s3-smbd: Initialize the print backend after we setup winreg.
[Samba.git] / source3 / smbd / server.c
blob2400ce45a896dc062f8bacc49ca08905a7a18f13
1 /*
2 Unix SMB/CIFS implementation.
3 Main SMB server routines
4 Copyright (C) Andrew Tridgell 1992-1998
5 Copyright (C) Martin Pool 2002
6 Copyright (C) Jelmer Vernooij 2002-2003
7 Copyright (C) Volker Lendecke 1993-2007
8 Copyright (C) Jeremy Allison 1993-2007
10 This program is free software; you can redistribute it and/or modify
11 it under the terms of the GNU General Public License as published by
12 the Free Software Foundation; either version 3 of the License, or
13 (at your option) any later version.
15 This program is distributed in the hope that it will be useful,
16 but WITHOUT ANY WARRANTY; without even the implied warranty of
17 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
18 GNU General Public License for more details.
20 You should have received a copy of the GNU General Public License
21 along with this program. If not, see <http://www.gnu.org/licenses/>.
24 #include "includes.h"
25 #include "system/filesys.h"
26 #include "popt_common.h"
27 #include "smbd/smbd.h"
28 #include "smbd/globals.h"
29 #include "registry/reg_init_full.h"
30 #include "libcli/auth/schannel.h"
31 #include "secrets.h"
32 #include "memcache.h"
33 #include "ctdbd_conn.h"
34 #include "printing/printer_list.h"
35 #include "rpc_server/rpc_ep_setup.h"
36 #include "printing/pcap.h"
37 #include "printing.h"
38 #include "serverid.h"
39 #include "passdb.h"
40 #include "auth.h"
41 #include "messages.h"
42 #include "smbprofile.h"
44 extern void start_epmd(struct tevent_context *ev_ctx,
45 struct messaging_context *msg_ctx);
47 extern void start_spoolssd(struct event_context *ev_ctx,
48 struct messaging_context *msg_ctx);
50 #ifdef WITH_DFS
51 extern int dcelogin_atmost_once;
52 #endif /* WITH_DFS */
54 static void smbd_set_server_fd(int fd)
56 struct smbd_server_connection *sconn = smbd_server_conn;
57 char addr[INET6_ADDRSTRLEN];
58 const char *name;
60 sconn->sock = fd;
63 * Initialize sconn->client_id: If we can't find the client's
64 * name, default to its address.
67 if (sconn->client_id.name != NULL &&
68 sconn->client_id.name != sconn->client_id.addr) {
69 talloc_free(discard_const_p(char, sconn->client_id.name));
70 sconn->client_id.name = NULL;
73 client_addr(fd, sconn->client_id.addr, sizeof(sconn->client_id.addr));
75 name = client_name(sconn->sock);
76 if (strcmp(name, "UNKNOWN") != 0) {
77 name = talloc_strdup(sconn, name);
78 } else {
79 name = NULL;
81 sconn->client_id.name =
82 (name != NULL) ? name : sconn->client_id.addr;
84 sub_set_socket_ids(sconn->client_id.addr, sconn->client_id.name,
85 client_socket_addr(sconn->sock, addr,
86 sizeof(addr)));
89 struct event_context *smbd_event_context(void)
91 return server_event_context();
94 /*******************************************************************
95 What to do when smb.conf is updated.
96 ********************************************************************/
98 static void smb_conf_updated(struct messaging_context *msg,
99 void *private_data,
100 uint32_t msg_type,
101 struct server_id server_id,
102 DATA_BLOB *data)
104 struct tevent_context *ev_ctx =
105 talloc_get_type_abort(private_data, struct tevent_context);
107 DEBUG(10,("smb_conf_updated: Got message saying smb.conf was "
108 "updated. Reloading.\n"));
109 change_to_root_user();
110 reload_services(msg, smbd_server_conn->sock, False);
111 if (am_parent) {
112 pcap_cache_reload(ev_ctx, msg,
113 &reload_pcap_change_notify);
117 /*******************************************************************
118 What to do when printcap is updated.
119 ********************************************************************/
121 static void smb_pcap_updated(struct messaging_context *msg,
122 void *private_data,
123 uint32_t msg_type,
124 struct server_id server_id,
125 DATA_BLOB *data)
127 struct tevent_context *ev_ctx =
128 talloc_get_type_abort(private_data, struct tevent_context);
130 DEBUG(10,("Got message saying pcap was updated. Reloading.\n"));
131 change_to_root_user();
132 reload_printers(ev_ctx, msg);
135 /*******************************************************************
136 Delete a statcache entry.
137 ********************************************************************/
139 static void smb_stat_cache_delete(struct messaging_context *msg,
140 void *private_data,
141 uint32_t msg_tnype,
142 struct server_id server_id,
143 DATA_BLOB *data)
145 const char *name = (const char *)data->data;
146 DEBUG(10,("smb_stat_cache_delete: delete name %s\n", name));
147 stat_cache_delete(name);
150 /****************************************************************************
151 Send a SIGTERM to our process group.
152 *****************************************************************************/
154 static void killkids(void)
156 if(am_parent) kill(0,SIGTERM);
159 /****************************************************************************
160 Process a sam sync message - not sure whether to do this here or
161 somewhere else.
