s3-lsa: use LSA_POLICY_MODE flags in _lsa_GetSystemAccessAccount().
[Samba.git] / source3 / smbd / server.c
blob67836f785b489c8e022d10e1aa8ded2f78a8dd15
1 /*
2 Unix SMB/CIFS implementation.
3 Main SMB server routines
4 Copyright (C) Andrew Tridgell 1992-1998
5 Copyright (C) Martin Pool 2002
6 Copyright (C) Jelmer Vernooij 2002-2003
7 Copyright (C) Volker Lendecke 1993-2007
8 Copyright (C) Jeremy Allison 1993-2007
10 This program is free software; you can redistribute it and/or modify
11 it under the terms of the GNU General Public License as published by
12 the Free Software Foundation; either version 3 of the License, or
13 (at your option) any later version.
15 This program is distributed in the hope that it will be useful,
16 but WITHOUT ANY WARRANTY; without even the implied warranty of
17 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
18 GNU General Public License for more details.
20 You should have received a copy of the GNU General Public License
21 along with this program. If not, see <http://www.gnu.org/licenses/>.
24 #include "includes.h"
25 #include "smbd/globals.h"
27 static_decl_rpc;
29 #ifdef WITH_DFS
30 extern int dcelogin_atmost_once;
31 #endif /* WITH_DFS */
33 int smbd_server_fd(void)
35 return server_fd;
38 static void smbd_set_server_fd(int fd)
40 server_fd = fd;
43 int get_client_fd(void)
45 return server_fd;
48 struct event_context *smbd_event_context(void)
50 if (!smbd_event_ctx) {
51 smbd_event_ctx = event_context_init(talloc_autofree_context());
53 if (!smbd_event_ctx) {
54 smb_panic("Could not init smbd event context");
56 return smbd_event_ctx;
59 struct messaging_context *smbd_messaging_context(void)
61 if (smbd_msg_ctx == NULL) {
62 smbd_msg_ctx = messaging_init(talloc_autofree_context(),
63 server_id_self(),
64 smbd_event_context());
66 if (smbd_msg_ctx == NULL) {
67 DEBUG(0, ("Could not init smbd messaging context.\n"));
69 return smbd_msg_ctx;
72 struct memcache *smbd_memcache(void)
74 if (!smbd_memcache_ctx) {
75 smbd_memcache_ctx = memcache_init(talloc_autofree_context(),
76 lp_max_stat_cache_size()*1024);
78 if (!smbd_memcache_ctx) {
79 smb_panic("Could not init smbd memcache");
82 return smbd_memcache_ctx;
85 /*******************************************************************
86 What to do when smb.conf is updated.
87 ********************************************************************/
89 static void smb_conf_updated(struct messaging_context *msg,
90 void *private_data,
91 uint32_t msg_type,
92 struct server_id server_id,
93 DATA_BLOB *data)
95 DEBUG(10,("smb_conf_updated: Got message saying smb.conf was "
96 "updated. Reloading.\n"));
97 reload_services(False);
101 /*******************************************************************
102 Delete a statcache entry.
103 ********************************************************************/
105 static void smb_stat_cache_delete(struct messaging_context *msg,
106 void *private_data,
107 uint32_t msg_tnype,
108 struct server_id server_id,
109 DATA_BLOB *data)
111 const char *name = (const char *)data->data;
112 DEBUG(10,("smb_stat_cache_delete: delete name %s\n", name));
113 stat_cache_delete(name);
116 /****************************************************************************
117 Send a SIGTERM to our process group.
118 *****************************************************************************/
120 static void killkids(void)
122 if(am_parent) kill(0,SIGTERM);
125 /****************************************************************************
126 Process a sam sync message - not sure whether to do this here or
127 somewhere else.
