?  search:
summary | log | graphiclog1 | graphiclog2 | commit | commitdiff | tree | refs | edit | fork
blame | history | raw | HEAD
wins: fix null pointer crash in nss_wins module.
[Samba.git] / source / smbd / server.c
blobcf02589864c66b4baf8f46cd6f8c2c9ebaac9c40
1 /*
2 Unix SMB/CIFS implementation.
3 Main SMB server routines
4 Copyright (C) Andrew Tridgell 1992-1998
5 Copyright (C) Martin Pool 2002
6 Copyright (C) Jelmer Vernooij 2002-2003
7 Copyright (C) Volker Lendecke 1993-2007
8 Copyright (C) Jeremy Allison 1993-2007
9
10 This program is free software; you can redistribute it and/or modify
11 it under the terms of the GNU General Public License as published by
12 the Free Software Foundation; either version 3 of the License, or
13 (at your option) any later version.
14
15 This program is distributed in the hope that it will be useful,
16 but WITHOUT ANY WARRANTY; without even the implied warranty of
17 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
18 GNU General Public License for more details.
19
20 You should have received a copy of the GNU General Public License
21 along with this program. If not, see <http://www.gnu.org/licenses/>.
22 */
23
24 #include "includes.h"
25
26 static_decl_rpc;
27
28 static int am_parent = 1;
29
30 extern struct auth_context *negprot_global_auth_context;
31 extern SIG_ATOMIC_T got_sig_term;
32 extern SIG_ATOMIC_T reload_after_sighup;
33 static SIG_ATOMIC_T got_sig_cld;
34
35 #ifdef WITH_DFS
36 extern int dcelogin_atmost_once;
37 #endif /* WITH_DFS */
38
39 /* really we should have a top level context structure that has the
40 client file descriptor as an element. That would require a major rewrite :(
41
42 the following 2 functions are an alternative - they make the file
43 descriptor private to smbd
44 */
45 static int server_fd = -1;
46
47 int smbd_server_fd(void)
48 {
49 return server_fd;
50 }
51
52 static void smbd_set_server_fd(int fd)
53 {
54 server_fd = fd;
55 }
56
57 int get_client_fd(void)
58 {
59 return server_fd;
60 }
61
62 int client_get_tcp_info(struct sockaddr_in *server, struct sockaddr_in *client)
63 {
64 socklen_t length;
65 if (server_fd == -1) {
66 return -1;
67 }
68 length = sizeof(*server);
69 if (getsockname(server_fd, (struct sockaddr *)server, &length) != 0) {
70 return -1;
71 }
72 length = sizeof(*client);
73 if (getpeername(server_fd, (struct sockaddr *)client, &length) != 0) {
74 return -1;
75 }
76 return 0;
77 }
78
79 struct event_context *smbd_event_context(void)
80 {
81 static struct event_context *ctx;
82
83 if (!ctx && !(ctx = event_context_init(NULL))) {
84 smb_panic("Could not init smbd event context");
85 }
86 return ctx;
87 }
88
89 struct messaging_context *smbd_messaging_context(void)
90 {
91 static struct messaging_context *ctx;
92
93 if (!ctx && !(ctx = messaging_init(NULL, server_id_self(),
94 smbd_event_context()))) {
95 smb_panic("Could not init smbd messaging context");
96 }
97 return ctx;
98 }
99
100 struct memcache *smbd_memcache(void)
101 {
102 static struct memcache *cache;
103
104 if (!cache
105 && !(cache = memcache_init(NULL,
106 lp_max_stat_cache_size()*1024))) {
107
108 smb_panic("Could not init smbd memcache");
109 }
110 return cache;
111 }
112
113 /*******************************************************************
114 What to do when smb.conf is updated.
115 ********************************************************************/
116
117 static void smb_conf_updated(struct messaging_context *msg,
118 void *private_data,
119 uint32_t msg_type,
120 struct server_id server_id,
121 DATA_BLOB *data)
122 {
123 DEBUG(10,("smb_conf_updated: Got message saying smb.conf was "
124 "updated. Reloading.\n"));
125 reload_services(False);
126 }
127
128
129 /*******************************************************************
130 Delete a statcache entry.
131 ********************************************************************/
132
133 static void smb_stat_cache_delete(struct messaging_context *msg,
134 void *private_data,
135 uint32_t msg_tnype,
136 struct server_id server_id,
137 DATA_BLOB *data)
138 {
139 const char *name = (const char *)data->data;
140 DEBUG(10,("smb_stat_cache_delete: delete name %s\n", name));
141 stat_cache_delete(name);
142 }
143
144 /****************************************************************************
145 Terminate signal.
146 ****************************************************************************/
147
148 static void sig_term(void)
149 {
150 got_sig_term = 1;
151 sys_select_signal(SIGTERM);
152 }
153
154 /****************************************************************************
155 Catch a sighup.
156 ****************************************************************************/
157
158 static void sig_hup(int sig)
159 {
160 reload_after_sighup = 1;
161 sys_select_signal(SIGHUP);
162 }
163
164 /****************************************************************************
165 Catch a sigcld
166 ****************************************************************************/
167 static void sig_cld(int sig)
168 {
169 got_sig_cld = 1;
170 sys_select_signal(SIGCLD);
171 }
172
173 /****************************************************************************
174 Send a SIGTERM to our process group.
175 *****************************************************************************/
176
177 static void killkids(void)
178 {
179 if(am_parent) kill(0,SIGTERM);
180 }
181
182 /****************************************************************************
183 Process a sam sync message - not sure whether to do this here or
184 somewhere else.