162 ****************************************************************************/
164 static void msg_sam_sync(struct messaging_context *msg,
165 void *private_data,
166 uint32_t msg_type,
167 struct server_id server_id,
168 DATA_BLOB *data)
170 DEBUG(10, ("** sam sync message received, ignoring\n"));
173 static void msg_exit_server(struct messaging_context *msg,
174 void *private_data,
175 uint32_t msg_type,
176 struct server_id server_id,
177 DATA_BLOB *data)
179 DEBUG(3, ("got a SHUTDOWN message\n"));
180 exit_server_cleanly(NULL);
183 #ifdef DEVELOPER
184 static void msg_inject_fault(struct messaging_context *msg,
185 void *private_data,
186 uint32_t msg_type,
187 struct server_id src,
188 DATA_BLOB *data)
190 int sig;
192 if (data->length != sizeof(sig)) {
193 DEBUG(0, ("Process %s sent bogus signal injection request\n",
194 procid_str_static(&src)));
195 return;
198 sig = *(int *)data->data;
199 if (sig == -1) {
200 exit_server("internal error injected");
201 return;
204 #if HAVE_STRSIGNAL
205 DEBUG(0, ("Process %s requested injection of signal %d (%s)\n",
206 procid_str_static(&src), sig, strsignal(sig)));
207 #else
208 DEBUG(0, ("Process %s requested injection of signal %d\n",
209 procid_str_static(&src), sig));
210 #endif
212 kill(sys_getpid(), sig);
214 #endif /* DEVELOPER */
217 * Parent smbd process sets its own debug level first and then
218 * sends a message to all the smbd children to adjust their debug
219 * level to that of the parent.
222 static void smbd_msg_debug(struct messaging_context *msg_ctx,
223 void *private_data,
224 uint32_t msg_type,
225 struct server_id server_id,
226 DATA_BLOB *data)
228 struct child_pid *child;
230 debug_message(msg_ctx, private_data, MSG_DEBUG, server_id, data);
232 for (child = children; child != NULL; child = child->next) {
233 messaging_send_buf(msg_ctx, pid_to_procid(child->pid),
234 MSG_DEBUG,
235 data->data,
236 strlen((char *) data->data) + 1);
240 static void add_child_pid(pid_t pid)
242 struct child_pid *child;
244 child = SMB_MALLOC_P(struct child_pid);
245 if (child == NULL) {
246 DEBUG(0, ("Could not add child struct -- malloc failed\n"));
247 return;
249 child->pid = pid;
250 DLIST_ADD(children, child);
251 num_children += 1;
255 at most every smbd:cleanuptime seconds (default 20), we scan the BRL
256 and locking database for entries to cleanup. As a side effect this
257 also cleans up dead entries in the connections database (due to the
258 traversal in message_send_all()
260 Using a timer for this prevents a flood of traversals when a large
261 number of clients disconnect at the same time (perhaps due to a
262 network outage).
265 static void cleanup_timeout_fn(struct event_context *event_ctx,
266 struct timed_event *te,
267 struct timeval now,
268 void *private_data)
270 struct timed_event **cleanup_te = (struct timed_event **)private_data;
272 DEBUG(1,("Cleaning up brl and lock database after unclean shutdown\n"));
273 message_send_all(smbd_messaging_context(), MSG_SMB_UNLOCK, NULL, 0, NULL);
274 messaging_send_buf(smbd_messaging_context(), procid_self(),
275 MSG_SMB_BRL_VALIDATE, NULL, 0);
276 /* mark the cleanup as having been done */
277 (*cleanup_te) = NULL;
280 static void remove_child_pid(pid_t pid, bool unclean_shutdown)
282 struct child_pid *child;
283 static struct timed_event *cleanup_te;
284 struct server_id child_id;
286 child_id = procid_self(); /* Just initialize pid and potentially vnn */
287 child_id.pid = pid;
289 for (child = children; child != NULL; child = child->next) {
290 if (child->pid == pid) {
291 struct child_pid *tmp = child;
292 DLIST_REMOVE(children, child);
293 SAFE_FREE(tmp);
294 num_children -= 1;
295 break;
299 if (child == NULL) {
300 /* not all forked child processes are added to the children list */
301 DEBUG(2, ("Could not find child %d -- ignoring\n", (int)pid));
302 return;
305 if (unclean_shutdown) {
306 /* a child terminated uncleanly so tickle all
307 processes to see if they can grab any of the
308 pending locks
310 DEBUG(3,(__location__ " Unclean shutdown of pid %u\n",
311 (unsigned int)pid));
312 if (!cleanup_te) {
313 /* call the cleanup timer, but not too often */
314 int cleanup_time = lp_parm_int(-1, "smbd", "cleanuptime", 20);
315 cleanup_te = event_add_timed(smbd_event_context(), NULL,
316 timeval_current_ofs(cleanup_time, 0),
317 cleanup_timeout_fn,
318 &cleanup_te);
319 DEBUG(1,("Scheduled cleanup of brl and lock database after unclean shutdown\n"));
323 if (!serverid_deregister(child_id)) {
324 DEBUG(1, ("Could not remove pid %d from serverid.tdb\n",
325 (int)pid));
329 /****************************************************************************
