pidl/NDR/Parser: remember if we already know the array length
[Samba.git] / source3 / smbd / server.c
blob28bb9478d9f7030a93e87f1d9fc76063a2b66625
1 /*
2 Unix SMB/CIFS implementation.
3 Main SMB server routines
4 Copyright (C) Andrew Tridgell 1992-1998
5 Copyright (C) Martin Pool 2002
6 Copyright (C) Jelmer Vernooij 2002-2003
7 Copyright (C) Volker Lendecke 1993-2007
8 Copyright (C) Jeremy Allison 1993-2007
10 This program is free software; you can redistribute it and/or modify
11 it under the terms of the GNU General Public License as published by
12 the Free Software Foundation; either version 3 of the License, or
13 (at your option) any later version.
15 This program is distributed in the hope that it will be useful,
16 but WITHOUT ANY WARRANTY; without even the implied warranty of
17 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
18 GNU General Public License for more details.
20 You should have received a copy of the GNU General Public License
21 along with this program. If not, see <http://www.gnu.org/licenses/>.
24 #include "includes.h"
25 #include "system/filesys.h"
26 #include "popt_common.h"
27 #include "smbd/smbd.h"
28 #include "smbd/globals.h"
29 #include "registry/reg_init_full.h"
30 #include "libcli/auth/schannel.h"
31 #include "secrets.h"
32 #include "memcache.h"
33 #include "ctdbd_conn.h"
34 #include "printing/printer_list.h"
35 #include "rpc_server/rpc_ep_setup.h"
36 #include "printing/pcap.h"
37 #include "printing.h"
38 #include "serverid.h"
39 #include "passdb.h"
40 #include "auth.h"
41 #include "messages.h"
42 #include "smbprofile.h"
44 extern void start_epmd(struct tevent_context *ev_ctx,
45 struct messaging_context *msg_ctx);
47 extern void start_spoolssd(struct event_context *ev_ctx,
48 struct messaging_context *msg_ctx);
50 #ifdef WITH_DFS
51 extern int dcelogin_atmost_once;
52 #endif /* WITH_DFS */
54 static void smbd_set_server_fd(int fd)
56 struct smbd_server_connection *sconn = smbd_server_conn;
57 char addr[INET6_ADDRSTRLEN];
58 const char *name;
60 sconn->sock = fd;
63 * Initialize sconn->client_id: If we can't find the client's
64 * name, default to its address.
67 if (sconn->client_id.name != NULL &&
68 sconn->client_id.name != sconn->client_id.addr) {
69 talloc_free(discard_const_p(char, sconn->client_id.name));
70 sconn->client_id.name = NULL;
73 client_addr(fd, sconn->client_id.addr, sizeof(sconn->client_id.addr));
75 name = client_name(sconn->sock);
76 if (strcmp(name, "UNKNOWN") != 0) {
77 name = talloc_strdup(sconn, name);
78 } else {
79 name = NULL;
81 sconn->client_id.name =
82 (name != NULL) ? name : sconn->client_id.addr;
84 sub_set_socket_ids(sconn->client_id.addr, sconn->client_id.name,
85 client_socket_addr(sconn->sock, addr,
86 sizeof(addr)));
89 struct event_context *smbd_event_context(void)
91 return server_event_context();
94 /*******************************************************************
95 What to do when smb.conf is updated.
96 ********************************************************************/
98 static void smb_conf_updated(struct messaging_context *msg,
99 void *private_data,
100 uint32_t msg_type,
101 struct server_id server_id,
102 DATA_BLOB *data)
104 struct tevent_context *ev_ctx =
105 talloc_get_type_abort(private_data, struct tevent_context);
107 DEBUG(10,("smb_conf_updated: Got message saying smb.conf was "
108 "updated. Reloading.\n"));
109 change_to_root_user();
110 reload_services(msg, smbd_server_conn->sock, False);
111 if (am_parent) {
112 pcap_cache_reload(ev_ctx, msg,
113 &reload_pcap_change_notify);
117 /*******************************************************************
118 What to do when printcap is updated.
119 ********************************************************************/
121 static void smb_pcap_updated(struct messaging_context *msg,
122 void *private_data,
123 uint32_t msg_type,
124 struct server_id server_id,
125 DATA_BLOB *data)
127 struct tevent_context *ev_ctx =
128 talloc_get_type_abort(private_data, struct tevent_context);
130 DEBUG(10,("Got message saying pcap was updated. Reloading.\n"));
131 change_to_root_user();
132 reload_printers(ev_ctx, msg);
135 /*******************************************************************
136 Delete a statcache entry.
137 ********************************************************************/
139 static void smb_stat_cache_delete(struct messaging_context *msg,
140 void *private_data,
141 uint32_t msg_tnype,
142 struct server_id server_id,
143 DATA_BLOB *data)
145 const char *name = (const char *)data->data;
146 DEBUG(10,("smb_stat_cache_delete: delete name %s\n", name));
147 stat_cache_delete(name);
150 /****************************************************************************
151 Send a SIGTERM to our process group.
152 *****************************************************************************/
154 static void killkids(void)
156 if(am_parent) kill(0,SIGTERM);
159 /****************************************************************************
160 Process a sam sync message - not sure whether to do this here or
161 somewhere else.