185 ****************************************************************************/
186
187 static void msg_sam_sync(struct messaging_context *msg,
188 void *private_data,
189 uint32_t msg_type,
190 struct server_id server_id,
191 DATA_BLOB *data)
192 {
193 DEBUG(10, ("** sam sync message received, ignoring\n"));
194 }
195
196
197 /****************************************************************************
198 Open the socket communication - inetd.
199 ****************************************************************************/
200
201 static bool open_sockets_inetd(void)
202 {
203 /* Started from inetd. fd 0 is the socket. */
204 /* We will abort gracefully when the client or remote system
205 goes away */
206 smbd_set_server_fd(dup(0));
207
208 /* close our standard file descriptors */
209 close_low_fds(False); /* Don't close stderr */
210
211 set_socket_options(smbd_server_fd(),"SO_KEEPALIVE");
212 set_socket_options(smbd_server_fd(), lp_socket_options());
213
214 return True;
215 }
216
217 static void msg_exit_server(struct messaging_context *msg,
218 void *private_data,
219 uint32_t msg_type,
220 struct server_id server_id,
221 DATA_BLOB *data)
222 {
223 DEBUG(3, ("got a SHUTDOWN message\n"));
224 exit_server_cleanly(NULL);
225 }
226
227 #ifdef DEVELOPER
228 static void msg_inject_fault(struct messaging_context *msg,
229 void *private_data,
230 uint32_t msg_type,
231 struct server_id src,
232 DATA_BLOB *data)
233 {
234 int sig;
235
236 if (data->length != sizeof(sig)) {
237
238 DEBUG(0, ("Process %s sent bogus signal injection request\n",
239 procid_str_static(&src)));
240 return;
241 }
242
243 sig = *(int *)data->data;
244 if (sig == -1) {
245 exit_server("internal error injected");
246 return;
247 }
248
249 #if HAVE_STRSIGNAL
250 DEBUG(0, ("Process %s requested injection of signal %d (%s)\n",
251 procid_str_static(&src), sig, strsignal(sig)));
252 #else
253 DEBUG(0, ("Process %s requested injection of signal %d\n",
254 procid_str_static(&src), sig));
255 #endif
256
257 kill(sys_getpid(), sig);
258 }
259 #endif /* DEVELOPER */
260
261 struct child_pid {
262 struct child_pid *prev, *next;
263 pid_t pid;
264 };
265
266 static struct child_pid *children;
267 static int num_children;
268
269 static void add_child_pid(pid_t pid)
270 {
271 struct child_pid *child;
272
273 if (lp_max_smbd_processes() == 0) {
274 /* Don't bother with the child list if we don't care anyway */
275 return;
276 }
277
278 child = SMB_MALLOC_P(struct child_pid);
279 if (child == NULL) {
280 DEBUG(0, ("Could not add child struct -- malloc failed\n"));
281 return;
282 }
283 child->pid = pid;
284 DLIST_ADD(children, child);
285 num_children += 1;
286 }
287
288 static void remove_child_pid(pid_t pid, bool unclean_shutdown)
289 {
290 struct child_pid *child;
291
292 if (unclean_shutdown) {
293 /* a child terminated uncleanly so tickle all processes to see
294 if they can grab any of the pending locks
295 */
296 messaging_send_buf(smbd_messaging_context(), procid_self(),
297 MSG_SMB_BRL_VALIDATE, NULL, 0);
298 message_send_all(smbd_messaging_context(),
299 MSG_SMB_UNLOCK, NULL, 0, NULL);
300 }
301
302 if (lp_max_smbd_processes() == 0) {
303 /* Don't bother with the child list if we don't care anyway */
304 return;
305 }
306
307 for (child = children; child != NULL; child = child->next) {
308 if (child->pid == pid) {
309 struct child_pid *tmp = child;
310 DLIST_REMOVE(children, child);
311 SAFE_FREE(tmp);
312 num_children -= 1;
313 return;
314 }
315 }
316
317 DEBUG(0, ("Could not find child %d -- ignoring\n", (int)pid));
318 }
319
320 /****************************************************************************
321 Have we reached the process limit ?
322 ****************************************************************************/
323
324 static bool allowable_number_of_smbd_processes(void)
325 {
326 int max_processes = lp_max_smbd_processes();
327
328 if (!max_processes)
329 return True;
330
331 return num_children < max_processes;
332 }
333
334 /****************************************************************************
335 Open the socket communication.
336 ****************************************************************************/
337
338 static bool open_sockets_smbd(bool is_daemon, bool interactive, const char *smb_ports)
339 {
340 int num_interfaces = iface_count();
341 int num_sockets = 0;
342 int fd_listenset[FD_SETSIZE];
343 fd_set listen_set;
344 int s;
345 int maxfd = 0;
346 int i;
347 char *ports;
348 struct dns_reg_state * dns_reg = NULL;
349 unsigned dns_port = 0;
350
351 if (!is_daemon) {
352 return open_sockets_inetd();
353 }
354
355 #ifdef HAVE_ATEXIT
356 {
357 static int atexit_set;
358 if(atexit_set == 0) {
359 atexit_set=1;
360 atexit(killkids);
361 }
362 }
363 #endif
364
365 /* Stop zombies */
366 CatchSignal(SIGCLD, sig_cld);
367
368 FD_ZERO(&listen_set);
369
370 /* use a reasonable default set of ports - listing on 445 and 139 */
371 if (!smb_ports) {
372 ports = lp_smb_ports();
373 if (!ports || !*ports) {
374 ports = smb_xstrdup(SMB_PORTS);
375 } else {
376 ports = smb_xstrdup(ports);
377 }
378 } else {
379 ports = smb_xstrdup(smb_ports);
380 }
381
382 if (lp_interfaces() && lp_bind_interfaces_only()) {
383 /* We have been given an interfaces line, and been
384 told to only bind to those interfaces. Create a
385 socket per interface and bind to only these.
