistribute it and/or modify
17 it under the terms of the GNU General Public License as published by
18 the Free Software Foundation; either version 3 of the License, or
19 (at your option) any later version.
20
21 This program is distributed in the hope that it will be useful,
22 but WITHOUT ANY WARRANTY; without even the implied warranty of
23 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
24 GNU General Public License for more details.
25
26 You should have received a copy of the GNU General Public License
27 along with this program. If not, see <http://www.gnu.org/licenses/>.
28 */
29
30 /*
31 * Load parameters.
32 *
33 * This module provides suitable callback functions for the params
34 * module. It builds the internal table of service details which is
35 * then used by the rest of the server.
36 *
37 * To add a parameter:
38 *
39 * 1) add it to the global or service structure definition
40 * 2) add it to the parm_table
41 * 3) add it to the list of available functions (eg: using FN_GLOBAL_STRING())
42 * 4) If it's a global then initialise it in init_globals. If a local
43 * (ie. service) parameter then initialise it in the sDefault structure
44 *
45 *
46 * Notes:
47 * The configuration file is processed sequentially for speed. It is NOT
48 * accessed randomly as happens in 'real' Windows. For this reason, there
49 * is a fair bit of sequence-dependent code here - ie., code which assumes
50 * that certain things happen before others. In particular, the code which
51 * happens at the boundary between sections is delicately poised, so be
52 * careful!
53 *
54 */
55
56 #include "includes.h"
57 #include "system/filesys.h"
58 #include "util_tdb.h"
59 #include "lib/param/loadparm.h"
60 #include "printing.h"
61 #include "lib/smbconf/smbconf.h"
62 #include "lib/smbconf/smbconf_init.h"
63
64 #include "ads.h"
65 #include "../librpc/gen_ndr/svcctl.h"
66 #include "intl.h"
67 #include "../libcli/smb/smb_signing.h"
68 #include "dbwrap/dbwrap.h"
69 #include "dbwrap/dbwrap_rbt.h"
70 #include "../lib/util/bitmap.h"
71
72 #ifdef HAVE_SYS_SYSCTL_H
73 #include <sys/sysctl.h>
74 #endif
75
76 #ifdef HAVE_HTTPCONNECTENCRYPT
77 #include <cups/http.h>
78 #endif
79
80 #ifdef CLUSTER_SUPPORT
81 #include "ctdb_private.h"
82 #endif
83
84 bool bLoaded = false;
85
86 extern userdom_struct current_user_info;
87
88 /* the special value for the include parameter
89 * to be interpreted not as a file name but to
90 * trigger loading of the global smb.conf options
91 * from registry. */
92 #ifndef INCLUDE_REGISTRY_NAME
93 #define INCLUDE_REGISTRY_NAME "registry"
94 #endif
95
96 static bool in_client = false; /* Not in the client by default */
97 static struct smbconf_csn conf_last_csn;
98
99 static int config_backend = CONFIG_BACKEND_FILE;
100
101 /* some helpful bits */
102 #define LP_SNUM_OK(i) (((i) >= 0) && ((i) < iNumServices) && (ServicePtrs != NULL) && ServicePtrs[(i)]->valid)
103 #define VALID(i) (ServicePtrs != NULL && ServicePtrs[i]->valid)
104
105 #define USERSHARE_VALID 1
106 #define USERSHARE_PENDING_DELETE 2
107
108 static bool defaults_saved = false;
109
110 #define LOADPARM_EXTRA_GLOBALS \
111 struct parmlist_entry *param_opt; \
112 char *realm_original; \
113 char *loglevel; \
114 int iminreceivefile; \
115 char *szPrintcapname; \
116 int CupsEncrypt; \
117 int iPreferredMaster; \
118 char *szLdapMachineSuffix; \
119 char *szLdapUserSuffix; \
120 char *szLdapIdmapSuffix; \
121 char *szLdapGroupSuffix; \
122 char *szStateDir; \
123 char *szCacheDir; \
124 char *szUsershareTemplateShare; \
125 char *szIdmapUID; \
126 char *szIdmapGID; \
127 char *szIdmapBackend; \
128 int winbindMaxDomainConnections; \
129 int ismb2_max_credits; \
130 char *tls_keyfile; \
131 char *tls_certfile; \
132 char *tls_cafile; \
133 char *tls_crlfile; \
134 char *tls_dhpfile; \
135 int bPreferredMaster;
136
137 #include "param/param_global.h"
138
139 static struct loadparm_global Globals;
140
141 /* This is a default service used to prime a services structure */
142 static struct loadparm_service sDefault =
143 {
144 .valid = true,
145 .autoloaded = false,
146 .usershare = 0,
147 .usershare_last_mod = {0, 0},
148 .szService = NULL,
149 .pathname = NULL,
150 .username = NULL,
151 .invalid_users = NULL,
152 .valid_users = NULL,
153 .admin_users = NULL,
154 .szCopy = NULL,
155 .szInclude = NULL,
156 .preexec = NULL,
157 .postexec = NULL,
158 .rootpreexec = NULL,
159 .rootpostexec = NULL,
160 .cups_options = NULL,
161 .printcommand = NULL,
162 .lpqcommand = NULL,
163 .lprmcommand = NULL,
164 .lppausecommand = NULL,
165 .lpresumecommand = NULL,
166 .queuepausecommand = NULL,
167 .queueresumecommand = NULL,
168 .szPrintername = NULL,
169 .printjob_username = NULL,
170 .dontdescend = NULL,
171 .hostsallow = NULL,
172 .hostsdeny = NULL,
173 .magicscript = NULL,
174 .magicoutput = NULL,
175 .veto_files = NULL,
176 .hide_files = NULL,
177 .veto_oplocks = NULL,
178 .comment = NULL,
179 .force_user = NULL,
180 .force_group = NULL,
181 .readlist = NULL,
182 .writelist = NULL,
183 .volume = NULL,
184 .fstype = NULL,
185 .vfs_objects = NULL,
186 .msdfs_proxy = NULL,
187 .aio_write_behind = NULL,
188 .dfree_command = NULL,
189 .minprintspace = 0,
190 .iMaxPrintJobs = 1000,
191 .max_reported_jobs = 0,
192 .write_cache_size = 0,
193 .create_mask = 0744,
194 .force_create_mode = 0,
195 .dir_mask = 0755,
196 .force_dir_mode = 0,
197 .max_connections = 0,
198 .defaultcase = CASE_LOWER,
199 .printing = DEFAULT_PRINTING,
200 .oplock_contention_limit = 2,
201 .csc_policy = 0,
202 .block_size = 1024,
203 .dfree_cache_time = 0,
204 .preexec_close = false,
205 .rootpreexec_close = false,
206 .casesensitive = Auto,
207 .preservecase = true,
208 .shortpreservecase = true,
209 .hide_dot_files = true,
210 .hide_special_files = false,
211 .hideunreadable = false,
212 .hideunwriteable_files = false,
213 .browseable = true,
214 .access_based_share_enum = false,
215 .bAvailable = true,
216 .readonly = true,
217 .guest_only = false,
218 .administrative_share = false,
219 .guest_ok = false,
220 .print_ok = false,
221 .print_notify_backchannel = false,
222 .map_system = false,
223 .map_hidden = false,
224 .map_archive = true,
225 .store_dos_attributes = false,
226 .dmapi_support = false,
227 .locking = true,
228 .strict_locking = Auto,
229 .posix_locking = true,
230 .oplocks = true,
231 .kernel_oplocks = false,
232 .level2_oplocks = true,
233 .onlyuser = false,
234 .manglednames = true,
235 .bWidelinks = false,
236 .symlinks = true,
237 .syncalways = false,
238 .strict_allocate = false,
239 .strict_sync = false,
240 .magicchar = '~',
241 .copymap = NULL,
242 .delete_readonly = false,
243 .fake_oplocks = false,
244 .recursive_veto_delete = false,
245 .dos_filemode = false,
246 .dos_filetimes = true,
247 .dos_filetime_resolution = false,
248 .fake_dir_create_times = false,
249 .blocking_locks = true,
250 .inherit_perms = false,
251 .inherit_acls = false,
252 .inherit_owner = false,
253 .msdfs_root = false,
254 .use_client_driver = false,
255 .default_devmode = true,
256 .force_printername = false,
257 .nt_acl_support = true,
258 .force_unknown_acl_user = false,
259 ._use_sendfile = false,
260 .profile_acls = false,
261 .map_acl_inherit = false,
262 .afs_share = false,
263 .ea_support = false,
264 .acl_check_permissions = true,
265 .acl_map_full_control = true,
266 .acl_group_control = false,
267 .acl_allow_execute_always = false,
268 .change_notify = true,
269 .kernel_change_notify = true,
270 .allocation_roundup_size = SMB_ROUNDUP_ALLOCATION_SIZE,
271 .aio_read_size = 0,
272 .aio_write_size = 0,
273 .map_readonly = MAP_READONLY_YES,
274 #ifdef BROKEN_DIRECTORY_HANDLING
275 .directory_name_cache_size = 0,
276 #else
277 .directory_name_cache_size = 100,
278 #endif
279 .smb_encrypt = SMB_SIGNING_DEFAULT,
280 .kernel_share_modes = true,
281 .durable_handles = true,
282 .param_opt = NULL,
283 .dummy = ""
284 };
285
286 /* local variables */
287 static struct loadparm_service **ServicePtrs = NULL;
288 static int iNumServices = 0;
289 static int iServiceIndex = 0;
290 static struct db_context *ServiceHash;
291 static bool bInGlobalSection = true;
292 static bool bGlobalOnly = false;
293
294 #define NUMPARAMETERS (sizeof(parm_table) / sizeof(struct parm_struct))
295
296 /* prototypes for the special type handlers */
297 static bool handle_include(struct loadparm_context *unused, int snum, const char *pszParmValue, char **ptr);
298 static bool handle_copy(struct loadparm_context *unused, int snum, const char *pszParmValue, char **ptr);
299 static bool handle_idmap_backend(struct loadparm_context *unused, int snum, const char *pszParmValue, char **ptr);
300 static bool handle_idmap_uid(struct loadparm_context *unused, int snum, const char *pszParmValue, char **ptr);
301 static bool handle_idmap_gid(struct loadparm_context *unused, int snum, const char *pszParmValue, char **ptr);
302 static bool handle_debug_list(struct loadparm_context *unused, int snum, const char *pszParmValue, char **ptr );
303 static bool handle_realm(struct loadparm_context *unused, int snum, const char *pszParmValue, char **ptr );
304 static bool handle_netbios_aliases(struct loadparm_context *unused, int snum, const char *pszParmValue, char **ptr );
305 static bool handle_charset(struct loadparm_context *unused, int snum, const char *pszParmValue, char **ptr );
306 static bool handle_dos_charset(struct loadparm_context *unused, int snum, const char *pszParmValue, char **ptr );
307 static bool handle_printing(struct loadparm_context *unused, int snum, const char *pszParmValue, char **ptr);
308 static bool handle_ldap_debug_level(struct loadparm_context *unused, int snum, const char *pszParmValue, char **ptr);
309
310 /* these are parameter handlers which are not needed in the
311 * source3 code
312 */
313
314 #define handle_logfile NULL
315
316 static void set_allowed_client_auth(void);
317
318 static void add_to_file_list(const char *fname, const char *subfname);
319 static bool lp_set_cmdline_helper(const char *pszParmName, const char *pszParmValue, bool store_values);
320 static void free_param_opts(struct parmlist_entry **popts);
321
322 #include "lib/param/param_table.c"
323
324 /* this is used to prevent lots of mallocs of size 1 */
325 static const char null_string[] = "";
326
327 /**
328 Set a string value, allocing the space for the string
329 **/
330
331 static bool string_init(char **dest,const char *src)
332 {
333 size_t l;
334
335 if (!src)
336 src = "";
337
338 l = strlen(src);
339
340 if (l == 0) {
341 *dest = discard_const_p(char, null_string);
342 } else {
343 (*dest) = SMB_STRDUP(src);
344 if ((*dest) == NULL) {
345 DEBUG(0,("Out of memory in string_init\n"));
346 return false;
347 }
348 }
349 return(true);
350 }
351
352 /**
353 Free a string value.
354 **/
355
356 static void string_free(char **s)
357 {
358 if (!s || !(*s))
359 return;
360 if (*s == null_string)
361 *s = NULL;
362 SAFE_FREE(*s);
363 }
364
365 /**
366 Set a string value, deallocating any existing space, and allocing the space
367 for the string
368 **/
369
370 static bool string_set(char **dest,const char *src)
371 {
372 string_free(dest);
373 return(string_init(dest,src));
374 }
375
376 /***************************************************************************
377 Initialise the sDefault parameter structure for the printer values.
378 ***************************************************************************/
379
380 static void init_printer_values(struct loadparm_service *pService)
381 {
382 /* choose defaults depending on the type of printing */
383 switch (pService->printing) {
384 case PRINT_BSD:
385 case PRINT_AIX:
386 case PRINT_LPRNT:
387 case PRINT_LPROS2:
388 string_set(&pService->lpqcommand, "lpq -P'%p'");
389 string_set(&pService->lprmcommand, "lprm -P'%p' %j");
390 string_set(&pService->printcommand, "lpr -r -P'%p' %s");
391 break;
392
393 case PRINT_LPRNG:
394 case PRINT_PLP:
395 string_set(&pService->lpqcommand, "lpq -P'%p'");
396 string_set(&pService->lprmcommand, "lprm -P'%p' %j");
397 string_set(&pService->printcommand, "lpr -r -P'%p' %s");
398 string_set(&pService->queuepausecommand, "lpc stop '%p'");
399 string_set(&pService->queueresumecommand, "lpc start '%p'");
400 string_set(&pService->lppausecommand, "lpc hold '%p' %j");
401 string_set(&pService->lpresumecommand, "lpc release '%p' %j");
402 break;
403
404 case PRINT_CUPS:
405 case PRINT_IPRINT:
406 /* set the lpq command to contain the destination printer
407 name only. This is used by cups_queue_get() */
408 string_set(&pService->lpqcommand, "%p");
409 string_set(&pService->lprmcommand, "");
410 string_set(&pService->printcommand, "");
411 string_set(&pService->lppausecommand, "");
412 string_set(&pService->lpresumecommand, "");
413 string_set(&pService->queuepausecommand, "");
414 string_set(&pService->queueresumecommand, "");
415 break;
416
417 case PRINT_SYSV:
418 case PRINT_HPUX:
419 string_set(&pService->lpqcommand, "lpstat -o%p");
420 string_set(&pService->lprmcommand, "cancel %p-%j");
421 string_set(&pService->printcommand, "lp -c -d%p %s; rm %s");
422 string_set(&pService->queuepausecommand, "disable %p");
423 string_set(&pService->queueresumecommand, "enable %p");
424 #ifndef HPUX
425 string_set(&pService->lppausecommand, "lp -i %p-%j -H hold");
426 string_set(&pService->lpresumecommand, "lp -i %p-%j -H resume");
427 #endif /* HPUX */
428 break;
429
430 case PRINT_QNX:
431 string_set(&pService->lpqcommand, "lpq -P%p");
432 string_set(&pService->lprmcommand, "lprm -P%p %j");
433 string_set(&pService->printcommand, "lp -r -P%p %s");
434 break;
435
436 #if defined(DEVELOPER) || defined(ENABLE_SELFTEST)
437
438 case PRINT_TEST:
439 case PRINT_VLP: {
440 const char *tdbfile;
441 TALLOC_CTX *tmp_ctx = talloc_stackframe();
442 char *tmp;
443
444 tdbfile = talloc_asprintf(
445 tmp_ctx, "tdbfile=%s",
446 lp_parm_const_string(-1, "vlp", "tdbfile",
447 "/tmp/vlp.tdb"));
448 if (tdbfile == NULL) {
449 tdbfile="tdbfile=/tmp/vlp.tdb";
450 }
451
452 tmp = talloc_asprintf(tmp_ctx, "vlp %s print %%p %%s",
453 tdbfile);
454 string_set(&pService->printcommand,
455 tmp ? tmp : "vlp print %p %s");
456
457 tmp = talloc_asprintf(tmp_ctx, "vlp %s lpq %%p",
458 tdbfile);
459 string_set(&pService->lpqcommand,
460 tmp ? tmp : "vlp lpq %p");
461
462 tmp = talloc_asprintf(tmp_ctx, "vlp %s lprm %%p %%j",
463 tdbfile);
464 string_set(&pService->lprmcommand,
465 tmp ? tmp : "vlp lprm %p %j");
466
467 tmp = talloc_asprintf(tmp_ctx, "vlp %s lppause %%p %%j",
468 tdbfile);
469 string_set(&pService->lppausecommand,
470 tmp ? tmp : "vlp lppause %p %j");
471
472 tmp = talloc_asprintf(tmp_ctx, "vlp %s lpresume %%p %%j",
473 tdbfile);
474 string_set(&pService->lpresumecommand,
475 tmp ? tmp : "vlp lpresume %p %j");
476
477 tmp = talloc_asprintf(tmp_ctx, "vlp %s queuepause %%p",
478 tdbfile);
479 string_set(&pService->queuepausecommand,
480 tmp ? tmp : "vlp queuepause %p");
481
482 tmp = talloc_asprintf(tmp_ctx, "vlp %s queueresume %%p",
483 tdbfile);
484 string_set(&pService->queueresumecommand,
485 tmp ? tmp : "vlp queueresume %p");
486 TALLOC_FREE(tmp_ctx);
487
488 break;
489 }
490 #endif /* DEVELOPER */
491
492 }
493 }
494 /**
495 * Function to return the default value for the maximum number of open
496 * file descriptors permitted. This function tries to consult the
497 * kernel-level (sysctl) and ulimit (getrlimit()) values and goes
498 * the smaller of those.
499 */
500 static int max_open_files(void)
501 {
502 int sysctl_max = MAX_OPEN_FILES;
503 int rlimit_max = MAX_OPEN_FILES;
504
505 #ifdef HAVE_SYSCTLBYNAME
506 {
507 size_t size = sizeof(sysctl_max);
508 sysctlbyname("kern.maxfilesperproc", &sysctl_max, &size, NULL,
509 0);
510 }
511 #endif
512
513 #if (defined(HAVE_GETRLIMIT) && defined(RLIMIT_NOFILE))
514 {
515 struct rlimit rl;
516
517 ZERO_STRUCT(rl);
518
519 if (getrlimit(RLIMIT_NOFILE, &rl) == 0)
520 rlimit_max = rl.rlim_cur;
521
522 #if defined(RLIM_INFINITY)
523 if(rl.rlim_cur == RLIM_INFINITY)
524 rlimit_max = MAX_OPEN_FILES;
525 #endif
526 }
527 #endif
528
529 if (sysctl_max < MIN_OPEN_FILES_WINDOWS) {
530 DEBUG(2,("max_open_files: increasing sysctl_max (%d) to "
531 "minimum Windows limit (%d)\n",
532 sysctl_max,
533 MIN_OPEN_FILES_WINDOWS));
534 sysctl_max = MIN_OPEN_FILES_WINDOWS;
535 }
536
537 if (rlimit_max < MIN_OPEN_FILES_WINDOWS) {
538 DEBUG(2,("rlimit_max: increasing rlimit_max (%d) to "
539 "minimum Windows limit (%d)\n",
540 rlimit_max,
541 MIN_OPEN_FILES_WINDOWS));
542 rlimit_max = MIN_OPEN_FILES_WINDOWS;
543 }
544
545 return MIN(sysctl_max, rlimit_max);
546 }
547
548 /**
549 * Common part of freeing allocated data for one parameter.
550 */
551 static void free_one_parameter_common(void *parm_ptr,
552 struct parm_struct parm)
553 {
554 if ((parm.type == P_STRING) ||
555 (parm.type == P_USTRING))
556 {
557 string_free((char**)parm_ptr);
558 } else if (parm.type == P_LIST) {
559 TALLOC_FREE(*((char***)parm_ptr));
560 }
561 }
562
563 /**
564 * Free the allocated data for one parameter for a share
565 * given as a service struct.
566 */
567 static void free_one_parameter(struct loadparm_service *service,
568 struct parm_struct parm)
569 {
570 void *parm_ptr;
571
572 if (parm.p_class != P_LOCAL) {
573 return;
574 }
575
576 parm_ptr = lp_parm_ptr(service, &parm);
577
578 free_one_parameter_common(parm_ptr, parm);
579 }
580
581 /**
582 * Free the allocated parameter data of a share given
583 * as a service struct.
584 */
585 static void free_parameters(struct loadparm_service *service)
586 {
587 uint32_t i;
588
589 for (i=0; parm_table[i].label; i++) {
590 free_one_parameter(service, parm_table[i]);
591 }
592 }
593
594 /**
595 * Free the allocated data for one parameter for a given share
596 * specified by an snum.
597 */
598 static void free_one_parameter_by_snum(int snum, struct parm_struct parm)
599 {
600 void *parm_ptr;
601
602 if (snum < 0) {
603 parm_ptr = lp_parm_ptr(NULL, &parm);
604 } else if (parm.p_class != P_LOCAL) {
605 return;
606 } else {
607 parm_ptr = lp_local_ptr_by_snum(snum, &parm);
608 }
609
610 free_one_parameter_common(parm_ptr, parm);
611 }
612
613 /**
614 * Free the allocated parameter data for a share specified
615 * by an snum.
616 */
617 static void free_parameters_by_snum(int snum)
618 {
619 uint32_t i;
620
621 for (i=0; parm_table[i].label; i++) {
622 free_one_parameter_by_snum(snum, parm_table[i]);
623 }
624 }
625
626 /**
627 * Free the allocated global parameters.
628 */
629 static void free_global_parameters(void)
630 {
631 free_param_opts(&Globals.param_opt);
632 free_parameters_by_snum(GLOBAL_SECTION_SNUM);
633 TALLOC_FREE(Globals.ctx);
634 }
635
636 static int map_parameter(const char *pszParmName);
637
638 struct lp_stored_option {
639 struct lp_stored_option *prev, *next;
640 const char *label;
641 const char *value;
642 };
643
644 static struct lp_stored_option *stored_options;
645
646 /*
647 save options set by lp_set_cmdline() into a list. This list is
648 re-applied when we do a globals reset, so that cmdline set options
649 are sticky across reloads of smb.conf
650 */
651 static bool store_lp_set_cmdline(const char *pszParmName, const char *pszParmValue)
652 {
653 struct lp_stored_option *entry, *entry_next;
654 for (entry = stored_options; entry != NULL; entry = entry_next) {
655 entry_next = entry->next;
656 if (strcmp(pszParmName, entry->label) == 0) {
657 DLIST_REMOVE(stored_options, entry);
658 talloc_free(entry);
659 break;
660 }
661 }
662
663 entry = talloc(NULL, struct lp_stored_option);
664 if (!entry) {
665 return false;
666 }
667
668 entry->label = talloc_strdup(entry, pszParmName);
669 if (!entry->label) {
670 talloc_free(entry);
671 return false;
672 }
673
674 entry->value = talloc_strdup(entry, pszParmValue);
675 if (!entry->value) {
676 talloc_free(entry);
677 return false;
678 }
679
680 DLIST_ADD_END(stored_options, entry, struct lp_stored_option);
681
682 return true;
683 }
684
685 static bool apply_lp_set_cmdline(void)
686 {
687 struct lp_stored_option *entry = NULL;
688 for (entry = stored_options; entry != NULL; entry = entry->next) {
689 if (!lp_set_cmdline_helper(entry->label, entry->value, false)) {
690 DEBUG(0, ("Failed to re-apply cmdline parameter %s = %s\n",
691 entry->label, entry->value));
692 return false;
693 }
694 }
695 return true;
696 }
697
698 /***************************************************************************
699 Initialise the global parameter structure.
700 ***************************************************************************/
701
702 static void init_globals(bool reinit_globals)
703 {
704 static bool done_init = false;
705 char *s = NULL;
706 int i;
707
708 /* If requested to initialize only once and we've already done it... */
709 if (!reinit_globals && done_init) {
710 /* ... then we have nothing more to do */
711 return;
712 }
713
714 if (!done_init) {
715 /* The logfile can be set before this is invoked. Free it if so. */
716 if (Globals.logfile != NULL) {
717 string_free(&Globals.logfile);
718 Globals.logfile = NULL;
719 }
720 done_init = true;
721 } else {
722 free_global_parameters();
723 }
724
725 /* This memset and the free_global_parameters() above will
726 * wipe out smb.conf options set with lp_set_cmdline(). The
727 * apply_lp_set_cmdline() call puts these values back in the
728 * table once the defaults are set */
729 ZERO_STRUCT(Globals);
730
731 Globals.ctx = talloc_new(NULL);
732
733 for (i = 0; parm_table[i].label; i++) {
734 if ((parm_table[i].type == P_STRING ||
735 parm_table[i].type == P_USTRING))
736 {
737 string_set((char **)lp_parm_ptr(NULL, &parm_table[i]), "");
738 }
739 }
740
741
742 string_set(&sDefault.fstype, FSTYPE_STRING);
743 string_set(&sDefault.printjob_username, "%U");
744
745 init_printer_values(&sDefault);
746
747 sDefault.ntvfs_handler = (const char **)str_list_make_v3(NULL, "unixuid default", NULL);
748
749 DEBUG(3, ("Initialising global parameters\n"));
750
751 /* Must manually force to upper case here, as this does not go via the handler */
752 string_set(&Globals.netbios_name, myhostname_upper());
753
754 string_set(&Globals.smb_passwd_file, get_dyn_SMB_PASSWD_FILE());
755 string_set(&Globals.private_dir, get_dyn_PRIVATE_DIR());
756
757 /* use the new 'hash2' method by default, with a prefix of 1 */
758 string_set(&Globals.mangling_method, "hash2");
759 Globals.mangle_prefix = 1;
760
761 string_set(&Globals.guestaccount, GUEST_ACCOUNT);
762
763 /* using UTF8 by default allows us to support all chars */
764 string_set(&Globals.unix_charset, DEFAULT_UNIX_CHARSET);
765
766 /* Use codepage 850 as a default for the dos character set */
767 string_set(&Globals.dos_charset, DEFAULT_DOS_CHARSET);
768
769 /*
770 * Allow the default PASSWD_CHAT to be overridden in local.h.
