?  search:
summary | log | graphiclog1 | graphiclog2 | commit | commitdiff | tree | refs | edit | fork
blame | history | raw | HEAD
s3: fix guest auth when winbindd is running
[Samba.git] / source / smbd / server.c
blobe9141181a5082390171041ca1d16dac446903efd
1 /*
2 Unix SMB/CIFS implementation.
3 Main SMB server routines
4 Copyright (C) Andrew Tridgell 1992-1998
5 Copyright (C) Martin Pool 2002
6 Copyright (C) Jelmer Vernooij 2002-2003
7 Copyright (C) Volker Lendecke 1993-2007
8 Copyright (C) Jeremy Allison 1993-2007
9
10 This program is free software; you can redistribute it and/or modify
11 it under the terms of the GNU General Public License as published by
12 the Free Software Foundation; either version 3 of the License, or
13 (at your option) any later version.
14
15 This program is distributed in the hope that it will be useful,
16 but WITHOUT ANY WARRANTY; without even the implied warranty of
17 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
18 GNU General Public License for more details.
19
20 You should have received a copy of the GNU General Public License
21 along with this program. If not, see <http://www.gnu.org/licenses/>.
22 */
23
24 #include "includes.h"
25
26 static_decl_rpc;
27
28 static int am_parent = 1;
29
30 extern struct auth_context *negprot_global_auth_context;
31 extern SIG_ATOMIC_T got_sig_term;
32 extern SIG_ATOMIC_T reload_after_sighup;
33 static SIG_ATOMIC_T got_sig_cld;
34
35 #ifdef WITH_DFS
36 extern int dcelogin_atmost_once;
37 #endif /* WITH_DFS */
38
39 /* really we should have a top level context structure that has the
40 client file descriptor as an element. That would require a major rewrite :(
41
42 the following 2 functions are an alternative - they make the file
43 descriptor private to smbd
44 */
45 static int server_fd = -1;
46
47 int smbd_server_fd(void)
48 {
49 return server_fd;
50 }
51
52 static void smbd_set_server_fd(int fd)
53 {
54 server_fd = fd;
55 }
56
57 int get_client_fd(void)
58 {
59 return server_fd;
60 }
61
62 int client_get_tcp_info(struct sockaddr_in *server, struct sockaddr_in *client)
63 {
64 socklen_t length;
65 if (server_fd == -1) {
66 return -1;
67 }
68 length = sizeof(*server);
69 if (getsockname(server_fd, (struct sockaddr *)server, &length) != 0) {
70 return -1;
71 }
72 length = sizeof(*client);
73 if (getpeername(server_fd, (struct sockaddr *)client, &length) != 0) {
74 return -1;
75 }
76 return 0;
77 }
78
79 struct event_context *smbd_event_context(void)
80 {
81 static struct event_context *ctx;
82
83 if (!ctx && !(ctx = event_context_init(NULL))) {
84 smb_panic("Could not init smbd event context");
85 }
86 return ctx;
87 }
88
89 struct messaging_context *smbd_messaging_context(void)
90 {
91 static struct messaging_context *ctx;
92
93 if (!ctx && !(ctx = messaging_init(NULL, server_id_self(),
94 smbd_event_context()))) {
95 smb_panic("Could not init smbd messaging context");
96 }
97 return ctx;
98 }
99
100 struct memcache *smbd_memcache(void)
101 {
102 static struct memcache *cache;
103
104 if (!cache
105 && !(cache = memcache_init(NULL,
106 lp_max_stat_cache_size()*1024))) {
107
108 smb_panic("Could not init smbd memcache");
109 }
110 return cache;
111 }
112
113 /*******************************************************************
114 What to do when smb.conf is updated.
115 ********************************************************************/
116
117 static void smb_conf_updated(struct messaging_context *msg,
118 void *private_data,
119 uint32_t msg_type,
120 struct server_id server_id,
121 DATA_BLOB *data)
122 {
123 DEBUG(10,("smb_conf_updated: Got message saying smb.conf was "
124 "updated. Reloading.\n"));
125 reload_services(False);
126 }
127
128
129 /*******************************************************************
130 Delete a statcache entry.
131 ********************************************************************/
132
133 static void smb_stat_cache_delete(struct messaging_context *msg,
134 void *private_data,
135 uint32_t msg_tnype,
136 struct server_id server_id,
137 DATA_BLOB *data)
138 {
139 const char *name = (const char *)data->data;
140 DEBUG(10,("smb_stat_cache_delete: delete name %s\n", name));
141 stat_cache_delete(name);
142 }
143
144 /****************************************************************************
145 Terminate signal.
146 ****************************************************************************/
147
148 static void sig_term(void)
149 {
150 got_sig_term = 1;
151 sys_select_signal(SIGTERM);
152 }
153
154 /****************************************************************************
155 Catch a sighup.
156 ****************************************************************************/
157
158 static void sig_hup(int sig)
159 {
160 reload_after_sighup = 1;
161 sys_select_signal(SIGHUP);
162 }
163
164 /****************************************************************************
165 Catch a sigcld
166 ****************************************************************************/
167 static void sig_cld(int sig)
168 {
169 got_sig_cld = 1;
170 sys_select_signal(SIGCLD);
171 }
172
173 /****************************************************************************
174 Send a SIGTERM to our process group.
175 *****************************************************************************/
176
177 static void killkids(void)
178 {
179 if(am_parent) kill(0,SIGTERM);
180 }
181
182 /****************************************************************************
183 Process a sam sync message - not sure whether to do this here or
184 somewhere else.