128 ****************************************************************************/
130 static void msg_sam_sync(struct messaging_context *msg,
131 void *private_data,
132 uint32_t msg_type,
133 struct server_id server_id,
134 DATA_BLOB *data)
136 DEBUG(10, ("** sam sync message received, ignoring\n"));
139 static void msg_exit_server(struct messaging_context *msg,
140 void *private_data,
141 uint32_t msg_type,
142 struct server_id server_id,
143 DATA_BLOB *data)
145 DEBUG(3, ("got a SHUTDOWN message\n"));
146 exit_server_cleanly(NULL);
149 #ifdef DEVELOPER
150 static void msg_inject_fault(struct messaging_context *msg,
151 void *private_data,
152 uint32_t msg_type,
153 struct server_id src,
154 DATA_BLOB *data)
156 int sig;
158 if (data->length != sizeof(sig)) {
160 DEBUG(0, ("Process %s sent bogus signal injection request\n",
161 procid_str_static(&src)));
162 return;
165 sig = *(int *)data->data;
166 if (sig == -1) {
167 exit_server("internal error injected");
168 return;
171 #if HAVE_STRSIGNAL
172 DEBUG(0, ("Process %s requested injection of signal %d (%s)\n",
173 procid_str_static(&src), sig, strsignal(sig)));
174 #else
175 DEBUG(0, ("Process %s requested injection of signal %d\n",
176 procid_str_static(&src), sig));
177 #endif
179 kill(sys_getpid(), sig);
181 #endif /* DEVELOPER */
183 struct child_pid {
184 struct child_pid *prev, *next;
185 pid_t pid;
188 static void add_child_pid(pid_t pid)
190 struct child_pid *child;
192 if (lp_max_smbd_processes() == 0) {
193 /* Don't bother with the child list if we don't care anyway */
194 return;
197 child = SMB_MALLOC_P(struct child_pid);
198 if (child == NULL) {
199 DEBUG(0, ("Could not add child struct -- malloc failed\n"));
200 return;
202 child->pid = pid;
203 DLIST_ADD(children, child);
204 num_children += 1;
207 static void remove_child_pid(pid_t pid, bool unclean_shutdown)
209 struct child_pid *child;
211 if (unclean_shutdown) {
212 /* a child terminated uncleanly so tickle all processes to see
213 if they can grab any of the pending locks
215 DEBUG(3,(__location__ " Unclean shutdown of pid %u\n", (unsigned int)pid));
216 messaging_send_buf(smbd_messaging_context(), procid_self(),
217 MSG_SMB_BRL_VALIDATE, NULL, 0);
218 message_send_all(smbd_messaging_context(),
219 MSG_SMB_UNLOCK, NULL, 0, NULL);
222 if (lp_max_smbd_processes() == 0) {
223 /* Don't bother with the child list if we don't care anyway */
224 return;
227 for (child = children; child != NULL; child = child->next) {
228 if (child->pid == pid) {
229 struct child_pid *tmp = child;
230 DLIST_REMOVE(children, child);
231 SAFE_FREE(tmp);
232 num_children -= 1;
233 return;
237 DEBUG(0, ("Could not find child %d -- ignoring\n", (int)pid));
240 /****************************************************************************
241 Have we reached the process limit ?
242 ****************************************************************************/
244 static bool allowable_number_of_smbd_processes(void)
246 int max_processes = lp_max_smbd_processes();
248 if (!max_processes)
249 return True;
251 return num_children < max_processes;
254 static void smbd_sig_chld_handler(struct tevent_context *ev,
255 struct tevent_signal *se,
256 int signum,
257 int count,
258 void *siginfo,
259 void *private_data)
261 pid_t pid;
262 int status;
264 while ((pid = sys_waitpid(-1, &status, WNOHANG)) > 0) {
265 bool unclean_shutdown = False;
267 /* If the child terminated normally, assume
268 it was an unclean shutdown unless the
269 status is 0
271 if (WIFEXITED(status)) {
272 unclean_shutdown = WEXITSTATUS(status);
274 /* If the child terminated due to a signal
275 we always assume it was unclean.
