?  search:
summary | log | graphiclog1 | graphiclog2 | commit | commitdiff | tree | refs | edit | fork
blame | history | raw | HEAD
IDL: make nbt_cldap_netlogon_5 public.
[Samba/gebeck_regimport.git] / source3 / smbd / server.c
blob59bbfdbc17678109addb7dcbdeda07ebdf655a61
1 /*
2 Unix SMB/CIFS implementation.
3 Main SMB server routines
4 Copyright (C) Andrew Tridgell 1992-1998
5 Copyright (C) Martin Pool 2002
6 Copyright (C) Jelmer Vernooij 2002-2003
7 Copyright (C) Volker Lendecke 1993-2007
8 Copyright (C) Jeremy Allison 1993-2007
9
10 This program is free software; you can redistribute it and/or modify
11 it under the terms of the GNU General Public License as published by
12 the Free Software Foundation; either version 3 of the License, or
13 (at your option) any later version.
14
15 This program is distributed in the hope that it will be useful,
16 but WITHOUT ANY WARRANTY; without even the implied warranty of
17 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
18 GNU General Public License for more details.
19
20 You should have received a copy of the GNU General Public License
21 along with this program. If not, see <http://www.gnu.org/licenses/>.
22 */
23
24 #include "includes.h"
25
26 static_decl_rpc;
27
28 static int am_parent = 1;
29
30 extern struct auth_context *negprot_global_auth_context;
31 extern SIG_ATOMIC_T got_sig_term;
32 extern SIG_ATOMIC_T reload_after_sighup;
33 static SIG_ATOMIC_T got_sig_cld;
34
35 #ifdef WITH_DFS
36 extern int dcelogin_atmost_once;
37 #endif /* WITH_DFS */
38
39 /* really we should have a top level context structure that has the
40 client file descriptor as an element. That would require a major rewrite :(
41
42 the following 2 functions are an alternative - they make the file
43 descriptor private to smbd
44 */
45 static int server_fd = -1;
46
47 int smbd_server_fd(void)
48 {
49 return server_fd;
50 }
51
52 static void smbd_set_server_fd(int fd)
53 {
54 server_fd = fd;
55 }
56
57 int get_client_fd(void)
58 {
59 return server_fd;
60 }
61
62 int client_get_tcp_info(struct sockaddr_in *server, struct sockaddr_in *client)
63 {
64 socklen_t length;
65 if (server_fd == -1) {
66 return -1;
67 }
68 length = sizeof(*server);
69 if (getsockname(server_fd, (struct sockaddr *)server, &length) != 0) {
70 return -1;
71 }
72 length = sizeof(*client);
73 if (getpeername(server_fd, (struct sockaddr *)client, &length) != 0) {
74 return -1;
75 }
76 return 0;
77 }
78
79 struct event_context *smbd_event_context(void)
80 {
81 static struct event_context *ctx;
82
83 if (!ctx && !(ctx = event_context_init(NULL))) {
84 smb_panic("Could not init smbd event context");
85 }
86 return ctx;
87 }
88
89 struct messaging_context *smbd_messaging_context(void)
90 {
91 static struct messaging_context *ctx;
92
93 if (!ctx && !(ctx = messaging_init(NULL, server_id_self(),
94 smbd_event_context()))) {
95 smb_panic("Could not init smbd messaging context");
96 }
97 return ctx;
98 }
99
100 struct memcache *smbd_memcache(void)
101 {
102 static struct memcache *cache;
103
104 if (!cache
105 && !(cache = memcache_init(NULL,
106 lp_max_stat_cache_size()*1024))) {
107
108 smb_panic("Could not init smbd memcache");
109 }
110 return cache;
111 }
112
113 /*******************************************************************
114 What to do when smb.conf is updated.
115 ********************************************************************/
116
117 static void smb_conf_updated(struct messaging_context *msg,
118 void *private_data,
119 uint32_t msg_type,
120 struct server_id server_id,
121 DATA_BLOB *data)
122 {
123 DEBUG(10,("smb_conf_updated: Got message saying smb.conf was "
124 "updated. Reloading.\n"));
125 reload_services(False);