185 ****************************************************************************/
186
187 static void msg_sam_sync(struct messaging_context *msg,
188 void *private_data,
189 uint32_t msg_type,
190 struct server_id server_id,
191 DATA_BLOB *data)
192 {
193 DEBUG(10, ("** sam sync message received, ignoring\n"));
194 }
195
196
197 /****************************************************************************
198 Open the socket communication - inetd.
199 ****************************************************************************/
200
201 static bool open_sockets_inetd(void)
202 {
203 /* Started from inetd. fd 0 is the socket. */
204 /* We will abort gracefully when the client or remote system
205 goes away */
206 smbd_set_server_fd(dup(0));
207
208 /* close our standard file descriptors */
209 close_low_fds(False); /* Don't close stderr */
210
211 set_socket_options(smbd_server_fd(),"SO_KEEPALIVE");
212 set_socket_options(smbd_server_fd(), lp_socket_options());
213
214 return True;
215 }
216
217 static void msg_exit_server(struct messaging_context *msg,
218 void *private_data,
219 uint32_t msg_type,
220 struct server_id server_id,
221 DATA_BLOB *data)
222 {
223 DEBUG(3, ("got a SHUTDOWN message\n"));
224 exit_server_cleanly(NULL);
225 }
226
227 #ifdef DEVELOPER
228 static void msg_inject_fault(struct messaging_context *msg,
229 void *private_data,
230 uint32_t msg_type,
231 struct server_id src,
232 DATA_BLOB *data)
233 {
234 int sig;
235
236 if (data->length != sizeof(sig)) {
237
238 DEBUG(0, ("Process %s sent bogus signal injection request\n",
239 procid_str_static(&src)));
240 return;
241 }
242
243 sig = *(int *)data->data;
244 if (sig == -1) {
245 exit_server("internal error injected");
246 return;
247 }
248
249 #if HAVE_STRSIGNAL
250 DEBUG(0, ("Process %s requested injection of signal %d (%s)\n",
251 procid_str_static(&src), sig, strsignal(sig)));
252 #else
253 DEBUG(0, ("Process %s requested injection of signal %d\n",
254 procid_str_static(&src), sig));
255 #endif
256
257 kill(sys_getpid(), sig);
258 }
259 #endif /* DEVELOPER */
260
261 struct child_pid {
262 struct child_pid *prev, *next;
263 pid_t pid;
264 };
265
266 static struct child_pid *children;
267 static int num_children;
268
269 static void add_child_pid(pid_t pid)
270 {
271 struct child_pid *child;
272
273 if (lp_max_smbd_processes() == 0) {
274 /* Don't bother with the child list if we don't care anyway */
275 return;
276 }
277
278 child = SMB_MALLOC_P(struct child_pid);
279 if (child == NULL) {
280 DEBUG(0, ("Could not add child struct -- malloc failed\n"));
281 return;
282 }
283 child->pid = pid;
284 DLIST_ADD(children, child);
285 num_children += 1;
286 }
287
288 static void remove_child_pid(pid_t pid, bool unclean_shutdown)
289 {
290 struct child_pid *child;
291
292 if (unclean_shutdown) {
293 /* a child terminated uncleanly so tickle all processes to see
294 if they can grab any of the pending locks
295 */
296 messaging_send_buf(smbd_messaging_context(), procid_self(),
297 MSG_SMB_BRL_VALIDATE, NULL, 0);
298 message_send_all(smbd_messaging_context(),
299 MSG_SMB_UNLOCK, NULL, 0, NULL);
300 }
301
302 if (lp_max_smbd_processes() == 0) {
303 /* Don't bother with the child list if we don't care anyway */
304 return;
305 }
306
307 for (child = children; child != NULL; child = child->next) {
308 if (child->pid == pid) {
309 struct child_pid *tmp = child;
310 DLIST_REMOVE(children, child);
311 SAFE_FREE(tmp);
312 num_children -= 1;
313 return;
314 }
315 }
316
317 DEBUG(0, ("Could not find child %d -- ignoring\n", (int)pid));
318 }
319
320 /****************************************************************************
321 Have we reached the process limit ?
322 ****************************************************************************/
323
324 static bool allowable_number_of_smbd_processes(void)
325 {
326 int max_processes = lp_max_smbd_processes();
327
328 if (!max_processes)
329 return True;
330
331 return num_children < max_processes;
332 }
333
334 /****************************************************************************
335 Open the socket communication.
336 ****************************************************************************/
337
338 static bool open_sockets_smbd(bool is_daemon, bool interactive, const char *smb_ports)
339 {
340 int num_interfaces = iface_count();
341 int num_sockets = 0;
342 int fd_listenset[FD_SETSIZE];
343 fd_set listen_set;
344 int s;
345 int maxfd = 0;
346 int i;
347 char *ports;
348 struct dns_reg_state * dns_reg = NULL;
349 unsigned dns_port = 0;
350
351 if (!is_daemon) {
352 return open_sockets_inetd();
353 }
354
355 #ifdef HAVE_ATEXIT
356 {
357 static int atexit_set;
358 if(atexit_set == 0) {
359 atexit_set=1;
360 atexit(killkids);
361 }
362 }
363 #endif
364
365 /* Stop zombies */
366 CatchSignal(SIGCLD, sig_cld);
367
368 FD_ZERO(&listen_set);
369
370 /* use a reasonable default set of ports - listing on 445 and 139 */
371 if (!smb_ports) {
372 ports = lp_smb_ports();
373 if (!ports || !*ports) {
374 ports = smb_xstrdup(SMB_PORTS);
375 } else {
376 ports = smb_xstrdup(ports);
377 }
378 } else {
379 ports = smb_xstrdup(smb_ports);
380 }
381
382 if (lp_interfaces() && lp_bind_interfaces_only()) {
383 /* We have been given an interfaces line, and been
384 told to only bind to those interfaces. Create a
385 socket per interface and bind to only these.