162 ****************************************************************************/
164 static void msg_sam_sync(struct messaging_context *msg,
165 void *private_data,
166 uint32_t msg_type,
167 struct server_id server_id,
168 DATA_BLOB *data)
170 DEBUG(10, ("** sam sync message received, ignoring\n"));
173 static void msg_exit_server(struct messaging_context *msg,
174 void *private_data,
175 uint32_t msg_type,
176 struct server_id server_id,
177 DATA_BLOB *data)
179 DEBUG(3, ("got a SHUTDOWN message\n"));
180 exit_server_cleanly(NULL);
183 #ifdef DEVELOPER
184 static void msg_inject_fault(struct messaging_context *msg,
185 void *private_data,
186 uint32_t msg_type,
187 struct server_id src,
188 DATA_BLOB *data)
190 int sig;
192 if (data->length != sizeof(sig)) {
193 DEBUG(0, ("Process %s sent bogus signal injection request\n",
194 procid_str_static(&src)));
195 return;
198 sig = *(int *)data->data;
199 if (sig == -1) {
200 exit_server("internal error injected");
201 return;
204 #if HAVE_STRSIGNAL
205 DEBUG(0, ("Process %s requested injection of signal %d (%s)\n",
206 procid_str_static(&src), sig, strsignal(sig)));
207 #else
208 DEBUG(0, ("Process %s requested injection of signal %d\n",
209 procid_str_static(&src), sig));
210 #endif
212 kill(sys_getpid(), sig);
214 #endif /* DEVELOPER */
217 * Parent smbd process sets its own debug level first and then
218 * sends a message to all the smbd children to adjust their debug
219 * level to that of the parent.
222 static void smbd_msg_debug(struct messaging_context *msg_ctx,
223 void *private_data,
224 uint32_t msg_type,
225 struct server_id server_id,
226 DATA_BLOB *data)
228 struct child_pid *child;
230 debug_message(msg_ctx, private_data, MSG_DEBUG, server_id, data);
232 for (child = children; child != NULL; child = child->next) {
233 messaging_send_buf(msg_ctx, pid_to_procid(child->pid),
234 MSG_DEBUG,
235 data->data,
236 strlen((char *) data->data) + 1);
240 static void add_child_pid(pid_t pid)
242 struct child_pid *child;
244 child = SMB_MALLOC_P(struct child_pid);
245 if (child == NULL) {
246 DEBUG(0, ("Could not add child struct -- malloc failed\n"));
247 return;
249 child->pid = pid;
250 DLIST_ADD(children, child);
251 num_children += 1;
255 at most every smbd:cleanuptime seconds (default 20), we scan the BRL
256 and locking database for entries to cleanup. As a side effect this
257 also cleans up dead entries in the connections database (due to the
258 traversal in message_send_all()
260 Using a timer for this prevents a flood of traversals when a large
261 number of clients disconnect at the same time (perhaps due to a
262 network outage).
265 static void cleanup_timeout_fn(struct event_context *event_ctx,
266 struct timed_event *te,
267 struct timeval now,
268 void *private_data)
270 struct timed_event **cleanup_te = (struct timed_event **)private_data;
272 DEBUG(1,("Cleaning up brl and lock database after unclean shutdown\n"));
273 message_send_all(smbd_messaging_context(), MSG_SMB_UNLOCK, NULL, 0, NULL);
274 messaging_send_buf(smbd_messaging_context(), procid_self(),
275 MSG_SMB_BRL_VALIDATE, NULL, 0);
276 /* mark the cleanup as having been done */
277 (*cleanup_te) = NULL;
280 static void remove_child_pid(pid_t pid, bool unclean_shutdown)
282 struct child_pid *child;
283 static struct timed_event *cleanup_te;
284 struct server_id child_id;
286 if (unclean_shutdown) {
287 /* a child terminated uncleanly so tickle all
288 processes to see if they can grab any of the
289 pending locks
291 DEBUG(3,(__location__ " Unclean shutdown of pid %u\n",
292 (unsigned int)pid));
293 if (!cleanup_te) {
294 /* call the cleanup timer, but not too often */
295 int cleanup_time = lp_parm_int(-1, "smbd", "cleanuptime", 20);
296 cleanup_te = event_add_timed(smbd_event_context(), NULL,
297 timeval_current_ofs(cleanup_time, 0),
298 cleanup_timeout_fn,
299 &cleanup_te);
300 DEBUG(1,("Scheduled cleanup of brl and lock database after unclean shutdown\n"));
304 child_id = procid_self(); /* Just initialize pid and potentially vnn */
305 child_id.pid = pid;
307 if (!serverid_deregister(child_id)) {
308 DEBUG(1, ("Could not remove pid %d from serverid.tdb\n",
309 (int)pid));
312 for (child = children; child != NULL; child = child->next) {
313 if (child->pid == pid) {
314 struct child_pid *tmp = child;
315 DLIST_REMOVE(children, child);
316 SAFE_FREE(tmp);
317 num_children -= 1;
318 return;
322 /* not all forked child processes are added to the children list */
323 DEBUG(1, ("Could not find child %d -- ignoring\n", (int)pid));
326 /****************************************************************************