771 */
772 string_set(&Globals.passwd_chat, DEFAULT_PASSWD_CHAT);
773
774 string_set(&Globals.workgroup, DEFAULT_WORKGROUP);
775
776 string_set(&Globals.passwd_program, "");
777 string_set(&Globals.lockdir, get_dyn_LOCKDIR());
778 string_set(&Globals.szStateDir, get_dyn_STATEDIR());
779 string_set(&Globals.szCacheDir, get_dyn_CACHEDIR());
780 string_set(&Globals.piddir, get_dyn_PIDDIR());
781 string_set(&Globals.nbt_client_socket_address, "0.0.0.0");
782 /*
783 * By default support explicit binding to broadcast
784 * addresses.
785 */
786 Globals.nmbd_bind_explicit_broadcast = true;
787
788 if (asprintf(&s, "Samba %s", samba_version_string()) < 0) {
789 smb_panic("init_globals: ENOMEM");
790 }
791 string_set(&Globals.serverstring, s);
792 SAFE_FREE(s);
793 #ifdef DEVELOPER
794 string_set(&Globals.panic_action, "/bin/sleep 999999999");
795 #endif
796
797 string_set(&Globals.socket_options, DEFAULT_SOCKET_OPTIONS);
798
799 string_set(&Globals.logon_drive, "");
800 /* %N is the NIS auto.home server if -DAUTOHOME is used, else same as %L */
801 string_set(&Globals.logon_home, "\\\\%N\\%U");
802 string_set(&Globals.logon_path, "\\\\%N\\%U\\profile");
803
804 Globals.name_resolve_order = (const char **)str_list_make_v3(NULL, "lmhosts wins host bcast", NULL);
805 string_set(&Globals.passwordserver, "*");
806
807 Globals.algorithmic_rid_base = BASE_RID;
808
809 Globals.load_printers = true;
810 Globals.printcap_cache_time = 750; /* 12.5 minutes */
811
812 Globals.config_backend = config_backend;
813 Globals.server_role = ROLE_AUTO;
814
815 /* Was 65535 (0xFFFF). 0x4101 matches W2K and causes major speed improvements... */
816 /* Discovered by 2 days of pain by Don McCall @ HP :-). */
817 Globals.max_xmit = 0x4104;
818 Globals.maxmux = 50; /* This is *needed* for profile support. */
819 Globals.lpqcachetime = 30; /* changed to handle large print servers better -- jerry */
820 Globals._disable_spoolss = false;
821 Globals.max_smbd_processes = 0;/* no limit specified */
822 Globals.usernamelevel = 0;
823 Globals.deadtime = 0;
824 Globals.getwd_cache = true;
825 Globals.large_readwrite = true;
826 Globals.max_log_size = 5000;
827 Globals.max_open_files = max_open_files();
828 Globals.open_files_db_hash_size = SMB_OPEN_DATABASE_TDB_HASH_SIZE;
829 Globals.srv_maxprotocol = PROTOCOL_SMB3_00;
830 Globals.srv_minprotocol = PROTOCOL_LANMAN1;
831 Globals.cli_maxprotocol = PROTOCOL_NT1;
832 Globals.cli_minprotocol = PROTOCOL_CORE;
833 Globals.security = SEC_USER;
834 Globals.encrypted_passwords = true;
835 Globals.client_schannel = Auto;
836 Globals.winbind_sealed_pipes = true;
837 Globals.require_strong_key = true;
838 Globals.server_schannel = Auto;
839 Globals.bReadRaw = true;
840 Globals.bWriteRaw = true;
841 Globals.null_passwords = false;
842 Globals.obey_pam_restrictions = false;
843 Globals.syslog = 1;
844 Globals.syslog_only = false;
845 Globals.timestamp_logs = true;
846 string_set(&Globals.loglevel, "0");
847 Globals.debug_prefix_timestamp = false;
848 Globals.debug_hires_timestamp = true;
849 Globals.debug_pid = false;
850 Globals.debug_uid = false;
851 Globals.debug_class = false;
852 Globals.enable_core_files = true;
853 Globals.max_ttl = 60 * 60 * 24 * 3; /* 3 days default. */
854 Globals.max_wins_ttl = 60 * 60 * 24 * 6; /* 6 days default. */
855 Globals.min_wins_ttl = 60 * 60 * 6; /* 6 hours default. */
856 Globals.machine_password_timeout = 60 * 60 * 24 * 7; /* 7 days default. */
857 Globals.lm_announce = Auto; /* = Auto: send only if LM clients found */
858 Globals.lm_interval = 60;
859 #if (defined(HAVE_NETGROUP) && defined(WITH_AUTOMOUNT))
860 Globals.nis_home_map = false;
861 #ifdef WITH_NISPLUS_HOME
862 string_set(&Globals.nis_home_map_name, "auto_home.org_dir");
863 #else
864 string_set(&Globals.nis_home_map_name, "auto.home");
865 #endif
866 #endif
867 Globals.time_server = false;
868 Globals.bind_interfaces_only = false;
869 Globals.unix_password_sync = false;
870 Globals.pam_password_change = false;
871 Globals.passwd_chat_debug = false;
872 Globals.passwd_chat_timeout = 2; /* 2 second default. */
873 Globals.nt_pipe_support = true; /* Do NT pipes by default. */
874 Globals.nt_status_support = true; /* Use NT status by default. */
875 Globals.stat_cache = true; /* use stat cache by default */
876 Globals.max_stat_cache_size = 256; /* 256k by default */
877 Globals.restrict_anonymous = 0;
878 Globals.client_lanman_auth = false; /* Do NOT use the LanMan hash if it is available */
879 Globals.client_plaintext_auth = false; /* Do NOT use a plaintext password even if is requested by the server */
880 Globals.lanman_auth = false; /* Do NOT use the LanMan hash, even if it is supplied */
881 Globals.ntlm_auth = true; /* Do use NTLMv1 if it is supplied by the client (otherwise NTLMv2) */
882 Globals.client_ntlmv2_auth = true; /* Client should always use use NTLMv2, as we can't tell that the server supports it, but most modern servers do */
883 /* Note, that we will also use NTLM2 session security (which is different), if it is available */
884
885 Globals.map_to_guest = 0; /* By Default, "Never" */
886 Globals.oplock_break_wait_time = 0; /* By Default, 0 msecs. */
887 Globals.enhanced_browsing = true;
888 Globals.lock_spin_time = WINDOWS_MINIMUM_LOCK_TIMEOUT_MS; /* msec. */
889 #ifdef MMAP_BLACKLIST
890 Globals.use_mmap = false;
891 #else
892 Globals.use_mmap = true;
893 #endif
894 Globals.unicode = true;
895 Globals.unix_extensions = true;
896 Globals.reset_on_zero_vc = false;
897 Globals.log_writeable_files_on_exit = false;
898 Globals.create_krb5_conf = true;
899 Globals.winbindMaxDomainConnections = 1;
900
901 /* hostname lookups can be very expensive and are broken on
902 a large number of sites (tridge) */
903 Globals.hostname_lookups = false;
904
905 string_set(&Globals.passdb_backend, "tdbsam");
906 string_set(&Globals.ldap_suffix, "");
907 string_set(&Globals.szLdapMachineSuffix, "");
908 string_set(&Globals.szLdapUserSuffix, "");
909 string_set(&Globals.szLdapGroupSuffix, "");
910 string_set(&Globals.szLdapIdmapSuffix, "");
911
912 string_set(&Globals.ldap_admin_dn, "");
913 Globals.ldap_ssl = LDAP_SSL_START_TLS;
914 Globals.ldap_ssl_ads = false;
915 Globals.ldap_deref = -1;
916 Globals.ldap_passwd_sync = LDAP_PASSWD_SYNC_OFF;
917 Globals.ldap_delete_dn = false;
918 Globals.ldap_replication_sleep = 1000; /* wait 1 sec for replication */
919 Globals.ldap_follow_referral = Auto;
920 Globals.ldap_timeout = LDAP_DEFAULT_TIMEOUT;
921 Globals.ldap_connection_timeout = LDAP_CONNECTION_DEFAULT_TIMEOUT;
922 Globals.ldap_page_size = LDAP_PAGE_SIZE;
923
924 Globals.ldap_debug_level = 0;
925 Globals.ldap_debug_threshold = 10;
926
927 /* This is what we tell the afs client. in reality we set the token
928 * to never expire, though, when this runs out the afs client will
929 * forget the token. Set to 0 to get NEVERDATE.*/
930 Globals.afs_token_lifetime = 604800;
931 Globals.cups_connection_timeout = CUPS_DEFAULT_CONNECTION_TIMEOUT;
932
933 /* these parameters are set to defaults that are more appropriate
934 for the increasing samba install base:
935
936 as a member of the workgroup, that will possibly become a
937 _local_ master browser (lm = true). this is opposed to a forced
938 local master browser startup (pm = true).
939
940 doesn't provide WINS server service by default (wsupp = false),
941 and doesn't provide domain master browser services by default, either.
942
943 */
944
945 Globals.ms_add_printer_wizard = true;
946 Globals.os_level = 20;
947 Globals.local_master = true;
948 Globals._domain_master = Auto; /* depending on _domain_logons */
949 Globals._domain_logons = false;
950 Globals.browse_list = true;
951 Globals.we_are_a_wins_server = false;
952 Globals.wins_proxy = false;
953
954 TALLOC_FREE(Globals.init_logon_delayed_hosts);
955 Globals.init_logon_delay = 100; /* 100 ms default delay */
956
957 Globals.wins_dns_proxy = true;
958
959 Globals.allow_trusted_domains = true;
960 string_set(&Globals.szIdmapBackend, "tdb");
961
962 string_set(&Globals.template_shell, "/bin/false");
963 string_set(&Globals.template_homedir, "/home/%D/%U");
964 string_set(&Globals.winbind_separator, "\\");
965 string_set(&Globals.winbindd_socket_directory, dyn_WINBINDD_SOCKET_DIR);
966
967 string_set(&Globals.cups_server, "");
968 string_set(&Globals.iprint_server, "");
969
970 #ifdef CLUSTER_SUPPORT
971 string_set(&Globals.ctdbd_socket, CTDB_PATH);
972 #else
973 string_set(&Globals.ctdbd_socket, "");
974 #endif
975
976 Globals.cluster_addresses = NULL;
977 Globals.clustering = false;
978 Globals.ctdb_timeout = 0;
979 Globals.ctdb_locktime_warn_threshold = 0;
980
981 Globals.winbind_cache_time = 300; /* 5 minutes */
982 Globals.winbind_reconnect_delay = 30; /* 30 seconds */
983 Globals.winbind_max_clients = 200;
984 Globals.winbind_enum_users = false;
985 Globals.winbind_enum_groups = false;
986 Globals.winbind_use_default_domain = false;
987 Globals.winbind_trusted_domains_only = false;
988 Globals.winbind_nested_groups = true;
989 Globals.winbind_expand_groups = 1;
990 Globals.winbind_nss_info = (const char **)str_list_make_v3(NULL, "template", NULL);
991 Globals.winbind_refresh_tickets = false;
992 Globals.winbind_offline_logon = false;
993
994 Globals.idmap_cache_time = 86400 * 7; /* a week by default */
995 Globals.idmap_negative_cache_time = 120; /* 2 minutes by default */
996
997 Globals.passdb_expand_explicit = false;
998
999 Globals.name_cache_timeout = 660; /* In seconds */
1000
1001 Globals.use_spnego = true;
1002 Globals.client_use_spnego = true;
1003
1004 Globals.client_signing = SMB_SIGNING_DEFAULT;
1005 Globals.server_signing = SMB_SIGNING_DEFAULT;
1006
1007 Globals.defer_sharing_violations = true;
1008 Globals.smb_ports = (const char **)str_list_make_v3(NULL, SMB_PORTS, NULL);
1009
1010 Globals.enable_privileges = true;
1011 Globals.host_msdfs = true;
1012 Globals.enable_asu_support = false;
1013
1014 /* User defined shares. */
1015 if (asprintf(&s, "%s/usershares", get_dyn_STATEDIR()) < 0) {
1016 smb_panic("init_globals: ENOMEM");
1017 }
1018 string_set(&Globals.usershare_path, s);
1019 SAFE_FREE(s);
1020 string_set(&Globals.szUsershareTemplateShare, "");
1021 Globals.usershare_max_shares = 0;
1022 /* By default disallow sharing of directories not owned by the sharer. */
1023 Globals.usershare_owner_only = true;
1024 /* By default disallow guest access to usershares. */
1025 Globals.usershare_allow_guests = false;
1026
1027 Globals.keepalive = DEFAULT_KEEPALIVE;
1028
1029 /* By default no shares out of the registry */
1030 Globals.registry_shares = false;
1031
1032 Globals.iminreceivefile = 0;
1033
1034 Globals.map_untrusted_to_domain = false;
1035 Globals.multicast_dns_register = true;
1036
1037 Globals.smb2_max_read = DEFAULT_SMB2_MAX_READ;
1038 Globals.smb2_max_write = DEFAULT_SMB2_MAX_WRITE;
1039 Globals.smb2_max_trans = DEFAULT_SMB2_MAX_TRANSACT;
1040 Globals.ismb2_max_credits = DEFAULT_SMB2_MAX_CREDITS;
1041
1042 string_set(&Globals.ncalrpc_dir, get_dyn_NCALRPCDIR());
1043
1044 Globals.server_services = (const char **)str_list_make_v3(NULL, "s3fs rpc nbt wrepl ldap cldap kdc drepl winbind ntp_signd kcc dnsupdate dns", NULL);
1045
1046 Globals.dcerpc_endpoint_servers = (const char **)str_list_make_v3(NULL, "epmapper wkssvc rpcecho samr netlogon lsarpc spoolss drsuapi dssetup unixinfo browser eventlog6 backupkey dnsserver", NULL);
1047
1048 Globals.tls_enabled = true;
1049
1050 string_set(&Globals.tls_keyfile, "tls/key.pem");
1051 string_set(&Globals.tls_certfile, "tls/cert.pem");
1052 string_set(&Globals.tls_cafile, "tls/ca.pem");
1053
1054 string_set(&Globals.share_backend, "classic");
1055
1056 Globals.iPreferredMaster = Auto;
1057
1058 Globals.allow_dns_updates = DNS_UPDATE_SIGNED;
1059
1060 string_set(&Globals.ntp_signd_socket_directory, get_dyn_NTP_SIGND_SOCKET_DIR());
1061
1062 string_set(&Globals.winbindd_privileged_socket_directory, get_dyn_WINBINDD_PRIVILEGED_SOCKET_DIR());
1063
1064 if (asprintf(&s, "%s/samba_kcc", get_dyn_SCRIPTSBINDIR()) < 0) {
1065 smb_panic("init_globals: ENOMEM");
1066 }
1067 Globals.samba_kcc_command = (const char **)str_list_make_v3(NULL, s, NULL);
1068 SAFE_FREE(s);
1069
1070 if (asprintf(&s, "%s/samba_dnsupdate", get_dyn_SCRIPTSBINDIR()) < 0) {
1071 smb_panic("init_globals: ENOMEM");
1072 }
1073 Globals.dns_update_command = (const char **)str_list_make_v3(NULL, s, NULL);
1074 SAFE_FREE(s);
1075
1076 if (asprintf(&s, "%s/samba_spnupdate", get_dyn_SCRIPTSBINDIR()) < 0) {
1077 smb_panic("init_globals: ENOMEM");
1078 }
1079 Globals.spn_update_command = (const char **)str_list_make_v3(NULL, s, NULL);
1080 SAFE_FREE(s);
1081
1082 Globals.nsupdate_command = (const char **)str_list_make_v3(NULL, "/usr/bin/nsupdate -g", NULL);
1083
1084 Globals.rndc_command = (const char **)str_list_make_v3(NULL, "/usr/sbin/rndc", NULL);
1085
1086 /* Now put back the settings that were set with lp_set_cmdline() */
1087 apply_lp_set_cmdline();
1088 }
1089
1090 /*******************************************************************
1091 Convenience routine to grab string parameters into talloced memory
1092 and run standard_sub_basic on them. The buffers can be written to by
1093 callers without affecting the source string.
1094 ********************************************************************/
1095
1096 static char *lp_string(TALLOC_CTX *ctx, const char *s)
1097 {
1098 char *ret;
1099
1100 /* The follow debug is useful for tracking down memory problems
1101 especially if you have an inner loop that is calling a lp_*()
1102 function that returns a string. Perhaps this debug should be
1103 present all the time? */
1104
1105 #if 0
1106 DEBUG(10, ("lp_string(%s)\n", s));
1107 #endif
1108 if (!s) {
1109 return NULL;
1110 }
1111
1112 ret = talloc_sub_basic(ctx,
1113 get_current_username(),
1114 current_user_info.domain,
1115 s);
1116 if (trim_char(ret, '\"', '\"')) {
1117 if (strchr(ret,'\"') != NULL) {
1118 TALLOC_FREE(ret);
1119 ret = talloc_sub_basic(ctx,
1120 get_current_username(),
1121 current_user_info.domain,
1122 s);
1123 }
1124 }
1125 return ret;
1126 }
1127
1128 /*
1129 In this section all the functions that are used to access the
1130 parameters from the rest of the program are defined
1131 */
1132
1133 #define FN_GLOBAL_STRING(fn_name,ptr) \
1134 char *lp_ ## fn_name(TALLOC_CTX *ctx) {return(lp_string((ctx), *(char **)(&Globals.ptr) ? *(char **)(&Globals.ptr) : ""));}
1135 #define FN_GLOBAL_CONST_STRING(fn_name,ptr) \
1136 const char *lp_ ## fn_name(void) {return(*(const char * const *)(&Globals.ptr) ? *(const char * const *)(&Globals.ptr) : "");}
1137 #define FN_GLOBAL_LIST(fn_name,ptr) \
1138 const char **lp_ ## fn_name(void) {return(*(const char ***)(&Globals.ptr));}
1139 #define FN_GLOBAL_BOOL(fn_name,ptr) \
1140 bool lp_ ## fn_name(void) {return(*(bool *)(&Globals.ptr));}
1141 #define FN_GLOBAL_CHAR(fn_name,ptr) \
1142 char lp_ ## fn_name(void) {return(*(char *)(&Globals.ptr));}
1143 #define FN_GLOBAL_INTEGER(fn_name,ptr) \
1144 int lp_ ## fn_name(void) {return(*(int *)(&Globals.ptr));}
1145
1146 #define FN_LOCAL_STRING(fn_name,val) \
1147 char *lp_ ## fn_name(TALLOC_CTX *ctx,int i) {return(lp_string((ctx), (LP_SNUM_OK(i) && ServicePtrs[(i)]->val) ? ServicePtrs[(i)]->val : sDefault.val));}
1148 #define FN_LOCAL_CONST_STRING(fn_name,val) \
1149 const char *lp_ ## fn_name(int i) {return (const char *)((LP_SNUM_OK(i) && ServicePtrs[(i)]->val) ? ServicePtrs[(i)]->val : sDefault.val);}
1150 #define FN_LOCAL_LIST(fn_name,val) \
1151 const char **lp_ ## fn_name(int i) {return(const char **)(LP_SNUM_OK(i)? ServicePtrs[(i)]->val : sDefault.val);}
1152 #define FN_LOCAL_BOOL(fn_name,val) \
1153 bool lp_ ## fn_name(int i) {return(bool)(LP_SNUM_OK(i)? ServicePtrs[(i)]->val : sDefault.val);}
1154 #define FN_LOCAL_INTEGER(fn_name,val) \
1155 int lp_ ## fn_name(int i) {return(LP_SNUM_OK(i)? ServicePtrs[(i)]->val : sDefault.val);}
1156
1157 #define FN_LOCAL_PARM_BOOL(fn_name,val) \
1158 bool lp_ ## fn_name(const struct share_params *p) {return(bool)(LP_SNUM_OK(p->service)? ServicePtrs[(p->service)]->val : sDefault.val);}
1159 #define FN_LOCAL_PARM_INTEGER(fn_name,val) \
1160 int lp_ ## fn_name(const struct share_params *p) {return(LP_SNUM_OK(p->service)? ServicePtrs[(p->service)]->val : sDefault.val);}
1161 #define FN_LOCAL_PARM_CHAR(fn_name,val) \
1162 char lp_ ## fn_name(const struct share_params *p) {return(LP_SNUM_OK(p->service)? ServicePtrs[(p->service)]->val : sDefault.val);}
1163
1164
1165 static FN_GLOBAL_BOOL(_readraw, bReadRaw)
1166 static FN_GLOBAL_BOOL(_writeraw, bWriteRaw)
1167
1168 /* If lp_statedir() and lp_cachedir() are explicitely set during the
1169 * build process or in smb.conf, we use that value. Otherwise they
1170 * default to the value of lp_lockdir(). */
1171 const char *lp_statedir(void) {
1172 if ((strcmp(get_dyn_STATEDIR(), get_dyn_LOCKDIR()) != 0) ||
1173 (strcmp(get_dyn_STATEDIR(), Globals.szStateDir) != 0))
1174 return(*(char **)(&Globals.szStateDir) ?
1175 *(char **)(&Globals.szStateDir) : "");
1176 else
1177 return(*(char **)(&Globals.lockdir) ?
1178 *(char **)(&Globals.lockdir) : "");
1179 }
1180 const char *lp_cachedir(void) {
1181 if ((strcmp(get_dyn_CACHEDIR(), get_dyn_LOCKDIR()) != 0) ||
1182 (strcmp(get_dyn_CACHEDIR(), Globals.szCacheDir) != 0))
1183 return(*(char **)(&Globals.szCacheDir) ?
1184 *(char **)(&Globals.szCacheDir) : "");
1185 else
1186 return(*(char **)(&Globals.lockdir) ?