330 Have we reached the process limit ?
331 ****************************************************************************/
333 static bool allowable_number_of_smbd_processes(void)
335 int max_processes = lp_max_smbd_processes();
337 if (!max_processes)
338 return True;
340 return num_children < max_processes;
343 static void smbd_sig_chld_handler(struct tevent_context *ev,
344 struct tevent_signal *se,
345 int signum,
346 int count,
347 void *siginfo,
348 void *private_data)
350 pid_t pid;
351 int status;
353 while ((pid = sys_waitpid(-1, &status, WNOHANG)) > 0) {
354 bool unclean_shutdown = False;
356 /* If the child terminated normally, assume
357 it was an unclean shutdown unless the
358 status is 0
360 if (WIFEXITED(status)) {
361 unclean_shutdown = WEXITSTATUS(status);
363 /* If the child terminated due to a signal
364 we always assume it was unclean.
366 if (WIFSIGNALED(status)) {
367 unclean_shutdown = True;
369 remove_child_pid(pid, unclean_shutdown);
373 static void smbd_setup_sig_chld_handler(void)
375 struct tevent_signal *se;
377 se = tevent_add_signal(smbd_event_context(),
378 smbd_event_context(),
379 SIGCHLD, 0,
380 smbd_sig_chld_handler,
381 NULL);
382 if (!se) {
383 exit_server("failed to setup SIGCHLD handler");
387 struct smbd_open_socket;
389 struct smbd_parent_context {
390 bool interactive;
392 /* the list of listening sockets */
393 struct smbd_open_socket *sockets;
396 struct smbd_open_socket {
397 struct smbd_open_socket *prev, *next;
398 struct smbd_parent_context *parent;
399 int fd;
400 struct tevent_fd *fde;
403 static void smbd_open_socket_close_fn(struct tevent_context *ev,
404 struct tevent_fd *fde,
405 int fd,
406 void *private_data)
408 /* this might be the socket_wrapper swrap_close() */
409 close(fd);
412 static void smbd_accept_connection(struct tevent_context *ev,
413 struct tevent_fd *fde,
414 uint16_t flags,
415 void *private_data)
417 struct smbd_open_socket *s = talloc_get_type_abort(private_data,
418 struct smbd_open_socket);
419 struct sockaddr_storage addr;
420 socklen_t in_addrlen = sizeof(addr);
421 int fd;
422 pid_t pid = 0;
423 uint64_t unique_id;
425 fd = accept(s->fd, (struct sockaddr *)(void *)&addr,&in_addrlen);
426 smbd_set_server_fd(fd);
428 if (fd == -1 && errno == EINTR)
429 return;
431 if (fd == -1) {
432 DEBUG(0,("open_sockets_smbd: accept: %s\n",
433 strerror(errno)));
434 return;
437 if (s->parent->interactive) {
438 smbd_process(smbd_server_conn);
439 exit_server_cleanly("end of interactive mode");
440 return;
443 if (!allowable_number_of_smbd_processes()) {
444 close(fd);
445 smbd_set_server_fd(-1);
446 return;
450 * Generate a unique id in the parent process so that we use
451 * the global random state in the parent.
453 unique_id = serverid_get_random_unique_id();
455 pid = sys_fork();
456 if (pid == 0) {
457 NTSTATUS status = NT_STATUS_OK;
459 /* Child code ... */
460 am_parent = 0;
462 set_my_unique_id(unique_id);
464 /* Stop zombies, the parent explicitly handles
465 * them, counting worker smbds. */
466 CatchChild();
468 /* close our standard file
469 descriptors */
470 close_low_fds(False);
473 * Can't use TALLOC_FREE here. Nulling out the argument to it
474 * would overwrite memory we've just freed.
476 talloc_free(s->parent);
477 s = NULL;
479 status = reinit_after_fork(smbd_messaging_context(),
480 smbd_event_context(), procid_self(),
481 true);
482 if (!NT_STATUS_IS_OK(status)) {
483 if (NT_STATUS_EQUAL(status,
484 NT_STATUS_TOO_MANY_OPENED_FILES)) {
485 DEBUG(0,("child process cannot initialize "
486 "because too many files are open\n"));
487 goto exit;
489 if (lp_clustering() &&
490 NT_STATUS_EQUAL(status,
491 NT_STATUS_INTERNAL_DB_ERROR)) {
492 DEBUG(1,("child process cannot initialize "
493 "because connection to CTDB "
494 "has failed\n"));
495 goto exit;
498 DEBUG(0,("reinit_after_fork() failed\n"));
499 smb_panic("reinit_after_fork() failed");
502 smbd_setup_sig_term_handler();
503 smbd_setup_sig_hup_handler(server_event_context(),
504 server_messaging_context());
506 if (!serverid_register(procid_self(),
507 FLAG_MSG_GENERAL|FLAG_MSG_SMBD
508 |FLAG_MSG_DBWRAP
509 |FLAG_MSG_PRINT_GENERAL)) {
510 exit_server_cleanly("Could not register myself in "
511 "serverid.tdb");
514 smbd_process(smbd_server_conn);
515 exit:
516 exit_server_cleanly("end of child");
517 return;
520 if (pid < 0) {
521 DEBUG(0,("smbd_accept_connection: sys_fork() failed: %s\n",
522 strerror(errno)));
525 /* The parent doesn't need this socket */
526 close(fd);
528 /* Sun May 6 18:56:14 2001 ackley@cs.unm.edu:
529 Clear the closed fd info out of server_fd --
530 and more importantly, out of client_fd in
531 util_sock.c, to avoid a possible
532 getpeername failure if we reopen the logs
533 and use %I in the filename.