386 */
387
388 /* Now open a listen socket for each of the
389 interfaces. */
390 for(i = 0; i < num_interfaces; i++) {
391 TALLOC_CTX *frame = NULL;
392 const struct sockaddr_storage *ifss =
393 iface_n_sockaddr_storage(i);
394 char *tok;
395 const char *ptr;
396
397 if (ifss == NULL) {
398 DEBUG(0,("open_sockets_smbd: "
399 "interface %d has NULL IP address !\n",
400 i));
401 continue;
402 }
403
404 frame = talloc_stackframe();
405 for (ptr=ports;
406 next_token_talloc(frame,&ptr, &tok, " \t,");) {
407 unsigned port = atoi(tok);
408 if (port == 0 || port > 0xffff) {
409 continue;
410 }
411
412 /* Keep the first port for mDNS service
413 * registration.
414 */
415 if (dns_port == 0) {
416 dns_port = port;
417 }
418
419 s = fd_listenset[num_sockets] =
420 open_socket_in(SOCK_STREAM,
421 port,
422 num_sockets == 0 ? 0 : 2,
423 ifss,
424 true);
425 if(s == -1) {
426 continue;
427 }
428
429 /* ready to listen */
430 set_socket_options(s,"SO_KEEPALIVE");
431 set_socket_options(s,lp_socket_options());
432
433 /* Set server socket to
434 * non-blocking for the accept. */
435 set_blocking(s,False);
436
437 if (listen(s, SMBD_LISTEN_BACKLOG) == -1) {
438 DEBUG(0,("open_sockets_smbd: listen: "
439 "%s\n", strerror(errno)));
440 close(s);
441 TALLOC_FREE(frame);
442 return False;
443 }
444 FD_SET(s,&listen_set);
445 maxfd = MAX( maxfd, s);
446
447 num_sockets++;
448 if (num_sockets >= FD_SETSIZE) {
449 DEBUG(0,("open_sockets_smbd: Too "
450 "many sockets to bind to\n"));
451 TALLOC_FREE(frame);
452 return False;
453 }
454 }
455 TALLOC_FREE(frame);
456 }
457 } else {
458 /* Just bind to 0.0.0.0 - accept connections
459 from anywhere. */
460
461 TALLOC_CTX *frame = talloc_stackframe();
462 char *tok;
463 const char *ptr;
464 const char *sock_addr = lp_socket_address();
465 char *sock_tok;
466 const char *sock_ptr;
467
468 if (strequal(sock_addr, "0.0.0.0") ||
469 strequal(sock_addr, "::")) {
470 #if HAVE_IPV6
471 sock_addr = "::,0.0.0.0";
472 #else
473 sock_addr = "0.0.0.0";
474 #endif
475 }
476
477 for (sock_ptr=sock_addr;
478 next_token_talloc(frame, &sock_ptr, &sock_tok, " \t,"); ) {
479 for (ptr=ports; next_token_talloc(frame, &ptr, &tok, " \t,"); ) {
480 struct sockaddr_storage ss;
481
482 unsigned port = atoi(tok);
483 if (port == 0 || port > 0xffff) {
484 continue;
485 }
486
487 /* Keep the first port for mDNS service
488 * registration.
489 */
490 if (dns_port == 0) {
491 dns_port = port;
492 }
493
494 /* open an incoming socket */
495 if (!interpret_string_addr(&ss, sock_tok,
496 AI_NUMERICHOST|AI_PASSIVE)) {
497 continue;
498 }
499
500 s = open_socket_in(SOCK_STREAM,
501 port,
502 num_sockets == 0 ? 0 : 2,
503 &ss,
504 true);
505 if (s == -1) {
506 continue;
507 }
508
509 /* ready to listen */
510 set_socket_options(s,"SO_KEEPALIVE");
511 set_socket_options(s,lp_socket_options());
512
513 /* Set server socket to non-blocking
514 * for the accept. */
515 set_blocking(s,False);
516
517 if (listen(s, SMBD_LISTEN_BACKLOG) == -1) {
518 DEBUG(0,("open_sockets_smbd: "
519 "listen: %s\n",
520 strerror(errno)));
521 close(s);
522 TALLOC_FREE(frame);
523 return False;
524 }
525
526 fd_listenset[num_sockets] = s;
527 FD_SET(s,&listen_set);
528 maxfd = MAX( maxfd, s);
529
530 num_sockets++;
531
532 if (num_sockets >= FD_SETSIZE) {
533 DEBUG(0,("open_sockets_smbd: Too "
534 "many sockets to bind to\n"));
535 TALLOC_FREE(frame);
536 return False;
537 }
538 }
539 }
540 TALLOC_FREE(frame);
541 }
542
543 SAFE_FREE(ports);
544
545 if (num_sockets == 0) {
546 DEBUG(0,("open_sockets_smbd: No "
547 "sockets available to bind to.\n"));
548 return false;
549 }
550
551 /* Setup the main smbd so that we can get messages. Note that
552 do this after starting listening. This is needed as when in
553 clustered mode, ctdb won't allow us to start doing database
554 operations until it has gone thru a full startup, which
555 includes checking to see that smbd is listening. */
556 claim_connection(NULL,"",
557 FLAG_MSG_GENERAL|FLAG_MSG_SMBD|FLAG_MSG_DBWRAP);
558
559 /* Listen to messages */
560
561 messaging_register(smbd_messaging_context(), NULL,
562 MSG_SMB_SAM_SYNC, msg_sam_sync);
563 messaging_register(smbd_messaging_context(), NULL,
564 MSG_SHUTDOWN, msg_exit_server);
565 messaging_register(smbd_messaging_context(), NULL,
566 MSG_SMB_FILE_RENAME, msg_file_was_renamed);
567 messaging_register(smbd_messaging_context(), NULL,
568 MSG_SMB_CONF_UPDATED, smb_conf_updated);
569 messaging_register(smbd_messaging_context(), NULL,
570 MSG_SMB_STAT_CACHE_DELETE, smb_stat_cache_delete);
571 brl_register_msgs(smbd_messaging_context());
572
573 #ifdef DEVELOPER
574 messaging_register(smbd_messaging_context(), NULL,
575 MSG_SMB_INJECT_FAULT, msg_inject_fault);
576 #endif
577
578 /* now accept incoming connections - forking a new process
579 for each incoming connection */
580 DEBUG(2,("waiting for a connection\n"));
581 while (1) {
582 struct timeval now, idle_timeout;
583 fd_set r_fds, w_fds;
584 int num;
585
586 /* Ensure we respond to PING and DEBUG messages from the main smbd. */
587 message_dispatch(smbd_messaging_context());
588
589 if (got_sig_cld) {
590 pid_t pid;
591 int status;
592
593 got_sig_cld = False;
594
595 while ((pid = sys_waitpid(-1, &status, WNOHANG)) > 0) {
596 bool unclean_shutdown = False;
597
598 /* If the child terminated normally, assume
599 it was an unclean shutdown unless the
600 status is 0
601 */
602 if (WIFEXITED(status)) {
603 unclean_shutdown = WEXITSTATUS(status);
604 }
605 /* If the child terminated due to a signal
606 we always assume it was unclean.