1187 *(char **)(&Globals.lockdir) : "");
1188 }
1189 static FN_GLOBAL_INTEGER(winbind_max_domain_connections_int,
1190 winbindMaxDomainConnections)
1191
1192 int lp_winbind_max_domain_connections(void)
1193 {
1194 if (lp_winbind_offline_logon() &&
1195 lp_winbind_max_domain_connections_int() > 1) {
1196 DEBUG(1, ("offline logons active, restricting max domain "
1197 "connections to 1\n"));
1198 return 1;
1199 }
1200 return MAX(1, lp_winbind_max_domain_connections_int());
1201 }
1202
1203 int lp_smb2_max_credits(void)
1204 {
1205 if (Globals.ismb2_max_credits == 0) {
1206 Globals.ismb2_max_credits = DEFAULT_SMB2_MAX_CREDITS;
1207 }
1208 return Globals.ismb2_max_credits;
1209 }
1210 int lp_cups_encrypt(void)
1211 {
1212 int result = 0;
1213 #ifdef HAVE_HTTPCONNECTENCRYPT
1214 switch (Globals.CupsEncrypt) {
1215 case Auto:
1216 result = HTTP_ENCRYPT_REQUIRED;
1217 break;
1218 case true:
1219 result = HTTP_ENCRYPT_ALWAYS;
1220 break;
1221 case false:
1222 result = HTTP_ENCRYPT_NEVER;
1223 break;
1224 }
1225 #endif
1226 return result;
1227 }
1228
1229 /* These functions remain in source3/param for now */
1230
1231 FN_GLOBAL_STRING(configfile, szConfigFile)
1232
1233 #include "lib/param/param_functions.c"
1234
1235 FN_LOCAL_STRING(servicename, szService)
1236 FN_LOCAL_CONST_STRING(const_servicename, szService)
1237
1238 /* local prototypes */
1239
1240 static int map_parameter_canonical(const char *pszParmName, bool *inverse);
1241 static const char *get_boolean(bool bool_value);
1242 static int getservicebyname(const char *pszServiceName,
1243 struct loadparm_service *pserviceDest);
1244 static void copy_service(struct loadparm_service *pserviceDest,
1245 struct loadparm_service *pserviceSource,
1246 struct bitmap *pcopymapDest);
1247 static bool do_parameter(const char *pszParmName, const char *pszParmValue,
1248 void *userdata);
1249 static bool do_section(const char *pszSectionName, void *userdata);
1250 static void init_copymap(struct loadparm_service *pservice);
1251 static bool hash_a_service(const char *name, int number);
1252 static void free_service_byindex(int iService);
1253 static void show_parameter(int parmIndex);
1254 static bool is_synonym_of(int parm1, int parm2, bool *inverse);
1255
1256 /*
1257 * This is a helper function for parametrical options support. It returns a
1258 * pointer to parametrical option value if it exists or NULL otherwise. Actual
1259 * parametrical functions are quite simple
1260 */
1261 static struct parmlist_entry *get_parametrics_by_service(struct loadparm_service *service, const char *type,
1262 const char *option)
1263 {
1264 bool global_section = false;
1265 char* param_key;
1266 struct parmlist_entry *data;
1267
1268 if (service == NULL) {
1269 data = Globals.param_opt;
1270 global_section = true;
1271 } else {
1272 data = service->param_opt;
1273 }
1274
1275 if (asprintf(&param_key, "%s:%s", type, option) == -1) {
1276 DEBUG(0,("asprintf failed!\n"));
1277 return NULL;
1278 }
1279
1280 while (data) {
1281 if (strwicmp(data->key, param_key) == 0) {
1282 string_free(&param_key);
1283 return data;
1284 }
1285 data = data->next;
1286 }
1287
1288 if (!global_section) {
1289 /* Try to fetch the same option but from globals */
1290 /* but only if we are not already working with Globals */
1291 data = Globals.param_opt;
1292 while (data) {
1293 if (strwicmp(data->key, param_key) == 0) {
1294 string_free(&param_key);
1295 return data;
1296 }
1297 data = data->next;
1298 }
1299 }
1300
1301 string_free(&param_key);
1302
1303 return NULL;
1304 }
1305
1306 /*
1307 * This is a helper function for parametrical options support. It returns a
1308 * pointer to parametrical option value if it exists or NULL otherwise. Actual
1309 * parametrical functions are quite simple
1310 */
1311 static struct parmlist_entry *get_parametrics(int snum, const char *type,
1312 const char *option)
1313 {
1314 if (snum >= iNumServices) return NULL;
1315
1316 if (snum < 0) {
1317 return get_parametrics_by_service(NULL, type, option);
1318 } else {
1319 return get_parametrics_by_service(ServicePtrs[snum], type, option);
1320 }
1321 }
1322
1323
1324 #define MISSING_PARAMETER(name) \
1325 DEBUG(0, ("%s(): value is NULL or empty!\n", #name))
1326
1327 /*******************************************************************
1328 convenience routine to return int parameters.
1329 ********************************************************************/
1330 static int lp_int(const char *s)
1331 {
1332
1333 if (!s || !*s) {
1334 MISSING_PARAMETER(lp_int);
1335 return (-1);
1336 }
1337
1338 return (int)strtol(s, NULL, 0);
1339 }
1340
1341 /*******************************************************************
1342 convenience routine to return unsigned long parameters.
1343 ********************************************************************/
1344 static unsigned long lp_ulong(const char *s)
1345 {
1346
1347 if (!s || !*s) {
1348 MISSING_PARAMETER(lp_ulong);
1349 return (0);
1350 }
1351
1352 return strtoul(s, NULL, 0);
1353 }
1354
1355 /*******************************************************************
1356 convenience routine to return boolean parameters.
1357 ********************************************************************/
1358 static bool lp_bool(const char *s)
1359 {
1360 bool ret = false;
1361
1362 if (!s || !*s) {
1363 MISSING_PARAMETER(lp_bool);
1364 return false;
1365 }
1366
1367 if (!set_boolean(s, &ret)) {
1368 DEBUG(0,("lp_bool(%s): value is not boolean!\n",s));
1369 return false;
1370 }
1371
1372 return ret;
1373 }
1374
1375 /*******************************************************************
1376 convenience routine to return enum parameters.
1377 ********************************************************************/
1378 static int lp_enum(const char *s,const struct enum_list *_enum)
1379 {
1380 int i;
1381
1382 if (!s || !*s || !_enum) {
1383 MISSING_PARAMETER(lp_enum);
1384 return (-1);
1385 }
1386
1387 for (i=0; _enum[i].name; i++) {
1388 if (strequal(_enum[i].name,s))
1389 return _enum[i].value;
1390 }
1391
1392 DEBUG(0,("lp_enum(%s,enum): value is not in enum_list!\n",s));
1393 return (-1);
1394 }
1395
1396 #undef MISSING_PARAMETER
1397
1398 /* Return parametric option from a given service. Type is a part of option before ':' */
1399 /* Parametric option has following syntax: 'Type: option = value' */
1400 char *lp_parm_talloc_string(TALLOC_CTX *ctx, int snum, const char *type, const char *option, const char *def)
1401 {
1402 struct parmlist_entry *data = get_parametrics(snum, type, option);
1403
1404 if (data == NULL||data->value==NULL) {
1405 if (def) {
1406 return lp_string(ctx, def);
1407 } else {
1408 return NULL;
1409 }
1410 }
1411
1412 return lp_string(ctx, data->value);
1413 }
1414
1415 /* Return parametric option from a given service. Type is a part of option before ':' */
1416 /* Parametric option has following syntax: 'Type: option = value' */
1417 const char *lp_parm_const_string(int snum, const char *type, const char *option, const char *def)
1418 {
1419 struct parmlist_entry *data = get_parametrics(snum, type, option);
1420
1421 if (data == NULL||data->value==NULL)
1422 return def;
1423
1424 return data->value;
1425 }
1426
1427 const char *lp_parm_const_string_service(struct loadparm_service *service, const char *type, const char *option)
1428 {
1429 struct parmlist_entry *data = get_parametrics_by_service(service, type, option);
1430
1431 if (data == NULL||data->value==NULL)
1432 return NULL;
1433
1434 return data->value;
1435 }
1436
1437
1438 /* Return parametric option from a given service. Type is a part of option before ':' */
1439 /* Parametric option has following syntax: 'Type: option = value' */
1440
1441 const char **lp_parm_string_list(int snum, const char *type, const char *option, const char **def)
1442 {
1443 struct parmlist_entry *data = get_parametrics(snum, type, option);
1444
1445 if (data == NULL||data->value==NULL)
1446 return (const char **)def;
1447
1448 if (data->list==NULL) {
1449 data->list = str_list_make_v3(NULL, data->value, NULL);
1450 }
1451
1452 return (const char **)data->list;
1453 }
1454
1455 /* Return parametric option from a given service. Type is a part of option before ':' */
1456 /* Parametric option has following syntax: 'Type: option = value' */
1457
1458 int lp_parm_int(int snum, const char *type, const char *option, int def)
1459 {
1460 struct parmlist_entry *data = get_parametrics(snum, type, option);
1461
1462 if (data && data->value && *data->value)
1463 return lp_int(data->value);
1464
1465 return def;
1466 }
1467
1468 /* Return parametric option from a given service. Type is a part of option before ':' */
1469 /* Parametric option has following syntax: 'Type: option = value' */
1470
1471 unsigned long lp_parm_ulong(int snum, const char *type, const char *option, unsigned long def)
1472 {
1473 struct parmlist_entry *data = get_parametrics(snum, type, option);
1474
1475 if (data && data->value && *data->value)
1476 return lp_ulong(data->value);
1477
1478 return def;
1479 }
1480
1481 /* Return parametric option from a given service. Type is a part of option before ':' */
1482 /* Parametric option has following syntax: 'Type: option = value' */
1483
1484 bool lp_parm_bool(int snum, const char *type, const char *option, bool def)
1485 {
1486 struct parmlist_entry *data = get_parametrics(snum, type, option);
1487
1488 if (data && data->value && *data->value)
1489 return lp_bool(data->value);
1490
1491 return def;
1492 }
1493
1494 /* Return parametric option from a given service. Type is a part of option before ':' */
1495 /* Parametric option has following syntax: 'Type: option = value' */
1496
1497 int lp_parm_enum(int snum, const char *type, const char *option,
1498 const struct enum_list *_enum, int def)
1499 {
1500 struct parmlist_entry *data = get_parametrics(snum, type, option);
1501
1502 if (data && data->value && *data->value && _enum)
1503 return lp_enum(data->value, _enum);
1504
1505 return def;
1506 }
1507
1508
1509 /***************************************************************************
1510 Initialise a service to the defaults.
1511 ***************************************************************************/
1512
1513 static void init_service(struct loadparm_service *pservice)
1514 {
1515 memset((char *)pservice, '\0', sizeof(struct loadparm_service));
1516 copy_service(pservice, &sDefault, NULL);
1517 }
1518
1519
1520 /**
1521 * free a param_opts structure.
1522 * param_opts handling should be moved to talloc;
1523 * then this whole functions reduces to a TALLOC_FREE().
1524 */
1525
1526 static void free_param_opts(struct parmlist_entry **popts)
1527 {
1528 struct parmlist_entry *opt, *next_opt;
1529
1530 if (*popts != NULL) {
1531 DEBUG(5, ("Freeing parametrics:\n"));
1532 }
1533 opt = *popts;
1534 while (opt != NULL) {
1535 string_free(&opt->key);
1536 string_free(&opt->value);
1537 TALLOC_FREE(opt->list);
1538 next_opt = opt->next;
1539 SAFE_FREE(opt);
1540 opt = next_opt;
1541 }
1542 *popts = NULL;
1543 }
1544
1545 /***************************************************************************
1546 Free the dynamically allocated parts of a service struct.
1547 ***************************************************************************/
1548
1549 static void free_service(struct loadparm_service *pservice)
1550 {
1551 if (!pservice)
1552 return;
1553
1554 if (pservice->szService)
1555 DEBUG(5, ("free_service: Freeing service %s\n",
1556 pservice->szService));
1557
1558 free_parameters(pservice);
1559
1560 string_free(&pservice->szService);
1561 TALLOC_FREE(pservice->copymap);
1562
1563 free_param_opts(&pservice->param_opt);
1564
1565 ZERO_STRUCTP(pservice);
1566 }
1567
1568
1569 /***************************************************************************
1570 remove a service indexed in the ServicePtrs array from the ServiceHash
1571 and free the dynamically allocated parts
1572 ***************************************************************************/
1573
1574 static void free_service_byindex(int idx)
1575 {
1576 if ( !LP_SNUM_OK(idx) )
1577 return;
1578
1579 ServicePtrs[idx]->valid = false;
1580
1581 /* we have to cleanup the hash record */
1582
1583 if (ServicePtrs[idx]->szService) {
1584 char *canon_name = canonicalize_servicename(
1585 talloc_tos(),
1586 ServicePtrs[idx]->szService );
1587
1588 dbwrap_delete_bystring(ServiceHash, canon_name );
1589 TALLOC_FREE(canon_name);
1590 }
1591
1592 free_service(ServicePtrs[idx]);
1593 talloc_free_children(ServicePtrs[idx]);
1594 }
1595
1596 /***************************************************************************
1597 Add a new service to the services array initialising it with the given
1598 service.
1599 ***************************************************************************/
1600
1601 static int add_a_service(const struct loadparm_service *pservice, const char *name)
1602 {
1603 int i;
1604 struct loadparm_service tservice;
1605 int num_to_alloc = iNumServices + 1;
1606 struct loadparm_service **tsp = NULL;
1607
1608 tservice = *pservice;
1609
1610 /* it might already exist */
1611 if (name) {
1612 i = getservicebyname(name, NULL);
1613 if (i >= 0) {
1614 return (i);
1615 }
1616 }
1617
1618 /* if not, then create one */
1619 i = iNumServices;
1620 tsp = SMB_REALLOC_ARRAY_KEEP_OLD_ON_ERROR(ServicePtrs, struct loadparm_service *, num_to_alloc);
1621 if (tsp == NULL) {
1622 DEBUG(0,("add_a_service: failed to enlarge ServicePtrs!\n"));
1623 return (-1);
1624 }
1625 ServicePtrs = tsp;
1626 ServicePtrs[iNumServices] = talloc(NULL, struct loadparm_service);
1627 if (!ServicePtrs[iNumServices]) {
1628 DEBUG(0,("add_a_service: out of memory!\n"));
1629 return (-1);
1630 }
1631 iNumServices++;
1632
1633 ServicePtrs[i]->valid = true;
1634
1635 init_service(ServicePtrs[i]);
1636 copy_service(ServicePtrs[i], &tservice, NULL);
1637 if (name)
1638 string_set(&ServicePtrs[i]->szService, name);
1639
1640 DEBUG(8,("add_a_service: Creating snum = %d for %s\n",
1641 i, ServicePtrs[i]->szService));
1642
1643 if (!hash_a_service(ServicePtrs[i]->szService, i)) {
1644 return (-1);
1645 }
1646
1647 return (i);
1648 }
1649
1650 /***************************************************************************
1651 Convert a string to uppercase and remove whitespaces.
1652 ***************************************************************************/
1653
1654 char *canonicalize_servicename(TALLOC_CTX *ctx, const char *src)
1655 {
1656 char *result;
1657
1658 if ( !src ) {
1659 DEBUG(0,("canonicalize_servicename: NULL source name!\n"));
1660 return NULL;
1661 }
1662
1663 result = talloc_strdup(ctx, src);
1664 SMB_ASSERT(result != NULL);
1665
1666 if (!strlower_m(result)) {
1667 TALLOC_FREE(result);
1668 return NULL;
1669 }
1670 return result;
1671 }
1672
1673 /***************************************************************************
1674 Add a name/index pair for the services array to the hash table.
1675 ***************************************************************************/
1676
1677 static bool hash_a_service(const char *name, int idx)
1678 {
1679 char *canon_name;
1680
1681 if ( !ServiceHash ) {
1682 DEBUG(10,("hash_a_service: creating servicehash\n"));
1683 ServiceHash = db_open_rbt(NULL);
1684 if ( !ServiceHash ) {
1685 DEBUG(0,("hash_a_service: open tdb servicehash failed!\n"));
1686 return false;
1687 }
1688 }
1689
1690 DEBUG(10,("hash_a_service: hashing index %d for service name %s\n",
1691 idx, name));
1692
1693 canon_name = canonicalize_servicename(talloc_tos(), name );
1694
1695 dbwrap_store_bystring(ServiceHash, canon_name,
1696 make_tdb_data((uint8 *)&idx, sizeof(idx)),
1697 TDB_REPLACE);
1698
1699 TALLOC_FREE(canon_name);
1700
1701 return true;
1702 }
1703
1704 /***************************************************************************
1705 Add a new home service, with the specified home directory, defaults coming
1706 from service ifrom.
1707 ***************************************************************************/
1708
1709 bool lp_add_home(const char *pszHomename, int iDefaultService,
1710 const char *user, const char *pszHomedir)
1711 {
1712 int i;
1713
1714 if (pszHomename == NULL || user == NULL || pszHomedir == NULL ||
1715 pszHomedir[0] == '\0') {
1716 return false;
1717 }
1718
1719 i = add_a_service(ServicePtrs[iDefaultService], pszHomename);
1720
1721 if (i < 0)
1722 return false;
1723
1724 if (!(*(ServicePtrs[iDefaultService]->pathname))
1725 || strequal(ServicePtrs[iDefaultService]->pathname,
1726 lp_pathname(talloc_tos(), GLOBAL_SECTION_SNUM))) {
1727 string_set(&ServicePtrs[i]->pathname, pszHomedir);
1728 }
1729
1730 if (!(*(ServicePtrs[i]->comment))) {
1731 char *comment = NULL;
1732 if (asprintf(&comment, "Home directory of %s", user) < 0) {
1733 return false;
1734 }
1735 string_set(&ServicePtrs[i]->comment, comment);
1736 SAFE_FREE(comment);
1737 }
1738
1739 /* set the browseable flag from the global default */
1740
1741 ServicePtrs[i]->browseable = sDefault.browseable;
1742 ServicePtrs[i]->access_based_share_enum = sDefault.access_based_share_enum;
1743
1744 ServicePtrs[i]->autoloaded = true;
1745
1746 DEBUG(3, ("adding home's share [%s] for user '%s' at '%s'\n", pszHomename,
1747 user, ServicePtrs[i]->pathname ));
1748
1749 return true;
1750 }
1751
1752 /***************************************************************************
1753 Add a new service, based on an old one.
1754 ***************************************************************************/
1755
1756 int lp_add_service(const char *pszService, int iDefaultService)
1757 {
1758 if (iDefaultService < 0) {
1759 return add_a_service(&sDefault, pszService);
1760 }
1761
1762 return (add_a_service(ServicePtrs[iDefaultService], pszService));
1763 }
1764
1765 /***************************************************************************
1766 Add the IPC service.
1767 ***************************************************************************/
1768
1769 static bool lp_add_ipc(const char *ipc_name, bool guest_ok)
1770 {
1771 char *comment = NULL;
1772 int i = add_a_service(&sDefault, ipc_name);
1773
1774 if (i < 0)
1775 return false;
1776
1777 if (asprintf(&comment, "IPC Service (%s)",
1778 Globals.serverstring) < 0) {
1779 return false;
1780 }
1781
1782 string_set(&ServicePtrs[i]->pathname, tmpdir());
1783 string_set(&ServicePtrs[i]->username, "");
1784 string_set(&ServicePtrs[i]->comment, comment);
1785 string_set(&ServicePtrs[i]->fstype, "IPC");
1786 ServicePtrs[i]->max_connections = 0;
1787 ServicePtrs[i]->bAvailable = true;
1788 ServicePtrs[i]->readonly = true;
1789 ServicePtrs[i]->guest_only = false;
1790 ServicePtrs[i]->administrative_share = true;
1791 ServicePtrs[i]->guest_ok = guest_ok;
1792 ServicePtrs[i]->print_ok = false;
1793 ServicePtrs[i]->browseable = sDefault.browseable;
1794
1795 DEBUG(3, ("adding IPC service\n"));
1796
1797 SAFE_FREE(comment);
1798 return true;
1799 }
1800
1801 /***************************************************************************
1802 Add a new printer service, with defaults coming from service iFrom.
1803 ***************************************************************************/
1804
1805 bool lp_add_printer(const char *pszPrintername, int iDefaultService)
1806 {
1807 const char *comment = "From Printcap";
1808 int i = add_a_service(ServicePtrs[iDefaultService], pszPrintername);
1809
1810 if (i < 0)
1811 return false;
1812
1813 /* note that we do NOT default the availability flag to true - */
1814 /* we take it from the default service passed. This allows all */
1815 /* dynamic printers to be disabled by disabling the [printers] */
1816 /* entry (if/when the 'available' keyword is implemented!). */
1817
1818 /* the printer name is set to the service name. */
1819 string_set(&ServicePtrs[i]->szPrintername, pszPrintername);
1820 string_set(&ServicePtrs[i]->comment, comment);
1821
1822 /* set the browseable flag from the gloabl default */
1823 ServicePtrs[i]->browseable = sDefault.browseable;
1824
1825 /* Printers cannot be read_only. */
1826 ServicePtrs[i]->readonly = false;
1827 /* No oplocks on printer services. */
1828 ServicePtrs[i]->oplocks = false;
1829 /* Printer services must be printable. */
1830 ServicePtrs[i]->print_ok = true;
1831
1832 DEBUG(3, ("adding printer service %s\n", pszPrintername));
1833
1834 return true;
1835 }
1836
1837
1838 /***************************************************************************
1839 Check whether the given parameter name is valid.
1840 Parametric options (names containing a colon) are considered valid.
1841 ***************************************************************************/
1842
1843 bool lp_parameter_is_valid(const char *pszParmName)
1844 {
1845 return ((map_parameter(pszParmName) != -1) ||
1846 (strchr(pszParmName, ':') != NULL));
1847 }
1848
1849 /***************************************************************************
1850 Check whether the given name is the name of a global parameter.
1851 Returns true for strings belonging to parameters of class
1852 P_GLOBAL, false for all other strings, also for parametric options
1853 and strings not belonging to any option.
1854 ***************************************************************************/
1855
1856 bool lp_parameter_is_global(const char *pszParmName)
1857 {
1858 int num = map_parameter(pszParmName);
1859
1860 if (num >= 0) {
1861 return (parm_table[num].p_class == P_GLOBAL);
1862 }
1863
1864 return false;
1865 }
1866
1867 /**************************************************************************
1868 Check whether the given name is the canonical name of a parameter.
1869 Returns false if it is not a valid parameter Name.
1870 For parametric options, true is returned.
1871 **************************************************************************/
1872
1873 bool lp_parameter_is_canonical(const char *parm_name)
1874 {
1875 if (!lp_parameter_is_valid(parm_name)) {
1876 return false;
1877 }
1878
1879 return (map_parameter(parm_name) ==
1880 map_parameter_canonical(parm_name, NULL));
1881 }
1882
1883 /**************************************************************************
1884 Determine the canonical name for a parameter.
1885 Indicate when it is an inverse (boolean) synonym instead of a
1886 "usual" synonym.
1887 **************************************************************************/
1888
1889 bool lp_canonicalize_parameter(const char *parm_name, const char **canon_parm,
1890 bool *inverse)
1891 {
1892 int num;
1893
1894 if (!lp_parameter_is_valid(parm_name)) {
1895 *canon_parm = NULL;
1896 return false;
1897 }
1898
1899 num = map_parameter_canonical(parm_name, inverse);
1900 if (num < 0) {
1901 /* parametric option */
1902 *canon_parm = parm_name;
1903 } else {
1904 *canon_parm = parm_table[num].label;
1905 }
1906
1907 return true;
1908
1909 }
1910
1911 /**************************************************************************
1912 Determine the canonical name for a parameter.
1913 Turn the value given into the inverse boolean expression when
1914 the synonym is an invers boolean synonym.
1915
1916 Return true if parm_name is a valid parameter name and
1917 in case it is an invers boolean synonym, if the val string could
1918 successfully be converted to the reverse bool.
1919 Return false in all other cases.
1920 **************************************************************************/
1921
1922 bool lp_canonicalize_parameter_with_value(const char *parm_name,
1923 const char *val,
1924 const char **canon_parm,
1925 const char **canon_val)
1926 {
1927 int num;
1928 bool inverse;
1929
1930 if (!lp_parameter_is_valid(parm_name)) {
1931 *canon_parm = NULL;
1932 *canon_val = NULL;
1933 return false;
1934 }
1935
1936 num = map_parameter_canonical(parm_name, &inverse);
1937 if (num < 0) {
1938 /* parametric option */
1939 *canon_parm = parm_name;
1940 *canon_val = val;
1941 } else {
1942 *canon_parm = parm_table[num].label;
1943 if (inverse) {
1944 if (!lp_invert_boolean(val, canon_val)) {
1945 *canon_val = NULL;
1946 return false;
1947 }
1948 } else {
1949 *canon_val = val;
1950 }
1951 }
1952
1953 return true;
1954 }
1955
1956 /***************************************************************************
1957 Map a parameter's string representation to something we can use.
1958 Returns false if the parameter string is not recognised, else TRUE.
1959 ***************************************************************************/
1960
1961 static int map_parameter(const char *pszParmName)
1962 {
1963 int iIndex;
1964
1965 if (*pszParmName == '-' && !strequal(pszParmName, "-valid"))
1966 return (-1);
1967
1968 for (iIndex = 0; parm_table[iIndex].label; iIndex++)
1969 if (strwicmp(parm_table[iIndex].label, pszParmName) == 0)
1970 return (iIndex);
1971
1972 /* Warn only if it isn't parametric option */
1973 if (strchr(pszParmName, ':') == NULL)
1974 DEBUG(1, ("Unknown parameter encountered: \"%s\"\n", pszParmName));
1975 /* We do return 'fail' for parametric options as well because they are
1976 stored in different storage
1977 */
1978 return (-1);
1979 }
1980
1981 /***************************************************************************
1982 Map a parameter's string representation to the index of the canonical
1983 form of the parameter (it might be a synonym).