386 */
387
388 /* Now open a listen socket for each of the
389 interfaces. */
390 for(i = 0; i < num_interfaces; i++) {
391 TALLOC_CTX *frame = NULL;
392 const struct sockaddr_storage *ifss =
393 iface_n_sockaddr_storage(i);
394 char *tok;
395 const char *ptr;
396
397 if (ifss == NULL) {
398 DEBUG(0,("open_sockets_smbd: "
399 "interface %d has NULL IP address !\n",
400 i));
401 continue;
402 }
403
404 frame = talloc_stackframe();
405 for (ptr=ports;
406 next_token_talloc(frame,&ptr, &tok, " \t,");) {
407 unsigned port = atoi(tok);
408 if (port == 0 || port > 0xffff) {
409 continue;
410 }
411
412 /* Keep the first port for mDNS service
413 * registration.
414 */
415 if (dns_port == 0) {
416 dns_port = port;
417 }
418
419 s = fd_listenset[num_sockets] =
420 open_socket_in(SOCK_STREAM,
421 port,
422 num_sockets == 0 ? 0 : 2,
423 ifss,
424 true);
425 if(s == -1) {
426 continue;
427 }
428
429 /* ready to listen */
430 set_socket_options(s,"SO_KEEPALIVE");
431 set_socket_options(s,lp_socket_options());
432
433 /* Set server socket to
434 * non-blocking for the accept. */
435 set_blocking(s,False);
436
437 if (listen(s, SMBD_LISTEN_BACKLOG) == -1) {
438 DEBUG(0,("open_sockets_smbd: listen: "
439 "%s\n", strerror(errno)));
440 close(s);
441 TALLOC_FREE(frame);
442 return False;
443 }
444 FD_SET(s,&listen_set);
445 maxfd = MAX( maxfd, s);
446
447 num_sockets++;
448 if (num_sockets >= FD_SETSIZE) {
449 DEBUG(0,("open_sockets_smbd: Too "
450 "many sockets to bind to\n"));
451 TALLOC_FREE(frame);
452 return False;
453 }
454 }
455 TALLOC_FREE(frame);
456 }
457 } else {
458 /* Just bind to 0.0.0.0 - accept connections
459 from anywhere. */
460
461 TALLOC_CTX *frame = talloc_stackframe();
462 char *tok;
463 const char *ptr;
464 const char *sock_addr = lp_socket_address();
465 char *sock_tok;
466 const char *sock_ptr;
467
468 if (strequal(sock_addr, "0.0.0.0") ||
469 strequal(sock_addr, "::")) {
470 #if HAVE_IPV6
471 sock_addr = "::,0.0.0.0";
472 #else
473 sock_addr = "0.0.0.0";
474 #endif
475 }
476
477 for (sock_ptr=sock_addr;
478 next_token_talloc(frame, &sock_ptr, &sock_tok, " \t,"); ) {
479 for (ptr=ports; next_token_talloc(frame, &ptr, &tok, " \t,"); ) {
480 struct sockaddr_storage ss;
481
482 unsigned port = atoi(tok);
483 if (port == 0 || port > 0xffff) {
484 continue;
485 }
486
487 /* Keep the first port for mDNS service
488 * registration.
489 */
490 if (dns_port == 0) {
491 dns_port = port;
492 }
493
494 /* open an incoming socket */
495 if (!interpret_string_addr(&ss, sock_tok,
496 AI_NUMERICHOST|AI_PASSIVE)) {
497 continue;
498 }
499
500 s = open_socket_in(SOCK_STREAM,
501 port,
502 num_sockets == 0 ? 0 : 2,
503 &ss,
504 true);
505 if (s == -1) {
506 continue;
507 }
508
509 /* ready to listen */
510 set_socket_options(s,"SO_KEEPALIVE");
511 set_socket_options(s,lp_socket_options());
512
513 /* Set server socket to non-blocking
514 * for the accept. */
515 set_blocking(s,False);
516
517 if (listen(s, SMBD_LISTEN_BACKLOG) == -1) {
518 DEBUG(0,("open_sockets_smbd: "
519 "listen: %s\n",
520 strerror(errno)));
521 close(s);
522 TALLOC_FREE(frame);
523 return False;
524 }
525
526 fd_listenset[num_sockets] = s;
527 FD_SET(s,&listen_set);
528 maxfd = MAX( maxfd, s);
529
530 num_sockets++;
531
532 if (num_sockets >= FD_SETSIZE) {
533 DEBUG(0,("open_sockets_smbd: Too "
534 "many sockets to bind to\n"));
535 TALLOC_FREE(frame);
536 return False;
537 }
538 }
539 }
540 TALLOC_FREE(frame);
541 }
542
543 SAFE_FREE(ports);
544
545 if (num_sockets == 0) {
546 DEBUG(0,("open_sockets_smbd: No "
547 "sockets available to bind to.\n"));
548 return false;
549 }
550
551 /* Setup the main smbd so that we can get messages. Note that
552 do this after starting listening. This is needed as when in
553 clustered mode, ctdb won't allow us to start doing database
554 operations until it has gone thru a full startup, which
555 includes checking to see that smbd is listening. */
556 claim_connection(NULL,"",
557 FLAG_MSG_GENERAL|FLAG_MSG_SMBD|FLAG_MSG_DBWRAP);
558
559 /* Listen to messages */
560
561 messaging_register(smbd_messaging_context(), NULL,
562 MSG_SMB_SAM_SYNC, msg_sam_sync);
563 messaging_register(smbd_messaging_context(), NULL,
564 MSG_SHUTDOWN, msg_exit_server);
565 messaging_register(smbd_messaging_context(), NULL,
566 MSG_SMB_FILE_RENAME, msg_file_was_renamed);
567 messaging_register(smbd_messaging_context(), NULL,
568 MSG_SMB_CONF_UPDATED, smb_conf_updated);
569 messaging_register(smbd_messaging_context(), NULL,
570 MSG_SMB_STAT_CACHE_DELETE, smb_stat_cache_delete);
571 brl_register_msgs(smbd_messaging_context());
572
573 #ifdef DEVELOPER
574 messaging_register(smbd_messaging_context(), NULL,
575 MSG_SMB_INJECT_FAULT, msg_inject_fault);
576 #endif
577
578 /* now accept incoming connections - forking a new process
579 for each incoming connection */
580 DEBUG(2,("waiting for a connection\n"));
581 while (1) {
582 struct timeval now, idle_timeout;
583 fd_set r_fds, w_fds;
584 int num;
585
586 /* Ensure we respond to PING and DEBUG messages from the main smbd. */
587 message_dispatch(smbd_messaging_context());
588
589 if (got_sig_cld) {
590 pid_t pid;
591 int status;
592
593 got_sig_cld = False;
594
595 while ((pid = sys_waitpid(-1, &status, WNOHANG)) > 0) {
596 bool unclean_shutdown = False;
597
598 /* If the child terminated normally, assume
599 it was an unclean shutdown unless the
600 status is 0
601 */
602 if (WIFEXITED(status)) {
603 unclean_shutdown = WEXITSTATUS(status);
604 }
605 /* If the child terminated due to a signal
606 we always assume it was unclean.