536 smbd_set_server_fd(-1);
538 if (pid != 0) {
539 add_child_pid(pid);
542 /* Force parent to check log size after
543 * spawning child. Fix from
544 * klausr@ITAP.Physik.Uni-Stuttgart.De. The
545 * parent smbd will log to logserver.smb. It
546 * writes only two messages for each child
547 * started/finished. But each child writes,
548 * say, 50 messages also in logserver.smb,
549 * begining with the debug_count of the
550 * parent, before the child opens its own log
551 * file logserver.client. In a worst case
552 * scenario the size of logserver.smb would be
553 * checked after about 50*50=2500 messages
554 * (ca. 100kb).
555 * */
556 force_check_log_size();
559 static bool smbd_open_one_socket(struct smbd_parent_context *parent,
560 const struct sockaddr_storage *ifss,
561 uint16_t port)
563 struct smbd_open_socket *s;
565 s = talloc(parent, struct smbd_open_socket);
566 if (!s) {
567 return false;
570 s->parent = parent;
571 s->fd = open_socket_in(SOCK_STREAM,
572 port,
573 parent->sockets == NULL ? 0 : 2,
574 ifss,
575 true);
576 if (s->fd == -1) {
577 DEBUG(0,("smbd_open_once_socket: open_socket_in: "
578 "%s\n", strerror(errno)));
579 TALLOC_FREE(s);
581 * We ignore an error here, as we've done before
583 return true;
586 /* ready to listen */
587 set_socket_options(s->fd, "SO_KEEPALIVE");
588 set_socket_options(s->fd, lp_socket_options());
590 /* Set server socket to
591 * non-blocking for the accept. */
592 set_blocking(s->fd, False);
594 if (listen(s->fd, SMBD_LISTEN_BACKLOG) == -1) {
595 DEBUG(0,("open_sockets_smbd: listen: "
596 "%s\n", strerror(errno)));
597 close(s->fd);
598 TALLOC_FREE(s);
599 return false;
602 s->fde = tevent_add_fd(smbd_event_context(),
604 s->fd, TEVENT_FD_READ,
605 smbd_accept_connection,
607 if (!s->fde) {
608 DEBUG(0,("open_sockets_smbd: "
609 "tevent_add_fd: %s\n",
610 strerror(errno)));
611 close(s->fd);
612 TALLOC_FREE(s);
613 return false;
615 tevent_fd_set_close_fn(s->fde, smbd_open_socket_close_fn);
617 DLIST_ADD_END(parent->sockets, s, struct smbd_open_socket *);
619 return true;
622 static bool smbd_parent_housekeeping(const struct timeval *now, void *private_data)
624 time_t printcap_cache_time = (time_t)lp_printcap_cache_time();
625 time_t t = time_mono(NULL);
627 DEBUG(5, ("parent housekeeping\n"));
629 /* if periodic printcap rescan is enabled, see if it's time to reload */
630 if ((printcap_cache_time != 0)
631 && (t >= (last_printer_reload_time + printcap_cache_time))) {
632 DEBUG( 3,( "Printcap cache time expired.\n"));
633 pcap_cache_reload(server_event_context(),
634 smbd_messaging_context(),
635 &reload_pcap_change_notify);
636 last_printer_reload_time = t;
639 return true;
642 /****************************************************************************
643 Open the socket communication.
644 ****************************************************************************/
646 static bool open_sockets_smbd(struct smbd_parent_context *parent,
647 struct messaging_context *msg_ctx,
648 const char *smb_ports)
650 int num_interfaces = iface_count();
651 int i;
652 char *ports;
653 unsigned dns_port = 0;
655 #ifdef HAVE_ATEXIT
656 atexit(killkids);
657 #endif
659 /* Stop zombies */
660 smbd_setup_sig_chld_handler();
662 /* use a reasonable default set of ports - listing on 445 and 139 */
663 if (!smb_ports) {
664 ports = lp_smb_ports();
665 if (!ports || !*ports) {
666 ports = talloc_strdup(talloc_tos(), SMB_PORTS);
667 } else {
668 ports = talloc_strdup(talloc_tos(), ports);
670 } else {
671 ports = talloc_strdup(talloc_tos(), smb_ports);
674 if (lp_interfaces() && lp_bind_interfaces_only()) {
675 /* We have been given an interfaces line, and been
676 told to only bind to those interfaces. Create a
677 socket per interface and bind to only these.