277 if (WIFSIGNALED(status)) {
278 unclean_shutdown = True;
280 remove_child_pid(pid, unclean_shutdown);
284 static void smbd_setup_sig_chld_handler(void)
286 struct tevent_signal *se;
288 se = tevent_add_signal(smbd_event_context(),
289 smbd_event_context(),
290 SIGCHLD, 0,
291 smbd_sig_chld_handler,
292 NULL);
293 if (!se) {
294 exit_server("failed to setup SIGCHLD handler");
298 struct smbd_open_socket;
300 struct smbd_parent_context {
301 bool interactive;
303 /* the list of listening sockets */
304 struct smbd_open_socket *sockets;
307 struct smbd_open_socket {
308 struct smbd_open_socket *prev, *next;
309 struct smbd_parent_context *parent;
310 int fd;
311 struct tevent_fd *fde;
314 static void smbd_open_socket_close_fn(struct tevent_context *ev,
315 struct tevent_fd *fde,
316 int fd,
317 void *private_data)
319 /* this might be the socket_wrapper swrap_close() */
320 close(fd);
323 static void smbd_accept_connection(struct tevent_context *ev,
324 struct tevent_fd *fde,
325 uint16_t flags,
326 void *private_data)
328 struct smbd_open_socket *s = talloc_get_type_abort(private_data,
329 struct smbd_open_socket);
330 struct sockaddr_storage addr;
331 socklen_t in_addrlen = sizeof(addr);
332 pid_t pid = 0;
334 smbd_set_server_fd(accept(s->fd,(struct sockaddr *)&addr,&in_addrlen));
336 if (smbd_server_fd() == -1 && errno == EINTR)
337 return;
339 if (smbd_server_fd() == -1) {
340 DEBUG(0,("open_sockets_smbd: accept: %s\n",
341 strerror(errno)));
342 return;
345 if (s->parent->interactive) {
346 smbd_process();
347 exit_server_cleanly("end of interactive mode");
348 return;
351 if (!allowable_number_of_smbd_processes()) {
352 close(smbd_server_fd());
353 smbd_set_server_fd(-1);
354 return;
357 pid = sys_fork();
358 if (pid == 0) {
359 /* Child code ... */
360 am_parent = 0;
362 /* Stop zombies, the parent explicitly handles
363 * them, counting worker smbds. */
364 CatchChild();
366 /* close our standard file
367 descriptors */
368 close_low_fds(False);
371 * Can't use TALLOC_FREE here. Nulling out the argument to it
372 * would overwrite memory we've just freed.
374 talloc_free(s->parent);
375 s = NULL;
377 if (!reinit_after_fork(
378 smbd_messaging_context(),
379 smbd_event_context(),
380 true)) {
381 DEBUG(0,("reinit_after_fork() failed\n"));
382 smb_panic("reinit_after_fork() failed");
385 smbd_setup_sig_term_handler();
386 smbd_setup_sig_hup_handler();
388 smbd_process();
389 exit_server_cleanly("end of child");
390 return;
391 } else if (pid < 0) {
392 DEBUG(0,("smbd_accept_connection: sys_fork() failed: %s\n",
393 strerror(errno)));
396 /* The parent doesn't need this socket */
397 close(smbd_server_fd());
399 /* Sun May 6 18:56:14 2001 ackley@cs.unm.edu:
400 Clear the closed fd info out of server_fd --
401 and more importantly, out of client_fd in
402 util_sock.c, to avoid a possible
403 getpeername failure if we reopen the logs
404 and use %I in the filename.
407 smbd_set_server_fd(-1);
409 if (pid != 0) {
410 add_child_pid(pid);
413 /* Force parent to check log size after
414 * spawning child. Fix from
415 * klausr@ITAP.Physik.Uni-Stuttgart.De. The
416 * parent smbd will log to logserver.smb. It
417 * writes only two messages for each child
418 * started/finished. But each child writes,
419 * say, 50 messages also in logserver.smb,
420 * begining with the debug_count of the
421 * parent, before the child opens its own log
422 * file logserver.client. In a worst case
423 * scenario the size of logserver.smb would be
424 * checked after about 50*50=2500 messages
425 * (ca. 100kb).
426 * */
427 force_check_log_size();
430 static bool smbd_open_one_socket(struct smbd_parent_context *parent,
431 const struct sockaddr_storage *ifss,
432 uint16_t port)
434 struct smbd_open_socket *s;
436 s = talloc(parent, struct smbd_open_socket);
437 if (!s) {
438 return false;
441 s->parent = parent;
442 s->fd = open_socket_in(SOCK_STREAM,
443 port,
444 parent->sockets == NULL ? 0 : 2,
445 ifss,
446 true);
447 if (s->fd == -1) {
448 DEBUG(0,("smbd_open_once_socket: open_socket_in: "
449 "%s\n", strerror(errno)));
450 TALLOC_FREE(s);
452 * We ignore an error here, as we've done before
454 return true;
457 /* ready to listen */
458 set_socket_options(s->fd, "SO_KEEPALIVE");
459 set_socket_options(s->fd, lp_socket_options());
461 /* Set server socket to
462 * non-blocking for the accept. */
463 set_blocking(s->fd, False);
465 if (listen(s->fd, SMBD_LISTEN_BACKLOG) == -1) {
466 DEBUG(0,("open_sockets_smbd: listen: "
467 "%s\n", strerror(errno)));
468 close(s->fd);
469 TALLOC_FREE(s);
470 return false;
473 s->fde = tevent_add_fd(smbd_event_context(),
475 s->fd, TEVENT_FD_READ,
476 smbd_accept_connection,
478 if (!s->fde) {
479 DEBUG(0,("open_sockets_smbd: "
480 "tevent_add_fd: %s\n",
481 strerror(errno)));
482 close(s->fd);
483 TALLOC_FREE(s);
484 return false;
486 tevent_fd_set_close_fn(s->fde, smbd_open_socket_close_fn);
488 DLIST_ADD_END(parent->sockets, s, struct smbd_open_socket *);
490 return true;
493 /****************************************************************************
