source3/rpc_server/lsasd.c

   1 /*
   2  *  Unix SMB/CIFS implementation.
   3  *
   4  *  LSA service daemon
   5  *
   6  *  Copyright (c) 2011      Andreas Schneider <asn@samba.org>
   7  *
   8  *  This program is free software; you can redistribute it and/or modify
   9  *  it under the terms of the GNU General Public License as published by
  10  *  the Free Software Foundation; either version 3 of the License, or
  11  *  (at your option) any later version.
  12  *
  13  *  This program is distributed in the hope that it will be useful,
  14  *  but WITHOUT ANY WARRANTY; without even the implied warranty of
  15  *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  16  *  GNU General Public License for more details.
  17  *
  18  *  You should have received a copy of the GNU General Public License
  19  *  along with this program; if not, see <http://www.gnu.org/licenses/>.
  20  */
  21
  22 #include "includes.h"
  23 #include "serverid.h"
  24 #include "messages.h"
  25 #include "ntdomain.h"
  26
  27 #include "lib/id_cache.h"
  28
  29 #include "../lib/tsocket/tsocket.h"
  30 #include "lib/server_prefork.h"
  31 #include "lib/server_prefork_util.h"
  32 #include "librpc/rpc/dcerpc_ep.h"
  33
  34 #include "rpc_server/rpc_server.h"
  35 #include "rpc_server/rpc_ep_register.h"
  36 #include "rpc_server/rpc_sock_helper.h"
  37
  38 #include "librpc/gen_ndr/srv_lsa.h"
  39 #include "librpc/gen_ndr/srv_samr.h"
  40 #include "librpc/gen_ndr/srv_netlogon.h"
  41
  42 #define DAEMON_NAME "lsasd"
  43 #define LSASD_MAX_SOCKETS 64
  44
  45 static struct server_id parent_id;
  46 static struct prefork_pool *lsasd_pool = NULL;
  47 static int lsasd_child_id = 0;
  48
  49 static struct pf_daemon_config default_pf_lsasd_cfg = {
  50         .prefork_status = PFH_INIT,
  51         .min_children = 5,
  52         .max_children = 25,
  53         .spawn_rate = 5,
  54         .max_allowed_clients = 100,
  55         .child_min_life = 60 /* 1 minute minimum life time */
  56 };
  57 static struct pf_daemon_config pf_lsasd_cfg = { 0 };
  58
  59 void start_lsasd(struct tevent_context *ev_ctx,
  60                  struct messaging_context *msg_ctx);
  61
  62 static void lsasd_reopen_logs(int child_id)
  63 {
  64         char *lfile = lp_logfile(talloc_tos());
  65         char *extension;
  66         int rc;
  67
  68         if (child_id) {
  69                 rc = asprintf(&extension, "%s.%d", DAEMON_NAME, child_id);
  70         } else {
  71                 rc = asprintf(&extension, "%s", DAEMON_NAME);
  72         }
  73         if (rc == -1) {
  74                 return;
  75         }
  76
  77         rc = 0;
  78         if (lfile == NULL || lfile[0] == '\0') {
  79                 rc = asprintf(&lfile, "%s/log.%s",
  80                               get_dyn_LOGFILEBASE(), extension);
  81         } else {
  82                 if (strstr(lfile, extension) == NULL) {
  83                         if (child_id) {
  84                                 rc = asprintf(&lfile, "%s.%d",
  85                                                 lp_logfile(talloc_tos()),
  86                                                 child_id);
  87                         } else {
  88                                 rc = asprintf(&lfile, "%s.%s",
  89                                                 lp_logfile(talloc_tos()),
  90                                                 extension);
  91                         }
  92                 }
  93         }
  94
  95         if (rc > 0) {
  96                 lp_set_logfile(lfile);
  97                 SAFE_FREE(lfile);
  98         }
  99
 100         SAFE_FREE(extension);
 101
 102         reopen_logs();
 103 }
 104
 105 static void lsasd_smb_conf_updated(struct messaging_context *msg,
 106                                   void *private_data,
 107                                   uint32_t msg_type,
 108                                   struct server_id server_id,
 109                                   DATA_BLOB *data)
 110 {
 111         struct tevent_context *ev_ctx;
 112
 113         DEBUG(10, ("Got message saying smb.conf was updated. Reloading.\n"));
 114         ev_ctx = talloc_get_type_abort(private_data, struct tevent_context);
 115
 116         change_to_root_user();
 117         lp_load(get_dyn_CONFIGFILE(), true, false, false, true);
 118
 119         lsasd_reopen_logs(lsasd_child_id);
 120         if (lsasd_child_id == 0) {
 121                 pfh_daemon_config(DAEMON_NAME,