607 */
608 if (WIFSIGNALED(status)) {
609 unclean_shutdown = True;
610 }
611 remove_child_pid(pid, unclean_shutdown);
612 }
613 }
614
615 idle_timeout = timeval_zero();
616
617 memcpy((char *)&r_fds, (char *)&listen_set,
618 sizeof(listen_set));
619 FD_ZERO(&w_fds);
620 GetTimeOfDay(&now);
621
622 /* Kick off our mDNS registration. */
623 if (dns_port != 0) {
624 dns_register_smbd(&dns_reg, dns_port, &maxfd,
625 &r_fds, &idle_timeout);
626 }
627
628 event_add_to_select_args(smbd_event_context(), &now,
629 &r_fds, &w_fds, &idle_timeout,
630 &maxfd);
631
632 num = sys_select(maxfd+1,&r_fds,&w_fds,NULL,
633 timeval_is_zero(&idle_timeout) ?
634 NULL : &idle_timeout);
635
636 if (num == -1 && errno == EINTR) {
637 if (got_sig_term) {
638 exit_server_cleanly(NULL);
639 }
640
641 /* check for sighup processing */
642 if (reload_after_sighup) {
643 change_to_root_user();
644 DEBUG(1,("Reloading services after SIGHUP\n"));
645 reload_services(False);
646 reload_after_sighup = 0;
647 }
648
649 continue;
650 }
651
652
653 /* If the idle timeout fired and we don't have any connected
654 * users, exit gracefully. We should be running under a process
655 * controller that will restart us if necessry.
656 */
657 if (num == 0 && count_all_current_connections() == 0) {
658 exit_server_cleanly("idle timeout");
659 }
660
661 /* process pending nDNS responses */
662 if (dns_register_smbd_reply(dns_reg, &r_fds, &idle_timeout)) {
663 --num;
664 }
665
666 if (run_events(smbd_event_context(), num, &r_fds, &w_fds)) {
667 continue;
668 }
669
670 /* check if we need to reload services */
671 check_reload(time(NULL));
672
673 /* Find the sockets that are read-ready -
674 accept on these. */
675 for( ; num > 0; num--) {
676 struct sockaddr addr;
677 socklen_t in_addrlen = sizeof(addr);
678 pid_t child = 0;
679
680 s = -1;
681 for(i = 0; i < num_sockets; i++) {
682 if(FD_ISSET(fd_listenset[i],&r_fds)) {
683 s = fd_listenset[i];
684 /* Clear this so we don't look
685 at it again. */
686 FD_CLR(fd_listenset[i],&r_fds);
687 break;
688 }
689 }
690
691 smbd_set_server_fd(accept(s,&addr,&in_addrlen));
692
693 if (smbd_server_fd() == -1 && errno == EINTR)
694 continue;
695
696 if (smbd_server_fd() == -1) {
697 DEBUG(2,("open_sockets_smbd: accept: %s\n",
698 strerror(errno)));
699 continue;
700 }
701
702 /* Ensure child is set to blocking mode */
703 set_blocking(smbd_server_fd(),True);
704
705 if (smbd_server_fd() != -1 && interactive)
706 return True;
707
708 if (allowable_number_of_smbd_processes() &&
709 smbd_server_fd() != -1 &&
710 ((child = sys_fork())==0)) {
711 char remaddr[INET6_ADDRSTRLEN];
712
713 /* Child code ... */
714
715 /* Stop zombies, the parent explicitly handles
716 * them, counting worker smbds. */
717 CatchChild();
718
719 /* close the listening socket(s) */
720 for(i = 0; i < num_sockets; i++)
721 close(fd_listenset[i]);
722
723 /* close our mDNS daemon handle */
724 dns_register_close(&dns_reg);
725
726 /* close our standard file
727 descriptors */
728 close_low_fds(False);
729 am_parent = 0;
730
731 set_socket_options(smbd_server_fd(),"SO_KEEPALIVE");
732 set_socket_options(smbd_server_fd(),
733 lp_socket_options());
734
735 /* this is needed so that we get decent entries
736 in smbstatus for port 445 connects */
737 set_remote_machine_name(get_peer_addr(smbd_server_fd(),
738 remaddr,
739 sizeof(remaddr)),
740 false);
741
742 if (!reinit_after_fork(
743 smbd_messaging_context(), true)) {
744 DEBUG(0,("reinit_after_fork() failed\n"));
745 smb_panic("reinit_after_fork() failed");
746 }
747
748 return True;
749 }
750 /* The parent doesn't need this socket */
751 close(smbd_server_fd());
752
753 /* Sun May 6 18:56:14 2001 ackley@cs.unm.edu:
754 Clear the closed fd info out of server_fd --
755 and more importantly, out of client_fd in
756 util_sock.c, to avoid a possible
757 getpeername failure if we reopen the logs
758 and use %I in the filename.