494 Open the socket communication.
495 ****************************************************************************/
497 static bool open_sockets_smbd(struct smbd_parent_context *parent,
498 const char *smb_ports)
500 int num_interfaces = iface_count();
501 int i;
502 char *ports;
503 unsigned dns_port = 0;
505 #ifdef HAVE_ATEXIT
506 atexit(killkids);
507 #endif
509 /* Stop zombies */
510 smbd_setup_sig_chld_handler();
512 /* use a reasonable default set of ports - listing on 445 and 139 */
513 if (!smb_ports) {
514 ports = lp_smb_ports();
515 if (!ports || !*ports) {
516 ports = talloc_strdup(talloc_tos(), SMB_PORTS);
517 } else {
518 ports = talloc_strdup(talloc_tos(), ports);
520 } else {
521 ports = talloc_strdup(talloc_tos(), smb_ports);
524 if (lp_interfaces() && lp_bind_interfaces_only()) {
525 /* We have been given an interfaces line, and been
526 told to only bind to those interfaces. Create a
527 socket per interface and bind to only these.
530 /* Now open a listen socket for each of the
531 interfaces. */
532 for(i = 0; i < num_interfaces; i++) {
533 const struct sockaddr_storage *ifss =
534 iface_n_sockaddr_storage(i);
535 char *tok;
536 const char *ptr;
538 if (ifss == NULL) {
539 DEBUG(0,("open_sockets_smbd: "
540 "interface %d has NULL IP address !\n",
541 i));
542 continue;
545 for (ptr=ports;
546 next_token_talloc(talloc_tos(),&ptr, &tok, " \t,");) {
547 unsigned port = atoi(tok);
548 if (port == 0 || port > 0xffff) {
549 continue;
552 if (!smbd_open_one_socket(parent, ifss, port)) {
553 return false;
557 } else {
558 /* Just bind to 0.0.0.0 - accept connections
559 from anywhere. */
561 char *tok;
562 const char *ptr;
563 const char *sock_addr = lp_socket_address();
564 char *sock_tok;
565 const char *sock_ptr;
567 if (strequal(sock_addr, "0.0.0.0") ||
568 strequal(sock_addr, "::")) {
569 #if HAVE_IPV6
570 sock_addr = "::,0.0.0.0";
571 #else
572 sock_addr = "0.0.0.0";
573 #endif
576 for (sock_ptr=sock_addr;
577 next_token_talloc(talloc_tos(), &sock_ptr, &sock_tok, " \t,"); ) {
578 for (ptr=ports; next_token_talloc(talloc_tos(), &ptr, &tok, " \t,"); ) {
579 struct sockaddr_storage ss;
581 unsigned port = atoi(tok);
582 if (port == 0 || port > 0xffff) {
583 continue;
586 /* Keep the first port for mDNS service
587 * registration.