 122                                   &pf_lsasd_cfg,
 123                                   &default_pf_lsasd_cfg);
 124                 pfh_manage_pool(ev_ctx, msg, &pf_lsasd_cfg, lsasd_pool);
 125         }
 126 }
 127
 128 static void lsasd_sig_term_handler(struct tevent_context *ev,
 129                                   struct tevent_signal *se,
 130                                   int signum,
 131                                   int count,
 132                                   void *siginfo,
 133                                   void *private_data)
 134 {
 135         rpc_netlogon_shutdown();
 136         rpc_samr_shutdown();
 137         rpc_lsarpc_shutdown();
 138
 139         DEBUG(0, ("termination signal\n"));
 140         exit(0);
 141 }
 142
 143 static void lsasd_setup_sig_term_handler(struct tevent_context *ev_ctx)
 144 {
 145         struct tevent_signal *se;
 146
 147         se = tevent_add_signal(ev_ctx,
 148                                ev_ctx,
 149                                SIGTERM, 0,
 150                                lsasd_sig_term_handler,
 151                                NULL);
 152         if (!se) {
 153                 DEBUG(0, ("failed to setup SIGTERM handler\n"));
 154                 exit(1);
 155         }
 156 }
 157
 158 static void lsasd_sig_hup_handler(struct tevent_context *ev,
 159                                     struct tevent_signal *se,
 160                                     int signum,
 161                                     int count,
 162                                     void *siginfo,
 163                                     void *pvt)
 164 {
 165
 166         change_to_root_user();
 167         lp_load(get_dyn_CONFIGFILE(), true, false, false, true);
 168
 169         lsasd_reopen_logs(lsasd_child_id);
 170         pfh_daemon_config(DAEMON_NAME,
 171                           &pf_lsasd_cfg,
 172                           &default_pf_lsasd_cfg);
 173
 174         /* relay to all children */
 175         prefork_send_signal_to_all(lsasd_pool, SIGHUP);
 176 }
 177
 178 static void lsasd_setup_sig_hup_handler(struct tevent_context *ev_ctx)
 179 {
 180         struct tevent_signal *se;
 181
 182         se = tevent_add_signal(ev_ctx,
 183                                ev_ctx,
 184                                SIGHUP, 0,
 185                                lsasd_sig_hup_handler,
 186                                NULL);
 187         if (!se) {
 188                 DEBUG(0, ("failed to setup SIGHUP handler\n"));
 189                 exit(1);
 190         }
 191 }
 192
 193 /**********************************************************
 194  * Children
 195  **********************************************************/
 196
 197 static void lsasd_chld_sig_hup_handler(struct tevent_context *ev,
 198                                          struct tevent_signal *se,
 199                                          int signum,
 200                                          int count,
 201                                          void *siginfo,
 202                                          void *pvt)
 203 {
 204         change_to_root_user();
 205         lsasd_reopen_logs(lsasd_child_id);
 206 }
 207
 208 static bool lsasd_setup_chld_hup_handler(struct tevent_context *ev_ctx)
 209 {
 210         struct tevent_signal *se;
 211
 212         se = tevent_add_signal(ev_ctx,
 213                                ev_ctx,
 214                                SIGHUP, 0,
 215                                lsasd_chld_sig_hup_handler,
 216                                NULL);
 217         if (!se) {
 218                 DEBUG(1, ("failed to setup SIGHUP handler"));
 219                 return false;
 220         }
 221
 222         return true;
 223 }
 224
 225 static void parent_ping(struct messaging_context *msg_ctx,
 226                         void *private_data,
 227                         uint32_t msg_type,
 228                         struct server_id server_id,
 229                         DATA_BLOB *data)
 230 {
 231
 232         /* The fact we received this message is enough to let make the event
 233          * loop if it was idle. lsasd_children_main will cycle through
 234          * lsasd_next_client at least once. That function will take whatever
 235          * action is necessary */
 236
 237         DEBUG(10, ("Got message that the parent changed status.\n"));
 238         return;
 239 }
 240
 241 static bool lsasd_child_init(struct tevent_context *ev_ctx,