327 Have we reached the process limit ?
328 ****************************************************************************/
330 static bool allowable_number_of_smbd_processes(void)
332 int max_processes = lp_max_smbd_processes();
334 if (!max_processes)
335 return True;
337 return num_children < max_processes;
340 static void smbd_sig_chld_handler(struct tevent_context *ev,
341 struct tevent_signal *se,
342 int signum,
343 int count,
344 void *siginfo,
345 void *private_data)
347 pid_t pid;
348 int status;
350 while ((pid = sys_waitpid(-1, &status, WNOHANG)) > 0) {
351 bool unclean_shutdown = False;
353 /* If the child terminated normally, assume
354 it was an unclean shutdown unless the
355 status is 0
357 if (WIFEXITED(status)) {
358 unclean_shutdown = WEXITSTATUS(status);
360 /* If the child terminated due to a signal
361 we always assume it was unclean.
363 if (WIFSIGNALED(status)) {
364 unclean_shutdown = True;
366 remove_child_pid(pid, unclean_shutdown);
370 static void smbd_setup_sig_chld_handler(void)
372 struct tevent_signal *se;
374 se = tevent_add_signal(smbd_event_context(),
375 smbd_event_context(),
376 SIGCHLD, 0,
377 smbd_sig_chld_handler,
378 NULL);
379 if (!se) {
380 exit_server("failed to setup SIGCHLD handler");
384 struct smbd_open_socket;
386 struct smbd_parent_context {
387 bool interactive;
389 /* the list of listening sockets */
390 struct smbd_open_socket *sockets;
393 struct smbd_open_socket {
394 struct smbd_open_socket *prev, *next;
395 struct smbd_parent_context *parent;
396 int fd;
397 struct tevent_fd *fde;
400 static void smbd_open_socket_close_fn(struct tevent_context *ev,
401 struct tevent_fd *fde,
402 int fd,
403 void *private_data)
405 /* this might be the socket_wrapper swrap_close() */
406 close(fd);
409 static void smbd_accept_connection(struct tevent_context *ev,
410 struct tevent_fd *fde,
411 uint16_t flags,
412 void *private_data)
414 struct smbd_open_socket *s = talloc_get_type_abort(private_data,
415 struct smbd_open_socket);
416 struct sockaddr_storage addr;
417 socklen_t in_addrlen = sizeof(addr);
418 int fd;
419 pid_t pid = 0;
420 uint64_t unique_id;
422 fd = accept(s->fd, (struct sockaddr *)(void *)&addr,&in_addrlen);
423 smbd_set_server_fd(fd);
425 if (fd == -1 && errno == EINTR)
426 return;
428 if (fd == -1) {
429 DEBUG(0,("open_sockets_smbd: accept: %s\n",
430 strerror(errno)));
431 return;
434 if (s->parent->interactive) {
435 smbd_process(smbd_server_conn);
436 exit_server_cleanly("end of interactive mode");
437 return;
440 if (!allowable_number_of_smbd_processes()) {
441 close(fd);
442 smbd_set_server_fd(-1);
443 return;
447 * Generate a unique id in the parent process so that we use
448 * the global random state in the parent.
450 unique_id = serverid_get_random_unique_id();
452 pid = sys_fork();
453 if (pid == 0) {
454 NTSTATUS status = NT_STATUS_OK;
456 /* Child code ... */
457 am_parent = 0;
459 set_my_unique_id(unique_id);
461 /* Stop zombies, the parent explicitly handles
462 * them, counting worker smbds. */
463 CatchChild();
465 /* close our standard file
466 descriptors */
467 close_low_fds(False);
470 * Can't use TALLOC_FREE here. Nulling out the argument to it
471 * would overwrite memory we've just freed.
473 talloc_free(s->parent);
474 s = NULL;
476 status = reinit_after_fork(smbd_messaging_context(),
477 smbd_event_context(), procid_self(),
478 true);
479 if (!NT_STATUS_IS_OK(status)) {
480 if (NT_STATUS_EQUAL(status,
481 NT_STATUS_TOO_MANY_OPENED_FILES)) {
482 DEBUG(0,("child process cannot initialize "
483 "because too many files are open\n"));
484 goto exit;
486 if (lp_clustering() &&
487 NT_STATUS_EQUAL(status,
488 NT_STATUS_INTERNAL_DB_ERROR)) {
489 DEBUG(1,("child process cannot initialize "
490 "because connection to CTDB "
491 "has failed\n"));
492 goto exit;
495 DEBUG(0,("reinit_after_fork() failed\n"));
496 smb_panic("reinit_after_fork() failed");
499 smbd_setup_sig_term_handler();
500 smbd_setup_sig_hup_handler(server_event_context(),
501 server_messaging_context());
503 if (!serverid_register(procid_self(),
504 FLAG_MSG_GENERAL|FLAG_MSG_SMBD
505 |FLAG_MSG_DBWRAP
506 |FLAG_MSG_PRINT_GENERAL)) {
507 exit_server_cleanly("Could not register myself in "
508 "serverid.tdb");
511 smbd_process(smbd_server_conn);
512 exit:
513 exit_server_cleanly("end of child");
514 return;
517 if (pid < 0) {
518 DEBUG(0,("smbd_accept_connection: sys_fork() failed: %s\n",
519 strerror(errno)));
522 /* The parent doesn't need this socket */
523 close(fd);
525 /* Sun May 6 18:56:14 2001 ackley@cs.unm.edu:
526 Clear the closed fd info out of server_fd --
527 and more importantly, out of client_fd in
528 util_sock.c, to avoid a possible
529 getpeername failure if we reopen the logs
530 and use %I in the filename.