126 }
127
128
129 /*******************************************************************
130 Delete a statcache entry.
131 ********************************************************************/
132
133 static void smb_stat_cache_delete(struct messaging_context *msg,
134 void *private_data,
135 uint32_t msg_tnype,
136 struct server_id server_id,
137 DATA_BLOB *data)
138 {
139 const char *name = (const char *)data->data;
140 DEBUG(10,("smb_stat_cache_delete: delete name %s\n", name));
141 stat_cache_delete(name);
142 }
143
144 /****************************************************************************
145 Terminate signal.
146 ****************************************************************************/
147
148 static void sig_term(void)
149 {
150 got_sig_term = 1;
151 sys_select_signal(SIGTERM);
152 }
153
154 /****************************************************************************
155 Catch a sighup.
156 ****************************************************************************/
157
158 static void sig_hup(int sig)
159 {
160 reload_after_sighup = 1;
161 sys_select_signal(SIGHUP);
162 }
163
164 /****************************************************************************
165 Catch a sigcld
166 ****************************************************************************/
167 static void sig_cld(int sig)
168 {
169 got_sig_cld = 1;
170 sys_select_signal(SIGCLD);
171 }
172
173 /****************************************************************************
174 Send a SIGTERM to our process group.
175 *****************************************************************************/
176
177 static void killkids(void)
178 {
179 if(am_parent) kill(0,SIGTERM);
180 }
181
182 /****************************************************************************
183 Process a sam sync message - not sure whether to do this here or
184 somewhere else.
185 ****************************************************************************/
186
187 static void msg_sam_sync(struct messaging_context *msg,
188 void *private_data,
189 uint32_t msg_type,
190 struct server_id server_id,
191 DATA_BLOB *data)
192 {
193 DEBUG(10, ("** sam sync message received, ignoring\n"));
194 }
195
196
197 /****************************************************************************
198 Open the socket communication - inetd.
199 ****************************************************************************/
200
201 static bool open_sockets_inetd(void)
202 {
203 /* Started from inetd. fd 0 is the socket. */
204 /* We will abort gracefully when the client or remote system
205 goes away */
206 smbd_set_server_fd(dup(0));
207
208 /* close our standard file descriptors */
209 close_low_fds(False); /* Don't close stderr */
210
211 set_socket_options(smbd_server_fd(),"SO_KEEPALIVE");
212 set_socket_options(smbd_server_fd(), lp_socket_options());
213
214 return True;
215 }
216
217 static void msg_exit_server(struct messaging_context *msg,
218 void *private_data,
219 uint32_t msg_type,
220 struct server_id server_id,
221 DATA_BLOB *data)
222 {
223 DEBUG(3, ("got a SHUTDOWN message\n"));
224 exit_server_cleanly(NULL);
225 }
226
227 #ifdef DEVELOPER
228 static void msg_inject_fault(struct messaging_context *msg,
229 void *private_data,
230 uint32_t msg_type,
231 struct server_id src,
232 DATA_BLOB *data)
233 {
234 int sig;
235
236 if (data->length != sizeof(sig)) {
237
238 DEBUG(0, ("Process %s sent bogus signal injection request\n",
239 procid_str_static(&src)));
240 return;
241 }
242
243 sig = *(int *)data->data;
244 if (sig == -1) {
245 exit_server("internal error injected");
246 return;
247 }
248
249 #if HAVE_STRSIGNAL
250 DEBUG(0, ("Process %s requested injection of signal %d (%s)\n",
251 procid_str_static(&src), sig, strsignal(sig)));
252 #else
253 DEBUG(0, ("Process %s requested injection of signal %d\n",
254 procid_str_static(&src), sig));
255 #endif
256
257 kill(sys_getpid(), sig);
258 }
259 #endif /* DEVELOPER */
260