607 */
608 if (WIFSIGNALED(status)) {
609 unclean_shutdown = True;
610 }
611 remove_child_pid(pid, unclean_shutdown);
612 }
613 }
614
615 idle_timeout = timeval_zero();
616
617 memcpy((char *)&r_fds, (char *)&listen_set,
618 sizeof(listen_set));
619 FD_ZERO(&w_fds);
620 GetTimeOfDay(&now);
621
622 /* Kick off our mDNS registration. */
623 if (dns_port != 0) {
624 dns_register_smbd(&dns_reg, dns_port, &maxfd,
625 &r_fds, &idle_timeout);
626 }
627
628 event_add_to_select_args(smbd_event_context(), &now,
629 &r_fds, &w_fds, &idle_timeout,
630 &maxfd);
631
632 num = sys_select(maxfd+1,&r_fds,&w_fds,NULL,
633 timeval_is_zero(&idle_timeout) ?
634 NULL : &idle_timeout);
635
636 if (num == -1 && errno == EINTR) {
637 if (got_sig_term) {
638 exit_server_cleanly(NULL);
639 }
640
641 /* check for sighup processing */
642 if (reload_after_sighup) {
643 change_to_root_user();
644 DEBUG(1,("Reloading services after SIGHUP\n"));
645 reload_services(False);
646 reload_after_sighup = 0;
647 }
648
649 continue;
650 }
651
652
653 /* If the idle timeout fired and we don't have any connected
654 * users, exit gracefully. We should be running under a process
655 * controller that will restart us if necessry.
656 */
657 if (num == 0 && count_all_current_connections() == 0) {
658 exit_server_cleanly("idle timeout");
659 }
660
661 /* process pending nDNS responses */
662 if (dns_register_smbd_reply(dns_reg, &r_fds, &idle_timeout)) {
663 --num;
664 }
665
666 if (run_events(smbd_event_context(), num, &r_fds, &w_fds)) {
667 continue;
668 }
669
670 /* check if we need to reload services */
671 check_reload(time(NULL));
672
673 /* Find the sockets that are read-ready -
674 accept on these. */
675 for( ; num > 0; num--) {
676 struct sockaddr addr;
677 socklen_t in_addrlen = sizeof(addr);
678 pid_t child = 0;
679
680 s = -1;
681 for(i = 0; i < num_sockets; i++) {
682 if(FD_ISSET(fd_listenset[i],&r_fds)) {
683 s = fd_listenset[i];
684 /* Clear this so we don't look
685 at it again. */
686 FD_CLR(fd_listenset[i],&r_fds);
687 break;
688 }
689 }
690
691 smbd_set_server_fd(accept(s,&addr,&in_addrlen));
692
693 if (smbd_server_fd() == -1 && errno == EINTR)
694 continue;
695
696 if (smbd_server_fd() == -1) {
697 DEBUG(2,("open_sockets_smbd: accept: %s\n",
698 strerror(errno)));
699 continue;
700 }
701
702 /* Ensure child is set to blocking mode */
703 set_blocking(smbd_server_fd(),True);
704
705 if (smbd_server_fd() != -1 && interactive)
706 return True;
707
708 if (allowable_number_of_smbd_processes() &&
709 smbd_server_fd() != -1 &&
710 ((child = sys_fork())==0)) {
711 char remaddr[INET6_ADDRSTRLEN];
712
713 /* Child code ... */
714
715 /* Stop zombies, the parent explicitly handles
716 * them, counting worker smbds. */
717 CatchChild();
718
719 /* close the listening socket(s) */
720 for(i = 0; i < num_sockets; i++)
721 close(fd_listenset[i]);
722
723 /* close our mDNS daemon handle */
724 dns_register_close(&dns_reg);
725
726 /* close our standard file
727 descriptors */
728 close_low_fds(False);
729 am_parent = 0;
730
731 set_socket_options(smbd_server_fd(),"SO_KEEPALIVE");
732 set_socket_options(smbd_server_fd(),
733 lp_socket_options());
734
735 /* this is needed so that we get decent entries
736 in smbstatus for port 445 connects */
737 set_remote_machine_name(get_peer_addr(smbd_server_fd(),
738 remaddr,
739 sizeof(remaddr)),
740 false);
741
742 if (!reinit_after_fork(
743 smbd_messaging_context(),
744 smbd_event_context(),
745 true)) {
746 DEBUG(0,("reinit_after_fork() failed\n"));
747 smb_panic("reinit_after_fork() failed");
748 }
749
750 return True;
751 }
752 /* The parent doesn't need this socket */
753 close(smbd_server_fd());
754
755 /* Sun May 6 18:56:14 2001 ackley@cs.unm.edu:
756 Clear the closed fd info out of server_fd --
757 and more importantly, out of client_fd in
758 util_sock.c, to avoid a possible
759 getpeername failure if we reopen the logs
760 and use %I in the filename.