759 */
760
761 smbd_set_server_fd(-1);
762
763 if (child != 0) {
764 add_child_pid(child);
765 }
766
767 /* Force parent to check log size after
768 * spawning child. Fix from
769 * klausr@ITAP.Physik.Uni-Stuttgart.De. The
770 * parent smbd will log to logserver.smb. It
771 * writes only two messages for each child
772 * started/finished. But each child writes,
773 * say, 50 messages also in logserver.smb,
774 * begining with the debug_count of the
775 * parent, before the child opens its own log
776 * file logserver.client. In a worst case
777 * scenario the size of logserver.smb would be
778 * checked after about 50*50=2500 messages
779 * (ca. 100kb).
780 * */
781 force_check_log_size();
782
783 } /* end for num */
784 } /* end while 1 */
785
786 /* NOTREACHED return True; */
787 }
788
789 /****************************************************************************
790 Reload printers
791 **************************************************************************/
792 void reload_printers(void)
793 {
794 int snum;
795 int n_services = lp_numservices();
796 int pnum = lp_servicenumber(PRINTERS_NAME);
797 const char *pname;
798
799 pcap_cache_reload();
800
801 /* remove stale printers */
802 for (snum = 0; snum < n_services; snum++) {
803 /* avoid removing PRINTERS_NAME or non-autoloaded printers */
804 if (snum == pnum || !(lp_snum_ok(snum) && lp_print_ok(snum) &&
805 lp_autoloaded(snum)))
806 continue;
807
808 pname = lp_printername(snum);
809 if (!pcap_printername_ok(pname)) {
810 DEBUG(3, ("removing stale printer %s\n", pname));
811
812 if (is_printer_published(NULL, snum, NULL))
813 nt_printer_publish(NULL, snum, SPOOL_DS_UNPUBLISH);
814 del_a_printer(pname);
815 lp_killservice(snum);
816 }
817 }
818
819 load_printers();
820 }
821
822 /****************************************************************************
823 Reload the services file.
824 **************************************************************************/
825
826 bool reload_services(bool test)
827 {
828 bool ret;
829
830 if (lp_loaded()) {
831 char *fname = lp_configfile();
832 if (file_exist(fname, NULL) &&
833 !strcsequal(fname, get_dyn_CONFIGFILE())) {
834 set_dyn_CONFIGFILE(fname);
835 test = False;
836 }
837 }
838
839 reopen_logs();
840
841 if (test && !lp_file_list_changed())
842 return(True);
843
844 lp_killunused(conn_snum_used);
845
846 ret = lp_load(get_dyn_CONFIGFILE(), False, False, True, True);
847
848 reload_printers();
849
850 /* perhaps the config filename is now set */
851 if (!test)
852 reload_services(True);
853
854 reopen_logs();
855
856 load_interfaces();
857
858 if (smbd_server_fd() != -1) {
859 set_socket_options(smbd_server_fd(),"SO_KEEPALIVE");
860 set_socket_options(smbd_server_fd(), lp_socket_options());
861 }
862
863 mangle_reset_cache();
864 reset_stat_cache();
865
866 /* this forces service parameters to be flushed */
867 set_current_service(NULL,0,True);
868
869 return(ret);
870 }
871
872 /****************************************************************************
873 Exit the server.
874 ****************************************************************************/
875
876 /* Reasons for shutting down a server process. */
877 enum server_exit_reason { SERVER_EXIT_NORMAL, SERVER_EXIT_ABNORMAL };
878
879 static void exit_server_common(enum server_exit_reason how,
880 const char *const reason) NORETURN_ATTRIBUTE;
881
882 static void exit_server_common(enum server_exit_reason how,
883 const char *const reason)
884 {
885 static int firsttime=1;
886
887 if (!firsttime)
888 exit(0);
889 firsttime = 0;
890
891 change_to_root_user();
892
893 if (negprot_global_auth_context) {
894 (negprot_global_auth_context->free)(&negprot_global_auth_context);
895 }
896
897 conn_close_all();
898
899 invalidate_all_vuids();
900
901 /* 3 second timeout. */
902 print_notify_send_messages(smbd_messaging_context(), 3);
903
904 /* delete our entry in the connections database. */
905 yield_connection(NULL,"");
906
907 respond_to_all_remaining_local_messages();
908
909 #ifdef WITH_DFS
910 if (dcelogin_atmost_once) {
911 dfs_unlogin();
912 }
913 #endif
914
915 #ifdef USE_DMAPI
916 /* Destroy Samba DMAPI session only if we are master smbd process */
917 if (am_parent) {
918 if (!dmapi_destroy_session()) {
919 DEBUG(0,("Unable to close Samba DMAPI session\n"));
920 }
921 }
922 #endif
923
924 locking_end();
925 printing_end();
926
927 if (how != SERVER_EXIT_NORMAL) {
928 int oldlevel = DEBUGLEVEL;
929
930 DEBUGLEVEL = 10;
931
932 DEBUGSEP(0);
933 DEBUG(0,("Abnormal server exit: %s\n",
934 reason ? reason : "no explanation provided"));
935 DEBUGSEP(0);
936
937 log_stack_trace();
938
939 DEBUGLEVEL = oldlevel;
940 dump_core();
941
942 } else {
943 DEBUG(3,("Server exit (%s)\n",
944 (reason ? reason : "normal exit")));
945 }
946
947 exit(0);
948 }
949
950 void exit_server(const char *const explanation)
951 {
952 exit_server_common(SERVER_EXIT_ABNORMAL, explanation);
953 }
954
955 void exit_server_cleanly(const char *const explanation)
956 {
957 exit_server_common(SERVER_EXIT_NORMAL, explanation);
958 }
959
960 void exit_server_fault(void)
961 {
962 exit_server("critical server fault");
963 }
964
965
966 /****************************************************************************
967 received when we should release a specific IP
968 ****************************************************************************/
969 static void release_ip(const char *ip, void *priv)
970 {
971 char addr[INET6_ADDRSTRLEN];
972
973 if (strcmp(client_socket_addr(get_client_fd(),addr,sizeof(addr)), ip) == 0) {
974 /* we can't afford to do a clean exit - that involves
975 database writes, which would potentially mean we
976 are still running after the failover has finished -
977 we have to get rid of this process ID straight
978 away */
979 DEBUG(0,("Got release IP message for our IP %s - exiting immediately\n",
980 ip));
981 _exit(0);
982 }
983 }
984
985 static void msg_release_ip(struct messaging_context *msg_ctx, void *private_data,
986 uint32_t msg_type, struct server_id server_id, DATA_BLOB *data)
987 {
988 release_ip((char *)data->data, NULL);
989 }
990
991 /****************************************************************************