261 struct child_pid {
262 struct child_pid *prev, *next;
263 pid_t pid;
264 };
265
266 static struct child_pid *children;
267 static int num_children;
268
269 static void add_child_pid(pid_t pid)
270 {
271 struct child_pid *child;
272
273 if (lp_max_smbd_processes() == 0) {
274 /* Don't bother with the child list if we don't care anyway */
275 return;
276 }
277
278 child = SMB_MALLOC_P(struct child_pid);
279 if (child == NULL) {
280 DEBUG(0, ("Could not add child struct -- malloc failed\n"));
281 return;
282 }
283 child->pid = pid;
284 DLIST_ADD(children, child);
285 num_children += 1;
286 }
287
288 static void remove_child_pid(pid_t pid, bool unclean_shutdown)
289 {
290 struct child_pid *child;
291
292 if (unclean_shutdown) {
293 /* a child terminated uncleanly so tickle all processes to see
294 if they can grab any of the pending locks
295 */
296 messaging_send_buf(smbd_messaging_context(), procid_self(),
297 MSG_SMB_BRL_VALIDATE, NULL, 0);
298 message_send_all(smbd_messaging_context(),
299 MSG_SMB_UNLOCK, NULL, 0, NULL);
300 }
301
302 if (lp_max_smbd_processes() == 0) {
303 /* Don't bother with the child list if we don't care anyway */
304 return;
305 }
306
307 for (child = children; child != NULL; child = child->next) {
308 if (child->pid == pid) {
309 struct child_pid *tmp = child;
310 DLIST_REMOVE(children, child);
311 SAFE_FREE(tmp);
312 num_children -= 1;
313 return;
314 }
315 }
316
317 DEBUG(0, ("Could not find child %d -- ignoring\n", (int)pid));
318 }
319
320 /****************************************************************************
321 Have we reached the process limit ?
322 ****************************************************************************/
323
324 static bool allowable_number_of_smbd_processes(void)
325 {
326 int max_processes = lp_max_smbd_processes();
327
328 if (!max_processes)
329 return True;
330
331 return num_children < max_processes;
332 }
333
334 /****************************************************************************
335 Open the socket communication.
336 ****************************************************************************/
337
338 static bool open_sockets_smbd(bool is_daemon, bool interactive, const char *smb_ports)
339 {
340 int num_interfaces = iface_count();
341 int num_sockets = 0;
342 int fd_listenset[FD_SETSIZE];
343 fd_set listen_set;
344 int s;
345 int maxfd = 0;
346 int i;
347 char *ports;
348 struct dns_reg_state * dns_reg = NULL;
349 unsigned dns_port = 0;
350
351 if (!is_daemon) {
352 return open_sockets_inetd();
353 }
354
355 #ifdef HAVE_ATEXIT
356 {
357 static int atexit_set;
358 if(atexit_set == 0) {
359 atexit_set=1;
360 atexit(killkids);
361 }
362 }
363 #endif
364
365 /* Stop zombies */
366 CatchSignal(SIGCLD, sig_cld);
367
368 FD_ZERO(&listen_set);
369
370 /* use a reasonable default set of ports - listing on 445 and 139 */
371 if (!smb_ports) {
372 ports = lp_smb_ports();
373 if (!ports || !*ports) {
374 ports = smb_xstrdup(SMB_PORTS);
375 } else {
376 ports = smb_xstrdup(ports);
377 }
378 } else {
379 ports = smb_xstrdup(smb_ports);
380 }
381
382 if (lp_interfaces() && lp_bind_interfaces_only()) {
383 /* We have been given an interfaces line, and been
384 told to only bind to those interfaces. Create a
385 socket per interface and bind to only these.
386 */
387
388 /* Now open a listen socket for each of the
389 interfaces. */
390 for(i = 0; i < num_interfaces; i++) {
391 TALLOC_CTX *frame = NULL;
392 const struct sockaddr_storage *ifss =
393 iface_n_sockaddr_storage(i);
394 char *tok;
395 const char *ptr;
396
397 if (ifss == NULL) {
398 DEBUG(0,("open_sockets_smbd: "
399 "interface %d has NULL IP address !\n",
400 i));
401 continue;
402 }
403
404 frame = talloc_stackframe();
405 for (ptr=ports;
406 next_token_talloc(frame,&ptr, &tok, " \t,");) {
407 unsigned port = atoi(tok);
408 if (port == 0 || port > 0xffff) {
409 continue;
410 }
411
412 /* Keep the first port for mDNS service
413 * registration.