761 */
762
763 smbd_set_server_fd(-1);
764
765 if (child != 0) {
766 add_child_pid(child);
767 }
768
769 /* Force parent to check log size after
770 * spawning child. Fix from
771 * klausr@ITAP.Physik.Uni-Stuttgart.De. The
772 * parent smbd will log to logserver.smb. It
773 * writes only two messages for each child
774 * started/finished. But each child writes,
775 * say, 50 messages also in logserver.smb,
776 * begining with the debug_count of the
777 * parent, before the child opens its own log
778 * file logserver.client. In a worst case
779 * scenario the size of logserver.smb would be
780 * checked after about 50*50=2500 messages
781 * (ca. 100kb).
782 * */
783 force_check_log_size();
784
785 } /* end for num */
786 } /* end while 1 */
787
788 /* NOTREACHED return True; */
789 }
790
791 /****************************************************************************
792 Reload printers
793 **************************************************************************/
794 void reload_printers(void)
795 {
796 int snum;
797 int n_services = lp_numservices();
798 int pnum = lp_servicenumber(PRINTERS_NAME);
799 const char *pname;
800
801 pcap_cache_reload();
802
803 /* remove stale printers */
804 for (snum = 0; snum < n_services; snum++) {
805 /* avoid removing PRINTERS_NAME or non-autoloaded printers */
806 if (snum == pnum || !(lp_snum_ok(snum) && lp_print_ok(snum) &&
807 lp_autoloaded(snum)))
808 continue;
809
810 pname = lp_printername(snum);
811 if (!pcap_printername_ok(pname)) {
812 DEBUG(3, ("removing stale printer %s\n", pname));
813
814 if (is_printer_published(NULL, snum, NULL))
815 nt_printer_publish(NULL, snum, SPOOL_DS_UNPUBLISH);
816 del_a_printer(pname);
817 lp_killservice(snum);
818 }
819 }
820
821 load_printers();
822 }
823
824 /****************************************************************************
825 Reload the services file.
826 **************************************************************************/
827
828 bool reload_services(bool test)
829 {
830 bool ret;
831
832 if (lp_loaded()) {
833 char *fname = lp_configfile();
834 if (file_exist(fname, NULL) &&
835 !strcsequal(fname, get_dyn_CONFIGFILE())) {
836 set_dyn_CONFIGFILE(fname);
837 test = False;
838 }
839 }
840
841 reopen_logs();
842
843 if (test && !lp_file_list_changed())
844 return(True);
845
846 lp_killunused(conn_snum_used);
847
848 ret = lp_load(get_dyn_CONFIGFILE(), False, False, True, True);
849
850 reload_printers();
851
852 /* perhaps the config filename is now set */
853 if (!test)
854 reload_services(True);
855
856 reopen_logs();
857
858 load_interfaces();
859
860 if (smbd_server_fd() != -1) {
861 set_socket_options(smbd_server_fd(),"SO_KEEPALIVE");
862 set_socket_options(smbd_server_fd(), lp_socket_options());
863 }
864
865 mangle_reset_cache();
866 reset_stat_cache();
867
868 /* this forces service parameters to be flushed */
869 set_current_service(NULL,0,True);
870
871 return(ret);
872 }
873
874 /****************************************************************************
875 Exit the server.
876 ****************************************************************************/
877
878 /* Reasons for shutting down a server process. */
879 enum server_exit_reason { SERVER_EXIT_NORMAL, SERVER_EXIT_ABNORMAL };
880
881 static void exit_server_common(enum server_exit_reason how,
882 const char *const reason) NORETURN_ATTRIBUTE;
883
884 static void exit_server_common(enum server_exit_reason how,
885 const char *const reason)
886 {
887 static int firsttime=1;
888
889 if (!firsttime)
890 exit(0);
891 firsttime = 0;
892
893 change_to_root_user();
894
895 if (negprot_global_auth_context) {
896 (negprot_global_auth_context->free)(&negprot_global_auth_context);
897 }
898
899 conn_close_all();
900
901 invalidate_all_vuids();
902
903 /* 3 second timeout. */
904 print_notify_send_messages(smbd_messaging_context(), 3);
905
906 /* delete our entry in the connections database. */
907 yield_connection(NULL,"");
908
909 respond_to_all_remaining_local_messages();
910
911 #ifdef WITH_DFS
912 if (dcelogin_atmost_once) {
913 dfs_unlogin();
914 }
915 #endif
916
917 #ifdef USE_DMAPI
918 /* Destroy Samba DMAPI session only if we are master smbd process */
919 if (am_parent) {
920 if (!dmapi_destroy_session()) {
921 DEBUG(0,("Unable to close Samba DMAPI session\n"));
922 }
923 }
924 #endif
925
926 locking_end();
927 printing_end();
928
929 if (how != SERVER_EXIT_NORMAL) {
930 int oldlevel = DEBUGLEVEL;
931
932 DEBUGLEVEL = 10;
933
934 DEBUGSEP(0);
935 DEBUG(0,("Abnormal server exit: %s\n",
936 reason ? reason : "no explanation provided"));
937 DEBUGSEP(0);
938
939 log_stack_trace();
940
941 DEBUGLEVEL = oldlevel;
942 dump_core();
943
944 } else {
945 DEBUG(3,("Server exit (%s)\n",
946 (reason ? reason : "normal exit")));
947 }
948
949 exit(0);
950 }
951
952 void exit_server(const char *const explanation)
953 {
954 exit_server_common(SERVER_EXIT_ABNORMAL, explanation);
955 }
956
957 void exit_server_cleanly(const char *const explanation)
958 {
959 exit_server_common(SERVER_EXIT_NORMAL, explanation);
960 }
961
962 void exit_server_fault(void)
963 {
964 exit_server("critical server fault");
965 }
966
967
968 /****************************************************************************
969 received when we should release a specific IP
970 ****************************************************************************/
971 static void release_ip(const char *ip, void *priv)
972 {
973 char addr[INET6_ADDRSTRLEN];
974
975 if (strcmp(client_socket_addr(get_client_fd(),addr,sizeof(addr)), ip) == 0) {
976 /* we can't afford to do a clean exit - that involves
977 database writes, which would potentially mean we
978 are still running after the failover has finished -
979 we have to get rid of this process ID straight
980 away */
981 DEBUG(0,("Got release IP message for our IP %s - exiting immediately\n",
982 ip));
983 _exit(0);
984 }
985 }
986
987 static void msg_release_ip(struct messaging_context *msg_ctx, void *private_data,
988 uint32_t msg_type, struct server_id server_id, DATA_BLOB *data)
989 {
990 release_ip((char *)data->data, NULL);
991 }
992
993 /****************************************************************************