533 smbd_set_server_fd(-1);
535 if (pid != 0) {
536 add_child_pid(pid);
539 /* Force parent to check log size after
540 * spawning child. Fix from
541 * klausr@ITAP.Physik.Uni-Stuttgart.De. The
542 * parent smbd will log to logserver.smb. It
543 * writes only two messages for each child
544 * started/finished. But each child writes,
545 * say, 50 messages also in logserver.smb,
546 * begining with the debug_count of the
547 * parent, before the child opens its own log
548 * file logserver.client. In a worst case
549 * scenario the size of logserver.smb would be
550 * checked after about 50*50=2500 messages
551 * (ca. 100kb).
552 * */
553 force_check_log_size();
556 static bool smbd_open_one_socket(struct smbd_parent_context *parent,
557 const struct sockaddr_storage *ifss,
558 uint16_t port)
560 struct smbd_open_socket *s;
562 s = talloc(parent, struct smbd_open_socket);
563 if (!s) {
564 return false;
567 s->parent = parent;
568 s->fd = open_socket_in(SOCK_STREAM,
569 port,
570 parent->sockets == NULL ? 0 : 2,
571 ifss,
572 true);
573 if (s->fd == -1) {
574 DEBUG(0,("smbd_open_once_socket: open_socket_in: "
575 "%s\n", strerror(errno)));
576 TALLOC_FREE(s);
578 * We ignore an error here, as we've done before
580 return true;
583 /* ready to listen */
584 set_socket_options(s->fd, "SO_KEEPALIVE");
585 set_socket_options(s->fd, lp_socket_options());
587 /* Set server socket to
588 * non-blocking for the accept. */
589 set_blocking(s->fd, False);
591 if (listen(s->fd, SMBD_LISTEN_BACKLOG) == -1) {
592 DEBUG(0,("open_sockets_smbd: listen: "
593 "%s\n", strerror(errno)));
594 close(s->fd);
595 TALLOC_FREE(s);
596 return false;
599 s->fde = tevent_add_fd(smbd_event_context(),
601 s->fd, TEVENT_FD_READ,
602 smbd_accept_connection,
604 if (!s->fde) {
605 DEBUG(0,("open_sockets_smbd: "
606 "tevent_add_fd: %s\n",
607 strerror(errno)));
608 close(s->fd);
609 TALLOC_FREE(s);
610 return false;
612 tevent_fd_set_close_fn(s->fde, smbd_open_socket_close_fn);
614 DLIST_ADD_END(parent->sockets, s, struct smbd_open_socket *);
616 return true;
619 static bool smbd_parent_housekeeping(const struct timeval *now, void *private_data)
621 time_t printcap_cache_time = (time_t)lp_printcap_cache_time();
622 time_t t = time_mono(NULL);
624 DEBUG(5, ("parent housekeeping\n"));
626 /* if periodic printcap rescan is enabled, see if it's time to reload */
627 if ((printcap_cache_time != 0)
628 && (t >= (last_printer_reload_time + printcap_cache_time))) {
629 DEBUG( 3,( "Printcap cache time expired.\n"));
630 pcap_cache_reload(server_event_context(),
631 smbd_messaging_context(),
632 &reload_pcap_change_notify);
633 last_printer_reload_time = t;
636 return true;
639 /****************************************************************************
640 Open the socket communication.
641 ****************************************************************************/
643 static bool open_sockets_smbd(struct smbd_parent_context *parent,
644 struct messaging_context *msg_ctx,
645 const char *smb_ports)
647 int num_interfaces = iface_count();
648 int i;
649 char *ports;
650 unsigned dns_port = 0;
652 #ifdef HAVE_ATEXIT
653 atexit(killkids);
654 #endif
656 /* Stop zombies */
657 smbd_setup_sig_chld_handler();
659 /* use a reasonable default set of ports - listing on 445 and 139 */
660 if (!smb_ports) {
661 ports = lp_smb_ports();
662 if (!ports || !*ports) {
663 ports = talloc_strdup(talloc_tos(), SMB_PORTS);
664 } else {
665 ports = talloc_strdup(talloc_tos(), ports);
667 } else {
668 ports = talloc_strdup(talloc_tos(), smb_ports);
671 if (lp_interfaces() && lp_bind_interfaces_only()) {
672 /* We have been given an interfaces line, and been
673 told to only bind to those interfaces. Create a
674 socket per interface and bind to only these.