 242                              int child_id,
 243                              struct pf_worker_data *pf)
 244 {
 245         NTSTATUS status;
 246         struct messaging_context *msg_ctx = server_messaging_context();
 247         bool ok;
 248
 249         status = reinit_after_fork(msg_ctx, ev_ctx,
 250                                    true);
 251         if (!NT_STATUS_IS_OK(status)) {
 252                 DEBUG(0,("reinit_after_fork() failed\n"));
 253                 smb_panic("reinit_after_fork() failed");
 254         }
 255
 256         lsasd_child_id = child_id;
 257         lsasd_reopen_logs(child_id);
 258
 259         ok = lsasd_setup_chld_hup_handler(ev_ctx);
 260         if (!ok) {
 261                 return false;
 262         }
 263
 264         if (!serverid_register(messaging_server_id(msg_ctx),
 265                                FLAG_MSG_GENERAL)) {
 266                 return false;
 267         }
 268
 269         messaging_register(msg_ctx, ev_ctx,
 270                            MSG_SMB_CONF_UPDATED, lsasd_smb_conf_updated);
 271         messaging_register(msg_ctx, ev_ctx,
 272                            MSG_PREFORK_PARENT_EVENT, parent_ping);
 273         id_cache_register_msgs(msg_ctx);
 274
 275         status = rpc_lsarpc_init(NULL);
 276         if (!NT_STATUS_IS_OK(status)) {
 277                 DEBUG(0, ("Failed to register lsarpc rpc inteface! (%s)\n",
 278                           nt_errstr(status)));
 279                 return false;
 280         }
 281
 282         status = rpc_samr_init(NULL);
 283         if (!NT_STATUS_IS_OK(status)) {
 284                 DEBUG(0, ("Failed to register samr rpc inteface! (%s)\n",
 285                           nt_errstr(status)));
 286                 return false;
 287         }
 288
 289         status = rpc_netlogon_init(NULL);
 290         if (!NT_STATUS_IS_OK(status)) {
 291                 DEBUG(0, ("Failed to register netlogon rpc inteface! (%s)\n",
 292                           nt_errstr(status)));
 293                 return false;
 294         }
 295
 296         return true;
 297 }
 298
 299 struct lsasd_children_data {
 300         struct tevent_context *ev_ctx;
 301         struct messaging_context *msg_ctx;
 302         struct pf_worker_data *pf;
 303         int listen_fd_size;
 304         int *listen_fds;
 305 };
 306
 307 static void lsasd_next_client(void *pvt);
 308
 309 static int lsasd_children_main(struct tevent_context *ev_ctx,
 310                                struct messaging_context *msg_ctx,
 311                                struct pf_worker_data *pf,
 312                                int child_id,
 313                                int listen_fd_size,
 314                                int *listen_fds,
 315                                void *private_data)
 316 {
 317         struct lsasd_children_data *data;
 318         bool ok;
 319         int ret = 0;
 320
 321         ok = lsasd_child_init(ev_ctx, child_id, pf);
 322         if (!ok) {
 323                 return 1;
 324         }
 325
 326         data = talloc(ev_ctx, struct lsasd_children_data);
 327         if (!data) {
 328                 return 1;
 329         }
 330         data->pf = pf;
 331         data->ev_ctx = ev_ctx;
 332         data->msg_ctx = msg_ctx;
 333         data->listen_fd_size = listen_fd_size;
 334         data->listen_fds = listen_fds;
 335
 336         /* loop until it is time to exit */
 337         while (pf->status != PF_WORKER_EXITING) {
 338                 /* try to see if it is time to schedule the next client */
 339                 lsasd_next_client(data);
 340
 341                 ret = tevent_loop_once(ev_ctx);
 342                 if (ret != 0) {
 343                         DEBUG(0, ("tevent_loop_once() exited with %d: %s\n",
 344                                   ret, strerror(errno)));
 345                         pf->status = PF_WORKER_EXITING;
 346                 }
 347         }
 348
 349         return ret;
 350 }
 351
 352 static void lsasd_client_terminated(void *pvt)
 353 {
 354         struct lsasd_children_data *data;
 355
 356         data = talloc_get_type_abort(pvt, struct lsasd_children_data);
 357
 358         pfh_client_terminated(data->pf);
 359
 360         lsasd_next_client(pvt);
 361 }
 362
 363 struct lsasd_new_client {
 364         struct lsasd_children_data *data;
 365 };
 366
 367 static void lsasd_handle_client(struct tevent_req *req);
 368
 369 static void lsasd_next_client(void *pvt)
 370 {