994 Initialise connect, service and file structs.
995 ****************************************************************************/
996
997 static bool init_structs(void )
998 {
999 /*
1000 * Set the machine NETBIOS name if not already
1001 * set from the config file.
1002 */
1003
1004 if (!init_names())
1005 return False;
1006
1007 conn_init();
1008
1009 file_init();
1010
1011 /* for RPC pipes */
1012 init_rpc_pipe_hnd();
1013
1014 init_dptrs();
1015
1016 if (!secrets_init())
1017 return False;
1018
1019 return True;
1020 }
1021
1022 /*
1023 * Send keepalive packets to our client
1024 */
1025 static bool keepalive_fn(const struct timeval *now, void *private_data)
1026 {
1027 if (!send_keepalive(smbd_server_fd())) {
1028 DEBUG( 2, ( "Keepalive failed - exiting.\n" ) );
1029 return False;
1030 }
1031 return True;
1032 }
1033
1034 /*
1035 * Do the recurring check if we're idle
1036 */
1037 static bool deadtime_fn(const struct timeval *now, void *private_data)
1038 {
1039 if ((conn_num_open() == 0)
1040 || (conn_idle_all(now->tv_sec))) {
1041 DEBUG( 2, ( "Closing idle connection\n" ) );
1042 messaging_send(smbd_messaging_context(), procid_self(),
1043 MSG_SHUTDOWN, &data_blob_null);
1044 return False;
1045 }
1046
1047 return True;
1048 }
1049
1050
1051 /****************************************************************************
1052 main program.
1053 ****************************************************************************/
1054
1055 /* Declare prototype for build_options() to avoid having to run it through
1056 mkproto.h. Mixing $(builddir) and $(srcdir) source files in the current
1057 prototype generation system is too complicated. */
1058
1059 extern void build_options(bool screen);
1060
1061 int main(int argc,const char *argv[])
1062 {
1063 /* shall I run as a daemon */
1064 static bool is_daemon = False;
1065 static bool interactive = False;
1066 static bool Fork = True;
1067 static bool no_process_group = False;
1068 static bool log_stdout = False;
1069 static char *ports = NULL;
1070 static char *profile_level = NULL;
1071 int opt;
1072 poptContext pc;
1073 bool print_build_options = False;
1074 enum {
1075 OPT_DAEMON = 1000,
1076 OPT_INTERACTIVE,
1077 OPT_FORK,
1078 OPT_NO_PROCESS_GROUP,
1079 OPT_LOG_STDOUT
1080 };
1081 struct poptOption long_options[] = {
1082 POPT_AUTOHELP
1083 {"daemon", 'D', POPT_ARG_NONE, NULL, OPT_DAEMON, "Become a daemon (default)" },
1084 {"interactive", 'i', POPT_ARG_NONE, NULL, OPT_INTERACTIVE, "Run interactive (not a daemon)"},
1085 {"foreground", 'F', POPT_ARG_NONE, NULL, OPT_FORK, "Run daemon in foreground (for daemontools, etc.)" },
1086 {"no-process-group", '\0', POPT_ARG_NONE, NULL, OPT_NO_PROCESS_GROUP, "Don't create a new process group" },
1087 {"log-stdout", 'S', POPT_ARG_NONE, NULL, OPT_LOG_STDOUT, "Log to stdout" },
1088 {"build-options", 'b', POPT_ARG_NONE, NULL, 'b', "Print build options" },
1089 {"port", 'p', POPT_ARG_STRING, &ports, 0, "Listen on the specified ports"},
1090 {"profiling-level", 'P', POPT_ARG_STRING, &profile_level, 0, "Set profiling level","PROFILE_LEVEL"},
1091 POPT_COMMON_SAMBA
1092 POPT_COMMON_DYNCONFIG
1093 POPT_TABLEEND
1094 };
1095 TALLOC_CTX *frame = talloc_stackframe(); /* Setup tos. */
1096
1097 TimeInit();
1098
1099 db_tdb2_setup_messaging(NULL, false);
1100
1101 #ifdef HAVE_SET_AUTH_PARAMETERS
1102 set_auth_parameters(argc,argv);
1103 #endif
1104
1105 pc = poptGetContext("smbd", argc, argv, long_options, 0);
1106 while((opt = poptGetNextOpt(pc)) != -1) {
1107 switch (opt) {
1108 case OPT_DAEMON:
1109 is_daemon = true;
1110 break;
1111 case OPT_INTERACTIVE:
1112 interactive = true;
1113 break;
1114 case OPT_FORK:
1115 Fork = false;
1116 break;
1117 case OPT_NO_PROCESS_GROUP:
1118 no_process_group = true;
1119 break;
1120 case OPT_LOG_STDOUT:
1121 log_stdout = true;
1122 break;
1123 case 'b':
1124 print_build_options = True;
1125 break;
1126 default:
1127 d_fprintf(stderr, "\nInvalid option %s: %s\n\n",
1128 poptBadOption(pc, 0), poptStrerror(opt));