1984 Returns -1 if the parameter string is not recognised.
1985 ***************************************************************************/
1986
1987 static int map_parameter_canonical(const char *pszParmName, bool *inverse)
1988 {
1989 int parm_num, canon_num;
1990 bool loc_inverse = false;
1991
1992 parm_num = map_parameter(pszParmName);
1993 if ((parm_num < 0) || !(parm_table[parm_num].flags & FLAG_HIDE)) {
1994 /* invalid, parametric or no canidate for synonyms ... */
1995 goto done;
1996 }
1997
1998 for (canon_num = 0; parm_table[canon_num].label; canon_num++) {
1999 if (is_synonym_of(parm_num, canon_num, &loc_inverse)) {
2000 parm_num = canon_num;
2001 goto done;
2002 }
2003 }
2004
2005 done:
2006 if (inverse != NULL) {
2007 *inverse = loc_inverse;
2008 }
2009 return parm_num;
2010 }
2011
2012 /***************************************************************************
2013 return true if parameter number parm1 is a synonym of parameter
2014 number parm2 (parm2 being the principal name).
2015 set inverse to true if parm1 is P_BOOLREV and parm2 is P_BOOL,
2016 false otherwise.
2017 ***************************************************************************/
2018
2019 static bool is_synonym_of(int parm1, int parm2, bool *inverse)
2020 {
2021 if ((parm_table[parm1].offset == parm_table[parm2].offset) &&
2022 (parm_table[parm1].p_class == parm_table[parm2].p_class) &&
2023 (parm_table[parm1].flags & FLAG_HIDE) &&
2024 !(parm_table[parm2].flags & FLAG_HIDE))
2025 {
2026 if (inverse != NULL) {
2027 if ((parm_table[parm1].type == P_BOOLREV) &&
2028 (parm_table[parm2].type == P_BOOL))
2029 {
2030 *inverse = true;
2031 } else {
2032 *inverse = false;
2033 }
2034 }
2035 return true;
2036 }
2037 return false;
2038 }
2039
2040 /***************************************************************************
2041 Show one parameter's name, type, [values,] and flags.
2042 (helper functions for show_parameter_list)
2043 ***************************************************************************/
2044
2045 static void show_parameter(int parmIndex)
2046 {
2047 int enumIndex, flagIndex;
2048 int parmIndex2;
2049 bool hadFlag;
2050 bool hadSyn;
2051 bool inverse;
2052 const char *type[] = { "P_BOOL", "P_BOOLREV", "P_CHAR", "P_INTEGER",
2053 "P_OCTAL", "P_LIST", "P_STRING", "P_USTRING",
2054 "P_ENUM", "P_SEP"};
2055 unsigned flags[] = { FLAG_BASIC, FLAG_SHARE, FLAG_PRINT, FLAG_GLOBAL,
2056 FLAG_WIZARD, FLAG_ADVANCED, FLAG_DEVELOPER, FLAG_DEPRECATED,
2057 FLAG_HIDE};
2058 const char *flag_names[] = { "FLAG_BASIC", "FLAG_SHARE", "FLAG_PRINT",
2059 "FLAG_GLOBAL", "FLAG_WIZARD", "FLAG_ADVANCED", "FLAG_DEVELOPER",
2060 "FLAG_DEPRECATED", "FLAG_HIDE", NULL};
2061
2062 printf("%s=%s", parm_table[parmIndex].label,
2063 type[parm_table[parmIndex].type]);
2064 if (parm_table[parmIndex].type == P_ENUM) {
2065 printf(",");
2066 for (enumIndex=0;
2067 parm_table[parmIndex].enum_list[enumIndex].name;
2068 enumIndex++)
2069 {
2070 printf("%s%s",
2071 enumIndex ? "|" : "",
2072 parm_table[parmIndex].enum_list[enumIndex].name);
2073 }
2074 }
2075 printf(",");
2076 hadFlag = false;
2077 for (flagIndex=0; flag_names[flagIndex]; flagIndex++) {
2078 if (parm_table[parmIndex].flags & flags[flagIndex]) {
2079 printf("%s%s",
2080 hadFlag ? "|" : "",
2081 flag_names[flagIndex]);
2082 hadFlag = true;
2083 }
2084 }
2085
2086 /* output synonyms */
2087 hadSyn = false;
2088 for (parmIndex2=0; parm_table[parmIndex2].label; parmIndex2++) {
2089 if (is_synonym_of(parmIndex, parmIndex2, &inverse)) {
2090 printf(" (%ssynonym of %s)", inverse ? "inverse " : "",
2091 parm_table[parmIndex2].label);
2092 } else if (is_synonym_of(parmIndex2, parmIndex, &inverse)) {
2093 if (!hadSyn) {
2094 printf(" (synonyms: ");
2095 hadSyn = true;
2096 } else {
2097 printf(", ");
2098 }
2099 printf("%s%s", parm_table[parmIndex2].label,
2100 inverse ? "[i]" : "");
2101 }
2102 }
2103 if (hadSyn) {
2104 printf(")");
2105 }
2106
2107 printf("\n");
2108 }
2109
2110 /***************************************************************************
2111 Show all parameter's name, type, [values,] and flags.
2112 ***************************************************************************/
2113
2114 void show_parameter_list(void)
2115 {
2116 int classIndex, parmIndex;
2117 const char *section_names[] = { "local", "global", NULL};
2118
2119 for (classIndex=0; section_names[classIndex]; classIndex++) {
2120 printf("[%s]\n", section_names[classIndex]);
2121 for (parmIndex = 0; parm_table[parmIndex].label; parmIndex++) {
2122 if (parm_table[parmIndex].p_class == classIndex) {
2123 show_parameter(parmIndex);
2124 }
2125 }
2126 }
2127 }
2128
2129 /***************************************************************************
2130 Check if a given string correctly represents a boolean value.
2131 ***************************************************************************/
2132
2133 bool lp_string_is_valid_boolean(const char *parm_value)
2134 {
2135 return set_boolean(parm_value, NULL);
2136 }
2137
2138 /***************************************************************************
2139 Get the standard string representation of a boolean value ("yes" or "no")
2140 ***************************************************************************/
2141
2142 static const char *get_boolean(bool bool_value)
2143 {
2144 static const char *yes_str = "yes";
2145 static const char *no_str = "no";
2146
2147 return (bool_value ? yes_str : no_str);
2148 }
2149
2150 /***************************************************************************
2151 Provide the string of the negated boolean value associated to the boolean
2152 given as a string. Returns false if the passed string does not correctly
2153 represent a boolean.
2154 ***************************************************************************/
2155
2156 bool lp_invert_boolean(const char *str, const char **inverse_str)
2157 {
2158 bool val;
2159
2160 if (!set_boolean(str, &val)) {
2161 return false;
2162 }
2163
2164 *inverse_str = get_boolean(!val);
2165 return true;
2166 }
2167
2168 /***************************************************************************
2169 Provide the canonical string representation of a boolean value given
2170 as a string. Return true on success, false if the string given does
2171 not correctly represent a boolean.
2172 ***************************************************************************/
2173
2174 bool lp_canonicalize_boolean(const char *str, const char**canon_str)
2175 {
2176 bool val;
2177
2178 if (!set_boolean(str, &val)) {
2179 return false;
2180 }
2181
2182 *canon_str = get_boolean(val);
2183 return true;
2184 }
2185
2186 /***************************************************************************
2187 Find a service by name. Otherwise works like get_service.
2188 ***************************************************************************/
2189
2190 static int getservicebyname(const char *pszServiceName, struct loadparm_service *pserviceDest)
2191 {
2192 int iService = -1;
2193 char *canon_name;
2194 TDB_DATA data;
2195 NTSTATUS status;
2196
2197 if (ServiceHash == NULL) {
2198 return -1;
2199 }
2200
2201 canon_name = canonicalize_servicename(talloc_tos(), pszServiceName);
2202
2203 status = dbwrap_fetch_bystring(ServiceHash, canon_name, canon_name,
2204 &data);
2205
2206 if (NT_STATUS_IS_OK(status) &&
2207 (data.dptr != NULL) &&
2208 (data.dsize == sizeof(iService)))
2209 {
2210 iService = *(int *)data.dptr;
2211 }
2212
2213 TALLOC_FREE(canon_name);
2214
2215 if ((iService != -1) && (LP_SNUM_OK(iService))
2216 && (pserviceDest != NULL)) {
2217 copy_service(pserviceDest, ServicePtrs[iService], NULL);
2218 }
2219
2220 return (iService);
2221 }
2222
2223 /* Return a pointer to a service by name. Unlike getservicebyname, it does not copy the service */
2224 struct loadparm_service *lp_service(const char *pszServiceName)
2225 {
2226 int iService = getservicebyname(pszServiceName, NULL);
2227 if (iService == -1 || !LP_SNUM_OK(iService)) {
2228 return NULL;
2229 }
2230 return ServicePtrs[iService];
2231 }
2232
2233 struct loadparm_service *lp_servicebynum(int snum)
2234 {
2235 if ((snum == -1) || !LP_SNUM_OK(snum)) {
2236 return NULL;
2237 }
2238 return ServicePtrs[snum];
2239 }
2240
2241 struct loadparm_service *lp_default_loadparm_service()
2242 {
2243 return &sDefault;
2244 }
2245
2246
2247 /***************************************************************************
2248 Copy a service structure to another.
2249 If pcopymapDest is NULL then copy all fields
2250 ***************************************************************************/
2251
2252 /**
2253 * Add a parametric option to a parmlist_entry,
2254 * replacing old value, if already present.
2255 */
2256 static void set_param_opt(struct parmlist_entry **opt_list,
2257 const char *opt_name,
2258 const char *opt_value,
2259 unsigned priority)
2260 {
2261 struct parmlist_entry *new_opt, *opt;
2262 bool not_added;
2263
2264 opt = *opt_list;
2265 not_added = true;
2266
2267 /* Traverse destination */
2268 while (opt) {
2269 /* If we already have same option, override it */
2270 if (strwicmp(opt->key, opt_name) == 0) {
2271 if ((opt->priority & FLAG_CMDLINE) &&
2272 !(priority & FLAG_CMDLINE)) {
2273 /* it's been marked as not to be
2274 overridden */
2275 return;
2276 }
2277 string_free(&opt->value);
2278 TALLOC_FREE(opt->list);
2279 opt->value = SMB_STRDUP(opt_value);
2280 opt->priority = priority;
2281 not_added = false;
2282 break;
2283 }
2284 opt = opt->next;
2285 }
2286 if (not_added) {
2287 new_opt = SMB_XMALLOC_P(struct parmlist_entry);
2288 new_opt->key = SMB_STRDUP(opt_name);
2289 new_opt->value = SMB_STRDUP(opt_value);
2290 new_opt->list = NULL;
2291 new_opt->priority = priority;
2292 DLIST_ADD(*opt_list, new_opt);
2293 }
2294 }
2295
2296 static void copy_service(struct loadparm_service *pserviceDest, struct loadparm_service *pserviceSource,
2297 struct bitmap *pcopymapDest)
2298 {
2299 int i;
2300 bool bcopyall = (pcopymapDest == NULL);
2301 struct parmlist_entry *data;
2302
2303 for (i = 0; parm_table[i].label; i++)
2304 if (parm_table[i].p_class == P_LOCAL &&
2305 (bcopyall || bitmap_query(pcopymapDest,i))) {
2306 void *src_ptr = lp_parm_ptr(pserviceSource, &parm_table[i]);
2307 void *dest_ptr = lp_parm_ptr(pserviceDest, &parm_table[i]);
2308
2309 switch (parm_table[i].type) {
2310 case P_BOOL:
2311 case P_BOOLREV:
2312 *(bool *)dest_ptr = *(bool *)src_ptr;
2313 break;
2314
2315 case P_INTEGER:
2316 case P_ENUM:
2317 case P_OCTAL:
2318 case P_BYTES:
2319 *(int *)dest_ptr = *(int *)src_ptr;
2320 break;
2321
2322 case P_CHAR:
2323 *(char *)dest_ptr = *(char *)src_ptr;
2324 break;
2325
2326 case P_STRING:
2327 string_set((char **)dest_ptr,
2328 *(char **)src_ptr);
2329 break;
2330
2331 case P_USTRING:
2332 {
2333 char *upper_string = strupper_talloc(talloc_tos(),
2334 *(char **)src_ptr);
2335 string_set((char **)dest_ptr,
2336 upper_string);
2337 TALLOC_FREE(upper_string);
2338 break;
2339 }
2340 case P_LIST:
2341 TALLOC_FREE(*((char ***)dest_ptr));
2342 *((char ***)dest_ptr) = str_list_copy(NULL,
2343 *(const char ***)src_ptr);
2344 break;
2345 default:
2346 break;
2347 }
2348 }
2349
2350 if (bcopyall) {
2351 init_copymap(pserviceDest);
2352 if (pserviceSource->copymap)
2353 bitmap_copy(pserviceDest->copymap,
2354 pserviceSource->copymap);
2355 }
2356
2357 data = pserviceSource->param_opt;
2358 while (data) {
2359 set_param_opt(&pserviceDest->param_opt, data->key, data->value, data->priority);
2360 data = data->next;
2361 }
2362 }
2363
2364 /***************************************************************************
2365 Check a service for consistency. Return false if the service is in any way
2366 incomplete or faulty, else true.
2367 ***************************************************************************/
2368
2369 bool service_ok(int iService)
2370 {
2371 bool bRetval;
2372
2373 bRetval = true;
2374 if (ServicePtrs[iService]->szService[0] == '\0') {
2375 DEBUG(0, ("The following message indicates an internal error:\n"));
2376 DEBUG(0, ("No service name in service entry.\n"));
2377 bRetval = false;
2378 }
2379
2380 /* The [printers] entry MUST be printable. I'm all for flexibility, but */
2381 /* I can't see why you'd want a non-printable printer service... */
2382 if (strwicmp(ServicePtrs[iService]->szService, PRINTERS_NAME) == 0) {
2383 if (!ServicePtrs[iService]->print_ok) {
2384 DEBUG(0, ("WARNING: [%s] service MUST be printable!\n",
2385 ServicePtrs[iService]->szService));
2386 ServicePtrs[iService]->print_ok = true;
2387 }
2388 /* [printers] service must also be non-browsable. */
2389 if (ServicePtrs[iService]->browseable)
2390 ServicePtrs[iService]->browseable = false;
2391 }
2392
2393 if (ServicePtrs[iService]->pathname[0] == '\0' &&
2394 strwicmp(ServicePtrs[iService]->szService, HOMES_NAME) != 0 &&
2395 ServicePtrs[iService]->msdfs_proxy[0] == '\0'
2396 ) {
2397 DEBUG(0, ("WARNING: No path in service %s - making it unavailable!\n",
2398 ServicePtrs[iService]->szService));
2399 ServicePtrs[iService]->bAvailable = false;
2400 }
2401
2402 /* If a service is flagged unavailable, log the fact at level 1. */
2403 if (!ServicePtrs[iService]->bAvailable)
2404 DEBUG(1, ("NOTE: Service %s is flagged unavailable.\n",
2405 ServicePtrs[iService]->szService));
2406
2407 return (bRetval);
2408 }
2409
2410 static struct smbconf_ctx *lp_smbconf_ctx(void)
2411 {
2412 sbcErr err;
2413 static struct smbconf_ctx *conf_ctx = NULL;
2414
2415 if (conf_ctx == NULL) {
2416 err = smbconf_init(NULL, &conf_ctx, "registry:");
2417 if (!SBC_ERROR_IS_OK(err)) {
2418 DEBUG(1, ("error initializing registry configuration: "
2419 "%s\n", sbcErrorString(err)));
2420 conf_ctx = NULL;
2421 }
2422 }
2423
2424 return conf_ctx;
2425 }
2426
2427 static bool process_smbconf_service(struct smbconf_service *service)
2428 {
2429 uint32_t count;
2430 bool ret;
2431
2432 if (service == NULL) {
2433 return false;
2434 }
2435
2436 ret = do_section(service->name, NULL);
2437 if (ret != true) {
2438 return false;
2439 }
2440 for (count = 0; count < service->num_params; count++) {
2441 ret = do_parameter(service->param_names[count],
2442 service->param_values[count],
2443 NULL);
2444 if (ret != true) {
2445 return false;
2446 }
2447 }
2448 if (iServiceIndex >= 0) {
2449 return service_ok(iServiceIndex);
2450 }
2451 return true;
2452 }
2453
2454 /**
2455 * load a service from registry and activate it
2456 */
2457 bool process_registry_service(const char *service_name)
2458 {
2459 sbcErr err;
2460 struct smbconf_service *service = NULL;
2461 TALLOC_CTX *mem_ctx = talloc_stackframe();
2462 struct smbconf_ctx *conf_ctx = lp_smbconf_ctx();
2463 bool ret = false;
2464
2465 if (conf_ctx == NULL) {
2466 goto done;
2467 }
2468
2469 DEBUG(5, ("process_registry_service: service name %s\n", service_name));
2470
2471 if (!smbconf_share_exists(conf_ctx, service_name)) {
2472 /*
2473 * Registry does not contain data for this service (yet),
2474 * but make sure lp_load doesn't return false.
2475 */
2476 ret = true;
2477 goto done;
2478 }
2479
2480 err = smbconf_get_share(conf_ctx, mem_ctx, service_name, &service);
2481 if (!SBC_ERROR_IS_OK(err)) {
2482 goto done;
2483 }
2484
2485 ret = process_smbconf_service(service);
2486 if (!ret) {
2487 goto done;
2488 }
2489
2490 /* store the csn */
2491 smbconf_changed(conf_ctx, &conf_last_csn, NULL, NULL);
2492
2493 done:
2494 TALLOC_FREE(mem_ctx);
2495 return ret;
2496 }
2497
2498 /*
2499 * process_registry_globals
2500 */
2501 static bool process_registry_globals(void)
2502 {
2503 bool ret;
2504
2505 add_to_file_list(INCLUDE_REGISTRY_NAME, INCLUDE_REGISTRY_NAME);
2506
2507 ret = do_parameter("registry shares", "yes", NULL);
2508 if (!ret) {
2509 return ret;
2510 }
2511
2512 return process_registry_service(GLOBAL_NAME);
2513 }
2514
2515 bool process_registry_shares(void)
2516 {
2517 sbcErr err;
2518 uint32_t count;
2519 struct smbconf_service **service = NULL;
2520 uint32_t num_shares = 0;
2521 TALLOC_CTX *mem_ctx = talloc_stackframe();
2522 struct smbconf_ctx *conf_ctx = lp_smbconf_ctx();
2523 bool ret = false;
2524
2525 if (conf_ctx == NULL) {
2526 goto done;
2527 }
2528
2529 err = smbconf_get_config(conf_ctx, mem_ctx, &num_shares, &service);
2530 if (!SBC_ERROR_IS_OK(err)) {
2531 goto done;
2532 }
2533
2534 ret = true;
2535
2536 for (count = 0; count < num_shares; count++) {
2537 if (strequal(service[count]->name, GLOBAL_NAME)) {
2538 continue;
2539 }
2540 ret = process_smbconf_service(service[count]);
2541 if (!ret) {
2542 goto done;
2543 }
2544 }
2545
2546 /* store the csn */
2547 smbconf_changed(conf_ctx, &conf_last_csn, NULL, NULL);
2548
2549 done:
2550 TALLOC_FREE(mem_ctx);
2551 return ret;
2552 }
2553
2554 /**
2555 * reload those shares from registry that are already
2556 * activated in the services array.
2557 */
2558 static bool reload_registry_shares(void)
2559 {
2560 int i;
2561 bool ret = true;
2562
2563 for (i = 0; i < iNumServices; i++) {
2564 if (!VALID(i)) {
2565 continue;
2566 }
2567
2568 if (ServicePtrs[i]->usershare == USERSHARE_VALID) {
2569 continue;
2570 }
2571
2572 ret = process_registry_service(ServicePtrs[i]->szService);
2573 if (!ret) {
2574 goto done;
2575 }
2576 }
2577
2578 done:
2579 return ret;
2580 }
2581
2582
2583 #define MAX_INCLUDE_DEPTH 100
2584
2585 static uint8_t include_depth;
2586
2587 static struct file_lists {
2588 struct file_lists *next;
2589 char *name;
2590 char *subfname;
2591 time_t modtime;
2592 } *file_lists = NULL;
2593
2594 /*******************************************************************
2595 Keep a linked list of all config files so we know when one has changed
2596 it's date and needs to be reloaded.
2597 ********************************************************************/
2598
2599 static void add_to_file_list(const char *fname, const char *subfname)
2600 {
2601 struct file_lists *f = file_lists;
2602
2603 while (f) {
2604 if (f->name && !strcmp(f->name, fname))
2605 break;
2606 f = f->next;
2607 }
2608
2609 if (!f) {
2610 f = SMB_MALLOC_P(struct file_lists);
2611 if (!f)
2612 return;
2613 f->next = file_lists;
2614 f->name = SMB_STRDUP(fname);
2615 if (!f->name) {
2616 SAFE_FREE(f);
2617 return;
2618 }
2619 f->subfname = SMB_STRDUP(subfname);
2620 if (!f->subfname) {
2621 SAFE_FREE(f->name);
2622 SAFE_FREE(f);
2623 return;
2624 }
2625 file_lists = f;
2626 f->modtime = file_modtime(subfname);
2627 } else {
2628 time_t t = file_modtime(subfname);
2629 if (t)
2630 f->modtime = t;
2631 }
2632 return;
2633 }
2634
2635 /**
2636 * Free the file lists
2637 */
2638 static void free_file_list(void)
2639 {
2640 struct file_lists *f;
2641 struct file_lists *next;
2642
2643 f = file_lists;
2644 while( f ) {
2645 next = f->next;
2646 SAFE_FREE( f->name );
2647 SAFE_FREE( f->subfname );
2648 SAFE_FREE( f );
2649 f = next;
2650 }
2651 file_lists = NULL;
2652 }
2653
2654
2655 /**
2656 * Utility function for outsiders to check if we're running on registry.
2657 */
2658 bool lp_config_backend_is_registry(void)
2659 {
2660 return (lp_config_backend() == CONFIG_BACKEND_REGISTRY);
2661 }
2662
2663 /**
2664 * Utility function to check if the config backend is FILE.
2665 */
2666 bool lp_config_backend_is_file(void)
2667 {
2668 return (lp_config_backend() == CONFIG_BACKEND_FILE);
2669 }
2670
2671 /*******************************************************************
2672 Check if a config file has changed date.
2673 ********************************************************************/
2674
2675 bool lp_file_list_changed(void)
2676 {
2677 struct file_lists *f = file_lists;
2678
2679 DEBUG(6, ("lp_file_list_changed()\n"));
2680
2681 while (f) {
2682 time_t mod_time;
2683
2684 if (strequal(f->name, INCLUDE_REGISTRY_NAME)) {
2685 struct smbconf_ctx *conf_ctx = lp_smbconf_ctx();
2686
2687 if (conf_ctx == NULL) {
2688 return false;
2689 }
2690 if (smbconf_changed(conf_ctx, &conf_last_csn, NULL,
2691 NULL))
2692 {
2693 DEBUGADD(6, ("registry config changed\n"));
2694 return true;
2695 }
2696 } else {
2697 char *n2 = NULL;
2698 n2 = talloc_sub_basic(talloc_tos(),
2699 get_current_username(),
2700 current_user_info.domain,
2701 f->name);
2702 if (!n2) {
2703 return false;
2704 }
2705 DEBUGADD(6, ("file %s -> %s last mod_time: %s\n",
2706 f->name, n2, ctime(&f->modtime)));
2707
2708 mod_time = file_modtime(n2);
2709
2710 if (mod_time &&
2711 ((f->modtime != mod_time) ||
2712 (f->subfname == NULL) ||
2713 (strcmp(n2, f->subfname) != 0)))
2714 {
2715 DEBUGADD(6,
2716 ("file %s modified: %s\n", n2,
2717 ctime(&mod_time)));
2718 f->modtime = mod_time;
2719 SAFE_FREE(f->subfname);
2720 f->subfname = SMB_STRDUP(n2);
2721 TALLOC_FREE(n2);
2722 return true;
2723 }
2724 TALLOC_FREE(n2);
2725 }
2726 f = f->next;
2727 }
2728 return false;
2729 }
2730
2731
2732 /**
2733 * Initialize iconv conversion descriptors.