 371         struct tevent_req *req;
 372         struct lsasd_children_data *data;
 373         struct lsasd_new_client *next;
 374
 375         data = talloc_get_type_abort(pvt, struct lsasd_children_data);
 376
 377         if (!pfh_child_allowed_to_accept(data->pf)) {
 378                 /* nothing to do for now we are already listening
 379                  * or we are not allowed to listen further */
 380                 return;
 381         }
 382
 383         next = talloc_zero(data, struct lsasd_new_client);
 384         if (!next) {
 385                 DEBUG(1, ("Out of memory!?\n"));
 386                 return;
 387         }
 388         next->data = data;
 389
 390         req = prefork_listen_send(next,
 391                                   data->ev_ctx,
 392                                   data->pf,
 393                                   data->listen_fd_size,
 394                                   data->listen_fds);
 395         if (!req) {
 396                 DEBUG(1, ("Failed to make listening request!?\n"));
 397                 talloc_free(next);
 398                 return;
 399         }
 400         tevent_req_set_callback(req, lsasd_handle_client, next);
 401 }
 402
 403 static void lsasd_handle_client(struct tevent_req *req)
 404 {
 405         struct lsasd_children_data *data;
 406         struct lsasd_new_client *client;
 407         const DATA_BLOB ping = data_blob_null;
 408         int rc;
 409         int sd;
 410         TALLOC_CTX *tmp_ctx;
 411         struct tsocket_address *srv_addr;
 412         struct tsocket_address *cli_addr;
 413
 414         client = tevent_req_callback_data(req, struct lsasd_new_client);
 415         data = client->data;
 416
 417         tmp_ctx = talloc_stackframe();
 418         if (tmp_ctx == NULL) {
 419                 DEBUG(1, ("Failed to allocate stackframe!\n"));
 420                 return;
 421         }
 422
 423         rc = prefork_listen_recv(req,
 424                                  tmp_ctx,
 425                                  &sd,
 426                                  &srv_addr,
 427                                  &cli_addr);
 428
 429         /* this will free the request too */
 430         talloc_free(client);
 431
 432         if (rc != 0) {
 433                 DEBUG(6, ("No client connection was available after all!\n"));
 434                 goto done;
 435         }
 436
 437         /* Warn parent that our status changed */
 438         messaging_send(data->msg_ctx, parent_id,
 439                         MSG_PREFORK_CHILD_EVENT, &ping);
 440
 441         DEBUG(2, ("LSASD preforked child %d got client connection!\n",
 442                   (int)(data->pf->pid)));
 443
 444         if (tsocket_address_is_inet(srv_addr, "ip")) {
 445                 DEBUG(3, ("Got a tcpip client connection from %s on inteface %s\n",
 446                            tsocket_address_string(cli_addr, tmp_ctx),
 447                            tsocket_address_string(srv_addr, tmp_ctx)));
 448
 449                 dcerpc_ncacn_accept(data->ev_ctx,
 450                                     data->msg_ctx,
 451                                     NCACN_IP_TCP,
 452                                     "IP",
 453                                     cli_addr,
 454                                     srv_addr,
 455                                     sd,
 456                                     NULL);
 457         } else if (tsocket_address_is_unix(srv_addr)) {
 458                 const char *p;
 459                 const char *b;
 460
 461                 p = tsocket_address_unix_path(srv_addr, tmp_ctx);
 462                 if (p == NULL) {
 463                         talloc_free(tmp_ctx);
 464                         return;
 465                 }
 466
 467                 b = strrchr(p, '/');
 468                 if (b != NULL) {
 469                         b++;
 470                 } else {
 471                         b = p;
 472                 }
 473
 474                 if (strstr(p, "/np/")) {
 475                         named_pipe_accept_function(data->ev_ctx,
 476                                                    data->msg_ctx,
 477                                                    b,
 478                                                    sd,
 479                                                    lsasd_client_terminated,
 480                                                    data);
 481                 } else {