1129 poptPrintUsage(pc, stderr, 0);
1130 exit(1);
1131 }
1132 }
1133 poptFreeContext(pc);
1134
1135 if (interactive) {
1136 Fork = False;
1137 log_stdout = True;
1138 }
1139
1140 setup_logging(argv[0],log_stdout);
1141
1142 if (print_build_options) {
1143 build_options(True); /* Display output to screen as well as debug */
1144 exit(0);
1145 }
1146
1147 load_case_tables();
1148
1149 #ifdef HAVE_SETLUID
1150 /* needed for SecureWare on SCO */
1151 setluid(0);
1152 #endif
1153
1154 sec_init();
1155
1156 set_remote_machine_name("smbd", False);
1157
1158 if (interactive && (DEBUGLEVEL >= 9)) {
1159 talloc_enable_leak_report();
1160 }
1161
1162 if (log_stdout && Fork) {
1163 DEBUG(0,("ERROR: Can't log to stdout (-S) unless daemon is in foreground (-F) or interactive (-i)\n"));
1164 exit(1);
1165 }
1166
1167 /* we want to re-seed early to prevent time delays causing
1168 client problems at a later date. (tridge) */
1169 generate_random_buffer(NULL, 0);
1170
1171 /* make absolutely sure we run as root - to handle cases where people
1172 are crazy enough to have it setuid */
1173
1174 gain_root_privilege();
1175 gain_root_group_privilege();
1176
1177 fault_setup((void (*)(void *))exit_server_fault);
1178 dump_core_setup("smbd");
1179
1180 CatchSignal(SIGTERM , SIGNAL_CAST sig_term);
1181 CatchSignal(SIGHUP,SIGNAL_CAST sig_hup);
1182
1183 /* we are never interested in SIGPIPE */
1184 BlockSignals(True,SIGPIPE);
1185
1186 #if defined(SIGFPE)
1187 /* we are never interested in SIGFPE */
1188 BlockSignals(True,SIGFPE);
1189 #endif
1190
1191 #if defined(SIGUSR2)
1192 /* We are no longer interested in USR2 */
1193 BlockSignals(True,SIGUSR2);
1194 #endif
1195
1196 /* POSIX demands that signals are inherited. If the invoking process has
1197 * these signals masked, we will have problems, as we won't recieve them. */
1198 BlockSignals(False, SIGHUP);
1199 BlockSignals(False, SIGUSR1);
1200 BlockSignals(False, SIGTERM);
1201
1202 /* we want total control over the permissions on created files,
1203 so set our umask to 0 */
1204 umask(0);
1205
1206 init_sec_ctx();
1207
1208 reopen_logs();
1209
1210 DEBUG(0,("smbd version %s started.\n", SAMBA_VERSION_STRING));
1211 DEBUGADD(0,("%s\n", COPYRIGHT_STARTUP_MESSAGE));
1212
1213 DEBUG(2,("uid=%d gid=%d euid=%d egid=%d\n",
1214 (int)getuid(),(int)getgid(),(int)geteuid(),(int)getegid()));
1215
1216 /* Output the build options to the debug log */
1217 build_options(False);
1218
1219 if (sizeof(uint16) < 2 || sizeof(uint32) < 4) {
1220 DEBUG(0,("ERROR: Samba is not configured correctly for the word size on your machine\n"));
1221 exit(1);
1222 }
1223
1224 if (!lp_load_initial_only(get_dyn_CONFIGFILE())) {
1225 DEBUG(0, ("error opening config file\n"));
1226 exit(1);
1227 }
1228
1229 if (smbd_messaging_context() == NULL)
1230 exit(1);
1231
1232 /*
1233 * Do this before reload_services.
1234 */
1235 db_tdb2_setup_messaging(smbd_messaging_context(), true);
1236
1237 if (!reload_services(False))
1238 return(-1);
1239
1240 init_structs();
1241
1242 #ifdef WITH_PROFILE
1243 if (!profile_setup(smbd_messaging_context(), False)) {
1244 DEBUG(0,("ERROR: failed to setup profiling\n"));
1245 return -1;
1246 }
1247 if (profile_level != NULL) {
1248 int pl = atoi(profile_level);
1249 struct server_id src;
1250
1251 DEBUG(1, ("setting profiling level: %s\n",profile_level));
1252 src.pid = getpid();
1253 set_profile_level(pl, src);
1254 }
1255 #endif
1256
1257 DEBUG(3,( "loaded services\n"));
1258
1259 if (!is_daemon && !is_a_socket(0)) {
1260 if (!interactive)
1261 DEBUG(0,("standard input is not a socket, assuming -D option\n"));
1262
1263 /*
1264 * Setting is_daemon here prevents us from eventually calling
1265 * the open_sockets_inetd()
1266 */
1267
1268 is_daemon = True;
1269 }
1270
1271 if (is_daemon && !interactive) {
1272 DEBUG( 3, ( "Becoming a daemon.\n" ) );
1273 become_daemon(Fork, no_process_group);
1274 }
1275
1276 #if HAVE_SETPGID
1277 /*
1278 * If we're interactive we want to set our own process group for
1279 * signal management.