680 /* Now open a listen socket for each of the
681 interfaces. */
682 for(i = 0; i < num_interfaces; i++) {
683 const struct sockaddr_storage *ifss =
684 iface_n_sockaddr_storage(i);
685 char *tok;
686 const char *ptr;
688 if (ifss == NULL) {
689 DEBUG(0,("open_sockets_smbd: "
690 "interface %d has NULL IP address !\n",
691 i));
692 continue;
695 for (ptr=ports;
696 next_token_talloc(talloc_tos(),&ptr, &tok, " \t,");) {
697 unsigned port = atoi(tok);
698 if (port == 0 || port > 0xffff) {
699 continue;
702 /* Keep the first port for mDNS service
703 * registration.
705 if (dns_port == 0) {
706 dns_port = port;
709 if (!smbd_open_one_socket(parent, ifss, port)) {
710 return false;
714 } else {
715 /* Just bind to 0.0.0.0 - accept connections
716 from anywhere. */
718 char *tok;
719 const char *ptr;
720 const char *sock_addr = lp_socket_address();
721 char *sock_tok;
722 const char *sock_ptr;
724 if (strequal(sock_addr, "0.0.0.0") ||
725 strequal(sock_addr, "::")) {
726 #if HAVE_IPV6
727 sock_addr = "::,0.0.0.0";
728 #else
729 sock_addr = "0.0.0.0";
730 #endif
733 for (sock_ptr=sock_addr;
734 next_token_talloc(talloc_tos(), &sock_ptr, &sock_tok, " \t,"); ) {
735 for (ptr=ports; next_token_talloc(talloc_tos(), &ptr, &tok, " \t,"); ) {
736 struct sockaddr_storage ss;
738 unsigned port = atoi(tok);
739 if (port == 0 || port > 0xffff) {
740 continue;
743 /* Keep the first port for mDNS service
744 * registration.
746 if (dns_port == 0) {
747 dns_port = port;
750 /* open an incoming socket */
751 if (!interpret_string_addr(&ss, sock_tok,
752 AI_NUMERICHOST|AI_PASSIVE)) {
753 continue;
756 if (!smbd_open_one_socket(parent, &ss, port)) {
757 return false;
763 if (parent->sockets == NULL) {
764 DEBUG(0,("open_sockets_smbd: No "
765 "sockets available to bind to.\n"));
766 return false;
769 /* Setup the main smbd so that we can get messages. Note that
770 do this after starting listening. This is needed as when in
771 clustered mode, ctdb won't allow us to start doing database
772 operations until it has gone thru a full startup, which
773 includes checking to see that smbd is listening. */
775 if (!serverid_register(procid_self(),
776 FLAG_MSG_GENERAL|FLAG_MSG_SMBD
777 |FLAG_MSG_DBWRAP)) {
778 DEBUG(0, ("open_sockets_smbd: Failed to register "
779 "myself in serverid.tdb\n"));
780 return false;
783 if (!(event_add_idle(smbd_event_context(), NULL,
784 timeval_set(SMBD_HOUSEKEEPING_INTERVAL, 0),
785 "parent_housekeeping", smbd_parent_housekeeping,
786 NULL))) {
787 DEBUG(0, ("Could not add parent_housekeeping event\n"));
788 return false;
791 /* Listen to messages */
793 messaging_register(msg_ctx, NULL, MSG_SMB_SAM_SYNC, msg_sam_sync);
794 messaging_register(msg_ctx, NULL, MSG_SHUTDOWN, msg_exit_server);
795 messaging_register(msg_ctx, NULL, MSG_SMB_FILE_RENAME,
796 msg_file_was_renamed);
797 messaging_register(msg_ctx, server_event_context(), MSG_SMB_CONF_UPDATED,
798 smb_conf_updated);
799 messaging_register(msg_ctx, NULL, MSG_SMB_STAT_CACHE_DELETE,
800 smb_stat_cache_delete);
801 messaging_register(msg_ctx, NULL, MSG_DEBUG, smbd_msg_debug);
802 messaging_register(msg_ctx, server_event_context(), MSG_PRINTER_PCAP,
803 smb_pcap_updated);
804 brl_register_msgs(msg_ctx);
806 msg_idmap_register_msgs(msg_ctx);
808 #ifdef CLUSTER_SUPPORT
809 if (lp_clustering()) {
810 ctdbd_register_reconfigure(messaging_ctdbd_connection());
812 #endif
814 #ifdef DEVELOPER
815 messaging_register(msg_ctx, NULL, MSG_SMB_INJECT_FAULT,
816 msg_inject_fault);
817 #endif
819 if (lp_multicast_dns_register() && (dns_port != 0)) {
820 #ifdef WITH_DNSSD_SUPPORT
821 smbd_setup_mdns_registration(smbd_event_context(),
822 parent, dns_port);
823 #endif
824 #ifdef WITH_AVAHI_SUPPORT
825 void *avahi_conn;
827 avahi_conn = avahi_start_register(
828 smbd_event_context(), smbd_event_context(), dns_port);
829 if (avahi_conn == NULL) {
830 DEBUG(10, ("avahi_start_register failed\n"));
832 #endif
835 return true;
838 static void smbd_parent_loop(struct smbd_parent_context *parent)
840 /* now accept incoming connections - forking a new process
841 for each incoming connection */
842 DEBUG(2,("waiting for connections\n"));
843 while (1) {
844 int ret;
845 TALLOC_CTX *frame = talloc_stackframe();
847 ret = tevent_loop_once(smbd_event_context());
848 if (ret != 0) {
849 exit_server_cleanly("tevent_loop_once() error");
852 TALLOC_FREE(frame);
853 } /* end while 1 */
855 /* NOTREACHED return True; */
859 /****************************************************************************
860 Initialise connect, service and file structs.
861 ****************************************************************************/
863 static bool init_structs(void )
866 * Set the machine NETBIOS name if not already
867 * set from the config file.