677 /* Now open a listen socket for each of the
678 interfaces. */
679 for(i = 0; i < num_interfaces; i++) {
680 const struct sockaddr_storage *ifss =
681 iface_n_sockaddr_storage(i);
682 char *tok;
683 const char *ptr;
685 if (ifss == NULL) {
686 DEBUG(0,("open_sockets_smbd: "
687 "interface %d has NULL IP address !\n",
688 i));
689 continue;
692 for (ptr=ports;
693 next_token_talloc(talloc_tos(),&ptr, &tok, " \t,");) {
694 unsigned port = atoi(tok);
695 if (port == 0 || port > 0xffff) {
696 continue;
699 /* Keep the first port for mDNS service
700 * registration.
702 if (dns_port == 0) {
703 dns_port = port;
706 if (!smbd_open_one_socket(parent, ifss, port)) {
707 return false;
711 } else {
712 /* Just bind to 0.0.0.0 - accept connections
713 from anywhere. */
715 char *tok;
716 const char *ptr;
717 const char *sock_addr = lp_socket_address();
718 char *sock_tok;
719 const char *sock_ptr;
721 if (strequal(sock_addr, "0.0.0.0") ||
722 strequal(sock_addr, "::")) {
723 #if HAVE_IPV6
724 sock_addr = "::,0.0.0.0";
725 #else
726 sock_addr = "0.0.0.0";
727 #endif
730 for (sock_ptr=sock_addr;
731 next_token_talloc(talloc_tos(), &sock_ptr, &sock_tok, " \t,"); ) {
732 for (ptr=ports; next_token_talloc(talloc_tos(), &ptr, &tok, " \t,"); ) {
733 struct sockaddr_storage ss;
735 unsigned port = atoi(tok);
736 if (port == 0 || port > 0xffff) {
737 continue;
740 /* Keep the first port for mDNS service
741 * registration.
743 if (dns_port == 0) {
744 dns_port = port;
747 /* open an incoming socket */
748 if (!interpret_string_addr(&ss, sock_tok,
749 AI_NUMERICHOST|AI_PASSIVE)) {
750 continue;
753 if (!smbd_open_one_socket(parent, &ss, port)) {
754 return false;
760 if (parent->sockets == NULL) {
761 DEBUG(0,("open_sockets_smbd: No "
762 "sockets available to bind to.\n"));
763 return false;
766 /* Setup the main smbd so that we can get messages. Note that
767 do this after starting listening. This is needed as when in
768 clustered mode, ctdb won't allow us to start doing database
769 operations until it has gone thru a full startup, which
770 includes checking to see that smbd is listening. */
772 if (!serverid_register(procid_self(),
773 FLAG_MSG_GENERAL|FLAG_MSG_SMBD
774 |FLAG_MSG_DBWRAP)) {
775 DEBUG(0, ("open_sockets_smbd: Failed to register "
776 "myself in serverid.tdb\n"));
777 return false;
780 if (!(event_add_idle(smbd_event_context(), NULL,
781 timeval_set(SMBD_HOUSEKEEPING_INTERVAL, 0),
782 "parent_housekeeping", smbd_parent_housekeeping,
783 NULL))) {
784 DEBUG(0, ("Could not add parent_housekeeping event\n"));
785 return false;
788 /* Listen to messages */
790 messaging_register(msg_ctx, NULL, MSG_SMB_SAM_SYNC, msg_sam_sync);
791 messaging_register(msg_ctx, NULL, MSG_SHUTDOWN, msg_exit_server);
792 messaging_register(msg_ctx, NULL, MSG_SMB_FILE_RENAME,
793 msg_file_was_renamed);
794 messaging_register(msg_ctx, server_event_context(), MSG_SMB_CONF_UPDATED,
795 smb_conf_updated);
796 messaging_register(msg_ctx, NULL, MSG_SMB_STAT_CACHE_DELETE,
797 smb_stat_cache_delete);
798 messaging_register(msg_ctx, NULL, MSG_DEBUG, smbd_msg_debug);
799 messaging_register(msg_ctx, server_event_context(), MSG_PRINTER_PCAP,
800 smb_pcap_updated);
801 brl_register_msgs(msg_ctx);
803 msg_idmap_register_msgs(msg_ctx);
805 #ifdef CLUSTER_SUPPORT
806 if (lp_clustering()) {
807 ctdbd_register_reconfigure(messaging_ctdbd_connection());
809 #endif
811 #ifdef DEVELOPER
812 messaging_register(msg_ctx, NULL, MSG_SMB_INJECT_FAULT,
813 msg_inject_fault);
814 #endif
816 if (lp_multicast_dns_register() && (dns_port != 0)) {
817 #ifdef WITH_DNSSD_SUPPORT
818 smbd_setup_mdns_registration(smbd_event_context(),
819 parent, dns_port);
820 #endif
821 #ifdef WITH_AVAHI_SUPPORT
822 void *avahi_conn;
824 avahi_conn = avahi_start_register(
825 smbd_event_context(), smbd_event_context(), dns_port);
826 if (avahi_conn == NULL) {
827 DEBUG(10, ("avahi_start_register failed\n"));
829 #endif
832 return true;
835 static void smbd_parent_loop(struct smbd_parent_context *parent)
837 /* now accept incoming connections - forking a new process
838 for each incoming connection */
839 DEBUG(2,("waiting for connections\n"));
840 while (1) {
841 int ret;
842 TALLOC_CTX *frame = talloc_stackframe();
844 ret = tevent_loop_once(smbd_event_context());
845 if (ret != 0) {
846 exit_server_cleanly("tevent_loop_once() error");
849 TALLOC_FREE(frame);
850 } /* end while 1 */
852 /* NOTREACHED return True; */
856 /****************************************************************************
857 Initialise connect, service and file structs.
858 ****************************************************************************/
860 static bool init_structs(void )
863 * Set the machine NETBIOS name if not already
864 * set from the config file.