992 Initialise connect, service and file structs.
993 ****************************************************************************/
994
995 static bool init_structs(void )
996 {
997 /*
998 * Set the machine NETBIOS name if not already
999 * set from the config file.
1000 */
1001
1002 if (!init_names())
1003 return False;
1004
1005 conn_init();
1006
1007 file_init();
1008
1009 /* for RPC pipes */
1010 init_rpc_pipe_hnd();
1011
1012 init_dptrs();
1013
1014 if (!secrets_init())
1015 return False;
1016
1017 return True;
1018 }
1019
1020 /*
1021 * Send keepalive packets to our client
1022 */
1023 static bool keepalive_fn(const struct timeval *now, void *private_data)
1024 {
1025 if (!send_keepalive(smbd_server_fd())) {
1026 DEBUG( 2, ( "Keepalive failed - exiting.\n" ) );
1027 return False;
1028 }
1029 return True;
1030 }
1031
1032 /*
1033 * Do the recurring check if we're idle
1034 */
1035 static bool deadtime_fn(const struct timeval *now, void *private_data)
1036 {
1037 if ((conn_num_open() == 0)
1038 || (conn_idle_all(now->tv_sec))) {
1039 DEBUG( 2, ( "Closing idle connection\n" ) );
1040 messaging_send(smbd_messaging_context(), procid_self(),
1041 MSG_SHUTDOWN, &data_blob_null);
1042 return False;
1043 }
1044
1045 return True;
1046 }
1047
1048
1049 /****************************************************************************
1050 main program.
1051 ****************************************************************************/
1052
1053 /* Declare prototype for build_options() to avoid having to run it through
1054 mkproto.h. Mixing $(builddir) and $(srcdir) source files in the current
1055 prototype generation system is too complicated. */
1056
1057 extern void build_options(bool screen);
1058
1059 int main(int argc,const char *argv[])
1060 {
1061 /* shall I run as a daemon */
1062 static bool is_daemon = False;
1063 static bool interactive = False;
1064 static bool Fork = True;
1065 static bool no_process_group = False;
1066 static bool log_stdout = False;
1067 static char *ports = NULL;
1068 static char *profile_level = NULL;
1069 int opt;
1070 poptContext pc;
1071 bool print_build_options = False;
1072 enum {
1073 OPT_DAEMON = 1000,
1074 OPT_INTERACTIVE,
1075 OPT_FORK,
1076 OPT_NO_PROCESS_GROUP,
1077 OPT_LOG_STDOUT
1078 };
1079 struct poptOption long_options[] = {
1080 POPT_AUTOHELP
1081 {"daemon", 'D', POPT_ARG_NONE, NULL, OPT_DAEMON, "Become a daemon (default)" },
1082 {"interactive", 'i', POPT_ARG_NONE, NULL, OPT_INTERACTIVE, "Run interactive (not a daemon)"},
1083 {"foreground", 'F', POPT_ARG_NONE, NULL, OPT_FORK, "Run daemon in foreground (for daemontools, etc.)" },
1084 {"no-process-group", '\0', POPT_ARG_NONE, NULL, OPT_NO_PROCESS_GROUP, "Don't create a new process group" },
1085 {"log-stdout", 'S', POPT_ARG_NONE, NULL, OPT_LOG_STDOUT, "Log to stdout" },
1086 {"build-options", 'b', POPT_ARG_NONE, NULL, 'b', "Print build options" },
1087 {"port", 'p', POPT_ARG_STRING, &ports, 0, "Listen on the specified ports"},
1088 {"profiling-level", 'P', POPT_ARG_STRING, &profile_level, 0, "Set profiling level","PROFILE_LEVEL"},
1089 POPT_COMMON_SAMBA
1090 POPT_COMMON_DYNCONFIG
1091 POPT_TABLEEND
1092 };
1093 TALLOC_CTX *frame = talloc_stackframe(); /* Setup tos. */
1094
1095 TimeInit();
1096
1097 db_tdb2_setup_messaging(NULL, false);
1098
1099 #ifdef HAVE_SET_AUTH_PARAMETERS
1100 set_auth_parameters(argc,argv);
1101 #endif
1102
1103 pc = poptGetContext("smbd", argc, argv, long_options, 0);
1104 while((opt = poptGetNextOpt(pc)) != -1) {
1105 switch (opt) {
1106 case OPT_DAEMON:
1107 is_daemon = true;
1108 break;
1109 case OPT_INTERACTIVE:
1110 interactive = true;
1111 break;
1112 case OPT_FORK:
1113 Fork = false;
1114 break;
1115 case OPT_NO_PROCESS_GROUP:
1116 no_process_group = true;
1117 break;
1118 case OPT_LOG_STDOUT:
1119 log_stdout = true;
1120 break;
1121 case 'b':
1122 print_build_options = True;
1123 break;
1124 default:
1125 d_fprintf(stderr, "\nInvalid option %s: %s\n\n",
1126 poptBadOption(pc, 0), poptStrerror(opt));