2734 *
2735 * This is called the first time it is needed, and also called again
2736 * every time the configuration is reloaded, because the charset or
2737 * codepage might have changed.
2738 **/
2739 static void init_iconv(void)
2740 {
2741 global_iconv_handle = smb_iconv_handle_reinit(NULL, lp_dos_charset(),
2742 lp_unix_charset(),
2743 true, global_iconv_handle);
2744 }
2745
2746 static bool handle_charset(struct loadparm_context *unused, int snum, const char *pszParmValue, char **ptr)
2747 {
2748 if (strcmp(*ptr, pszParmValue) != 0) {
2749 string_set(ptr, pszParmValue);
2750 init_iconv();
2751 }
2752 return true;
2753 }
2754
2755 static bool handle_dos_charset(struct loadparm_context *unused, int snum, const char *pszParmValue, char **ptr)
2756 {
2757 bool is_utf8 = false;
2758 size_t len = strlen(pszParmValue);
2759
2760 if (len == 4 || len == 5) {
2761 /* Don't use StrCaseCmp here as we don't want to
2762 initialize iconv. */
2763 if ((toupper_m(pszParmValue[0]) == 'U') &&
2764 (toupper_m(pszParmValue[1]) == 'T') &&
2765 (toupper_m(pszParmValue[2]) == 'F')) {
2766 if (len == 4) {
2767 if (pszParmValue[3] == '8') {
2768 is_utf8 = true;
2769 }
2770 } else {
2771 if (pszParmValue[3] == '-' &&
2772 pszParmValue[4] == '8') {
2773 is_utf8 = true;
2774 }
2775 }
2776 }
2777 }
2778
2779 if (strcmp(*ptr, pszParmValue) != 0) {
2780 if (is_utf8) {
2781 DEBUG(0,("ERROR: invalid DOS charset: 'dos charset' must not "
2782 "be UTF8, using (default value) %s instead.\n",
2783 DEFAULT_DOS_CHARSET));
2784 pszParmValue = DEFAULT_DOS_CHARSET;
2785 }
2786 string_set(ptr, pszParmValue);
2787 init_iconv();
2788 }
2789 return true;
2790 }
2791
2792 static bool handle_realm(struct loadparm_context *unused, int snum, const char *pszParmValue, char **ptr)
2793 {
2794 bool ret = true;
2795 TALLOC_CTX *frame = talloc_stackframe();
2796 char *realm = strupper_talloc(frame, pszParmValue);
2797 char *dnsdomain = strlower_talloc(realm, pszParmValue);
2798
2799 ret &= string_set(&Globals.realm_original, pszParmValue);
2800 ret &= string_set(&Globals.realm, realm);
2801 ret &= string_set(&Globals.dnsdomain, dnsdomain);
2802 TALLOC_FREE(frame);
2803
2804 return ret;
2805 }
2806
2807 static bool handle_netbios_aliases(struct loadparm_context *unused, int snum, const char *pszParmValue, char **ptr)
2808 {
2809 TALLOC_FREE(Globals.netbios_aliases);
2810 Globals.netbios_aliases = (const char **)str_list_make_v3(NULL, pszParmValue, NULL);
2811 return set_netbios_aliases(Globals.netbios_aliases);
2812 }
2813
2814 /***************************************************************************
2815 Handle the include operation.
2816 ***************************************************************************/
2817 static bool bAllowIncludeRegistry = true;
2818
2819 static bool handle_include(struct loadparm_context *unused, int snum, const char *pszParmValue, char **ptr)
2820 {
2821 char *fname;
2822
2823 if (include_depth >= MAX_INCLUDE_DEPTH) {
2824 DEBUG(0, ("Error: Maximum include depth (%u) exceeded!\n",
2825 include_depth));
2826 return false;
2827 }
2828
2829 if (strequal(pszParmValue, INCLUDE_REGISTRY_NAME)) {
2830 if (!bAllowIncludeRegistry) {
2831 return true;
2832 }
2833 if (bInGlobalSection) {
2834 bool ret;
2835 include_depth++;
2836 ret = process_registry_globals();
2837 include_depth--;
2838 return ret;
2839 } else {
2840 DEBUG(1, ("\"include = registry\" only effective "
2841 "in %s section\n", GLOBAL_NAME));
2842 return false;
2843 }
2844 }
2845
2846 fname = talloc_sub_basic(talloc_tos(), get_current_username(),
2847 current_user_info.domain,
2848 pszParmValue);
2849
2850 add_to_file_list(pszParmValue, fname);
2851
2852 string_set(ptr, fname);
2853
2854 if (file_exist(fname)) {
2855 bool ret;
2856 include_depth++;
2857 ret = pm_process(fname, do_section, do_parameter, NULL);
2858 include_depth--;
2859 TALLOC_FREE(fname);
2860 return ret;
2861 }
2862
2863 DEBUG(2, ("Can't find include file %s\n", fname));
2864 TALLOC_FREE(fname);
2865 return true;
2866 }
2867
2868 /***************************************************************************
2869 Handle the interpretation of the copy parameter.
2870 ***************************************************************************/
2871
2872 static bool handle_copy(struct loadparm_context *unused, int snum, const char *pszParmValue, char **ptr)
2873 {
2874 bool bRetval;
2875 int iTemp;
2876 struct loadparm_service serviceTemp;
2877
2878 string_set(ptr, pszParmValue);
2879
2880 init_service(&serviceTemp);
2881
2882 bRetval = false;
2883
2884 DEBUG(3, ("Copying service from service %s\n", pszParmValue));
2885
2886 if ((iTemp = getservicebyname(pszParmValue, &serviceTemp)) >= 0) {
2887 if (iTemp == iServiceIndex) {
2888 DEBUG(0, ("Can't copy service %s - unable to copy self!\n", pszParmValue));
2889 } else {
2890 copy_service(ServicePtrs[iServiceIndex],
2891 &serviceTemp,
2892 ServicePtrs[iServiceIndex]->copymap);
2893 bRetval = true;
2894 }
2895 } else {
2896 DEBUG(0, ("Unable to copy service - source not found: %s\n", pszParmValue));
2897 bRetval = false;
2898 }
2899
2900 free_service(&serviceTemp);
2901 return (bRetval);
2902 }
2903
2904 static bool handle_ldap_debug_level(struct loadparm_context *unused, int snum, const char *pszParmValue, char **ptr)
2905 {
2906 Globals.ldap_debug_level = lp_int(pszParmValue);
2907 init_ldap_debugging();
2908 return true;
2909 }
2910
2911 /*
2912 * idmap related parameters
2913 */
2914
2915 static bool handle_idmap_backend(struct loadparm_context *unused, int snum, const char *pszParmValue, char **ptr)
2916 {
2917 lp_do_parameter(snum, "idmap config * : backend", pszParmValue);
2918
2919 return true;
2920 }
2921
2922 static bool handle_idmap_uid(struct loadparm_context *unused, int snum, const char *pszParmValue, char **ptr)
2923 {
2924 lp_do_parameter(snum, "idmap config * : range", pszParmValue);
2925
2926 return true;
2927 }
2928
2929 static bool handle_idmap_gid(struct loadparm_context *unused, int snum, const char *pszParmValue, char **ptr)
2930 {
2931 lp_do_parameter(snum, "idmap config * : range", pszParmValue);
2932
2933 return true;
2934 }
2935
2936 bool lp_idmap_range(const char *domain_name, uint32_t *low, uint32_t *high)
2937 {
2938 char *config_option = NULL;
2939 const char *range = NULL;
2940 bool ret = false;
2941
2942 SMB_ASSERT(low != NULL);
2943 SMB_ASSERT(high != NULL);
2944
2945 if ((domain_name == NULL) || (domain_name[0] == '\0')) {
2946 domain_name = "*";
2947 }
2948
2949 config_option = talloc_asprintf(talloc_tos(), "idmap config %s",
2950 domain_name);
2951 if (config_option == NULL) {
2952 DEBUG(0, ("out of memory\n"));
2953 return false;
2954 }
2955
2956 range = lp_parm_const_string(-1, config_option, "range", NULL);
2957 if (range == NULL) {
2958 DEBUG(1, ("idmap range not specified for domain '%s'\n", domain_name));
2959 goto done;
2960 }
2961
2962 if (sscanf(range, "%u - %u", low, high) != 2) {
2963 DEBUG(1, ("error parsing idmap range '%s' for domain '%s'\n",
2964 range, domain_name));
2965 goto done;
2966 }
2967
2968 ret = true;
2969
2970 done:
2971 talloc_free(config_option);
2972 return ret;
2973
2974 }
2975
2976 bool lp_idmap_default_range(uint32_t *low, uint32_t *high)
2977 {
2978 return lp_idmap_range("*", low, high);
2979 }
2980
2981 const char *lp_idmap_backend(const char *domain_name)
2982 {
2983 char *config_option = NULL;
2984 const char *backend = NULL;
2985
2986 if ((domain_name == NULL) || (domain_name[0] == '\0')) {
2987 domain_name = "*";
2988 }
2989
2990 config_option = talloc_asprintf(talloc_tos(), "idmap config %s",
2991 domain_name);
2992 if (config_option == NULL) {
2993 DEBUG(0, ("out of memory\n"));
2994 return false;
2995 }
2996
2997 backend = lp_parm_const_string(-1, config_option, "backend", NULL);
2998 if (backend == NULL) {
2999 DEBUG(1, ("idmap backend not specified for domain '%s'\n", domain_name));
3000 goto done;
3001 }
3002
3003 done:
3004 talloc_free(config_option);
3005 return backend;
3006 }
3007
3008 const char *lp_idmap_default_backend(void)
3009 {
3010 return lp_idmap_backend("*");
3011 }
3012
3013 /***************************************************************************
3014 Handle the DEBUG level list.
3015 ***************************************************************************/
3016
3017 static bool handle_debug_list(struct loadparm_context *unused, int snum, const char *pszParmValueIn, char **ptr )
3018 {
3019 string_set(ptr, pszParmValueIn);
3020 return debug_parse_levels(pszParmValueIn);
3021 }
3022
3023 /***************************************************************************
3024 Handle ldap suffixes - default to ldapsuffix if sub-suffixes are not defined.
3025 ***************************************************************************/
3026
3027 static const char *append_ldap_suffix(TALLOC_CTX *ctx, const char *str )
3028 {
3029 const char *suffix_string;
3030
3031 suffix_string = talloc_asprintf(ctx, "%s,%s", str,
3032 Globals.ldap_suffix );
3033 if ( !suffix_string ) {
3034 DEBUG(0,("append_ldap_suffix: talloc_asprintf() failed!\n"));
3035 return "";
3036 }
3037
3038 return suffix_string;
3039 }
3040
3041 const char *lp_ldap_machine_suffix(TALLOC_CTX *ctx)
3042 {
3043 if (Globals.szLdapMachineSuffix[0])
3044 return append_ldap_suffix(ctx, Globals.szLdapMachineSuffix);
3045
3046 return lp_string(ctx, Globals.ldap_suffix);
3047 }
3048
3049 const char *lp_ldap_user_suffix(TALLOC_CTX *ctx)
3050 {
3051 if (Globals.szLdapUserSuffix[0])
3052 return append_ldap_suffix(ctx, Globals.szLdapUserSuffix);
3053
3054 return lp_string(ctx, Globals.ldap_suffix);
3055 }
3056
3057 const char *lp_ldap_group_suffix(TALLOC_CTX *ctx)
3058 {
3059 if (Globals.szLdapGroupSuffix[0])
3060 return append_ldap_suffix(ctx, Globals.szLdapGroupSuffix);
3061
3062 return lp_string(ctx, Globals.ldap_suffix);
3063 }
3064
3065 const char *lp_ldap_idmap_suffix(TALLOC_CTX *ctx)
3066 {
3067 if (Globals.szLdapIdmapSuffix[0])
3068 return append_ldap_suffix(ctx, Globals.szLdapIdmapSuffix);
3069
3070 return lp_string(ctx, Globals.ldap_suffix);
3071 }
3072
3073 /****************************************************************************
3074 set the value for a P_ENUM
3075 ***************************************************************************/
3076
3077 static void lp_set_enum_parm( struct parm_struct *parm, const char *pszParmValue,
3078 int *ptr )
3079 {
3080 int i;
3081
3082 for (i = 0; parm->enum_list[i].name; i++) {
3083 if ( strequal(pszParmValue, parm->enum_list[i].name)) {
3084 *ptr = parm->enum_list[i].value;
3085 return;
3086 }
3087 }
3088 DEBUG(0, ("WARNING: Ignoring invalid value '%s' for parameter '%s'\n",
3089 pszParmValue, parm->label));
3090 }
3091
3092 /***************************************************************************
3093 ***************************************************************************/
3094
3095 static bool handle_printing(struct loadparm_context *unused, int snum, const char *pszParmValue, char **ptr)
3096 {
3097 static int parm_num = -1;
3098 struct loadparm_service *s;
3099
3100 if ( parm_num == -1 )
3101 parm_num = map_parameter( "printing" );
3102
3103 lp_set_enum_parm( &parm_table[parm_num], pszParmValue, (int*)ptr );
3104
3105 if ( snum < 0 )
3106 s = &sDefault;
3107 else
3108 s = ServicePtrs[snum];
3109
3110 init_printer_values( s );
3111
3112 return true;
3113 }
3114
3115
3116 /***************************************************************************
3117 Initialise a copymap.
3118 ***************************************************************************/
3119
3120 static void init_copymap(struct loadparm_service *pservice)
3121 {
3122 int i;
3123
3124 TALLOC_FREE(pservice->copymap);
3125
3126 pservice->copymap = bitmap_talloc(NULL, NUMPARAMETERS);
3127 if (!pservice->copymap)
3128 DEBUG(0,
3129 ("Couldn't allocate copymap!! (size %d)\n",
3130 (int)NUMPARAMETERS));
3131 else
3132 for (i = 0; i < NUMPARAMETERS; i++)
3133 bitmap_set(pservice->copymap, i);
3134 }
3135
3136 /**
3137 return the parameter pointer for a parameter
3138 */
3139 void *lp_parm_ptr(struct loadparm_service *service, struct parm_struct *parm)
3140 {
3141 if (service == NULL) {
3142 if (parm->p_class == P_LOCAL)
3143 return (void *)(((char *)&sDefault)+parm->offset);
3144 else if (parm->p_class == P_GLOBAL)
3145 return (void *)(((char *)&Globals)+parm->offset);
3146 else return NULL;
3147 } else {
3148 return (void *)(((char *)service) + parm->offset);
3149 }
3150 }
3151
3152 /***************************************************************************
3153 Return the local pointer to a parameter given the service number and parameter
3154 ***************************************************************************/
3155
3156 void *lp_local_ptr_by_snum(int snum, struct parm_struct *parm)
3157 {
3158 return lp_parm_ptr(ServicePtrs[snum], parm);
3159 }
3160
3161 /***************************************************************************
3162 Process a parameter for a particular service number. If snum < 0
3163 then assume we are in the globals.
3164 ***************************************************************************/
3165
3166 bool lp_do_parameter(int snum, const char *pszParmName, const char *pszParmValue)
3167 {
3168 int parmnum, i;
3169 void *parm_ptr = NULL; /* where we are going to store the result */
3170 struct parmlist_entry **opt_list;
3171
3172 parmnum = map_parameter(pszParmName);
3173
3174 if (parmnum < 0) {
3175 if (strchr(pszParmName, ':') == NULL) {
3176 DEBUG(0, ("Ignoring unknown parameter \"%s\"\n",
3177 pszParmName));
3178 return true;
3179 }
3180
3181 /*
3182 * We've got a parametric option
3183 */
3184
3185 opt_list = (snum < 0)
3186 ? &Globals.param_opt : &ServicePtrs[snum]->param_opt;
3187 set_param_opt(opt_list, pszParmName, pszParmValue, 0);
3188
3189 return true;
3190 }
3191
3192 /* if it's already been set by the command line, then we don't
3193 override here */
3194 if (parm_table[parmnum].flags & FLAG_CMDLINE) {
3195 return true;
3196 }
3197
3198 if (parm_table[parmnum].flags & FLAG_DEPRECATED) {
3199 DEBUG(1, ("WARNING: The \"%s\" option is deprecated\n",
3200 pszParmName));
3201 }
3202
3203 /* we might point at a service, the default service or a global */
3204 if (snum < 0) {
3205 parm_ptr = lp_parm_ptr(NULL, &parm_table[parmnum]);
3206 } else {
3207 if (parm_table[parmnum].p_class == P_GLOBAL) {
3208 DEBUG(0,
3209 ("Global parameter %s found in service section!\n",
3210 pszParmName));
3211 return true;
3212 }
3213 parm_ptr = lp_local_ptr_by_snum(snum, &parm_table[parmnum]);
3214 }
3215
3216 if (snum >= 0) {
3217 if (!ServicePtrs[snum]->copymap)
3218 init_copymap(ServicePtrs[snum]);
3219
3220 /* this handles the aliases - set the copymap for other entries with
3221 the same data pointer */
3222 for (i = 0; parm_table[i].label; i++) {
3223 if ((parm_table[i].offset == parm_table[parmnum].offset)
3224 && (parm_table[i].p_class == parm_table[parmnum].p_class)) {
3225 bitmap_clear(ServicePtrs[snum]->copymap, i);
3226 }
3227 }
3228 }
3229
3230 /* if it is a special case then go ahead */
3231 if (parm_table[parmnum].special) {
3232 return parm_table[parmnum].special(NULL, snum, pszParmValue,
3233 (char **)parm_ptr);
3234 }
3235
3236 /* now switch on the type of variable it is */
3237 switch (parm_table[parmnum].type)
3238 {
3239 case P_BOOL:
3240 *(bool *)parm_ptr = lp_bool(pszParmValue);
3241 break;
3242
3243 case P_BOOLREV:
3244 *(bool *)parm_ptr = !lp_bool(pszParmValue);
3245 break;
3246
3247 case P_INTEGER:
3248 *(int *)parm_ptr = lp_int(pszParmValue);
3249 break;
3250
3251 case P_CHAR:
3252 *(char *)parm_ptr = *pszParmValue;
3253 break;
3254
3255 case P_OCTAL:
3256 i = sscanf(pszParmValue, "%o", (int *)parm_ptr);
3257 if ( i != 1 ) {
3258 DEBUG ( 0, ("Invalid octal number %s\n", pszParmName ));
3259 }
3260 break;
3261
3262 case P_BYTES:
3263 {
3264 uint64_t val;
3265 if (conv_str_size_error(pszParmValue, &val)) {
3266 if (val <= INT_MAX) {
3267 *(int *)parm_ptr = (int)val;
3268 break;
3269 }
3270 }
3271
3272 DEBUG(0,("lp_do_parameter(%s): value is not "
3273 "a valid size specifier!\n", pszParmValue));
3274 return false;
3275 }
3276
3277 case P_LIST:
3278 case P_CMDLIST:
3279 TALLOC_FREE(*((char ***)parm_ptr));
3280 *(char ***)parm_ptr = str_list_make_v3(
3281 NULL, pszParmValue, NULL);
3282 break;
3283
3284 case P_STRING:
3285 string_set((char **)parm_ptr, pszParmValue);
3286 break;
3287
3288 case P_USTRING:
3289 {
3290 char *upper_string = strupper_talloc(talloc_tos(),
3291 pszParmValue);
3292 string_set((char **)parm_ptr, upper_string);
3293 TALLOC_FREE(upper_string);
3294 break;
3295 }
3296 case P_ENUM:
3297 lp_set_enum_parm( &parm_table[parmnum], pszParmValue, (int*)parm_ptr );
3298 break;
3299 case P_SEP:
3300 break;
3301 }
3302
3303 return true;
3304 }
3305
3306 /***************************************************************************
3307 set a parameter, marking it with FLAG_CMDLINE. Parameters marked as
3308 FLAG_CMDLINE won't be overridden by loads from smb.conf.
3309 ***************************************************************************/
3310
3311 static bool lp_set_cmdline_helper(const char *pszParmName, const char *pszParmValue, bool store_values)
3312 {
3313 int parmnum, i;
3314 parmnum = map_parameter(pszParmName);
3315 if (parmnum >= 0) {
3316 parm_table[parmnum].flags &= ~FLAG_CMDLINE;
3317 if (!lp_do_parameter(-1, pszParmName, pszParmValue)) {
3318 return false;
3319 }
3320 parm_table[parmnum].flags |= FLAG_CMDLINE;
3321
3322 /* we have to also set FLAG_CMDLINE on aliases. Aliases must
3323 * be grouped in the table, so we don't have to search the
3324 * whole table */
3325 for (i=parmnum-1;
3326 i>=0 && parm_table[i].offset == parm_table[parmnum].offset
3327 && parm_table[i].p_class == parm_table[parmnum].p_class;
3328 i--) {
3329 parm_table[i].flags |= FLAG_CMDLINE;
3330 }
3331 for (i=parmnum+1;i<NUMPARAMETERS && parm_table[i].offset == parm_table[parmnum].offset
3332 && parm_table[i].p_class == parm_table[parmnum].p_class;i++) {
3333 parm_table[i].flags |= FLAG_CMDLINE;
3334 }
3335
3336 if (store_values) {
3337 store_lp_set_cmdline(pszParmName, pszParmValue);
3338 }
3339 return true;
3340 }
3341
3342 /* it might be parametric */
3343 if (strchr(pszParmName, ':') != NULL) {
3344 set_param_opt(&Globals.param_opt, pszParmName, pszParmValue, FLAG_CMDLINE);
3345 if (store_values) {
3346 store_lp_set_cmdline(pszParmName, pszParmValue);
3347 }
3348 return true;
3349 }
3350
3351 DEBUG(0, ("Ignoring unknown parameter \"%s\"\n", pszParmName));
3352 return true;
3353 }
3354
3355 bool lp_set_cmdline(const char *pszParmName, const char *pszParmValue)
3356 {
3357 return lp_set_cmdline_helper(pszParmName, pszParmValue, true);
3358 }
3359
3360 /***************************************************************************
3361 Process a parameter.
3362 ***************************************************************************/
3363
3364 static bool do_parameter(const char *pszParmName, const char *pszParmValue,
3365 void *userdata)
3366 {
3367 if (!bInGlobalSection && bGlobalOnly)
3368 return true;
3369
3370 DEBUGADD(4, ("doing parameter %s = %s\n", pszParmName, pszParmValue));
3371
3372 return (lp_do_parameter(bInGlobalSection ? -2 : iServiceIndex,
3373 pszParmName, pszParmValue));
3374 }
3375
3376 /*
3377 set a option from the commandline in 'a=b' format. Use to support --option
3378 */
3379 bool lp_set_option(const char *option)
3380 {
3381 char *p, *s;
3382 bool ret;
3383
3384 s = talloc_strdup(NULL, option);
3385 if (!s) {
3386 return false;
3387 }
3388
3389 p = strchr(s, '=');
3390 if (!p) {
3391 talloc_free(s);
3392 return false;
3393 }
3394
3395 *p = 0;
3396
3397 /* skip white spaces after the = sign */
3398 do {
3399 p++;
3400 } while (*p == ' ');
3401
3402 ret = lp_set_cmdline(s, p);
3403 talloc_free(s);
3404 return ret;
3405 }
3406
3407 /**************************************************************************
3408 Print a parameter of the specified type.
3409 ***************************************************************************/
3410
3411 static void print_parameter(struct parm_struct *p, void *ptr, FILE * f)
3412 {
3413 /* For the seperation of lists values that we print below */
3414 const char *list_sep = ", ";
3415 int i;
3416 switch (p->type)
3417 {
3418 case P_ENUM:
3419 for (i = 0; p->enum_list[i].name; i++) {
3420 if (*(int *)ptr == p->enum_list[i].value) {
3421 fprintf(f, "%s",
3422 p->enum_list[i].name);
3423 break;
3424 }
3425 }
3426 break;
3427
3428 case P_BOOL:
3429 fprintf(f, "%s", BOOLSTR(*(bool *)ptr));
3430 break;
3431
3432 case P_BOOLREV:
3433 fprintf(f, "%s", BOOLSTR(!*(bool *)ptr));
3434 break;
3435
3436 case P_INTEGER:
3437 case P_BYTES:
3438 fprintf(f, "%d", *(int *)ptr);
3439 break;
3440
3441 case P_CHAR:
3442 fprintf(f, "%c", *(char *)ptr);
3443 break;
3444
3445 case P_OCTAL: {
3446 int val = *(int *)ptr;
3447 if (val == -1) {
3448 fprintf(f, "-1");
3449 } else {
3450 fprintf(f, "0%o", val);
3451 }
3452 break;
3453 }
3454
3455 case P_CMDLIST:
3456 list_sep = " ";
3457 /* fall through */
3458 case P_LIST:
3459 if ((char ***)ptr && *(char ***)ptr) {
3460 char **list = *(char ***)ptr;
3461 for (; *list; list++) {
3462 /* surround strings with whitespace in double quotes */
3463 if (*(list+1) == NULL) {
3464 /* last item, no extra separator */
3465 list_sep = "";
3466 }
3467 if ( strchr_m( *list, ' ' ) ) {
3468 fprintf(f, "\"%s\"%s", *list, list_sep);
3469 } else {
3470 fprintf(f, "%s%s", *list, list_sep);
3471 }
3472 }
3473 }
3474 break;
3475
3476 case P_STRING:
3477 case P_USTRING:
3478 if (*(char **)ptr) {
3479 fprintf(f, "%s", *(char **)ptr);
3480 }
3481 break;
3482 case P_SEP:
3483 break;
3484 }
3485 }
3486
3487 /***************************************************************************
3488 Check if two parameters are equal.
3489 ***************************************************************************/
3490
3491 static bool equal_parameter(parm_type type, void *ptr1, void *ptr2)
3492 {
3493 switch (type) {
3494 case P_BOOL:
3495 case P_BOOLREV:
3496 return (*((bool *)ptr1) == *((bool *)ptr2));
3497
3498 case P_INTEGER:
3499 case P_ENUM:
3500 case P_OCTAL:
3501 case P_BYTES:
3502 return (*((int *)ptr1) == *((int *)ptr2));
3503
3504 case P_CHAR:
3505 return (*((char *)ptr1) == *((char *)ptr2));
3506
3507 case P_LIST:
3508 case P_CMDLIST:
3509 return str_list_equal(*(const char ***)ptr1, *(const char ***)ptr2);
3510
3511 case P_STRING:
3512 case P_USTRING:
3513 {
3514 char *p1 = *(char **)ptr1, *p2 = *(char **)ptr2;
3515 if (p1 && !*p1)
3516 p1 = NULL;
3517 if (p2 && !*p2)
3518 p2 = NULL;
3519 return (p1 == p2 || strequal(p1, p2));
3520 }
3521 case P_SEP:
3522 break;
3523 }
3524 return false;
3525 }
3526
3527 /***************************************************************************
3528 Initialize any local variables in the sDefault table, after parsing a
3529 [globals] section.