867 if (!init_names())
868 return False;
870 if (!secrets_init())
871 return False;
873 return True;
876 /****************************************************************************
877 main program.
878 ****************************************************************************/
880 /* Declare prototype for build_options() to avoid having to run it through
881 mkproto.h. Mixing $(builddir) and $(srcdir) source files in the current
882 prototype generation system is too complicated. */
884 extern void build_options(bool screen);
886 int main(int argc,const char *argv[])
888 /* shall I run as a daemon */
889 bool is_daemon = false;
890 bool interactive = false;
891 bool Fork = true;
892 bool no_process_group = false;
893 bool log_stdout = false;
894 char *ports = NULL;
895 char *profile_level = NULL;
896 int opt;
897 poptContext pc;
898 bool print_build_options = False;
899 enum {
900 OPT_DAEMON = 1000,
901 OPT_INTERACTIVE,
902 OPT_FORK,
903 OPT_NO_PROCESS_GROUP,
904 OPT_LOG_STDOUT
906 struct poptOption long_options[] = {
907 POPT_AUTOHELP
908 {"daemon", 'D', POPT_ARG_NONE, NULL, OPT_DAEMON, "Become a daemon (default)" },
909 {"interactive", 'i', POPT_ARG_NONE, NULL, OPT_INTERACTIVE, "Run interactive (not a daemon)"},
910 {"foreground", 'F', POPT_ARG_NONE, NULL, OPT_FORK, "Run daemon in foreground (for daemontools, etc.)" },
911 {"no-process-group", '\0', POPT_ARG_NONE, NULL, OPT_NO_PROCESS_GROUP, "Don't create a new process group" },
912 {"log-stdout", 'S', POPT_ARG_NONE, NULL, OPT_LOG_STDOUT, "Log to stdout" },
913 {"build-options", 'b', POPT_ARG_NONE, NULL, 'b', "Print build options" },
914 {"port", 'p', POPT_ARG_STRING, &ports, 0, "Listen on the specified ports"},
915 {"profiling-level", 'P', POPT_ARG_STRING, &profile_level, 0, "Set profiling level","PROFILE_LEVEL"},
916 POPT_COMMON_SAMBA
917 POPT_COMMON_DYNCONFIG
918 POPT_TABLEEND
920 struct smbd_parent_context *parent = NULL;
921 TALLOC_CTX *frame;
922 NTSTATUS status;
925 * Do this before any other talloc operation
927 talloc_enable_null_tracking();
928 frame = talloc_stackframe();
930 load_case_tables();
932 /* Initialize the event context, it will panic on error */
933 smbd_event_context();
935 smbd_init_globals();
937 TimeInit();
939 #ifdef HAVE_SET_AUTH_PARAMETERS
940 set_auth_parameters(argc,argv);
941 #endif
943 pc = poptGetContext("smbd", argc, argv, long_options, 0);
944 while((opt = poptGetNextOpt(pc)) != -1) {
945 switch (opt) {
946 case OPT_DAEMON:
947 is_daemon = true;
948 break;
949 case OPT_INTERACTIVE:
950 interactive = true;
951 break;
952 case OPT_FORK:
953 Fork = false;
954 break;
955 case OPT_NO_PROCESS_GROUP:
956 no_process_group = true;
957 break;
958 case OPT_LOG_STDOUT:
959 log_stdout = true;
960 break;
961 case 'b':
962 print_build_options = True;
963 break;
964 default:
965 d_fprintf(stderr, "\nInvalid option %s: %s\n\n",
966 poptBadOption(pc, 0), poptStrerror(opt));
967 poptPrintUsage(pc, stderr, 0);
968 exit(1);
971 poptFreeContext(pc);
973 if (interactive) {
974 Fork = False;
975 log_stdout = True;
978 if (log_stdout) {
979 setup_logging(argv[0], DEBUG_STDOUT);
980 } else {
981 setup_logging(argv[0], DEBUG_FILE);
984 if (print_build_options) {
985 build_options(True); /* Display output to screen as well as debug */
986 exit(0);
989 #ifdef HAVE_SETLUID
990 /* needed for SecureWare on SCO */
991 setluid(0);
992 #endif
994 set_remote_machine_name("smbd", False);
996 if (interactive && (DEBUGLEVEL >= 9)) {
997 talloc_enable_leak_report();