1280 */
1281 if (interactive && !no_process_group)
1282 setpgid( (pid_t)0, (pid_t)0);
1283 #endif
1284
1285 if (!directory_exist(lp_lockdir(), NULL))
1286 mkdir(lp_lockdir(), 0755);
1287
1288 if (is_daemon)
1289 pidfile_create("smbd");
1290
1291 if (!reinit_after_fork(smbd_messaging_context(),
1292 smbd_event_context(), false)) {
1293 DEBUG(0,("reinit_after_fork() failed\n"));
1294 exit(1);
1295 }
1296
1297 /* Setup all the TDB's - including CLEAR_IF_FIRST tdb's. */
1298
1299 if (smbd_memcache() == NULL) {
1300 exit(1);
1301 }
1302
1303 memcache_set_global(smbd_memcache());
1304
1305 /* Initialise the password backed before the global_sam_sid
1306 to ensure that we fetch from ldap before we make a domain sid up */
1307
1308 if(!initialize_password_db(False, smbd_event_context()))
1309 exit(1);
1310
1311 if (!secrets_init()) {
1312 DEBUG(0, ("ERROR: smbd can not open secrets.tdb\n"));
1313 exit(1);
1314 }
1315
1316 if(!get_global_sam_sid()) {
1317 DEBUG(0,("ERROR: Samba cannot create a SAM SID.\n"));
1318 exit(1);
1319 }
1320
1321 if (!session_init())
1322 exit(1);
1323
1324 if (!connections_init(True))
1325 exit(1);
1326
1327 if (!locking_init())
1328 exit(1);
1329
1330 namecache_enable();
1331
1332 if (!W_ERROR_IS_OK(registry_init_full()))
1333 exit(1);
1334
1335 #if 0
1336 if (!init_svcctl_db())
1337 exit(1);
1338 #endif
1339
1340 if (!print_backend_init(smbd_messaging_context()))
1341 exit(1);
1342
1343 if (!init_guest_info()) {
1344 DEBUG(0,("ERROR: failed to setup guest info.\n"));
1345 return -1;
1346 }
1347
1348 /* only start the background queue daemon if we are
1349 running as a daemon -- bad things will happen if
1350 smbd is launched via inetd and we fork a copy of
1351 ourselves here */
1352
1353 if (is_daemon && !interactive
1354 && lp_parm_bool(-1, "smbd", "backgroundqueue", true)) {
1355 start_background_queue();
1356 }
1357
1358 if (!open_sockets_smbd(is_daemon, interactive, ports))
1359 exit(1);
1360
1361 /*
1362 * everything after this point is run after the fork()
1363 */
1364
1365 static_init_rpc;
1366
1367 init_modules();
1368
1369 /* Possibly reload the services file. Only worth doing in
1370 * daemon mode. In inetd mode, we know we only just loaded this.
1371 */
1372 if (is_daemon) {
1373 reload_services(True);
1374 }
1375
1376 if (!init_account_policy()) {
1377 DEBUG(0,("Could not open account policy tdb.\n"));
1378 exit(1);
1379 }
1380
1381 if (*lp_rootdir()) {
1382 if (sys_chroot(lp_rootdir()) != 0) {
1383 DEBUG(0,("Failed to change root to %s\n", lp_rootdir()));
1384 exit(1);
1385 }
1386 if (chdir("/") == -1) {
1387 DEBUG(0,("Failed to chdir to / on chroot to %s\n", lp_rootdir()));
1388 exit(1);
1389 }
1390 DEBUG(0,("Changed root to %s\n", lp_rootdir()));
1391 }
1392
1393 /* Setup oplocks */
1394 if (!init_oplocks(smbd_messaging_context()))
1395 exit(1);
1396
1397 /* Setup aio signal handler. */
1398 initialize_async_io_handler();
1399
1400 /* register our message handlers */
1401 messaging_register(smbd_messaging_context(), NULL,
1402 MSG_SMB_FORCE_TDIS, msg_force_tdis);
1403 messaging_register(smbd_messaging_context(), NULL,
1404 MSG_SMB_RELEASE_IP, msg_release_ip);
1405 messaging_register(smbd_messaging_context(), NULL,
1406 MSG_SMB_CLOSE_FILE, msg_close_file);
1407
1408 if ((lp_keepalive() != 0)
1409 && !(event_add_idle(smbd_event_context(), NULL,
1410 timeval_set(lp_keepalive(), 0),
1411 "keepalive", keepalive_fn,
1412 NULL))) {
1413 DEBUG(0, ("Could not add keepalive event\n"));
1414 exit(1);
1415 }
1416
1417 if (!(event_add_idle(smbd_event_context(), NULL,
1418 timeval_set(IDLE_CLOSED_TIMEOUT, 0),
1419 "deadtime", deadtime_fn, NULL))) {
1420 DEBUG(0, ("Could not add deadtime event\n"));
1421 exit(1);
1422 }
1423
1424 #ifdef CLUSTER_SUPPORT
1425
1426 if (lp_clustering()) {
1427 /*
1428 * We need to tell ctdb about our client's TCP
1429 * connection, so that for failover ctdbd can send
1430 * tickle acks, triggering a reconnection by the
1431 * client.
1432 */
1433
1434 struct sockaddr_in srv, clnt;
1435
1436 if (client_get_tcp_info(&srv, &clnt) == 0) {
1437
1438 NTSTATUS status;
1439
1440 status = ctdbd_register_ips(
1441 messaging_ctdbd_connection(),
1442 &srv, &clnt, release_ip, NULL);
1443
1444 if (!NT_STATUS_IS_OK(status)) {
1445 DEBUG(0, ("ctdbd_register_ips failed: %s\n",
1446 nt_errstr(status)));
1447 }
1448 } else
1449 {
1450 DEBUG(0,("Unable to get tcp info for "
1451 "CTDB_CONTROL_TCP_CLIENT: %s\n",
1452 strerror(errno)));
1453 }
1454 }
1455
1456 #endif
1457
1458 TALLOC_FREE(frame);
1459
1460 smbd_process();
1461
1462 namecache_shutdown();
1463
1464 exit_server_cleanly(NULL);
1465 return(0);
1466 }
Samba GIT mirror