 482                         dcerpc_ncacn_accept(data->ev_ctx,
 483                                             data->msg_ctx,
 484                                             NCALRPC,
 485                                             b,
 486                                             cli_addr,
 487                                             srv_addr,
 488                                             sd,
 489                                             NULL);
 490                 }
 491         } else {
 492                 DEBUG(0, ("ERROR: Unsupported socket!\n"));
 493         }
 494
 495 done:
 496         talloc_free(tmp_ctx);
 497 }
 498
 499 /*
 500  * MAIN
 501  */
 502
 503 static void child_ping(struct messaging_context *msg_ctx,
 504                         void *private_data,
 505                         uint32_t msg_type,
 506                         struct server_id server_id,
 507                         DATA_BLOB *data)
 508 {
 509         struct tevent_context *ev_ctx;
 510
 511         ev_ctx = talloc_get_type_abort(private_data, struct tevent_context);
 512
 513         DEBUG(10, ("Got message that a child changed status.\n"));
 514         pfh_manage_pool(ev_ctx, msg_ctx, &pf_lsasd_cfg, lsasd_pool);
 515 }
 516
 517 static bool lsasd_schedule_check(struct tevent_context *ev_ctx,
 518                                  struct messaging_context *msg_ctx,
 519                                  struct timeval current_time);
 520
 521 static void lsasd_check_children(struct tevent_context *ev_ctx,
 522                                     struct tevent_timer *te,
 523                                     struct timeval current_time,
 524                                     void *pvt);
 525
 526 static void lsasd_sigchld_handler(struct tevent_context *ev_ctx,
 527                                   struct prefork_pool *pfp,
 528                                   void *pvt)
 529 {
 530         struct messaging_context *msg_ctx;
 531
 532         msg_ctx = talloc_get_type_abort(pvt, struct messaging_context);
 533
 534         /* run pool management so we can fork/retire or increase
 535          * the allowed connections per child based on load */
 536         pfh_manage_pool(ev_ctx, msg_ctx, &pf_lsasd_cfg, lsasd_pool);
 537 }
 538
 539 static bool lsasd_setup_children_monitor(struct tevent_context *ev_ctx,
 540                                          struct messaging_context *msg_ctx)
 541 {
 542         bool ok;
 543
 544         /* add our oun sigchld callback */
 545         prefork_set_sigchld_callback(lsasd_pool, lsasd_sigchld_handler, msg_ctx);
 546
 547         ok = lsasd_schedule_check(ev_ctx, msg_ctx, tevent_timeval_current());
 548
 549         return ok;
 550 }
 551
 552 static bool lsasd_schedule_check(struct tevent_context *ev_ctx,
 553                                  struct messaging_context *msg_ctx,
 554                                  struct timeval current_time)
 555 {
 556         struct tevent_timer *te;
 557         struct timeval next_event;
 558
 559         /* check situation again in 10 seconds */
 560         next_event = tevent_timeval_current_ofs(10, 0);
 561
 562         /* TODO: check when the socket becomes readable, so that children
 563          * are checked only when there is some activity ? */
 564         te = tevent_add_timer(ev_ctx, lsasd_pool, next_event,
 565                               lsasd_check_children, msg_ctx);
 566         if (!te) {
 567                 DEBUG(2, ("Failed to set up children monitoring!\n"));
 568                 return false;
 569         }
 570
 571         return true;
 572 }
 573
 574 static void lsasd_check_children(struct tevent_context *ev_ctx,
 575                                  struct tevent_timer *te,
 576                                  struct timeval current_time,
 577                                  void *pvt)
 578 {
 579         struct messaging_context *msg_ctx;
 580
 581         msg_ctx = talloc_get_type_abort(pvt, struct messaging_context);
 582
 583         pfh_manage_pool(ev_ctx, msg_ctx, &pf_lsasd_cfg, lsasd_pool);
 584
 585         lsasd_schedule_check(ev_ctx, msg_ctx, current_time);
 586 }
 587
 588 /*
 589  * start it up
 590  */
 591
 592 static bool lsasd_create_sockets(struct tevent_context *ev_ctx,
 593                                  struct messaging_context *msg_ctx,
 594                                  int *listen_fd,
 595                                  int *listen_fd_size)
 596 {
 597         struct dcerpc_binding_vector *v, *v_orig;