414 */
415 if (dns_port == 0) {
416 dns_port = port;
417 }
418
419 s = fd_listenset[num_sockets] =
420 open_socket_in(SOCK_STREAM,
421 port,
422 num_sockets == 0 ? 0 : 2,
423 ifss,
424 true);
425 if(s == -1) {
426 continue;
427 }
428
429 /* ready to listen */
430 set_socket_options(s,"SO_KEEPALIVE");
431 set_socket_options(s,lp_socket_options());
432
433 /* Set server socket to
434 * non-blocking for the accept. */
435 set_blocking(s,False);
436
437 if (listen(s, SMBD_LISTEN_BACKLOG) == -1) {
438 DEBUG(0,("open_sockets_smbd: listen: "
439 "%s\n", strerror(errno)));
440 close(s);
441 TALLOC_FREE(frame);
442 return False;
443 }
444 FD_SET(s,&listen_set);
445 maxfd = MAX( maxfd, s);
446
447 num_sockets++;
448 if (num_sockets >= FD_SETSIZE) {
449 DEBUG(0,("open_sockets_smbd: Too "
450 "many sockets to bind to\n"));
451 TALLOC_FREE(frame);
452 return False;
453 }
454 }
455 TALLOC_FREE(frame);
456 }
457 } else {
458 /* Just bind to 0.0.0.0 - accept connections
459 from anywhere. */
460
461 TALLOC_CTX *frame = talloc_stackframe();
462 char *tok;
463 const char *ptr;
464 const char *sock_addr = lp_socket_address();
465 char *sock_tok;
466 const char *sock_ptr;
467
468 if (strequal(sock_addr, "0.0.0.0") ||
469 strequal(sock_addr, "::")) {
470 #if HAVE_IPV6
471 sock_addr = "::,0.0.0.0";
472 #else
473 sock_addr = "0.0.0.0";
474 #endif
475 }
476
477 for (sock_ptr=sock_addr;
478 next_token_talloc(frame, &sock_ptr, &sock_tok, " \t,"); ) {
479 for (ptr=ports; next_token_talloc(frame, &ptr, &tok, " \t,"); ) {
480 struct sockaddr_storage ss;
481
482 unsigned port = atoi(tok);
483 if (port == 0 || port > 0xffff) {
484 continue;
485 }
486
487 /* Keep the first port for mDNS service
488 * registration.
489 */
490 if (dns_port == 0) {
491 dns_port = port;
492 }
493
494 /* open an incoming socket */
495 if (!interpret_string_addr(&ss, sock_tok,
496 AI_NUMERICHOST|AI_PASSIVE)) {
497 continue;
498 }
499
500 s = open_socket_in(SOCK_STREAM,
501 port,
502 num_sockets == 0 ? 0 : 2,
503 &ss,
504 true);
505 if (s == -1) {
506 continue;
507 }
508
509 /* ready to listen */
510 set_socket_options(s,"SO_KEEPALIVE");
511 set_socket_options(s,lp_socket_options());
512
513 /* Set server socket to non-blocking
514 * for the accept. */
515 set_blocking(s,False);
516
517 if (listen(s, SMBD_LISTEN_BACKLOG) == -1) {
518 DEBUG(0,("open_sockets_smbd: "
519 "listen: %s\n",
520 strerror(errno)));
521 close(s);
522 TALLOC_FREE(frame);
523 return False;
524 }
525
526 fd_listenset[num_sockets] = s;
527 FD_SET(s,&listen_set);
528 maxfd = MAX( maxfd, s);
529
530 num_sockets++;
531
532 if (num_sockets >= FD_SETSIZE) {
533 DEBUG(0,("open_sockets_smbd: Too "
534 "many sockets to bind to\n"));
535 TALLOC_FREE(frame);
536 return False;
537 }
538 }
539 }
540 TALLOC_FREE(frame);
541 }
542
543 SAFE_FREE(ports);
544
545 if (num_sockets == 0) {
546 DEBUG(0,("open_sockets_smbd: No "