1127 poptPrintUsage(pc, stderr, 0);
1128 exit(1);
1129 }
1130 }
1131 poptFreeContext(pc);
1132
1133 if (interactive) {
1134 Fork = False;
1135 log_stdout = True;
1136 }
1137
1138 setup_logging(argv[0],log_stdout);
1139
1140 if (print_build_options) {
1141 build_options(True); /* Display output to screen as well as debug */
1142 exit(0);
1143 }
1144
1145 load_case_tables();
1146
1147 #ifdef HAVE_SETLUID
1148 /* needed for SecureWare on SCO */
1149 setluid(0);
1150 #endif
1151
1152 sec_init();
1153
1154 set_remote_machine_name("smbd", False);
1155
1156 if (interactive && (DEBUGLEVEL >= 9)) {
1157 talloc_enable_leak_report();
1158 }
1159
1160 if (log_stdout && Fork) {
1161 DEBUG(0,("ERROR: Can't log to stdout (-S) unless daemon is in foreground (-F) or interactive (-i)\n"));
1162 exit(1);
1163 }
1164
1165 /* we want to re-seed early to prevent time delays causing
1166 client problems at a later date. (tridge) */
1167 generate_random_buffer(NULL, 0);
1168
1169 /* make absolutely sure we run as root - to handle cases where people
1170 are crazy enough to have it setuid */
1171
1172 gain_root_privilege();
1173 gain_root_group_privilege();
1174
1175 fault_setup((void (*)(void *))exit_server_fault);
1176 dump_core_setup("smbd");
1177
1178 CatchSignal(SIGTERM , SIGNAL_CAST sig_term);
1179 CatchSignal(SIGHUP,SIGNAL_CAST sig_hup);
1180
1181 /* we are never interested in SIGPIPE */
1182 BlockSignals(True,SIGPIPE);
1183
1184 #if defined(SIGFPE)
1185 /* we are never interested in SIGFPE */
1186 BlockSignals(True,SIGFPE);
1187 #endif
1188
1189 #if defined(SIGUSR2)
1190 /* We are no longer interested in USR2 */
1191 BlockSignals(True,SIGUSR2);
1192 #endif
1193
1194 /* POSIX demands that signals are inherited. If the invoking process has
1195 * these signals masked, we will have problems, as we won't recieve them. */
1196 BlockSignals(False, SIGHUP);
1197 BlockSignals(False, SIGUSR1);
1198 BlockSignals(False, SIGTERM);
1199
1200 /* we want total control over the permissions on created files,
1201 so set our umask to 0 */
1202 umask(0);
1203
1204 init_sec_ctx();
1205
1206 reopen_logs();
1207
1208 DEBUG(0,("smbd version %s started.\n", SAMBA_VERSION_STRING));
1209 DEBUGADD(0,("%s\n", COPYRIGHT_STARTUP_MESSAGE));
1210
1211 DEBUG(2,("uid=%d gid=%d euid=%d egid=%d\n",
1212 (int)getuid(),(int)getgid(),(int)geteuid(),(int)getegid()));
1213
1214 /* Output the build options to the debug log */
1215 build_options(False);
1216
1217 if (sizeof(uint16) < 2 || sizeof(uint32) < 4) {
1218 DEBUG(0,("ERROR: Samba is not configured correctly for the word size on your machine\n"));
1219 exit(1);
1220 }
1221
1222 if (!lp_load_initial_only(get_dyn_CONFIGFILE())) {
1223 DEBUG(0, ("error opening config file\n"));
1224 exit(1);
1225 }
1226
1227 if (smbd_messaging_context() == NULL)
1228 exit(1);
1229
1230 /*
1231 * Do this before reload_services.
1232 */
1233 db_tdb2_setup_messaging(smbd_messaging_context(), true);
1234
1235 if (!reload_services(False))
1236 return(-1);
1237
1238 init_structs();
1239
1240 #ifdef WITH_PROFILE
1241 if (!profile_setup(smbd_messaging_context(), False)) {
1242 DEBUG(0,("ERROR: failed to setup profiling\n"));
1243 return -1;
1244 }
1245 if (profile_level != NULL) {
1246 int pl = atoi(profile_level);
1247 struct server_id src;
1248
1249 DEBUG(1, ("setting profiling level: %s\n",profile_level));
1250 src.pid = getpid();
1251 set_profile_level(pl, src);
1252 }
1253 #endif
1254
1255 DEBUG(3,( "loaded services\n"));
1256
1257 if (!is_daemon && !is_a_socket(0)) {
1258 if (!interactive)
1259 DEBUG(0,("standard input is not a socket, assuming -D option\n"));
1260
1261 /*
1262 * Setting is_daemon here prevents us from eventually calling
1263 * the open_sockets_inetd()
1264 */
1265
1266 is_daemon = True;
1267 }
1268
1269 if (is_daemon && !interactive) {
1270 DEBUG( 3, ( "Becoming a daemon.\n" ) );
1271 become_daemon(Fork, no_process_group);
1272 }
1273
1274 #if HAVE_SETPGID
1275 /*
1276 * If we're interactive we want to set our own process group for
1277 * signal management.