3530 ***************************************************************************/
3531
3532 static void init_locals(void)
3533 {
3534 /*
3535 * We run this check once the [globals] is parsed, to force
3536 * the VFS objects and other per-share settings we need for
3537 * the standard way a AD DC is operated. We may change these
3538 * as our code evolves, which is why we force these settings.
3539 *
3540 * We can't do this at the end of lp_load_ex(), as by that
3541 * point the services have been loaded and they will already
3542 * have "" as their vfs objects.
3543 */
3544 if (lp_server_role() == ROLE_ACTIVE_DIRECTORY_DC) {
3545 const char **vfs_objects = lp_vfs_objects(-1);
3546 if (!vfs_objects || !vfs_objects[0]) {
3547 if (lp_parm_const_string(-1, "xattr_tdb", "file", NULL)) {
3548 lp_do_parameter(-1, "vfs objects", "dfs_samba4 acl_xattr xattr_tdb");
3549 } else if (lp_parm_const_string(-1, "posix", "eadb", NULL)) {
3550 lp_do_parameter(-1, "vfs objects", "dfs_samba4 acl_xattr posix_eadb");
3551 } else {
3552 lp_do_parameter(-1, "vfs objects", "dfs_samba4 acl_xattr");
3553 }
3554 }
3555
3556 lp_do_parameter(-1, "map hidden", "no");
3557 lp_do_parameter(-1, "map system", "no");
3558 lp_do_parameter(-1, "map readonly", "no");
3559 lp_do_parameter(-1, "map archive", "no");
3560 lp_do_parameter(-1, "store dos attributes", "yes");
3561 }
3562 }
3563
3564 /***************************************************************************
3565 Process a new section (service). At this stage all sections are services.
3566 Later we'll have special sections that permit server parameters to be set.
3567 Returns true on success, false on failure.
3568 ***************************************************************************/
3569
3570 static bool do_section(const char *pszSectionName, void *userdata)
3571 {
3572 bool bRetval;
3573 bool isglobal = ((strwicmp(pszSectionName, GLOBAL_NAME) == 0) ||
3574 (strwicmp(pszSectionName, GLOBAL_NAME2) == 0));
3575 bRetval = false;
3576
3577 /* if we were in a global section then do the local inits */
3578 if (bInGlobalSection && !isglobal)
3579 init_locals();
3580
3581 /* if we've just struck a global section, note the fact. */
3582 bInGlobalSection = isglobal;
3583
3584 /* check for multiple global sections */
3585 if (bInGlobalSection) {
3586 DEBUG(3, ("Processing section \"[%s]\"\n", pszSectionName));
3587 return true;
3588 }
3589
3590 if (!bInGlobalSection && bGlobalOnly)
3591 return true;
3592
3593 /* if we have a current service, tidy it up before moving on */
3594 bRetval = true;
3595
3596 if (iServiceIndex >= 0)
3597 bRetval = service_ok(iServiceIndex);
3598
3599 /* if all is still well, move to the next record in the services array */
3600 if (bRetval) {
3601 /* We put this here to avoid an odd message order if messages are */
3602 /* issued by the post-processing of a previous section. */
3603 DEBUG(2, ("Processing section \"[%s]\"\n", pszSectionName));
3604
3605 iServiceIndex = add_a_service(&sDefault, pszSectionName);
3606 if (iServiceIndex < 0) {
3607 DEBUG(0, ("Failed to add a new service\n"));
3608 return false;
3609 }
3610 /* Clean all parametric options for service */
3611 /* They will be added during parsing again */
3612 free_param_opts(&ServicePtrs[iServiceIndex]->param_opt);
3613 }
3614
3615 return bRetval;
3616 }
3617
3618
3619 /***************************************************************************
3620 Determine if a partcular base parameter is currentl set to the default value.
3621 ***************************************************************************/
3622
3623 static bool is_default(int i)
3624 {
3625 if (!defaults_saved)
3626 return false;
3627 switch (parm_table[i].type) {
3628 case P_LIST:
3629 case P_CMDLIST:
3630 return str_list_equal((const char **)parm_table[i].def.lvalue,
3631 *(const char ***)lp_parm_ptr(NULL,
3632 &parm_table[i]));
3633 case P_STRING:
3634 case P_USTRING:
3635 return strequal(parm_table[i].def.svalue,
3636 *(char **)lp_parm_ptr(NULL,
3637 &parm_table[i]));
3638 case P_BOOL:
3639 case P_BOOLREV:
3640 return parm_table[i].def.bvalue ==
3641 *(bool *)lp_parm_ptr(NULL,
3642 &parm_table[i]);
3643 case P_CHAR:
3644 return parm_table[i].def.cvalue ==
3645 *(char *)lp_parm_ptr(NULL,
3646 &parm_table[i]);
3647 case P_INTEGER:
3648 case P_OCTAL:
3649 case P_ENUM:
3650 case P_BYTES:
3651 return parm_table[i].def.ivalue ==
3652 *(int *)lp_parm_ptr(NULL,
3653 &parm_table[i]);
3654 case P_SEP:
3655 break;
3656 }
3657 return false;
3658 }
3659
3660 /***************************************************************************
3661 Display the contents of the global structure.
3662 ***************************************************************************/
3663
3664 static void dump_globals(FILE *f)
3665 {
3666 int i;
3667 struct parmlist_entry *data;
3668
3669 fprintf(f, "[global]\n");
3670
3671 for (i = 0; parm_table[i].label; i++)
3672 if (parm_table[i].p_class == P_GLOBAL &&
3673 !(parm_table[i].flags & FLAG_META) &&
3674 (i == 0 || (parm_table[i].offset != parm_table[i - 1].offset))) {
3675 if (defaults_saved && is_default(i))
3676 continue;
3677 fprintf(f, "\t%s = ", parm_table[i].label);
3678 print_parameter(&parm_table[i], lp_parm_ptr(NULL,
3679 &parm_table[i]),
3680 f);
3681 fprintf(f, "\n");
3682 }
3683 if (Globals.param_opt != NULL) {
3684 data = Globals.param_opt;
3685 while(data) {
3686 fprintf(f, "\t%s = %s\n", data->key, data->value);
3687 data = data->next;
3688 }
3689 }
3690
3691 }
3692
3693 /***************************************************************************
3694 Return true if a local parameter is currently set to the global default.
3695 ***************************************************************************/
3696
3697 bool lp_is_default(int snum, struct parm_struct *parm)
3698 {
3699 return equal_parameter(parm->type,
3700 lp_parm_ptr(ServicePtrs[snum], parm),
3701 lp_parm_ptr(NULL, parm));
3702 }
3703
3704 /***************************************************************************
3705 Display the contents of a single services record.
3706 ***************************************************************************/
3707
3708 static void dump_a_service(struct loadparm_service *pService, FILE * f)
3709 {
3710 int i;
3711 struct parmlist_entry *data;
3712
3713 if (pService != &sDefault)
3714 fprintf(f, "[%s]\n", pService->szService);
3715
3716 for (i = 0; parm_table[i].label; i++) {
3717
3718 if (parm_table[i].p_class == P_LOCAL &&
3719 !(parm_table[i].flags & FLAG_META) &&
3720 (*parm_table[i].label != '-') &&
3721 (i == 0 || (parm_table[i].offset != parm_table[i - 1].offset)))
3722 {
3723 if (pService == &sDefault) {
3724 if (defaults_saved && is_default(i))
3725 continue;
3726 } else {
3727 if (equal_parameter(parm_table[i].type,
3728 lp_parm_ptr(pService, &parm_table[i]),
3729 lp_parm_ptr(NULL, &parm_table[i])))
3730 continue;
3731 }
3732
3733 fprintf(f, "\t%s = ", parm_table[i].label);
3734 print_parameter(&parm_table[i],
3735 lp_parm_ptr(pService, &parm_table[i]),
3736 f);
3737 fprintf(f, "\n");
3738 }
3739 }
3740
3741 if (pService->param_opt != NULL) {
3742 data = pService->param_opt;
3743 while(data) {
3744 fprintf(f, "\t%s = %s\n", data->key, data->value);
3745 data = data->next;
3746 }
3747 }
3748 }
3749
3750 /***************************************************************************
3751 Display the contents of a parameter of a single services record.
3752 ***************************************************************************/
3753
3754 bool dump_a_parameter(int snum, char *parm_name, FILE * f, bool isGlobal)
3755 {
3756 int i;
3757 bool result = false;
3758 parm_class p_class;
3759 unsigned flag = 0;
3760 fstring local_parm_name;
3761 char *parm_opt;
3762 const char *parm_opt_value;
3763
3764 /* check for parametrical option */
3765 fstrcpy( local_parm_name, parm_name);
3766 parm_opt = strchr( local_parm_name, ':');
3767
3768 if (parm_opt) {
3769 *parm_opt = '\0';
3770 parm_opt++;
3771 if (strlen(parm_opt)) {
3772 parm_opt_value = lp_parm_const_string( snum,
3773 local_parm_name, parm_opt, NULL);
3774 if (parm_opt_value) {
3775 printf( "%s\n", parm_opt_value);
3776 result = true;
3777 }
3778 }
3779 return result;
3780 }
3781
3782 /* check for a key and print the value */
3783 if (isGlobal) {
3784 p_class = P_GLOBAL;
3785 flag = FLAG_GLOBAL;
3786 } else
3787 p_class = P_LOCAL;
3788
3789 for (i = 0; parm_table[i].label; i++) {
3790 if (strwicmp(parm_table[i].label, parm_name) == 0 &&
3791 !(parm_table[i].flags & FLAG_META) &&
3792 (parm_table[i].p_class == p_class || parm_table[i].flags & flag) &&
3793 (*parm_table[i].label != '-') &&
3794 (i == 0 || (parm_table[i].offset != parm_table[i - 1].offset)))
3795 {
3796 void *ptr;
3797
3798 if (isGlobal) {
3799 ptr = lp_parm_ptr(NULL,
3800 &parm_table[i]);
3801 } else {
3802 ptr = lp_parm_ptr(ServicePtrs[snum],
3803 &parm_table[i]);
3804 }
3805
3806 print_parameter(&parm_table[i],
3807 ptr, f);
3808 fprintf(f, "\n");
3809 result = true;
3810 break;
3811 }
3812 }
3813
3814 return result;
3815 }
3816
3817 /***************************************************************************
3818 Return info about the requested parameter (given as a string).
3819 Return NULL when the string is not a valid parameter name.
3820 ***************************************************************************/
3821
3822 struct parm_struct *lp_get_parameter(const char *param_name)
3823 {
3824 int num = map_parameter(param_name);
3825
3826 if (num < 0) {
3827 return NULL;
3828 }
3829
3830 return &parm_table[num];
3831 }
3832
3833 /***************************************************************************
3834 Return info about the next parameter in a service.
3835 snum==GLOBAL_SECTION_SNUM gives the globals.
3836 Return NULL when out of parameters.
3837 ***************************************************************************/
3838
3839 struct parm_struct *lp_next_parameter(int snum, int *i, int allparameters)
3840 {
3841 if (snum < 0) {
3842 /* do the globals */
3843 for (; parm_table[*i].label; (*i)++) {
3844 if (parm_table[*i].p_class == P_SEPARATOR)
3845 return &parm_table[(*i)++];
3846
3847 if ((*parm_table[*i].label == '-'))
3848 continue;
3849
3850 if ((*i) > 0
3851 && (parm_table[*i].offset ==
3852 parm_table[(*i) - 1].offset)
3853 && (parm_table[*i].p_class ==
3854 parm_table[(*i) - 1].p_class))
3855 continue;
3856
3857 if (is_default(*i) && !allparameters)
3858 continue;
3859
3860 return &parm_table[(*i)++];
3861 }
3862 } else {
3863 struct loadparm_service *pService = ServicePtrs[snum];
3864
3865 for (; parm_table[*i].label; (*i)++) {
3866 if (parm_table[*i].p_class == P_SEPARATOR)
3867 return &parm_table[(*i)++];
3868
3869 if (parm_table[*i].p_class == P_LOCAL &&
3870 (*parm_table[*i].label != '-') &&
3871 ((*i) == 0 ||
3872 (parm_table[*i].offset !=
3873 parm_table[(*i) - 1].offset)))
3874 {
3875 if (allparameters ||
3876 !equal_parameter(parm_table[*i].type,
3877 lp_parm_ptr(pService,
3878 &parm_table[*i]),
3879 lp_parm_ptr(NULL,
3880 &parm_table[*i])))
3881 {
3882 return &parm_table[(*i)++];
3883 }
3884 }
3885 }
3886 }
3887
3888 return NULL;
3889 }
3890
3891
3892 #if 0
3893 /***************************************************************************
3894 Display the contents of a single copy structure.
3895 ***************************************************************************/
3896 static void dump_copy_map(bool *pcopymap)
3897 {
3898 int i;
3899 if (!pcopymap)
3900 return;
3901
3902 printf("\n\tNon-Copied parameters:\n");
3903
3904 for (i = 0; parm_table[i].label; i++)
3905 if (parm_table[i].p_class == P_LOCAL &&
3906 parm_table[i].ptr && !pcopymap[i] &&
3907 (i == 0 || (parm_table[i].ptr != parm_table[i - 1].ptr)))
3908 {
3909 printf("\t\t%s\n", parm_table[i].label);
3910 }
3911 }
3912 #endif
3913
3914 /***************************************************************************
3915 Return TRUE if the passed service number is within range.
3916 ***************************************************************************/
3917
3918 bool lp_snum_ok(int iService)
3919 {
3920 return (LP_SNUM_OK(iService) && ServicePtrs[iService]->bAvailable);
3921 }
3922
3923 /***************************************************************************
3924 Auto-load some home services.
3925 ***************************************************************************/
3926
3927 static void lp_add_auto_services(char *str)
3928 {
3929 char *s;
3930 char *p;
3931 int homes;
3932 char *saveptr;
3933
3934 if (!str)
3935 return;
3936
3937 s = SMB_STRDUP(str);
3938 if (!s)
3939 return;
3940
3941 homes = lp_servicenumber(HOMES_NAME);
3942
3943 for (p = strtok_r(s, LIST_SEP, &saveptr); p;
3944 p = strtok_r(NULL, LIST_SEP, &saveptr)) {
3945 char *home;
3946
3947 if (lp_servicenumber(p) >= 0)
3948 continue;
3949
3950 home = get_user_home_dir(talloc_tos(), p);
3951
3952 if (home && home[0] && homes >= 0)
3953 lp_add_home(p, homes, p, home);
3954
3955 TALLOC_FREE(home);
3956 }
3957 SAFE_FREE(s);
3958 }
3959
3960 /***************************************************************************
3961 Auto-load one printer.
3962 ***************************************************************************/
3963
3964 void lp_add_one_printer(const char *name, const char *comment,
3965 const char *location, void *pdata)
3966 {
3967 int printers = lp_servicenumber(PRINTERS_NAME);
3968 int i;
3969
3970 if (lp_servicenumber(name) < 0) {
3971 lp_add_printer(name, printers);
3972 if ((i = lp_servicenumber(name)) >= 0) {
3973 string_set(&ServicePtrs[i]->comment, comment);
3974 ServicePtrs[i]->autoloaded = true;
3975 }
3976 }
3977 }
3978
3979 /***************************************************************************
3980 Have we loaded a services file yet?
3981 ***************************************************************************/
3982
3983 bool lp_loaded(void)
3984 {
3985 return (bLoaded);
3986 }
3987
3988 /***************************************************************************
3989 Unload unused services.
3990 ***************************************************************************/
3991
3992 void lp_killunused(struct smbd_server_connection *sconn,
3993 bool (*snumused) (struct smbd_server_connection *, int))
3994 {
3995 int i;
3996 for (i = 0; i < iNumServices; i++) {
3997 if (!VALID(i))
3998 continue;
3999
4000 /* don't kill autoloaded or usershare services */
4001 if ( ServicePtrs[i]->autoloaded ||
4002 ServicePtrs[i]->usershare == USERSHARE_VALID) {
4003 continue;
4004 }
4005
4006 if (!snumused || !snumused(sconn, i)) {
4007 free_service_byindex(i);
4008 }
4009 }
4010 }
4011
4012 /**
4013 * Kill all except autoloaded and usershare services - convenience wrapper
4014 */
4015 void lp_kill_all_services(void)
4016 {
4017 lp_killunused(NULL, NULL);
4018 }
4019
4020 /***************************************************************************
4021 Unload a service.
4022 ***************************************************************************/
4023
4024 void lp_killservice(int iServiceIn)
4025 {
4026 if (VALID(iServiceIn)) {
4027 free_service_byindex(iServiceIn);
4028 }
4029 }
4030
4031 /***************************************************************************
4032 Save the curent values of all global and sDefault parameters into the
4033 defaults union. This allows testparm to show only the
4034 changed (ie. non-default) parameters.
4035 ***************************************************************************/
4036
4037 static void lp_save_defaults(void)
4038 {
4039 int i;
4040 for (i = 0; parm_table[i].label; i++) {
4041 if (i > 0 && parm_table[i].offset == parm_table[i - 1].offset
4042 && parm_table[i].p_class == parm_table[i - 1].p_class)
4043 continue;
4044 switch (parm_table[i].type) {
4045 case P_LIST:
4046 case P_CMDLIST:
4047 parm_table[i].def.lvalue = str_list_copy(
4048 NULL, *(const char ***)lp_parm_ptr(NULL, &parm_table[i]));
4049 break;
4050 case P_STRING:
4051 case P_USTRING:
4052 parm_table[i].def.svalue = SMB_STRDUP(*(char **)lp_parm_ptr(NULL, &parm_table[i]));
4053 break;
4054 case P_BOOL:
4055 case P_BOOLREV:
4056 parm_table[i].def.bvalue =
4057 *(bool *)lp_parm_ptr(NULL, &parm_table[i]);
4058 break;
4059 case P_CHAR:
4060 parm_table[i].def.cvalue =
4061 *(char *)lp_parm_ptr(NULL, &parm_table[i]);
4062 break;
4063 case P_INTEGER:
4064 case P_OCTAL:
4065 case P_ENUM:
4066 case P_BYTES:
4067 parm_table[i].def.ivalue =
4068 *(int *)lp_parm_ptr(NULL, &parm_table[i]);
4069 break;
4070 case P_SEP:
4071 break;
4072 }
4073 }
4074 defaults_saved = true;
4075 }
4076
4077 /***********************************************************
4078 If we should send plaintext/LANMAN passwords in the clinet
4079 ************************************************************/
4080
4081 static void set_allowed_client_auth(void)
4082 {
4083 if (Globals.client_ntlmv2_auth) {
4084 Globals.client_lanman_auth = false;
4085 }
4086 if (!Globals.client_lanman_auth) {
4087 Globals.client_plaintext_auth = false;
4088 }
4089 }
4090
4091 /***************************************************************************
4092 JRA.
4093 The following code allows smbd to read a user defined share file.
4094 Yes, this is my intent. Yes, I'm comfortable with that...
4095
4096 THE FOLLOWING IS SECURITY CRITICAL CODE.
4097
4098 It washes your clothes, it cleans your house, it guards you while you sleep...
4099 Do not f%^k with it....
4100 ***************************************************************************/
4101
4102 #define MAX_USERSHARE_FILE_SIZE (10*1024)
4103
4104 /***************************************************************************
4105 Check allowed stat state of a usershare file.
4106 Ensure we print out who is dicking with us so the admin can
4107 get their sorry ass fired.