589 if (dns_port == 0) {
590 dns_port = port;
593 /* open an incoming socket */
594 if (!interpret_string_addr(&ss, sock_tok,
595 AI_NUMERICHOST|AI_PASSIVE)) {
596 continue;
599 if (!smbd_open_one_socket(parent, &ss, port)) {
600 return false;
606 if (parent->sockets == NULL) {
607 DEBUG(0,("open_sockets_smbd: No "
608 "sockets available to bind to.\n"));
609 return false;
612 /* Setup the main smbd so that we can get messages. Note that
613 do this after starting listening. This is needed as when in
614 clustered mode, ctdb won't allow us to start doing database
615 operations until it has gone thru a full startup, which
616 includes checking to see that smbd is listening. */
617 claim_connection(NULL,"",
618 FLAG_MSG_GENERAL|FLAG_MSG_SMBD|FLAG_MSG_DBWRAP);
620 /* Listen to messages */
622 messaging_register(smbd_messaging_context(), NULL,
623 MSG_SMB_SAM_SYNC, msg_sam_sync);
624 messaging_register(smbd_messaging_context(), NULL,
625 MSG_SHUTDOWN, msg_exit_server);
626 messaging_register(smbd_messaging_context(), NULL,
627 MSG_SMB_FILE_RENAME, msg_file_was_renamed);
628 messaging_register(smbd_messaging_context(), NULL,
629 MSG_SMB_CONF_UPDATED, smb_conf_updated);
630 messaging_register(smbd_messaging_context(), NULL,
631 MSG_SMB_STAT_CACHE_DELETE, smb_stat_cache_delete);
632 brl_register_msgs(smbd_messaging_context());
634 #ifdef CLUSTER_SUPPORT
635 if (lp_clustering()) {
636 ctdbd_register_reconfigure(messaging_ctdbd_connection());
638 #endif
640 #ifdef DEVELOPER
641 messaging_register(smbd_messaging_context(), NULL,
642 MSG_SMB_INJECT_FAULT, msg_inject_fault);
643 #endif
645 if (dns_port != 0) {
646 #ifdef WITH_DNSSD_SUPPORT
647 smbd_setup_mdns_registration(smbd_event_context(),
648 parent, dns_port);
649 #endif
650 #ifdef WITH_AVAHI_SUPPORT
651 void *avahi_conn;
653 avahi_conn = avahi_start_register(
654 smbd_event_context(), smbd_event_context(), dns_port);
655 if (avahi_conn == NULL) {
656 DEBUG(10, ("avahi_start_register failed\n"));
658 #endif
661 return true;
664 static void smbd_parent_loop(struct smbd_parent_context *parent)
666 /* now accept incoming connections - forking a new process
667 for each incoming connection */
668 DEBUG(2,("waiting for connections\n"));
669 while (1) {
670 int ret;
671 TALLOC_CTX *frame = talloc_stackframe();
673 ret = tevent_loop_once(smbd_event_context());
674 if (ret != 0) {
675 exit_server_cleanly("tevent_loop_once() error");
678 TALLOC_FREE(frame);
679 } /* end while 1 */
681 /* NOTREACHED return True; */
684 /****************************************************************************
685 Reload printers
686 **************************************************************************/
687 void reload_printers(void)
689 int snum;
690 int n_services = lp_numservices();
691 int pnum = lp_servicenumber(PRINTERS_NAME);
692 const char *pname;
694 pcap_cache_reload();
696 /* remove stale printers */
697 for (snum = 0; snum < n_services; snum++) {
698 /* avoid removing PRINTERS_NAME or non-autoloaded printers */
699 if (snum == pnum || !(lp_snum_ok(snum) && lp_print_ok(snum) &&
700 lp_autoloaded(snum)))
701 continue;
703 pname = lp_printername(snum);
704 if (!pcap_printername_ok(pname)) {
705 DEBUG(3, ("removing stale printer %s\n", pname));
707 if (is_printer_published(NULL, snum, NULL))
708 nt_printer_publish(NULL, snum, DSPRINT_UNPUBLISH);
709 del_a_printer(pname);
710 lp_killservice(snum);
714 load_printers();
717 /****************************************************************************
718 Reload the services file.
719 **************************************************************************/
721 bool reload_services(bool test)
723 bool ret;
725 if (lp_loaded()) {
726 char *fname = lp_configfile();
727 if (file_exist(fname) &&
728 !strcsequal(fname, get_dyn_CONFIGFILE())) {
729 set_dyn_CONFIGFILE(fname);
730 test = False;
734 reopen_logs();
736 if (test && !lp_file_list_changed())
737 return(True);
739 lp_killunused(conn_snum_used);
741 ret = lp_load(get_dyn_CONFIGFILE(), False, False, True, True);
743 reload_printers();
745 /* perhaps the config filename is now set */
746 if (!test)
747 reload_services(True);
749 reopen_logs();
751 load_interfaces();
753 if (smbd_server_fd() != -1) {
754 set_socket_options(smbd_server_fd(),"SO_KEEPALIVE");
755 set_socket_options(smbd_server_fd(), lp_socket_options());
758 mangle_reset_cache();
759 reset_stat_cache();
761 /* this forces service parameters to be flushed */
762 set_current_service(NULL,0,True);
764 return(ret);
767 /****************************************************************************