870 if (!init_names())
871 return False;
873 if (!secrets_init())
874 return False;
876 return True;
879 /****************************************************************************
880 main program.
881 ****************************************************************************/
883 /* Declare prototype for build_options() to avoid having to run it through
884 mkproto.h. Mixing $(builddir) and $(srcdir) source files in the current
885 prototype generation system is too complicated. */
887 extern void build_options(bool screen);
889 int main(int argc,const char *argv[])
891 /* shall I run as a daemon */
892 bool is_daemon = false;
893 bool interactive = false;
894 bool Fork = true;
895 bool no_process_group = false;
896 bool log_stdout = false;
897 char *ports = NULL;
898 char *profile_level = NULL;
899 int opt;
900 poptContext pc;
901 bool print_build_options = False;
902 enum {
903 OPT_DAEMON = 1000,
904 OPT_INTERACTIVE,
905 OPT_FORK,
906 OPT_NO_PROCESS_GROUP,
907 OPT_LOG_STDOUT
909 struct poptOption long_options[] = {
910 POPT_AUTOHELP
911 {"daemon", 'D', POPT_ARG_NONE, NULL, OPT_DAEMON, "Become a daemon (default)" },
912 {"interactive", 'i', POPT_ARG_NONE, NULL, OPT_INTERACTIVE, "Run interactive (not a daemon)"},
913 {"foreground", 'F', POPT_ARG_NONE, NULL, OPT_FORK, "Run daemon in foreground (for daemontools, etc.)" },
914 {"no-process-group", '\0', POPT_ARG_NONE, NULL, OPT_NO_PROCESS_GROUP, "Don't create a new process group" },
915 {"log-stdout", 'S', POPT_ARG_NONE, NULL, OPT_LOG_STDOUT, "Log to stdout" },
916 {"build-options", 'b', POPT_ARG_NONE, NULL, 'b', "Print build options" },
917 {"port", 'p', POPT_ARG_STRING, &ports, 0, "Listen on the specified ports"},
918 {"profiling-level", 'P', POPT_ARG_STRING, &profile_level, 0, "Set profiling level","PROFILE_LEVEL"},
919 POPT_COMMON_SAMBA
920 POPT_COMMON_DYNCONFIG
921 POPT_TABLEEND
923 struct smbd_parent_context *parent = NULL;
924 TALLOC_CTX *frame;
925 NTSTATUS status;
928 * Do this before any other talloc operation
930 talloc_enable_null_tracking();
931 frame = talloc_stackframe();
933 load_case_tables();
935 /* Initialize the event context, it will panic on error */
936 smbd_event_context();
938 smbd_init_globals();
940 TimeInit();
942 #ifdef HAVE_SET_AUTH_PARAMETERS
943 set_auth_parameters(argc,argv);
944 #endif
946 pc = poptGetContext("smbd", argc, argv, long_options, 0);
947 while((opt = poptGetNextOpt(pc)) != -1) {
948 switch (opt) {
949 case OPT_DAEMON:
950 is_daemon = true;
951 break;
952 case OPT_INTERACTIVE:
953 interactive = true;
954 break;
955 case OPT_FORK:
956 Fork = false;
957 break;
958 case OPT_NO_PROCESS_GROUP:
959 no_process_group = true;
960 break;
961 case OPT_LOG_STDOUT:
962 log_stdout = true;
963 break;
964 case 'b':
965 print_build_options = True;
966 break;
967 default:
968 d_fprintf(stderr, "\nInvalid option %s: %s\n\n",
969 poptBadOption(pc, 0), poptStrerror(opt));
970 poptPrintUsage(pc, stderr, 0);
971 exit(1);
974 poptFreeContext(pc);
976 if (interactive) {
977 Fork = False;
978 log_stdout = True;
981 if (log_stdout) {
982 setup_logging(argv[0], DEBUG_STDOUT);
983 } else {
984 setup_logging(argv[0], DEBUG_FILE);
987 if (print_build_options) {
988 build_options(True); /* Display output to screen as well as debug */
989 exit(0);
992 #ifdef HAVE_SETLUID
993 /* needed for SecureWare on SCO */
994 setluid(0);
995 #endif
997 set_remote_machine_name("smbd", False);
999 if (interactive && (DEBUGLEVEL >= 9)) {
1000 talloc_enable_leak_report();