 598         TALLOC_CTX *tmp_ctx;
 599         NTSTATUS status;
 600         uint32_t i;
 601         int fd;
 602         int rc;
 603         bool ok = true;
 604
 605         tmp_ctx = talloc_stackframe();
 606         if (tmp_ctx == NULL) {
 607                 return false;
 608         }
 609
 610         status = dcerpc_binding_vector_new(tmp_ctx, &v_orig);
 611         if (!NT_STATUS_IS_OK(status)) {
 612                 ok = false;
 613                 goto done;
 614         }
 615
 616         /* Create only one tcpip listener for all services */
 617         status = rpc_create_tcpip_sockets(&ndr_table_lsarpc,
 618                                           v_orig,
 619                                           0,
 620                                           listen_fd,
 621                                           listen_fd_size);
 622         if (!NT_STATUS_IS_OK(status)) {
 623                 ok = false;
 624                 goto done;
 625         }
 626
 627         /* Start to listen on tcpip sockets */
 628         for (i = 0; i < *listen_fd_size; i++) {
 629                 rc = listen(listen_fd[i], pf_lsasd_cfg.max_allowed_clients);
 630                 if (rc == -1) {
 631                         DEBUG(0, ("Failed to listen on tcpip socket - %s\n",
 632                                   strerror(errno)));
 633                         ok = false;
 634                         goto done;
 635                 }
 636         }
 637
 638         /* LSARPC */
 639         fd = create_named_pipe_socket("lsarpc");
 640         if (fd < 0) {
 641                 ok = false;
 642                 goto done;
 643         }
 644         listen_fd[*listen_fd_size] = fd;
 645         (*listen_fd_size)++;
 646
 647         rc = listen(fd, pf_lsasd_cfg.max_allowed_clients);
 648         if (rc == -1) {
 649                 DEBUG(0, ("Failed to listen on lsarpc pipe - %s\n",
 650                           strerror(errno)));
 651                 ok = false;
 652                 goto done;
 653         }
 654
 655         fd = create_named_pipe_socket("lsass");
 656         if (fd < 0) {
 657                 ok = false;
 658                 goto done;
 659         }
 660         listen_fd[*listen_fd_size] = fd;
 661         (*listen_fd_size)++;
 662
 663         rc = listen(fd, pf_lsasd_cfg.max_allowed_clients);
 664         if (rc == -1) {
 665                 DEBUG(0, ("Failed to listen on lsass pipe - %s\n",
 666                           strerror(errno)));
 667                 ok = false;
 668                 goto done;
 669         }
 670
 671         fd = create_dcerpc_ncalrpc_socket("lsarpc");
 672         if (fd < 0) {
 673                 ok = false;
 674                 goto done;
 675         }
 676         listen_fd[*listen_fd_size] = fd;
 677         (*listen_fd_size)++;
 678
 679         rc = listen(fd, pf_lsasd_cfg.max_allowed_clients);
 680         if (rc == -1) {
 681                 DEBUG(0, ("Failed to listen on lsarpc ncalrpc - %s\n",
 682                           strerror(errno)));
 683                 ok = false;
 684                 goto done;
 685         }
 686
 687         v = dcerpc_binding_vector_dup(tmp_ctx, v_orig);
 688         if (v == NULL) {
 689                 ok = false;
 690                 goto done;
 691         }
 692
 693         status = dcerpc_binding_vector_replace_iface(&ndr_table_lsarpc, v);
 694         if (!NT_STATUS_IS_OK(status)) {
 695                 return false;
 696         }
 697
 698         status = dcerpc_binding_vector_add_np_default(&ndr_table_lsarpc, v);
 699         if (!NT_STATUS_IS_OK(status)) {
 700                 ok = false;
 701                 goto done;
 702         }
 703
 704         status = dcerpc_binding_vector_add_unix(&ndr_table_lsarpc, v, "lsarpc");
 705         if (!NT_STATUS_IS_OK(status)) {
 706                 ok = false;
 707                 goto done;
 708         }
 709
 710         status = rpc_ep_register(ev_ctx, msg_ctx, &ndr_table_lsarpc, v);
 711         if (!NT_STATUS_IS_OK(status)) {
 712                 ok = false;
 713                 goto done;
 714         }
 715
 716         /* SAMR */
 717         fd = create_named_pipe_socket("samr");
 718         if (fd < 0) {
 719                 ok = false;
 720                 goto done;
 721         }
 722
 723         rc = listen(fd, pf_lsasd_cfg.max_allowed_clients);
 724         if (rc == -1) {
 725                 DEBUG(0, ("Failed to listen on samr pipe - %s\n",
 726                           strerror(errno)));