768 Exit the server.
769 ****************************************************************************/
771 /* Reasons for shutting down a server process. */
772 enum server_exit_reason { SERVER_EXIT_NORMAL, SERVER_EXIT_ABNORMAL };
774 static void exit_server_common(enum server_exit_reason how,
775 const char *const reason) _NORETURN_;
777 static void exit_server_common(enum server_exit_reason how,
778 const char *const reason)
780 bool had_open_conn;
782 if (!exit_firsttime)
783 exit(0);
784 exit_firsttime = false;
786 change_to_root_user();
788 if (negprot_global_auth_context) {
789 (negprot_global_auth_context->free)(&negprot_global_auth_context);
792 had_open_conn = conn_close_all();
794 invalidate_all_vuids();
796 /* 3 second timeout. */
797 print_notify_send_messages(smbd_messaging_context(), 3);
799 /* delete our entry in the connections database. */
800 yield_connection(NULL,"");
802 #ifdef WITH_DFS
803 if (dcelogin_atmost_once) {
804 dfs_unlogin();
806 #endif
808 #ifdef USE_DMAPI
809 /* Destroy Samba DMAPI session only if we are master smbd process */
810 if (am_parent) {
811 if (!dmapi_destroy_session()) {
812 DEBUG(0,("Unable to close Samba DMAPI session\n"));
815 #endif
817 locking_end();
818 printing_end();
820 if (how != SERVER_EXIT_NORMAL) {
821 int oldlevel = DEBUGLEVEL;
823 DEBUGLEVEL = 10;
825 DEBUGSEP(0);
826 DEBUG(0,("Abnormal server exit: %s\n",
827 reason ? reason : "no explanation provided"));
828 DEBUGSEP(0);
830 log_stack_trace();
832 DEBUGLEVEL = oldlevel;
833 dump_core();
835 } else {
836 DEBUG(3,("Server exit (%s)\n",
837 (reason ? reason : "normal exit")));
840 /* if we had any open SMB connections when we exited then we
841 need to tell the parent smbd so that it can trigger a retry
842 of any locks we may have been holding or open files we were
843 blocking */
844 if (had_open_conn) {
845 exit(1);
846 } else {
847 exit(0);
851 void exit_server(const char *const explanation)
853 exit_server_common(SERVER_EXIT_ABNORMAL, explanation);
856 void exit_server_cleanly(const char *const explanation)
858 exit_server_common(SERVER_EXIT_NORMAL, explanation);
861 void exit_server_fault(void)
863 exit_server("critical server fault");
866 /****************************************************************************
867 Initialise connect, service and file structs.
868 ****************************************************************************/
870 static bool init_structs(void )
873 * Set the machine NETBIOS name if not already
874 * set from the config file.
877 if (!init_names())
878 return False;
880 conn_init();
882 file_init();
884 init_dptrs();
886 if (!secrets_init())
887 return False;
889 return True;
892 /****************************************************************************
893 main program.
894 ****************************************************************************/
896 /* Declare prototype for build_options() to avoid having to run it through
897 mkproto.h. Mixing $(builddir) and $(srcdir) source files in the current
898 prototype generation system is too complicated. */
900 extern void build_options(bool screen);
902 int main(int argc,const char *argv[])
904 /* shall I run as a daemon */
905 bool is_daemon = false;
906 bool interactive = false;
907 bool Fork = true;
908 bool no_process_group = false;
909 bool log_stdout = false;
910 char *ports = NULL;
911 char *profile_level = NULL;
912 int opt;
913 poptContext pc;
914 bool print_build_options = False;
915 enum {
916 OPT_DAEMON = 1000,
917 OPT_INTERACTIVE,
918 OPT_FORK,
919 OPT_NO_PROCESS_GROUP,
920 OPT_LOG_STDOUT
922 struct poptOption long_options[] = {
923 POPT_AUTOHELP
924 {"daemon", 'D', POPT_ARG_NONE, NULL, OPT_DAEMON, "Become a daemon (default)" },
925 {"interactive", 'i', POPT_ARG_NONE, NULL, OPT_INTERACTIVE, "Run interactive (not a daemon)"},
926 {"foreground", 'F', POPT_ARG_NONE, NULL, OPT_FORK, "Run daemon in foreground (for daemontools, etc.)" },
927 {"no-process-group", '\0', POPT_ARG_NONE, NULL, OPT_NO_PROCESS_GROUP, "Don't create a new process group" },
928 {"log-stdout", 'S', POPT_ARG_NONE, NULL, OPT_LOG_STDOUT, "Log to stdout" },
929 {"build-options", 'b', POPT_ARG_NONE, NULL, 'b', "Print build options" },
930 {"port", 'p', POPT_ARG_STRING, &ports, 0, "Listen on the specified ports"},
931 {"profiling-level", 'P', POPT_ARG_STRING, &profile_level, 0, "Set profiling level","PROFILE_LEVEL"},