1278 */
1279 if (interactive && !no_process_group)
1280 setpgid( (pid_t)0, (pid_t)0);
1281 #endif
1282
1283 if (!directory_exist(lp_lockdir(), NULL))
1284 mkdir(lp_lockdir(), 0755);
1285
1286 if (is_daemon)
1287 pidfile_create("smbd");
1288
1289 if (!reinit_after_fork(smbd_messaging_context(), false)) {
1290 DEBUG(0,("reinit_after_fork() failed\n"));
1291 exit(1);
1292 }
1293
1294 /* Setup all the TDB's - including CLEAR_IF_FIRST tdb's. */
1295
1296 if (smbd_memcache() == NULL) {
1297 exit(1);
1298 }
1299
1300 memcache_set_global(smbd_memcache());
1301
1302 /* Initialise the password backed before the global_sam_sid
1303 to ensure that we fetch from ldap before we make a domain sid up */
1304
1305 if(!initialize_password_db(False, smbd_event_context()))
1306 exit(1);
1307
1308 if (!secrets_init()) {
1309 DEBUG(0, ("ERROR: smbd can not open secrets.tdb\n"));
1310 exit(1);
1311 }
1312
1313 if(!get_global_sam_sid()) {
1314 DEBUG(0,("ERROR: Samba cannot create a SAM SID.\n"));
1315 exit(1);
1316 }
1317
1318 if (!session_init())
1319 exit(1);
1320
1321 if (!connections_init(True))
1322 exit(1);
1323
1324 if (!locking_init())
1325 exit(1);
1326
1327 namecache_enable();
1328
1329 if (!W_ERROR_IS_OK(registry_init_full()))
1330 exit(1);
1331
1332 #if 0
1333 if (!init_svcctl_db())
1334 exit(1);
1335 #endif
1336
1337 if (!print_backend_init(smbd_messaging_context()))
1338 exit(1);
1339
1340 if (!init_guest_info()) {
1341 DEBUG(0,("ERROR: failed to setup guest info.\n"));
1342 return -1;
1343 }
1344
1345 /* only start the background queue daemon if we are
1346 running as a daemon -- bad things will happen if
1347 smbd is launched via inetd and we fork a copy of
1348 ourselves here */
1349
1350 if (is_daemon && !interactive
1351 && lp_parm_bool(-1, "smbd", "backgroundqueue", true)) {
1352 start_background_queue();
1353 }
1354
1355 if (!open_sockets_smbd(is_daemon, interactive, ports))
1356 exit(1);
1357
1358 /*
1359 * everything after this point is run after the fork()
1360 */
1361
1362 static_init_rpc;
1363
1364 init_modules();
1365
1366 /* Possibly reload the services file. Only worth doing in
1367 * daemon mode. In inetd mode, we know we only just loaded this.
1368 */
1369 if (is_daemon) {
1370 reload_services(True);
1371 }
1372
1373 if (!init_account_policy()) {
1374 DEBUG(0,("Could not open account policy tdb.\n"));
1375 exit(1);
1376 }
1377
1378 if (*lp_rootdir()) {
1379 if (sys_chroot(lp_rootdir()) == 0)
1380 DEBUG(2,("Changed root to %s\n", lp_rootdir()));
1381 }
1382
1383 /* Setup oplocks */
1384 if (!init_oplocks(smbd_messaging_context()))
1385 exit(1);
1386
1387 /* Setup aio signal handler. */
1388 initialize_async_io_handler();
1389
1390 /* register our message handlers */
1391 messaging_register(smbd_messaging_context(), NULL,
1392 MSG_SMB_FORCE_TDIS, msg_force_tdis);
1393 messaging_register(smbd_messaging_context(), NULL,
1394 MSG_SMB_RELEASE_IP, msg_release_ip);
1395
1396 if ((lp_keepalive() != 0)
1397 && !(event_add_idle(smbd_event_context(), NULL,
1398 timeval_set(lp_keepalive(), 0),
1399 "keepalive", keepalive_fn,
1400 NULL))) {
1401 DEBUG(0, ("Could not add keepalive event\n"));
1402 exit(1);
1403 }
1404
1405 if (!(event_add_idle(smbd_event_context(), NULL,
1406 timeval_set(IDLE_CLOSED_TIMEOUT, 0),
1407 "deadtime", deadtime_fn, NULL))) {
1408 DEBUG(0, ("Could not add deadtime event\n"));
1409 exit(1);
1410 }
1411
1412 #ifdef CLUSTER_SUPPORT
1413
1414 if (lp_clustering()) {
1415 /*
1416 * We need to tell ctdb about our client's TCP
1417 * connection, so that for failover ctdbd can send
1418 * tickle acks, triggering a reconnection by the
1419 * client.
1420 */
1421
1422 struct sockaddr_in srv, clnt;
1423
1424 if (client_get_tcp_info(&srv, &clnt) == 0) {
1425
1426 NTSTATUS status;
1427
1428 status = ctdbd_register_ips(
1429 messaging_ctdbd_connection(),
1430 &srv, &clnt, release_ip, NULL);
1431
1432 if (!NT_STATUS_IS_OK(status)) {
1433 DEBUG(0, ("ctdbd_register_ips failed: %s\n",
1434 nt_errstr(status)));
1435 }
1436 } else
1437 {
1438 DEBUG(0,("Unable to get tcp info for "
1439 "CTDB_CONTROL_TCP_CLIENT: %s\n",
1440 strerror(errno)));
1441 }
1442 }
1443
1444 #endif
1445
1446 TALLOC_FREE(frame);
1447
1448 smbd_process();
1449
1450 namecache_shutdown();
1451
1452 exit_server_cleanly(NULL);
1453 return(0);
1454 }
Samba GIT mirror