1003 if (log_stdout && Fork) {
1004 DEBUG(0,("ERROR: Can't log to stdout (-S) unless daemon is in foreground (-F) or interactive (-i)\n"));
1005 exit(1);
1008 /* we want to re-seed early to prevent time delays causing
1009 client problems at a later date. (tridge) */
1010 generate_random_buffer(NULL, 0);
1012 /* get initial effective uid and gid */
1013 sec_init();
1015 /* make absolutely sure we run as root - to handle cases where people
1016 are crazy enough to have it setuid */
1017 gain_root_privilege();
1018 gain_root_group_privilege();
1020 fault_setup((void (*)(void *))exit_server_fault);
1021 dump_core_setup("smbd");
1023 /* we are never interested in SIGPIPE */
1024 BlockSignals(True,SIGPIPE);
1026 #if defined(SIGFPE)
1027 /* we are never interested in SIGFPE */
1028 BlockSignals(True,SIGFPE);
1029 #endif
1031 #if defined(SIGUSR2)
1032 /* We are no longer interested in USR2 */
1033 BlockSignals(True,SIGUSR2);
1034 #endif
1036 /* POSIX demands that signals are inherited. If the invoking process has
1037 * these signals masked, we will have problems, as we won't recieve them. */
1038 BlockSignals(False, SIGHUP);
1039 BlockSignals(False, SIGUSR1);
1040 BlockSignals(False, SIGTERM);
1042 /* Ensure we leave no zombies until we
1043 * correctly set up child handling below. */
1045 CatchChild();
1047 /* we want total control over the permissions on created files,
1048 so set our umask to 0 */
1049 umask(0);
1051 reopen_logs();
1053 DEBUG(0,("smbd version %s started.\n", samba_version_string()));
1054 DEBUGADD(0,("%s\n", COPYRIGHT_STARTUP_MESSAGE));
1056 DEBUG(2,("uid=%d gid=%d euid=%d egid=%d\n",
1057 (int)getuid(),(int)getgid(),(int)geteuid(),(int)getegid()));
1059 /* Output the build options to the debug log */
1060 build_options(False);
1062 if (sizeof(uint16) < 2 || sizeof(uint32) < 4) {
1063 DEBUG(0,("ERROR: Samba is not configured correctly for the word size on your machine\n"));
1064 exit(1);
1067 if (!lp_load_initial_only(get_dyn_CONFIGFILE())) {
1068 DEBUG(0, ("error opening config file\n"));
1069 exit(1);
1072 /* Init the security context and global current_user */
1073 init_sec_ctx();
1075 if (smbd_messaging_context() == NULL)
1076 exit(1);
1079 * Reloading of the printers will not work here as we don't have a
1080 * server info and rpc services set up. It will be called later.
1082 if (!reload_services(smbd_messaging_context(), -1, False)) {
1083 exit(1);
1086 /* ...NOTE... Log files are working from this point! */
1088 DEBUG(3,("loaded services\n"));
1090 init_structs();
1092 #ifdef WITH_PROFILE
1093 if (!profile_setup(smbd_messaging_context(), False)) {
1094 DEBUG(0,("ERROR: failed to setup profiling\n"));
1095 return -1;
1097 if (profile_level != NULL) {
1098 int pl = atoi(profile_level);
1099 struct server_id src;
1101 DEBUG(1, ("setting profiling level: %s\n",profile_level));
1102 src.pid = getpid();
1103 set_profile_level(pl, src);
1105 #endif
1107 if (!is_daemon && !is_a_socket(0)) {
1108 if (!interactive)
1109 DEBUG(0,("standard input is not a socket, assuming -D option\n"));
1112 * Setting is_daemon here prevents us from eventually calling
1113 * the open_sockets_inetd()
1116 is_daemon = True;
1119 if (is_daemon && !interactive) {
1120 DEBUG( 3, ( "Becoming a daemon.\n" ) );
1121 become_daemon(Fork, no_process_group, log_stdout);
1124 set_my_unique_id(serverid_get_random_unique_id());
1126 #if HAVE_SETPGID
1128 * If we're interactive we want to set our own process group for
1129 * signal management.