932 POPT_COMMON_SAMBA
933 POPT_COMMON_DYNCONFIG
934 POPT_TABLEEND
936 struct smbd_parent_context *parent = NULL;
937 TALLOC_CTX *frame = talloc_stackframe(); /* Setup tos. */
939 smbd_init_globals();
941 TimeInit();
943 #ifdef HAVE_SET_AUTH_PARAMETERS
944 set_auth_parameters(argc,argv);
945 #endif
947 pc = poptGetContext("smbd", argc, argv, long_options, 0);
948 while((opt = poptGetNextOpt(pc)) != -1) {
949 switch (opt) {
950 case OPT_DAEMON:
951 is_daemon = true;
952 break;
953 case OPT_INTERACTIVE:
954 interactive = true;
955 break;
956 case OPT_FORK:
957 Fork = false;
958 break;
959 case OPT_NO_PROCESS_GROUP:
960 no_process_group = true;
961 break;
962 case OPT_LOG_STDOUT:
963 log_stdout = true;
964 break;
965 case 'b':
966 print_build_options = True;
967 break;
968 default:
969 d_fprintf(stderr, "\nInvalid option %s: %s\n\n",
970 poptBadOption(pc, 0), poptStrerror(opt));
971 poptPrintUsage(pc, stderr, 0);
972 exit(1);
975 poptFreeContext(pc);
977 if (interactive) {
978 Fork = False;
979 log_stdout = True;
982 setup_logging(argv[0],log_stdout);
984 if (print_build_options) {
985 build_options(True); /* Display output to screen as well as debug */
986 exit(0);
989 load_case_tables();
991 #ifdef HAVE_SETLUID
992 /* needed for SecureWare on SCO */
993 setluid(0);
994 #endif
996 sec_init();
998 set_remote_machine_name("smbd", False);
1000 if (interactive && (DEBUGLEVEL >= 9)) {
1001 talloc_enable_leak_report();
1004 if (log_stdout && Fork) {
1005 DEBUG(0,("ERROR: Can't log to stdout (-S) unless daemon is in foreground (-F) or interactive (-i)\n"));
1006 exit(1);
1009 /* we want to re-seed early to prevent time delays causing
1010 client problems at a later date. (tridge) */
1011 generate_random_buffer(NULL, 0);
1013 /* make absolutely sure we run as root - to handle cases where people
1014 are crazy enough to have it setuid */
1016 gain_root_privilege();
1017 gain_root_group_privilege();
1019 fault_setup((void (*)(void *))exit_server_fault);
1020 dump_core_setup("smbd");
1022 /* we are never interested in SIGPIPE */
1023 BlockSignals(True,SIGPIPE);
1025 #if defined(SIGFPE)
1026 /* we are never interested in SIGFPE */
1027 BlockSignals(True,SIGFPE);
1028 #endif
1030 #if defined(SIGUSR2)
1031 /* We are no longer interested in USR2 */
1032 BlockSignals(True,SIGUSR2);
1033 #endif
1035 /* POSIX demands that signals are inherited. If the invoking process has
1036 * these signals masked, we will have problems, as we won't recieve them. */
1037 BlockSignals(False, SIGHUP);
1038 BlockSignals(False, SIGUSR1);
1039 BlockSignals(False, SIGTERM);
1041 /* we want total control over the permissions on created files,
1042 so set our umask to 0 */
1043 umask(0);
1045 init_sec_ctx();
1047 reopen_logs();
1049 DEBUG(0,("smbd version %s started.\n", samba_version_string()));
1050 DEBUGADD(0,("%s\n", COPYRIGHT_STARTUP_MESSAGE));
1052 DEBUG(2,("uid=%d gid=%d euid=%d egid=%d\n",
1053 (int)getuid(),(int)getgid(),(int)geteuid(),(int)getegid()));
1055 /* Output the build options to the debug log */
1056 build_options(False);
1058 if (sizeof(uint16) < 2 || sizeof(uint32) < 4) {
1059 DEBUG(0,("ERROR: Samba is not configured correctly for the word size on your machine\n"));
1060 exit(1);
1063 if (!lp_load_initial_only(get_dyn_CONFIGFILE())) {
1064 DEBUG(0, ("error opening config file\n"));
1065 exit(1);
1068 if (smbd_messaging_context() == NULL)
1069 exit(1);
1071 if (!reload_services(False))
1072 return(-1);
1074 init_structs();
1076 #ifdef WITH_PROFILE
1077 if (!profile_setup(smbd_messaging_context(), False)) {
1078 DEBUG(0,("ERROR: failed to setup profiling\n"));
1079 return -1;
1081 if (profile_level != NULL) {
1082 int pl = atoi(profile_level);
1083 struct server_id src;
1085 DEBUG(1, ("setting profiling level: %s\n",profile_level));
1086 src.pid = getpid();
1087 set_profile_level(pl, src);
1089 #endif
1091 DEBUG(3,( "loaded services\n"));
1093 if (!is_daemon && !is_a_socket(0)) {
1094 if (!interactive)
1095 DEBUG(0,("standard input is not a socket, assuming -D option\n"));
1098 * Setting is_daemon here prevents us from eventually calling
1099 * the open_sockets_inetd()
1102 is_daemon = True;
1105 if (is_daemon && !interactive) {
1106 DEBUG( 3, ( "Becoming a daemon.\n" ) );
1107 become_daemon(Fork, no_process_group);
1110 #if HAVE_SETPGID
1112 * If we're interactive we want to set our own process group for
1113 * signal management.