4108 ***************************************************************************/
4109
4110 static bool check_usershare_stat(const char *fname,
4111 const SMB_STRUCT_STAT *psbuf)
4112 {
4113 if (!S_ISREG(psbuf->st_ex_mode)) {
4114 DEBUG(0,("check_usershare_stat: file %s owned by uid %u is "
4115 "not a regular file\n",
4116 fname, (unsigned int)psbuf->st_ex_uid ));
4117 return false;
4118 }
4119
4120 /* Ensure this doesn't have the other write bit set. */
4121 if (psbuf->st_ex_mode & S_IWOTH) {
4122 DEBUG(0,("check_usershare_stat: file %s owned by uid %u allows "
4123 "public write. Refusing to allow as a usershare file.\n",
4124 fname, (unsigned int)psbuf->st_ex_uid ));
4125 return false;
4126 }
4127
4128 /* Should be 10k or less. */
4129 if (psbuf->st_ex_size > MAX_USERSHARE_FILE_SIZE) {
4130 DEBUG(0,("check_usershare_stat: file %s owned by uid %u is "
4131 "too large (%u) to be a user share file.\n",
4132 fname, (unsigned int)psbuf->st_ex_uid,
4133 (unsigned int)psbuf->st_ex_size ));
4134 return false;
4135 }
4136
4137 return true;
4138 }
4139
4140 /***************************************************************************
4141 Parse the contents of a usershare file.
4142 ***************************************************************************/
4143
4144 enum usershare_err parse_usershare_file(TALLOC_CTX *ctx,
4145 SMB_STRUCT_STAT *psbuf,
4146 const char *servicename,
4147 int snum,
4148 char **lines,
4149 int numlines,
4150 char **pp_sharepath,
4151 char **pp_comment,
4152 char **pp_cp_servicename,
4153 struct security_descriptor **ppsd,
4154 bool *pallow_guest)
4155 {
4156 const char **prefixallowlist = lp_usershare_prefix_allow_list();
4157 const char **prefixdenylist = lp_usershare_prefix_deny_list();
4158 int us_vers;
4159 DIR *dp;
4160 SMB_STRUCT_STAT sbuf;
4161 char *sharepath = NULL;
4162 char *comment = NULL;
4163
4164 *pp_sharepath = NULL;
4165 *pp_comment = NULL;
4166
4167 *pallow_guest = false;
4168
4169 if (numlines < 4) {
4170 return USERSHARE_MALFORMED_FILE;
4171 }
4172
4173 if (strcmp(lines[0], "#VERSION 1") == 0) {
4174 us_vers = 1;
4175 } else if (strcmp(lines[0], "#VERSION 2") == 0) {
4176 us_vers = 2;
4177 if (numlines < 5) {
4178 return USERSHARE_MALFORMED_FILE;
4179 }
4180 } else {
4181 return USERSHARE_BAD_VERSION;
4182 }
4183
4184 if (strncmp(lines[1], "path=", 5) != 0) {
4185 return USERSHARE_MALFORMED_PATH;
4186 }
4187
4188 sharepath = talloc_strdup(ctx, &lines[1][5]);
4189 if (!sharepath) {
4190 return USERSHARE_POSIX_ERR;
4191 }
4192 trim_string(sharepath, " ", " ");
4193
4194 if (strncmp(lines[2], "comment=", 8) != 0) {
4195 return USERSHARE_MALFORMED_COMMENT_DEF;
4196 }
4197
4198 comment = talloc_strdup(ctx, &lines[2][8]);
4199 if (!comment) {
4200 return USERSHARE_POSIX_ERR;
4201 }
4202 trim_string(comment, " ", " ");
4203 trim_char(comment, '"', '"');
4204
4205 if (strncmp(lines[3], "usershare_acl=", 14) != 0) {
4206 return USERSHARE_MALFORMED_ACL_DEF;
4207 }
4208
4209 if (!parse_usershare_acl(ctx, &lines[3][14], ppsd)) {
4210 return USERSHARE_ACL_ERR;
4211 }
4212
4213 if (us_vers == 2) {
4214 if (strncmp(lines[4], "guest_ok=", 9) != 0) {
4215 return USERSHARE_MALFORMED_ACL_DEF;
4216 }
4217 if (lines[4][9] == 'y') {
4218 *pallow_guest = true;
4219 }
4220
4221 /* Backwards compatible extension to file version #2. */
4222 if (numlines > 5) {
4223 if (strncmp(lines[5], "sharename=", 10) != 0) {
4224 return USERSHARE_MALFORMED_SHARENAME_DEF;
4225 }
4226 if (!strequal(&lines[5][10], servicename)) {
4227 return USERSHARE_BAD_SHARENAME;
4228 }
4229 *pp_cp_servicename = talloc_strdup(ctx, &lines[5][10]);
4230 if (!*pp_cp_servicename) {
4231 return USERSHARE_POSIX_ERR;
4232 }
4233 }
4234 }
4235
4236 if (*pp_cp_servicename == NULL) {
4237 *pp_cp_servicename = talloc_strdup(ctx, servicename);
4238 if (!*pp_cp_servicename) {
4239 return USERSHARE_POSIX_ERR;
4240 }
4241 }
4242
4243 if (snum != -1 && (strcmp(sharepath, ServicePtrs[snum]->pathname) == 0)) {
4244 /* Path didn't change, no checks needed. */
4245 *pp_sharepath = sharepath;
4246 *pp_comment = comment;
4247 return USERSHARE_OK;
4248 }
4249
4250 /* The path *must* be absolute. */
4251 if (sharepath[0] != '/') {
4252 DEBUG(2,("parse_usershare_file: share %s: path %s is not an absolute path.\n",
4253 servicename, sharepath));
4254 return USERSHARE_PATH_NOT_ABSOLUTE;
4255 }
4256
4257 /* If there is a usershare prefix deny list ensure one of these paths
4258 doesn't match the start of the user given path. */
4259 if (prefixdenylist) {
4260 int i;
4261 for ( i=0; prefixdenylist[i]; i++ ) {
4262 DEBUG(10,("parse_usershare_file: share %s : checking prefixdenylist[%d]='%s' against %s\n",
4263 servicename, i, prefixdenylist[i], sharepath ));
4264 if (memcmp( sharepath, prefixdenylist[i], strlen(prefixdenylist[i])) == 0) {
4265 DEBUG(2,("parse_usershare_file: share %s path %s starts with one of the "
4266 "usershare prefix deny list entries.\n",
4267 servicename, sharepath));
4268 return USERSHARE_PATH_IS_DENIED;
4269 }
4270 }
4271 }
4272
4273 /* If there is a usershare prefix allow list ensure one of these paths
4274 does match the start of the user given path. */
4275
4276 if (prefixallowlist) {
4277 int i;
4278 for ( i=0; prefixallowlist[i]; i++ ) {
4279 DEBUG(10,("parse_usershare_file: share %s checking prefixallowlist[%d]='%s' against %s\n",
4280 servicename, i, prefixallowlist[i], sharepath ));
4281 if (memcmp( sharepath, prefixallowlist[i], strlen(prefixallowlist[i])) == 0) {
4282 break;
4283 }
4284 }
4285 if (prefixallowlist[i] == NULL) {
4286 DEBUG(2,("parse_usershare_file: share %s path %s doesn't start with one of the "
4287 "usershare prefix allow list entries.\n",
4288 servicename, sharepath));
4289 return USERSHARE_PATH_NOT_ALLOWED;
4290 }
4291 }
4292
4293 /* Ensure this is pointing to a directory. */
4294 dp = opendir(sharepath);
4295
4296 if (!dp) {
4297 DEBUG(2,("parse_usershare_file: share %s path %s is not a directory.\n",
4298 servicename, sharepath));
4299 return USERSHARE_PATH_NOT_DIRECTORY;
4300 }
4301
4302 /* Ensure the owner of the usershare file has permission to share
4303 this directory. */
4304
4305 if (sys_stat(sharepath, &sbuf, false) == -1) {
4306 DEBUG(2,("parse_usershare_file: share %s : stat failed on path %s. %s\n",
4307 servicename, sharepath, strerror(errno) ));
4308 closedir(dp);
4309 return USERSHARE_POSIX_ERR;
4310 }
4311
4312 closedir(dp);
4313
4314 if (!S_ISDIR(sbuf.st_ex_mode)) {
4315 DEBUG(2,("parse_usershare_file: share %s path %s is not a directory.\n",
4316 servicename, sharepath ));
4317 return USERSHARE_PATH_NOT_DIRECTORY;
4318 }
4319
4320 /* Check if sharing is restricted to owner-only. */
4321 /* psbuf is the stat of the usershare definition file,
4322 sbuf is the stat of the target directory to be shared. */
4323
4324 if (lp_usershare_owner_only()) {
4325 /* root can share anything. */
4326 if ((psbuf->st_ex_uid != 0) && (sbuf.st_ex_uid != psbuf->st_ex_uid)) {
4327 return USERSHARE_PATH_NOT_ALLOWED;
4328 }
4329 }
4330
4331 *pp_sharepath = sharepath;
4332 *pp_comment = comment;
4333 return USERSHARE_OK;
4334 }
4335
4336 /***************************************************************************
4337 Deal with a usershare file.
4338 Returns:
4339 >= 0 - snum
4340 -1 - Bad name, invalid contents.
4341 - service name already existed and not a usershare, problem
4342 with permissions to share directory etc.
4343 ***************************************************************************/
4344
4345 static int process_usershare_file(const char *dir_name, const char *file_name, int snum_template)
4346 {
4347 SMB_STRUCT_STAT sbuf;
4348 SMB_STRUCT_STAT lsbuf;
4349 char *fname = NULL;
4350 char *sharepath = NULL;
4351 char *comment = NULL;
4352 char *cp_service_name = NULL;
4353 char **lines = NULL;
4354 int numlines = 0;
4355 int fd = -1;
4356 int iService = -1;
4357 TALLOC_CTX *ctx = talloc_stackframe();
4358 struct security_descriptor *psd = NULL;
4359 bool guest_ok = false;
4360 char *canon_name = NULL;
4361 bool added_service = false;
4362 int ret = -1;
4363
4364 /* Ensure share name doesn't contain invalid characters. */
4365 if (!validate_net_name(file_name, INVALID_SHARENAME_CHARS, strlen(file_name))) {
4366 DEBUG(0,("process_usershare_file: share name %s contains "
4367 "invalid characters (any of %s)\n",
4368 file_name, INVALID_SHARENAME_CHARS ));
4369 goto out;
4370 }
4371
4372 canon_name = canonicalize_servicename(ctx, file_name);
4373 if (!canon_name) {
4374 goto out;
4375 }
4376
4377 fname = talloc_asprintf(ctx, "%s/%s", dir_name, file_name);
4378 if (!fname) {
4379 goto out;
4380 }
4381
4382 /* Minimize the race condition by doing an lstat before we
4383 open and fstat. Ensure this isn't a symlink link. */
4384
4385 if (sys_lstat(fname, &lsbuf, false) != 0) {
4386 DEBUG(0,("process_usershare_file: stat of %s failed. %s\n",
4387 fname, strerror(errno) ));
4388 goto out;
4389 }
4390
4391 /* This must be a regular file, not a symlink, directory or
4392 other strange filetype. */
4393 if (!check_usershare_stat(fname, &lsbuf)) {
4394 goto out;
4395 }
4396
4397 {
4398 TDB_DATA data;
4399 NTSTATUS status;
4400
4401 status = dbwrap_fetch_bystring(ServiceHash, canon_name,
4402 canon_name, &data);
4403
4404 iService = -1;
4405
4406 if (NT_STATUS_IS_OK(status) &&
4407 (data.dptr != NULL) &&
4408 (data.dsize == sizeof(iService))) {
4409 memcpy(&iService, data.dptr, sizeof(iService));
4410 }
4411 }
4412
4413 if (iService != -1 &&
4414 timespec_compare(&ServicePtrs[iService]->usershare_last_mod,
4415 &lsbuf.st_ex_mtime) == 0) {
4416 /* Nothing changed - Mark valid and return. */
4417 DEBUG(10,("process_usershare_file: service %s not changed.\n",
4418 canon_name ));
4419 ServicePtrs[iService]->usershare = USERSHARE_VALID;
4420 ret = iService;
4421 goto out;
4422 }
4423
4424 /* Try and open the file read only - no symlinks allowed. */
4425 #ifdef O_NOFOLLOW
4426 fd = open(fname, O_RDONLY|O_NOFOLLOW, 0);
4427 #else
4428 fd = open(fname, O_RDONLY, 0);
4429 #endif
4430
4431 if (fd == -1) {
4432 DEBUG(0,("process_usershare_file: unable to open %s. %s\n",
4433 fname, strerror(errno) ));
4434 goto out;
4435 }
4436
4437 /* Now fstat to be *SURE* it's a regular file. */
4438 if (sys_fstat(fd, &sbuf, false) != 0) {
4439 close(fd);
4440 DEBUG(0,("process_usershare_file: fstat of %s failed. %s\n",
4441 fname, strerror(errno) ));
4442 goto out;
4443 }
4444
4445 /* Is it the same dev/inode as was lstated ? */
4446 if (!check_same_stat(&lsbuf, &sbuf)) {
4447 close(fd);
4448 DEBUG(0,("process_usershare_file: fstat of %s is a different file from lstat. "
4449 "Symlink spoofing going on ?\n", fname ));
4450 goto out;
4451 }
4452
4453 /* This must be a regular file, not a symlink, directory or
4454 other strange filetype. */
4455 if (!check_usershare_stat(fname, &sbuf)) {
4456 close(fd);
4457 goto out;
4458 }
4459
4460 lines = fd_lines_load(fd, &numlines, MAX_USERSHARE_FILE_SIZE, NULL);
4461
4462 close(fd);
4463 if (lines == NULL) {
4464 DEBUG(0,("process_usershare_file: loading file %s owned by %u failed.\n",
4465 fname, (unsigned int)sbuf.st_ex_uid ));
4466 goto out;
4467 }
4468
4469 if (parse_usershare_file(ctx, &sbuf, file_name,
4470 iService, lines, numlines, &sharepath,
4471 &comment, &cp_service_name,
4472 &psd, &guest_ok) != USERSHARE_OK) {
4473 goto out;
4474 }
4475
4476 /* Everything ok - add the service possibly using a template. */
4477 if (iService < 0) {
4478 const struct loadparm_service *sp = &sDefault;
4479 if (snum_template != -1) {
4480 sp = ServicePtrs[snum_template];
4481 }
4482
4483 if ((iService = add_a_service(sp, cp_service_name)) < 0) {
4484 DEBUG(0, ("process_usershare_file: Failed to add "
4485 "new service %s\n", cp_service_name));
4486 goto out;
4487 }
4488
4489 added_service = true;
4490
4491 /* Read only is controlled by usershare ACL below. */
4492 ServicePtrs[iService]->readonly = false;
4493 }
4494
4495 /* Write the ACL of the new/modified share. */
4496 if (!set_share_security(canon_name, psd)) {
4497 DEBUG(0, ("process_usershare_file: Failed to set share "
4498 "security for user share %s\n",
4499 canon_name ));
4500 goto out;
4501 }
4502
4503 /* If from a template it may be marked invalid. */
4504 ServicePtrs[iService]->valid = true;
4505
4506 /* Set the service as a valid usershare. */
4507 ServicePtrs[iService]->usershare = USERSHARE_VALID;
4508
4509 /* Set guest access. */
4510 if (lp_usershare_allow_guests()) {
4511 ServicePtrs[iService]->guest_ok = guest_ok;
4512 }
4513
4514 /* And note when it was loaded. */
4515 ServicePtrs[iService]->usershare_last_mod = sbuf.st_ex_mtime;
4516 string_set(&ServicePtrs[iService]->pathname, sharepath);
4517 string_set(&ServicePtrs[iService]->comment, comment);
4518
4519 ret = iService;
4520
4521 out:
4522
4523 if (ret == -1 && iService != -1 && added_service) {
4524 lp_remove_service(iService);
4525 }
4526
4527 TALLOC_FREE(lines);
4528 TALLOC_FREE(ctx);
4529 return ret;
4530 }
4531
4532 /***************************************************************************
4533 Checks if a usershare entry has been modified since last load.
4534 ***************************************************************************/
4535
4536 static bool usershare_exists(int iService, struct timespec *last_mod)
4537 {
4538 SMB_STRUCT_STAT lsbuf;
4539 const char *usersharepath = Globals.usershare_path;
4540 char *fname;
4541
4542 if (asprintf(&fname, "%s/%s",
4543 usersharepath,
4544 ServicePtrs[iService]->szService) < 0) {
4545 return false;
4546 }
4547
4548 if (sys_lstat(fname, &lsbuf, false) != 0) {
4549 SAFE_FREE(fname);
4550 return false;
4551 }
4552
4553 if (!S_ISREG(lsbuf.st_ex_mode)) {
4554 SAFE_FREE(fname);
4555 return false;
4556 }
4557
4558 SAFE_FREE(fname);
4559 *last_mod = lsbuf.st_ex_mtime;
4560 return true;
4561 }
4562
4563 /***************************************************************************
4564 Load a usershare service by name. Returns a valid servicenumber or -1.
4565 ***************************************************************************/
4566
4567 int load_usershare_service(const char *servicename)
4568 {
4569 SMB_STRUCT_STAT sbuf;
4570 const char *usersharepath = Globals.usershare_path;
4571 int max_user_shares = Globals.usershare_max_shares;
4572 int snum_template = -1;
4573
4574 if (*usersharepath == 0 || max_user_shares == 0) {
4575 return -1;
4576 }
4577
4578 if (sys_stat(usersharepath, &sbuf, false) != 0) {
4579 DEBUG(0,("load_usershare_service: stat of %s failed. %s\n",
4580 usersharepath, strerror(errno) ));
4581 return -1;
4582 }
4583
4584 if (!S_ISDIR(sbuf.st_ex_mode)) {
4585 DEBUG(0,("load_usershare_service: %s is not a directory.\n",
4586 usersharepath ));
4587 return -1;
4588 }
4589
4590 /*
4591 * This directory must be owned by root, and have the 't' bit set.
4592 * It also must not be writable by "other".
4593 */
4594
4595 #ifdef S_ISVTX
4596 if (sbuf.st_ex_uid != 0 || !(sbuf.st_ex_mode & S_ISVTX) || (sbuf.st_ex_mode & S_IWOTH)) {
4597 #else
4598 if (sbuf.st_ex_uid != 0 || (sbuf.st_ex_mode & S_IWOTH)) {
4599 #endif
4600 DEBUG(0,("load_usershare_service: directory %s is not owned by root "
4601 "or does not have the sticky bit 't' set or is writable by anyone.\n",
4602 usersharepath ));
4603 return -1;
4604 }
4605
4606 /* Ensure the template share exists if it's set. */
4607 if (Globals.szUsershareTemplateShare[0]) {
4608 /* We can't use lp_servicenumber here as we are recommending that
4609 template shares have -valid=false set. */
4610 for (snum_template = iNumServices - 1; snum_template >= 0; snum_template--) {
4611 if (ServicePtrs[snum_template]->szService &&
4612 strequal(ServicePtrs[snum_template]->szService,
4613 Globals.szUsershareTemplateShare)) {
4614 break;
4615 }
4616 }
4617
4618 if (snum_template == -1) {
4619 DEBUG(0,("load_usershare_service: usershare template share %s "
4620 "does not exist.\n",
4621 Globals.szUsershareTemplateShare ));
4622 return -1;
4623 }
4624 }
4625
4626 return process_usershare_file(usersharepath, servicename, snum_template);
4627 }
4628
4629 /***************************************************************************
4630 Load all user defined shares from the user share directory.
4631 We only do this if we're enumerating the share list.
4632 This is the function that can delete usershares that have
4633 been removed.
4634 ***************************************************************************/
4635
4636 int load_usershare_shares(struct smbd_server_connection *sconn,
4637 bool (*snumused) (struct smbd_server_connection *, int))
4638 {
4639 DIR *dp;
4640 SMB_STRUCT_STAT sbuf;
4641 struct dirent *de;
4642 int num_usershares = 0;
4643 int max_user_shares = Globals.usershare_max_shares;
4644 unsigned int num_dir_entries, num_bad_dir_entries, num_tmp_dir_entries;
4645 unsigned int allowed_bad_entries = ((2*max_user_shares)/10);
4646 unsigned int allowed_tmp_entries = ((2*max_user_shares)/10);
4647 int iService;
4648 int snum_template = -1;
4649 const char *usersharepath = Globals.usershare_path;
4650 int ret = lp_numservices();
4651 TALLOC_CTX *tmp_ctx;
4652
4653 if (max_user_shares == 0 || *usersharepath == '\0') {
4654 return lp_numservices();
4655 }
4656
4657 if (sys_stat(usersharepath, &sbuf, false) != 0) {
4658 DEBUG(0,("load_usershare_shares: stat of %s failed. %s\n",
4659 usersharepath, strerror(errno) ));
4660 return ret;
4661 }
4662
4663 /*
4664 * This directory must be owned by root, and have the 't' bit set.
4665 * It also must not be writable by "other".
4666 */
4667
4668 #ifdef S_ISVTX
4669 if (sbuf.st_ex_uid != 0 || !(sbuf.st_ex_mode & S_ISVTX) || (sbuf.st_ex_mode & S_IWOTH)) {
4670 #else
4671 if (sbuf.st_ex_uid != 0 || (sbuf.st_ex_mode & S_IWOTH)) {
4672 #endif
4673 DEBUG(0,("load_usershare_shares: directory %s is not owned by root "
4674 "or does not have the sticky bit 't' set or is writable by anyone.\n",
4675 usersharepath ));
4676 return ret;
4677 }
4678
4679 /* Ensure the template share exists if it's set. */
4680 if (Globals.szUsershareTemplateShare[0]) {
4681 /* We can't use lp_servicenumber here as we are recommending that
4682 template shares have -valid=false set. */
4683 for (snum_template = iNumServices - 1; snum_template >= 0; snum_template--) {
4684 if (ServicePtrs[snum_template]->szService &&
4685 strequal(ServicePtrs[snum_template]->szService,
4686 Globals.szUsershareTemplateShare)) {
4687 break;
4688 }
4689 }
4690
4691 if (snum_template == -1) {
4692 DEBUG(0,("load_usershare_shares: usershare template share %s "
4693 "does not exist.\n",
4694 Globals.szUsershareTemplateShare ));
4695 return ret;
4696 }
4697 }
4698
4699 /* Mark all existing usershares as pending delete. */
4700 for (iService = iNumServices - 1; iService >= 0; iService--) {
4701 if (VALID(iService) && ServicePtrs[iService]->usershare) {
4702 ServicePtrs[iService]->usershare = USERSHARE_PENDING_DELETE;
4703 }
4704 }
4705
4706 dp = opendir(usersharepath);
4707 if (!dp) {
4708 DEBUG(0,("load_usershare_shares:: failed to open directory %s. %s\n",
4709 usersharepath, strerror(errno) ));
4710 return ret;
4711 }
4712
4713 for (num_dir_entries = 0, num_bad_dir_entries = 0, num_tmp_dir_entries = 0;
4714 (de = readdir(dp));
4715 num_dir_entries++ ) {
4716 int r;
4717 const char *n = de->d_name;
4718
4719 /* Ignore . and .. */
4720 if (*n == '.') {
4721 if ((n[1] == '\0') || (n[1] == '.' && n[2] == '\0')) {
4722 continue;
4723 }
4724 }
4725
4726 if (n[0] == ':') {
4727 /* Temporary file used when creating a share. */
4728 num_tmp_dir_entries++;
4729 }
4730
4731 /* Allow 20% tmp entries. */
4732 if (num_tmp_dir_entries > allowed_tmp_entries) {
4733 DEBUG(0,("load_usershare_shares: too many temp entries (%u) "
4734 "in directory %s\n",
4735 num_tmp_dir_entries, usersharepath));
4736 break;
4737 }
4738
4739 r = process_usershare_file(usersharepath, n, snum_template);
4740 if (r == 0) {
4741 /* Update the services count. */
4742 num_usershares++;
4743 if (num_usershares >= max_user_shares) {
4744 DEBUG(0,("load_usershare_shares: max user shares reached "
4745 "on file %s in directory %s\n",
4746 n, usersharepath ));
4747 break;
4748 }
4749 } else if (r == -1) {
4750 num_bad_dir_entries++;
4751 }
4752
4753 /* Allow 20% bad entries. */
4754 if (num_bad_dir_entries > allowed_bad_entries) {
4755 DEBUG(0,("load_usershare_shares: too many bad entries (%u) "
4756 "in directory %s\n",
4757 num_bad_dir_entries, usersharepath));
4758 break;
4759 }
4760
4761 /* Allow 20% bad entries. */
4762 if (num_dir_entries > max_user_shares + allowed_bad_entries) {
4763 DEBUG(0,("load_usershare_shares: too many total entries (%u) "
4764 "in directory %s\n",
4765 num_dir_entries, usersharepath));
4766 break;
4767 }
4768 }
4769
4770 closedir(dp);
4771
4772 /* Sweep through and delete any non-refreshed usershares that are
4773 not currently in use. */
4774 tmp_ctx = talloc_stackframe();
4775 for (iService = iNumServices - 1; iService >= 0; iService--) {
4776 if (VALID(iService) && (ServicePtrs[iService]->usershare == USERSHARE_PENDING_DELETE)) {
4777 char *servname;
4778
4779 if (snumused && snumused(sconn, iService)) {
4780 continue;
4781 }
4782
4783 servname = lp_servicename(tmp_ctx, iService);
4784
4785 /* Remove from the share ACL db. */
4786 DEBUG(10,("load_usershare_shares: Removing deleted usershare %s\n",
4787 servname ));
4788 delete_share_security(servname);
4789 free_service_byindex(iService);
4790 }
4791 }
4792 talloc_free(tmp_ctx);
4793
4794 return lp_numservices();
4795 }
4796
4797 /********************************************************
4798 Destroy global resources allocated in this file
4799 ********************************************************/
4800
4801 void gfree_loadparm(void)
4802 {
4803 int i;
4804
4805 free_file_list();
4806
4807 /* Free resources allocated to services */
4808
4809 for ( i = 0; i < iNumServices; i++ ) {
4810 if ( VALID(i) ) {
4811 free_service_byindex(i);
4812 }
4813 }
4814
4815 SAFE_FREE( ServicePtrs );
4816 iNumServices = 0;
4817
4818 /* Now release all resources allocated to global
4819 parameters and the default service */
4820
4821 free_global_parameters();
4822 }
4823
4824
4825 /***************************************************************************
4826 Allow client apps to specify that they are a client
4827 ***************************************************************************/
4828 static void lp_set_in_client(bool b)
4829 {
4830 in_client = b;
4831 }
4832
4833
4834 /***************************************************************************
4835 Determine if we're running in a client app
4836 ***************************************************************************/
4837 static bool lp_is_in_client(void)
4838 {
4839 return in_client;
4840 }
4841
4842 /***************************************************************************
4843 Load the services array from the services file. Return true on success,
4844 false on failure.