1000 if (log_stdout && Fork) {
1001 DEBUG(0,("ERROR: Can't log to stdout (-S) unless daemon is in foreground (-F) or interactive (-i)\n"));
1002 exit(1);
1005 /* we want to re-seed early to prevent time delays causing
1006 client problems at a later date. (tridge) */
1007 generate_random_buffer(NULL, 0);
1009 /* get initial effective uid and gid */
1010 sec_init();
1012 /* make absolutely sure we run as root - to handle cases where people
1013 are crazy enough to have it setuid */
1014 gain_root_privilege();
1015 gain_root_group_privilege();
1017 fault_setup((void (*)(void *))exit_server_fault);
1018 dump_core_setup("smbd");
1020 /* we are never interested in SIGPIPE */
1021 BlockSignals(True,SIGPIPE);
1023 #if defined(SIGFPE)
1024 /* we are never interested in SIGFPE */
1025 BlockSignals(True,SIGFPE);
1026 #endif
1028 #if defined(SIGUSR2)
1029 /* We are no longer interested in USR2 */
1030 BlockSignals(True,SIGUSR2);
1031 #endif
1033 /* POSIX demands that signals are inherited. If the invoking process has
1034 * these signals masked, we will have problems, as we won't recieve them. */
1035 BlockSignals(False, SIGHUP);
1036 BlockSignals(False, SIGUSR1);
1037 BlockSignals(False, SIGTERM);
1039 /* Ensure we leave no zombies until we
1040 * correctly set up child handling below. */
1042 CatchChild();
1044 /* we want total control over the permissions on created files,
1045 so set our umask to 0 */
1046 umask(0);
1048 reopen_logs();
1050 DEBUG(0,("smbd version %s started.\n", samba_version_string()));
1051 DEBUGADD(0,("%s\n", COPYRIGHT_STARTUP_MESSAGE));
1053 DEBUG(2,("uid=%d gid=%d euid=%d egid=%d\n",
1054 (int)getuid(),(int)getgid(),(int)geteuid(),(int)getegid()));
1056 /* Output the build options to the debug log */
1057 build_options(False);
1059 if (sizeof(uint16) < 2 || sizeof(uint32) < 4) {
1060 DEBUG(0,("ERROR: Samba is not configured correctly for the word size on your machine\n"));
1061 exit(1);
1064 if (!lp_load_initial_only(get_dyn_CONFIGFILE())) {
1065 DEBUG(0, ("error opening config file\n"));
1066 exit(1);
1069 /* Init the security context and global current_user */
1070 init_sec_ctx();
1072 if (smbd_messaging_context() == NULL)
1073 exit(1);
1076 * Reloading of the printers will not work here as we don't have a
1077 * server info and rpc services set up. It will be called later.
1079 if (!reload_services(smbd_messaging_context(), -1, False)) {
1080 exit(1);
1083 /* ...NOTE... Log files are working from this point! */
1085 DEBUG(3,("loaded services\n"));
1087 init_structs();
1089 #ifdef WITH_PROFILE
1090 if (!profile_setup(smbd_messaging_context(), False)) {
1091 DEBUG(0,("ERROR: failed to setup profiling\n"));
1092 return -1;
1094 if (profile_level != NULL) {
1095 int pl = atoi(profile_level);
1096 struct server_id src;
1098 DEBUG(1, ("setting profiling level: %s\n",profile_level));
1099 src.pid = getpid();
1100 set_profile_level(pl, src);
1102 #endif
1104 if (!is_daemon && !is_a_socket(0)) {
1105 if (!interactive)
1106 DEBUG(0,("standard input is not a socket, assuming -D option\n"));
1109 * Setting is_daemon here prevents us from eventually calling
1110 * the open_sockets_inetd()
1113 is_daemon = True;
1116 if (is_daemon && !interactive) {
1117 DEBUG( 3, ( "Becoming a daemon.\n" ) );
1118 become_daemon(Fork, no_process_group, log_stdout);
1121 set_my_unique_id(serverid_get_random_unique_id());
1123 #if HAVE_SETPGID
1125 * If we're interactive we want to set our own process group for
1126 * signal management.