1115 if (interactive && !no_process_group)
1116 setpgid( (pid_t)0, (pid_t)0);
1117 #endif
1119 if (!directory_exist(lp_lockdir()))
1120 mkdir(lp_lockdir(), 0755);
1122 if (is_daemon)
1123 pidfile_create("smbd");
1125 if (!reinit_after_fork(smbd_messaging_context(),
1126 smbd_event_context(), false)) {
1127 DEBUG(0,("reinit_after_fork() failed\n"));
1128 exit(1);
1131 smbd_setup_sig_term_handler();
1132 smbd_setup_sig_hup_handler();
1134 /* Setup all the TDB's - including CLEAR_IF_FIRST tdb's. */
1136 if (smbd_memcache() == NULL) {
1137 exit(1);
1140 memcache_set_global(smbd_memcache());
1142 /* Initialise the password backed before the global_sam_sid
1143 to ensure that we fetch from ldap before we make a domain sid up */
1145 if(!initialize_password_db(False, smbd_event_context()))
1146 exit(1);
1148 if (!secrets_init()) {
1149 DEBUG(0, ("ERROR: smbd can not open secrets.tdb\n"));
1150 exit(1);
1153 if(!get_global_sam_sid()) {
1154 DEBUG(0,("ERROR: Samba cannot create a SAM SID.\n"));
1155 exit(1);
1158 if (!session_init())
1159 exit(1);
1161 if (!connections_init(True))
1162 exit(1);
1164 if (!locking_init())
1165 exit(1);
1167 namecache_enable();
1169 if (!W_ERROR_IS_OK(registry_init_full()))
1170 exit(1);
1172 #if 0
1173 if (!init_svcctl_db())
1174 exit(1);
1175 #endif
1177 if (!print_backend_init(smbd_messaging_context()))
1178 exit(1);
1180 if (!init_guest_info()) {
1181 DEBUG(0,("ERROR: failed to setup guest info.\n"));
1182 return -1;
1185 /* only start the background queue daemon if we are
1186 running as a daemon -- bad things will happen if
1187 smbd is launched via inetd and we fork a copy of
1188 ourselves here */
1190 if (is_daemon && !interactive
1191 && lp_parm_bool(-1, "smbd", "backgroundqueue", true)) {
1192 start_background_queue();
1195 if (!is_daemon) {
1196 /* inetd mode */
1197 TALLOC_FREE(frame);
1199 /* Started from inetd. fd 0 is the socket. */
1200 /* We will abort gracefully when the client or remote system
1201 goes away */
1202 smbd_set_server_fd(dup(0));
1204 /* close our standard file descriptors */
1205 close_low_fds(False); /* Don't close stderr */
1207 smbd_process();
1209 exit_server_cleanly(NULL);
1210 return(0);
1213 parent = talloc_zero(smbd_event_context(), struct smbd_parent_context);
1214 if (!parent) {
1215 exit_server("talloc(struct smbd_parent_context) failed");
1217 parent->interactive = interactive;
1219 if (!open_sockets_smbd(parent, ports))
1220 exit_server("open_sockets_smbd() failed");
1222 TALLOC_FREE(frame);
1224 smbd_parent_loop(parent);
1226 exit_server_cleanly(NULL);
1227 return(0);