4845 ***************************************************************************/
4846
4847 static bool lp_load_ex(const char *pszFname,
4848 bool global_only,
4849 bool save_defaults,
4850 bool add_ipc,
4851 bool initialize_globals,
4852 bool allow_include_registry,
4853 bool load_all_shares)
4854 {
4855 char *n2 = NULL;
4856 bool bRetval;
4857
4858 bRetval = false;
4859
4860 DEBUG(3, ("lp_load_ex: refreshing parameters\n"));
4861
4862 bInGlobalSection = true;
4863 bGlobalOnly = global_only;
4864 bAllowIncludeRegistry = allow_include_registry;
4865
4866 init_globals(initialize_globals);
4867
4868 free_file_list();
4869
4870 if (save_defaults) {
4871 init_locals();
4872 lp_save_defaults();
4873 }
4874
4875 if (!initialize_globals) {
4876 free_param_opts(&Globals.param_opt);
4877 apply_lp_set_cmdline();
4878 }
4879
4880 lp_do_parameter(-1, "idmap config * : backend", Globals.szIdmapBackend);
4881
4882 /* We get sections first, so have to start 'behind' to make up */
4883 iServiceIndex = -1;
4884
4885 if (lp_config_backend_is_file()) {
4886 n2 = talloc_sub_basic(talloc_tos(), get_current_username(),
4887 current_user_info.domain,
4888 pszFname);
4889 if (!n2) {
4890 smb_panic("lp_load_ex: out of memory");
4891 }
4892
4893 add_to_file_list(pszFname, n2);
4894
4895 bRetval = pm_process(n2, do_section, do_parameter, NULL);
4896 TALLOC_FREE(n2);
4897
4898 /* finish up the last section */
4899 DEBUG(4, ("pm_process() returned %s\n", BOOLSTR(bRetval)));
4900 if (bRetval) {
4901 if (iServiceIndex >= 0) {
4902 bRetval = service_ok(iServiceIndex);
4903 }
4904 }
4905
4906 if (lp_config_backend_is_registry()) {
4907 /* config backend changed to registry in config file */
4908 /*
4909 * We need to use this extra global variable here to
4910 * survive restart: init_globals uses this as a default
4911 * for config_backend. Otherwise, init_globals would
4912 * send us into an endless loop here.
4913 */
4914 config_backend = CONFIG_BACKEND_REGISTRY;
4915 /* start over */
4916 DEBUG(1, ("lp_load_ex: changing to config backend "
4917 "registry\n"));
4918 init_globals(true);
4919 lp_kill_all_services();
4920 return lp_load_ex(pszFname, global_only, save_defaults,
4921 add_ipc, initialize_globals,
4922 allow_include_registry,
4923 load_all_shares);
4924 }
4925 } else if (lp_config_backend_is_registry()) {
4926 bRetval = process_registry_globals();
4927 } else {
4928 DEBUG(0, ("Illegal config backend given: %d\n",
4929 lp_config_backend()));
4930 bRetval = false;
4931 }
4932
4933 if (bRetval && lp_registry_shares()) {
4934 if (load_all_shares) {
4935 bRetval = process_registry_shares();
4936 } else {
4937 bRetval = reload_registry_shares();
4938 }
4939 }
4940
4941 {
4942 char *serv = lp_auto_services(talloc_tos());
4943 lp_add_auto_services(serv);
4944 TALLOC_FREE(serv);
4945 }
4946
4947 if (add_ipc) {
4948 /* When 'restrict anonymous = 2' guest connections to ipc$
4949 are denied */
4950 lp_add_ipc("IPC$", (lp_restrict_anonymous() < 2));
4951 if ( lp_enable_asu_support() ) {
4952 lp_add_ipc("ADMIN$", false);
4953 }
4954 }
4955
4956 set_allowed_client_auth();
4957
4958 if (lp_security() == SEC_ADS && strchr(lp_passwordserver(), ':')) {
4959 DEBUG(1, ("WARNING: The optional ':port' in password server = %s is deprecated\n",
4960 lp_passwordserver()));
4961 }
4962
4963 bLoaded = true;
4964
4965 /* Now we check we_are_a_wins_server and set szWINSserver to 127.0.0.1 */
4966 /* if we_are_a_wins_server is true and we are in the client */
4967 if (lp_is_in_client() && Globals.we_are_a_wins_server) {
4968 lp_do_parameter(GLOBAL_SECTION_SNUM, "wins server", "127.0.0.1");
4969 }
4970
4971 init_iconv();
4972
4973 fault_configure(smb_panic_s3);
4974
4975 /*
4976 * We run this check once the whole smb.conf is parsed, to
4977 * force some settings for the standard way a AD DC is
4978 * operated. We may changed these as our code evolves, which
4979 * is why we force these settings.
4980 */
4981 if (lp_server_role() == ROLE_ACTIVE_DIRECTORY_DC) {
4982 lp_do_parameter(-1, "passdb backend", "samba_dsdb");
4983
4984 lp_do_parameter(-1, "rpc_server:default", "external");
4985 lp_do_parameter(-1, "rpc_server:svcctl", "embedded");
4986 lp_do_parameter(-1, "rpc_server:srvsvc", "embedded");
4987 lp_do_parameter(-1, "rpc_server:eventlog", "embedded");
4988 lp_do_parameter(-1, "rpc_server:ntsvcs", "embedded");
4989 lp_do_parameter(-1, "rpc_server:winreg", "embedded");
4990 lp_do_parameter(-1, "rpc_server:spoolss", "embedded");
4991 lp_do_parameter(-1, "rpc_daemon:spoolssd", "embedded");
4992 lp_do_parameter(-1, "rpc_server:tcpip", "no");
4993 }
4994
4995 bAllowIncludeRegistry = true;
4996
4997 return (bRetval);
4998 }
4999
5000 bool lp_load(const char *pszFname,
5001 bool global_only,
5002 bool save_defaults,
5003 bool add_ipc,
5004 bool initialize_globals)
5005 {
5006 return lp_load_ex(pszFname,
5007 global_only,
5008 save_defaults,
5009 add_ipc,
5010 initialize_globals,
5011 true, /* allow_include_registry */
5012 false); /* load_all_shares*/
5013 }
5014
5015 bool lp_load_initial_only(const char *pszFname)
5016 {
5017 return lp_load_ex(pszFname,
5018 true, /* global only */
5019 false, /* save_defaults */
5020 false, /* add_ipc */
5021 true, /* initialize_globals */
5022 false, /* allow_include_registry */
5023 false); /* load_all_shares*/
5024 }
5025
5026 /**
5027 * most common lp_load wrapper, loading only the globals
5028 */
5029 bool lp_load_global(const char *file_name)
5030 {
5031 return lp_load_ex(file_name,
5032 true, /* global_only */
5033 false, /* save_defaults */
5034 false, /* add_ipc */
5035 true, /* initialize_globals */
5036 true, /* allow_include_registry */
5037 false); /* load_all_shares*/
5038 }
5039
5040 /**
5041 * lp_load wrapper, especially for clients
5042 */
5043 bool lp_load_client(const char *file_name)
5044 {
5045 lp_set_in_client(true);
5046
5047 return lp_load_global(file_name);
5048 }
5049
5050 /**
5051 * lp_load wrapper, loading only globals, but intended
5052 * for subsequent calls, not reinitializing the globals
5053 * to default values
5054 */
5055 bool lp_load_global_no_reinit(const char *file_name)
5056 {
5057 return lp_load_ex(file_name,
5058 true, /* global_only */
5059 false, /* save_defaults */
5060 false, /* add_ipc */
5061 false, /* initialize_globals */
5062 true, /* allow_include_registry */
5063 false); /* load_all_shares*/
5064 }
5065
5066 /**
5067 * lp_load wrapper, especially for clients, no reinitialization
5068 */
5069 bool lp_load_client_no_reinit(const char *file_name)
5070 {
5071 lp_set_in_client(true);
5072
5073 return lp_load_global_no_reinit(file_name);
5074 }
5075
5076 bool lp_load_with_registry_shares(const char *pszFname,
5077 bool global_only,
5078 bool save_defaults,
5079 bool add_ipc,
5080 bool initialize_globals)
5081 {
5082 return lp_load_ex(pszFname,
5083 global_only,
5084 save_defaults,
5085 add_ipc,
5086 initialize_globals,
5087 true, /* allow_include_registry */
5088 true); /* load_all_shares*/
5089 }
5090
5091 /***************************************************************************
5092 Return the max number of services.
5093 ***************************************************************************/
5094
5095 int lp_numservices(void)
5096 {
5097 return (iNumServices);
5098 }
5099
5100 /***************************************************************************
5101 Display the contents of the services array in human-readable form.
5102 ***************************************************************************/
5103
5104 void lp_dump(FILE *f, bool show_defaults, int maxtoprint)
5105 {
5106 int iService;
5107
5108 if (show_defaults)
5109 defaults_saved = false;
5110
5111 dump_globals(f);
5112
5113 dump_a_service(&sDefault, f);
5114
5115 for (iService = 0; iService < maxtoprint; iService++) {
5116 fprintf(f,"\n");
5117 lp_dump_one(f, show_defaults, iService);
5118 }
5119 }
5120
5121 /***************************************************************************
5122 Display the contents of one service in human-readable form.
5123 ***************************************************************************/
5124
5125 void lp_dump_one(FILE * f, bool show_defaults, int snum)
5126 {
5127 if (VALID(snum)) {
5128 if (ServicePtrs[snum]->szService[0] == '\0')
5129 return;
5130 dump_a_service(ServicePtrs[snum], f);
5131 }
5132 }
5133
5134 /***************************************************************************
5135 Return the number of the service with the given name, or -1 if it doesn't
5136 exist. Note that this is a DIFFERENT ANIMAL from the internal function
5137 getservicebyname()! This works ONLY if all services have been loaded, and
5138 does not copy the found service.
5139 ***************************************************************************/
5140
5141 int lp_servicenumber(const char *pszServiceName)
5142 {
5143 int iService;
5144 fstring serviceName;
5145
5146 if (!pszServiceName) {
5147 return GLOBAL_SECTION_SNUM;
5148 }
5149
5150 for (iService = iNumServices - 1; iService >= 0; iService--) {
5151 if (VALID(iService) && ServicePtrs[iService]->szService) {
5152 /*
5153 * The substitution here is used to support %U is
5154 * service names
5155 */
5156 fstrcpy(serviceName, ServicePtrs[iService]->szService);
5157 standard_sub_basic(get_current_username(),
5158 current_user_info.domain,
5159 serviceName,sizeof(serviceName));
5160 if (strequal(serviceName, pszServiceName)) {
5161 break;
5162 }
5163 }
5164 }
5165
5166 if (iService >= 0 && ServicePtrs[iService]->usershare == USERSHARE_VALID) {
5167 struct timespec last_mod;
5168
5169 if (!usershare_exists(iService, &last_mod)) {
5170 /* Remove the share security tdb entry for it. */
5171 delete_share_security(lp_servicename(talloc_tos(), iService));
5172 /* Remove it from the array. */
5173 free_service_byindex(iService);
5174 /* Doesn't exist anymore. */
5175 return GLOBAL_SECTION_SNUM;
5176 }
5177
5178 /* Has it been modified ? If so delete and reload. */
5179 if (timespec_compare(&ServicePtrs[iService]->usershare_last_mod,
5180 &last_mod) < 0) {
5181 /* Remove it from the array. */
5182 free_service_byindex(iService);
5183 /* and now reload it. */
5184 iService = load_usershare_service(pszServiceName);
5185 }
5186 }
5187
5188 if (iService < 0) {
5189 DEBUG(7,("lp_servicenumber: couldn't find %s\n", pszServiceName));
5190 return GLOBAL_SECTION_SNUM;
5191 }
5192
5193 return (iService);
5194 }
5195
5196 /*******************************************************************
5197 A useful volume label function.
5198 ********************************************************************/
5199
5200 const char *volume_label(TALLOC_CTX *ctx, int snum)
5201 {
5202 char *ret;
5203 const char *label = lp_volume(ctx, snum);
5204 if (!*label) {
5205 label = lp_servicename(ctx, snum);
5206 }
5207
5208 /* This returns a 33 byte guarenteed null terminated string. */
5209 ret = talloc_strndup(ctx, label, 32);
5210 if (!ret) {
5211 return "";
5212 }
5213 return ret;
5214 }
5215
5216 /*******************************************************************
5217 Get the default server type we will announce as via nmbd.
5218 ********************************************************************/
5219
5220 int lp_default_server_announce(void)
5221 {
5222 int default_server_announce = 0;
5223 default_server_announce |= SV_TYPE_WORKSTATION;
5224 default_server_announce |= SV_TYPE_SERVER;
5225 default_server_announce |= SV_TYPE_SERVER_UNIX;
5226
5227 /* note that the flag should be set only if we have a
5228 printer service but nmbd doesn't actually load the
5229 services so we can't tell --jerry */
5230
5231 default_server_announce |= SV_TYPE_PRINTQ_SERVER;
5232
5233 default_server_announce |= SV_TYPE_SERVER_NT;
5234 default_server_announce |= SV_TYPE_NT;
5235
5236 switch (lp_server_role()) {
5237 case ROLE_DOMAIN_MEMBER:
5238 default_server_announce |= SV_TYPE_DOMAIN_MEMBER;
5239 break;
5240 case ROLE_DOMAIN_PDC:
5241 default_server_announce |= SV_TYPE_DOMAIN_CTRL;
5242 break;
5243 case ROLE_DOMAIN_BDC:
5244 default_server_announce |= SV_TYPE_DOMAIN_BAKCTRL;
5245 break;
5246 case ROLE_STANDALONE:
5247 default:
5248 break;
5249 }
5250 if (lp_time_server())
5251 default_server_announce |= SV_TYPE_TIME_SOURCE;
5252
5253 if (lp_host_msdfs())
5254 default_server_announce |= SV_TYPE_DFS_SERVER;
5255
5256 return default_server_announce;
5257 }
5258
5259 /***********************************************************
5260 If we are PDC then prefer us as DMB
5261 ************************************************************/
5262
5263 bool lp_domain_master(void)
5264 {
5265 if (Globals._domain_master == Auto)
5266 return (lp_server_role() == ROLE_DOMAIN_PDC);
5267
5268 return (bool)Globals._domain_master;
5269 }
5270
5271 /***********************************************************
5272 If we are PDC then prefer us as DMB
5273 ************************************************************/
5274
5275 static bool lp_domain_master_true_or_auto(void)
5276 {
5277 if (Globals._domain_master) /* auto or yes */
5278 return true;
5279
5280 return false;
5281 }
5282
5283 /***********************************************************
5284 If we are DMB then prefer us as LMB
5285 ************************************************************/
5286
5287 bool lp_preferred_master(void)
5288 {
5289 if (Globals.iPreferredMaster == Auto)
5290 return (lp_local_master() && lp_domain_master());
5291
5292 return (bool)Globals.iPreferredMaster;
5293 }
5294
5295 /*******************************************************************
5296 Remove a service.
5297 ********************************************************************/
5298
5299 void lp_remove_service(int snum)
5300 {
5301 ServicePtrs[snum]->valid = false;
5302 }
5303
5304 /*******************************************************************
5305 Copy a service.
5306 ********************************************************************/
5307
5308 void lp_copy_service(int snum, const char *new_name)
5309 {
5310 do_section(new_name, NULL);
5311 if (snum >= 0) {
5312 snum = lp_servicenumber(new_name);
5313 if (snum >= 0) {
5314 char *name = lp_servicename(talloc_tos(), snum);
5315 lp_do_parameter(snum, "copy", name);
5316 }
5317 }
5318 }
5319
5320 const char *lp_printername(TALLOC_CTX *ctx, int snum)
5321 {
5322 const char *ret = lp__printername(ctx, snum);
5323 if (ret == NULL || *ret == '\0') {
5324 ret = lp_const_servicename(snum);
5325 }
5326
5327 return ret;
5328 }
5329
5330
5331 /***********************************************************
5332 Allow daemons such as winbindd to fix their logfile name.
5333 ************************************************************/
5334
5335 void lp_set_logfile(const char *name)
5336 {
5337 string_set(&Globals.logfile, name);
5338 debug_set_logfile(name);
5339 }
5340
5341 /*******************************************************************
5342 Return the max print jobs per queue.
5343 ********************************************************************/
5344
5345 int lp_maxprintjobs(int snum)
5346 {
5347 int maxjobs = LP_SNUM_OK(snum) ? ServicePtrs[snum]->iMaxPrintJobs : sDefault.iMaxPrintJobs;
5348 if (maxjobs <= 0 || maxjobs >= PRINT_MAX_JOBID)
5349 maxjobs = PRINT_MAX_JOBID - 1;
5350
5351 return maxjobs;
5352 }
5353
5354 const char *lp_printcapname(void)
5355 {
5356 if ((Globals.szPrintcapname != NULL) &&
5357 (Globals.szPrintcapname[0] != '\0'))
5358 return Globals.szPrintcapname;
5359
5360 if (sDefault.printing == PRINT_CUPS) {
5361 return "cups";
5362 }
5363
5364 if (sDefault.printing == PRINT_BSD)
5365 return "/etc/printcap";
5366
5367 return PRINTCAP_NAME;
5368 }
5369
5370 static uint32 spoolss_state;
5371
5372 bool lp_disable_spoolss( void )
5373 {
5374 if ( spoolss_state == SVCCTL_STATE_UNKNOWN )
5375 spoolss_state = lp__disable_spoolss() ? SVCCTL_STOPPED : SVCCTL_RUNNING;
5376
5377 return spoolss_state == SVCCTL_STOPPED ? true : false;
5378 }
5379
5380 void lp_set_spoolss_state( uint32 state )
5381 {
5382 SMB_ASSERT( (state == SVCCTL_STOPPED) || (state == SVCCTL_RUNNING) );
5383
5384 spoolss_state = state;
5385 }
5386
5387 uint32 lp_get_spoolss_state( void )
5388 {
5389 return lp_disable_spoolss() ? SVCCTL_STOPPED : SVCCTL_RUNNING;
5390 }
5391
5392 /*******************************************************************
5393 Ensure we don't use sendfile if server smb signing is active.
5394 ********************************************************************/
5395
5396 bool lp_use_sendfile(int snum, struct smb_signing_state *signing_state)
5397 {
5398 bool sign_active = false;
5399
5400 /* Using sendfile blows the brains out of any DOS or Win9x TCP stack... JRA. */
5401 if (get_Protocol() < PROTOCOL_NT1) {
5402 return false;
5403 }
5404 if (signing_state) {
5405 sign_active = smb_signing_is_active(signing_state);
5406 }
5407 return (lp__use_sendfile(snum) &&
5408 (get_remote_arch() != RA_WIN95) &&
5409 !sign_active);
5410 }
5411
5412 /*******************************************************************
5413 Turn off sendfile if we find the underlying OS doesn't support it.
5414 ********************************************************************/
5415
5416 void set_use_sendfile(int snum, bool val)
5417 {
5418 if (LP_SNUM_OK(snum))
5419 ServicePtrs[snum]->_use_sendfile = val;
5420 else
5421 sDefault._use_sendfile = val;
5422 }
5423
5424 /*******************************************************************
5425 Turn off storing DOS attributes if this share doesn't support it.
5426 ********************************************************************/
5427
5428 void set_store_dos_attributes(int snum, bool val)
5429 {
5430 if (!LP_SNUM_OK(snum))
5431 return;
5432 ServicePtrs[(snum)]->store_dos_attributes = val;
5433 }
5434
5435 void lp_set_mangling_method(const char *new_method)
5436 {
5437 string_set(&Globals.mangling_method, new_method);
5438 }
5439
5440 /*******************************************************************
5441 Global state for POSIX pathname processing.
5442 ********************************************************************/
5443
5444 static bool posix_pathnames;
5445
5446 bool lp_posix_pathnames(void)
5447 {
5448 return posix_pathnames;
5449 }
5450
5451 /*******************************************************************
5452 Change everything needed to ensure POSIX pathname processing (currently
5453 not much).
5454 ********************************************************************/
5455
5456 void lp_set_posix_pathnames(void)
5457 {
5458 posix_pathnames = true;
5459 }
5460
5461 /*******************************************************************
5462 Global state for POSIX lock processing - CIFS unix extensions.
5463 ********************************************************************/
5464
5465 bool posix_default_lock_was_set;
5466 static enum brl_flavour posix_cifsx_locktype; /* By default 0 == WINDOWS_LOCK */
5467
5468 enum brl_flavour lp_posix_cifsu_locktype(files_struct *fsp)
5469 {
5470 if (posix_default_lock_was_set) {
5471 return posix_cifsx_locktype;
5472 } else {
5473 return fsp->posix_open ? POSIX_LOCK : WINDOWS_LOCK;
5474 }
5475 }
5476
5477 /*******************************************************************
5478 ********************************************************************/
5479
5480 void lp_set_posix_default_cifsx_readwrite_locktype(enum brl_flavour val)
5481 {
5482 posix_default_lock_was_set = true;
5483 posix_cifsx_locktype = val;
5484 }
5485
5486 int lp_min_receive_file_size(void)
5487 {
5488 if (Globals.iminreceivefile < 0) {
5489 return 0;
5490 }
5491 return MIN(Globals.iminreceivefile, BUFFER_SIZE);
5492 }
5493
5494 /*******************************************************************
5495 Safe wide links checks.
5496 This helper function always verify the validity of wide links,
5497 even after a configuration file reload.
5498 ********************************************************************/
5499
5500 static bool lp_widelinks_internal(int snum)
5501 {
5502 return (bool)(LP_SNUM_OK(snum)? ServicePtrs[(snum)]->bWidelinks :
5503 sDefault.bWidelinks);
5504 }
5505
5506 void widelinks_warning(int snum)
5507 {
5508 if (lp_allow_insecure_widelinks()) {
5509 return;
5510 }
5511
5512 if (lp_unix_extensions() && lp_widelinks_internal(snum)) {
5513 DEBUG(0,("Share '%s' has wide links and unix extensions enabled. "
5514 "These parameters are incompatible. "
5515 "Wide links will be disabled for this share.\n",
5516 lp_servicename(talloc_tos(), snum) ));
5517 }
5518 }
5519
5520 bool lp_widelinks(int snum)
5521 {
5522 /* wide links is always incompatible with unix extensions */
5523 if (lp_unix_extensions()) {
5524 /*
5525 * Unless we have "allow insecure widelinks"
5526 * turned on.
5527 */
5528 if (!lp_allow_insecure_widelinks()) {
5529 return false;
5530 }
5531 }
5532
5533 return lp_widelinks_internal(snum);
5534 }
5535
5536 bool lp_writeraw(void)
5537 {
5538 if (lp_async_smb_echo_handler()) {
5539 return false;
5540 }
5541 return lp__writeraw();
5542 }
5543
5544 bool lp_readraw(void)
5545 {
5546 if (lp_async_smb_echo_handler()) {
5547 return false;
5548 }
5549 return lp__readraw();
5550 }
5551
5552 int lp_server_role(void)
5553 {
5554 return lp_find_server_role(lp__server_role(),
5555 lp__security(),
5556 lp__domain_logons(),
5557 lp_domain_master_true_or_auto());
5558 }
5559
5560 int lp_security(void)
5561 {
5562 return lp_find_security(lp__server_role(),
5563 lp__security());
5564 }
Samba GIT mirror