1128 if (interactive && !no_process_group)
1129 setpgid( (pid_t)0, (pid_t)0);
1130 #endif
1132 if (!directory_exist(lp_lockdir()))
1133 mkdir(lp_lockdir(), 0755);
1135 if (is_daemon)
1136 pidfile_create("smbd");
1138 status = reinit_after_fork(smbd_messaging_context(),
1139 smbd_event_context(),
1140 procid_self(), false);
1141 if (!NT_STATUS_IS_OK(status)) {
1142 DEBUG(0,("reinit_after_fork() failed\n"));
1143 exit(1);
1146 smbd_server_conn->msg_ctx = smbd_messaging_context();
1148 smbd_setup_sig_term_handler();
1149 smbd_setup_sig_hup_handler(smbd_event_context(),
1150 smbd_server_conn->msg_ctx);
1152 /* Setup all the TDB's - including CLEAR_IF_FIRST tdb's. */
1154 if (smbd_memcache() == NULL) {
1155 exit(1);
1158 memcache_set_global(smbd_memcache());
1160 /* Initialise the password backed before the global_sam_sid
1161 to ensure that we fetch from ldap before we make a domain sid up */
1163 if(!initialize_password_db(False, smbd_event_context()))
1164 exit(1);
1166 if (!secrets_init()) {
1167 DEBUG(0, ("ERROR: smbd can not open secrets.tdb\n"));
1168 exit(1);
1171 if (lp_server_role() == ROLE_DOMAIN_BDC || lp_server_role() == ROLE_DOMAIN_PDC) {
1172 if (!open_schannel_session_store(NULL, lp_private_dir())) {
1173 DEBUG(0,("ERROR: Samba cannot open schannel store for secured NETLOGON operations.\n"));
1174 exit(1);
1178 if(!get_global_sam_sid()) {
1179 DEBUG(0,("ERROR: Samba cannot create a SAM SID.\n"));
1180 exit(1);
1183 if (!sessionid_init()) {
1184 exit(1);
1187 if (!connections_init(True))
1188 exit(1);
1190 if (!locking_init())
1191 exit(1);
1193 if (!messaging_tdb_parent_init(smbd_event_context())) {
1194 exit(1);
1197 if (!notify_internal_parent_init(smbd_event_context())) {
1198 exit(1);
1201 if (!serverid_parent_init(smbd_event_context())) {
1202 exit(1);
1205 if (!printer_list_parent_init()) {
1206 exit(1);
1209 if (!W_ERROR_IS_OK(registry_init_full()))
1210 exit(1);
1212 if (!print_backend_init(smbd_messaging_context()))
1213 exit(1);
1215 /* Open the share_info.tdb here, so we don't have to open
1216 after the fork on every single connection. This is a small
1217 performance improvment and reduces the total number of system
1218 fds used. */
1219 if (!share_info_db_init()) {
1220 DEBUG(0,("ERROR: failed to load share info db.\n"));
1221 exit(1);
1224 status = init_system_info();
1225 if (!NT_STATUS_IS_OK(status)) {
1226 DEBUG(1, ("ERROR: failed to setup system user info: %s.\n",
1227 nt_errstr(status)));
1228 return -1;
1231 if (!init_guest_info()) {
1232 DEBUG(0,("ERROR: failed to setup guest info.\n"));
1233 return -1;
1236 if (!file_init(smbd_server_conn)) {
1237 DEBUG(0, ("ERROR: file_init failed\n"));
1238 return -1;
1241 if (is_daemon && !interactive) {
1242 const char *rpcsrv_type;
1244 rpcsrv_type = lp_parm_const_string(GLOBAL_SECTION_SNUM,
1245 "rpc_server", "epmapper",
1246 "none");
1247 if (StrCaseCmp(rpcsrv_type, "daemon") == 0) {
1248 start_epmd(smbd_event_context(),
1249 smbd_server_conn->msg_ctx);
1253 if (!dcesrv_ep_setup(smbd_event_context(), smbd_server_conn->msg_ctx)) {
1254 exit(1);
1257 /* Publish nt printers, this requires a working winreg pipe */
1258 pcap_cache_reload(server_event_context(), smbd_messaging_context(),
1259 &reload_printers);
1261 /* only start the background queue daemon if we are
1262 running as a daemon -- bad things will happen if
1263 smbd is launched via inetd and we fork a copy of
1264 ourselves here */
1266 if (is_daemon && !interactive
1267 && lp_parm_bool(-1, "smbd", "backgroundqueue", true)) {
1268 start_background_queue(smbd_event_context(),
1269 smbd_messaging_context());
1272 if (is_daemon && !_lp_disable_spoolss()) {
1273 const char *rpcsrv_type;
1275 /* start spoolss daemon */
1276 /* start as a separate daemon only if enabled */
1277 rpcsrv_type = lp_parm_const_string(GLOBAL_SECTION_SNUM,
1278 "rpc_server", "spoolss",
1279 "embedded");
1280 if (StrCaseCmp(rpcsrv_type, "daemon") == 0) {
1281 start_spoolssd(smbd_event_context(),
1282 smbd_messaging_context());
1286 if (!is_daemon) {
1287 /* inetd mode */
1288 TALLOC_FREE(frame);
1290 /* Started from inetd. fd 0 is the socket. */
1291 /* We will abort gracefully when the client or remote system
1292 goes away */
1293 smbd_set_server_fd(dup(0));
1295 /* close our standard file descriptors */
1296 close_low_fds(False); /* Don't close stderr */
1298 #ifdef HAVE_ATEXIT
1299 atexit(killkids);
1300 #endif
1302 /* Stop zombies */
1303 smbd_setup_sig_chld_handler();
1305 smbd_process(smbd_server_conn);
1307 exit_server_cleanly(NULL);
1308 return(0);
1311 parent = talloc_zero(smbd_event_context(), struct smbd_parent_context);
1312 if (!parent) {
1313 exit_server("talloc(struct smbd_parent_context) failed");
1315 parent->interactive = interactive;
1317 if (!open_sockets_smbd(parent, smbd_messaging_context(), ports))
1318 exit_server("open_sockets_smbd() failed");
1320 TALLOC_FREE(frame);
1321 /* make sure we always have a valid stackframe */
1322 frame = talloc_stackframe();
1324 smbd_parent_loop(parent);
1326 exit_server_cleanly(NULL);
1327 TALLOC_FREE(frame);
1328 return(0);