 727                 ok = false;
 728                 goto done;
 729         }
 730         listen_fd[*listen_fd_size] = fd;
 731         (*listen_fd_size)++;
 732
 733         fd = create_dcerpc_ncalrpc_socket("samr");
 734         if (fd < 0) {
 735                 ok = false;
 736                 goto done;
 737         }
 738         listen_fd[*listen_fd_size] = fd;
 739         (*listen_fd_size)++;
 740
 741         rc = listen(fd, pf_lsasd_cfg.max_allowed_clients);
 742         if (rc == -1) {
 743                 DEBUG(0, ("Failed to listen on samr ncalrpc - %s\n",
 744                           strerror(errno)));
 745                 ok = false;
 746                 goto done;
 747         }
 748
 749         v = dcerpc_binding_vector_dup(tmp_ctx, v_orig);
 750         if (v == NULL) {
 751                 ok = false;
 752                 goto done;
 753         }
 754
 755         status = dcerpc_binding_vector_replace_iface(&ndr_table_samr, v);
 756         if (!NT_STATUS_IS_OK(status)) {
 757                 return false;
 758         }
 759
 760         status = dcerpc_binding_vector_add_np_default(&ndr_table_samr, v);
 761         if (!NT_STATUS_IS_OK(status)) {
 762                 ok = false;
 763                 goto done;
 764         }
 765
 766         status = dcerpc_binding_vector_add_unix(&ndr_table_lsarpc, v, "samr");
 767         if (!NT_STATUS_IS_OK(status)) {
 768                 ok = false;
 769                 goto done;
 770         }
 771
 772         status = rpc_ep_register(ev_ctx, msg_ctx, &ndr_table_samr, v);
 773         if (!NT_STATUS_IS_OK(status)) {
 774                 ok = false;
 775                 goto done;
 776         }
 777
 778         /* NETLOGON */
 779         fd = create_named_pipe_socket("netlogon");
 780         if (fd < 0) {
 781                 ok = false;
 782                 goto done;
 783         }
 784
 785         rc = listen(fd, pf_lsasd_cfg.max_allowed_clients);
 786         if (rc == -1) {
 787                 DEBUG(0, ("Failed to listen on samr pipe - %s\n",
 788                           strerror(errno)));
 789                 ok = false;
 790                 goto done;
 791         }
 792         listen_fd[*listen_fd_size] = fd;
 793         (*listen_fd_size)++;
 794
 795         fd = create_dcerpc_ncalrpc_socket("netlogon");
 796         if (fd < 0) {
 797                 ok = false;
 798                 goto done;
 799         }
 800         listen_fd[*listen_fd_size] = fd;
 801         (*listen_fd_size)++;
 802
 803         rc = listen(fd, pf_lsasd_cfg.max_allowed_clients);
 804         if (rc == -1) {
 805                 DEBUG(0, ("Failed to listen on netlogon ncalrpc - %s\n",
 806                           strerror(errno)));
 807                 ok = false;
 808                 goto done;
 809         }
 810
 811         v = dcerpc_binding_vector_dup(tmp_ctx, v_orig);
 812         if (v == NULL) {
 813                 ok = false;
 814                 goto done;
 815         }
 816
 817         status = dcerpc_binding_vector_replace_iface(&ndr_table_netlogon, v);
 818         if (!NT_STATUS_IS_OK(status)) {
 819                 return false;
 820         }
 821
 822         status = dcerpc_binding_vector_add_np_default(&ndr_table_netlogon, v);
 823         if (!NT_STATUS_IS_OK(status)) {
 824                 ok = false;
 825                 goto done;
 826         }
 827
 828         status = dcerpc_binding_vector_add_unix(&ndr_table_lsarpc, v, "netlogon");
 829         if (!NT_STATUS_IS_OK(status)) {
 830                 ok = false;
 831                 goto done;
 832         }
 833
 834         status = rpc_ep_register(ev_ctx, msg_ctx, &ndr_table_netlogon, v);
 835         if (!NT_STATUS_IS_OK(status)) {
 836                 ok = false;
 837                 goto done;
 838         }
 839
 840 done:
 841         talloc_free(tmp_ctx);
 842         return ok;
 843 }
 844
 845 void start_lsasd(struct tevent_context *ev_ctx,
 846                  struct messaging_context *msg_ctx)
 847 {
 848         NTSTATUS status;
 849         int listen_fd[LSASD_MAX_SOCKETS];
 850         int listen_fd_size = 0;
 851         pid_t pid;
 852         int rc;
 853         bool ok;
 854
 855         DEBUG(1, ("Forking LSA Service Daemon\n"));
 856
 857         /*
 858          * Block signals before forking child as it will have to
 859          * set its own handlers. Child will re-enable SIGHUP as
 860          * soon as the handlers are set up.