1131 if (interactive && !no_process_group)
1132 setpgid( (pid_t)0, (pid_t)0);
1133 #endif
1135 if (!directory_exist(lp_lockdir()))
1136 mkdir(lp_lockdir(), 0755);
1138 if (is_daemon)
1139 pidfile_create("smbd");
1141 status = reinit_after_fork(smbd_messaging_context(),
1142 smbd_event_context(),
1143 procid_self(), false);
1144 if (!NT_STATUS_IS_OK(status)) {
1145 DEBUG(0,("reinit_after_fork() failed\n"));
1146 exit(1);
1149 smbd_server_conn->msg_ctx = smbd_messaging_context();
1151 smbd_setup_sig_term_handler();
1152 smbd_setup_sig_hup_handler(smbd_event_context(),
1153 smbd_server_conn->msg_ctx);
1155 /* Setup all the TDB's - including CLEAR_IF_FIRST tdb's. */
1157 if (smbd_memcache() == NULL) {
1158 exit(1);
1161 memcache_set_global(smbd_memcache());
1163 /* Initialise the password backed before the global_sam_sid
1164 to ensure that we fetch from ldap before we make a domain sid up */
1166 if(!initialize_password_db(False, smbd_event_context()))
1167 exit(1);
1169 if (!secrets_init()) {
1170 DEBUG(0, ("ERROR: smbd can not open secrets.tdb\n"));
1171 exit(1);
1174 if (lp_server_role() == ROLE_DOMAIN_BDC || lp_server_role() == ROLE_DOMAIN_PDC) {
1175 if (!open_schannel_session_store(NULL, lp_private_dir())) {
1176 DEBUG(0,("ERROR: Samba cannot open schannel store for secured NETLOGON operations.\n"));
1177 exit(1);
1181 if(!get_global_sam_sid()) {
1182 DEBUG(0,("ERROR: Samba cannot create a SAM SID.\n"));
1183 exit(1);
1186 if (!sessionid_init()) {
1187 exit(1);
1190 if (!connections_init(True))
1191 exit(1);
1193 if (!locking_init())
1194 exit(1);
1196 if (!messaging_tdb_parent_init(smbd_event_context())) {
1197 exit(1);
1200 if (!notify_internal_parent_init(smbd_event_context())) {
1201 exit(1);
1204 if (!serverid_parent_init(smbd_event_context())) {
1205 exit(1);
1208 if (!printer_list_parent_init()) {
1209 exit(1);
1212 if (!W_ERROR_IS_OK(registry_init_full()))
1213 exit(1);
1215 /* Open the share_info.tdb here, so we don't have to open
1216 after the fork on every single connection. This is a small
1217 performance improvment and reduces the total number of system
1218 fds used. */
1219 if (!share_info_db_init()) {
1220 DEBUG(0,("ERROR: failed to load share info db.\n"));
1221 exit(1);
1224 status = init_system_info();
1225 if (!NT_STATUS_IS_OK(status)) {
1226 DEBUG(1, ("ERROR: failed to setup system user info: %s.\n",
1227 nt_errstr(status)));
1228 return -1;
1231 if (!init_guest_info()) {
1232 DEBUG(0,("ERROR: failed to setup guest info.\n"));
1233 return -1;
1236 if (!file_init(smbd_server_conn)) {
1237 DEBUG(0, ("ERROR: file_init failed\n"));
1238 return -1;
1241 if (is_daemon && !interactive) {
1242 const char *rpcsrv_type;
1244 rpcsrv_type = lp_parm_const_string(GLOBAL_SECTION_SNUM,
1245 "rpc_server", "epmapper",
1246 "none");
1247 if (StrCaseCmp(rpcsrv_type, "daemon") == 0) {
1248 start_epmd(smbd_event_context(),
1249 smbd_server_conn->msg_ctx);
1253 if (!dcesrv_ep_setup(smbd_event_context(), smbd_server_conn->msg_ctx)) {
1254 exit(1);
1258 * The print backend init also migrates the printing tdb's,
1259 * this requires a winreg pipe.
1261 if (!print_backend_init(smbd_messaging_context()))
1262 exit(1);
1264 /* Publish nt printers, this requires a working winreg pipe */
1265 pcap_cache_reload(server_event_context(), smbd_messaging_context(),
1266 &reload_printers);
1268 /* only start the background queue daemon if we are
1269 running as a daemon -- bad things will happen if
1270 smbd is launched via inetd and we fork a copy of
1271 ourselves here */
1273 if (is_daemon && !interactive
1274 && lp_parm_bool(-1, "smbd", "backgroundqueue", true)) {
1275 start_background_queue(smbd_event_context(),
1276 smbd_messaging_context());
1279 if (is_daemon && !_lp_disable_spoolss()) {
1280 const char *rpcsrv_type;
1282 /* start spoolss daemon */
1283 /* start as a separate daemon only if enabled */
1284 rpcsrv_type = lp_parm_const_string(GLOBAL_SECTION_SNUM,
1285 "rpc_server", "spoolss",
1286 "embedded");
1287 if (StrCaseCmp(rpcsrv_type, "daemon") == 0) {
1288 start_spoolssd(smbd_event_context(),
1289 smbd_messaging_context());
1293 if (!is_daemon) {
1294 /* inetd mode */
1295 TALLOC_FREE(frame);
1297 /* Started from inetd. fd 0 is the socket. */
1298 /* We will abort gracefully when the client or remote system
1299 goes away */
1300 smbd_set_server_fd(dup(0));
1302 /* close our standard file descriptors */
1303 close_low_fds(False); /* Don't close stderr */
1305 #ifdef HAVE_ATEXIT
1306 atexit(killkids);
1307 #endif
1309 /* Stop zombies */
1310 smbd_setup_sig_chld_handler();
1312 smbd_process(smbd_server_conn);
1314 exit_server_cleanly(NULL);
1315 return(0);
1318 parent = talloc_zero(smbd_event_context(), struct smbd_parent_context);
1319 if (!parent) {
1320 exit_server("talloc(struct smbd_parent_context) failed");
1322 parent->interactive = interactive;
1324 if (!open_sockets_smbd(parent, smbd_messaging_context(), ports))
1325 exit_server("open_sockets_smbd() failed");
1327 TALLOC_FREE(frame);
1328 /* make sure we always have a valid stackframe */
1329 frame = talloc_stackframe();
1331 smbd_parent_loop(parent);
1333 exit_server_cleanly(NULL);
1334 TALLOC_FREE(frame);
1335 return(0);