 861          */
 862         BlockSignals(true, SIGTERM);
 863         BlockSignals(true, SIGHUP);
 864
 865         pid = fork();
 866         if (pid == -1) {
 867                 DEBUG(0, ("Failed to fork LSASD [%s], aborting ...\n",
 868                            strerror(errno)));
 869                 exit(1);
 870         }
 871
 872         /* parent or error */
 873         if (pid != 0) {
 874
 875                 /* Re-enable SIGHUP before returnig */
 876                 BlockSignals(false, SIGTERM);
 877                 BlockSignals(false, SIGHUP);
 878
 879                 return;
 880         }
 881
 882         status = reinit_after_fork(msg_ctx,
 883                                    ev_ctx,
 884                                    true);
 885         if (!NT_STATUS_IS_OK(status)) {
 886                 DEBUG(0,("reinit_after_fork() failed\n"));
 887                 smb_panic("reinit_after_fork() failed");
 888         }
 889
 890         /* save the parent process id so the children can use it later */
 891         parent_id = messaging_server_id(msg_ctx);
 892
 893         lsasd_reopen_logs(0);
 894         pfh_daemon_config(DAEMON_NAME,
 895                           &pf_lsasd_cfg,
 896                           &default_pf_lsasd_cfg);
 897
 898         lsasd_setup_sig_term_handler(ev_ctx);
 899         lsasd_setup_sig_hup_handler(ev_ctx);
 900
 901         BlockSignals(false, SIGTERM);
 902         BlockSignals(false, SIGHUP);
 903
 904         ok = lsasd_create_sockets(ev_ctx, msg_ctx, listen_fd, &listen_fd_size);
 905         if (!ok) {
 906                 exit(1);
 907         }
 908
 909         /* start children before any more initialization is done */
 910         ok = prefork_create_pool(ev_ctx, /* mem_ctx */
 911                                  ev_ctx,
 912                                  msg_ctx,
 913                                  listen_fd_size,
 914                                  listen_fd,
 915                                  pf_lsasd_cfg.min_children,
 916                                  pf_lsasd_cfg.max_children,
 917                                  &lsasd_children_main,
 918                                  NULL,
 919                                  &lsasd_pool);
 920         if (!ok) {
 921                 exit(1);
 922         }
 923
 924         if (!serverid_register(messaging_server_id(msg_ctx),
 925                                FLAG_MSG_GENERAL)) {
 926                 exit(1);
 927         }
 928
 929         messaging_register(msg_ctx,
 930                            ev_ctx,
 931                            MSG_SMB_CONF_UPDATED,
 932                            lsasd_smb_conf_updated);
 933         messaging_register(msg_ctx, ev_ctx,
 934                            MSG_PREFORK_CHILD_EVENT, child_ping);
 935
 936         status = rpc_lsarpc_init(NULL);
 937         if (!NT_STATUS_IS_OK(status)) {
 938                 DEBUG(0, ("Failed to register lsarpc rpc inteface in lsasd! (%s)\n",
 939                           nt_errstr(status)));
 940                 exit(1);
 941         }
 942
 943         status = rpc_samr_init(NULL);
 944         if (!NT_STATUS_IS_OK(status)) {
 945                 DEBUG(0, ("Failed to register samr rpc inteface in lsasd! (%s)\n",
 946                           nt_errstr(status)));
 947                 exit(1);
 948         }
 949
 950         status = rpc_netlogon_init(NULL);
 951         if (!NT_STATUS_IS_OK(status)) {
 952                 DEBUG(0, ("Failed to register netlogon rpc inteface in lsasd! (%s)\n",
 953                           nt_errstr(status)));
 954                 exit(1);
 955         }
 956
 957         ok = lsasd_setup_children_monitor(ev_ctx, msg_ctx);
 958         if (!ok) {
 959                 DEBUG(0, ("Failed to setup children monitoring!\n"));
 960                 exit(1);
 961         }
 962
 963         DEBUG(1, ("LSASD Daemon Started (%d)\n", getpid()));
 964
 965         /* loop forever */
 966         rc = tevent_loop_wait(ev_ctx);
 967
 968         /* should not be reached */
 969         DEBUG(0,("lsasd: tevent_loop_wait() exited with %d - %s\n",
 970                  rc, (rc == 0) ? "out of events" : strerror(errno)));
 971         exit(1);
 972 }