547 "sockets available to bind to.\n"));
548 return false;
549 }
550
551 /* Setup the main smbd so that we can get messages. Note that
552 do this after starting listening. This is needed as when in
553 clustered mode, ctdb won't allow us to start doing database
554 operations until it has gone thru a full startup, which
555 includes checking to see that smbd is listening. */
556 claim_connection(NULL,"",
557 FLAG_MSG_GENERAL|FLAG_MSG_SMBD|FLAG_MSG_DBWRAP);
558
559 /* Listen to messages */
560
561 messaging_register(smbd_messaging_context(), NULL,
562 MSG_SMB_SAM_SYNC, msg_sam_sync);
563 messaging_register(smbd_messaging_context(), NULL,
564 MSG_SHUTDOWN, msg_exit_server);
565 messaging_register(smbd_messaging_context(), NULL,
566 MSG_SMB_FILE_RENAME, msg_file_was_renamed);
567 messaging_register(smbd_messaging_context(), NULL,
568 MSG_SMB_CONF_UPDATED, smb_conf_updated);
569 messaging_register(smbd_messaging_context(), NULL,
570 MSG_SMB_STAT_CACHE_DELETE, smb_stat_cache_delete);
571 brl_register_msgs(smbd_messaging_context());
572
573 #ifdef DEVELOPER
574 messaging_register(smbd_messaging_context(), NULL,
575 MSG_SMB_INJECT_FAULT, msg_inject_fault);
576 #endif
577
578 /* now accept incoming connections - forking a new process
579 for each incoming connection */
580 DEBUG(2,("waiting for a connection\n"));
581 while (1) {
582 struct timeval now, idle_timeout;
583 fd_set r_fds, w_fds;
584 int num;
585
586 /* Ensure we respond to PING and DEBUG messages from the main smbd. */
587 message_dispatch(smbd_messaging_context());
588
589 if (got_sig_cld) {
590 pid_t pid;
591 int status;
592
593 got_sig_cld = False;
594
595 while ((pid = sys_waitpid(-1, &status, WNOHANG)) > 0) {
596 bool unclean_shutdown = False;
597
598 /* If the child terminated normally, assume
599 it was an unclean shutdown unless the
600 status is 0
601 */
602 if (WIFEXITED(status)) {
603 unclean_shutdown = WEXITSTATUS(status);
604 }
605 /* If the child terminated due to a signal
606 we always assume it was unclean.
607 */
608 if (WIFSIGNALED(status)) {
609 unclean_shutdown = True;
610 }
611 remove_child_pid(pid, unclean_shutdown);
612 }
613 }
614
615 idle_timeout = timeval_zero();
616
617 memcpy((char *)&r_fds, (char *)&listen_set,
618 sizeof(listen_set));
619 FD_ZERO(&w_fds);
620 GetTimeOfDay(&now);
621
622 /* Kick off our mDNS registration. */
623 if (dns_port != 0) {
624 dns_register_smbd(&dns_reg, dns_port, &maxfd,
625 &r_fds, &idle_timeout);
626 }
627
628 event_add_to_select_args(smbd_event_context(), &now,
629 &r_fds, &w_fds, &idle_timeout,
630 &maxfd);
631
632 num = sys_select(maxfd+1,&r_fds,&w_fds,NULL,
633 timeval_is_zero(&idle_timeout) ?
634 NULL : &idle_timeout);
635
636 if (num == -1 && errno == EINTR) {
637 if (got_sig_term) {
638 exit_server_cleanly(NULL);
639 }
640
641 /* check for sighup processing */
642 if (reload_after_sighup) {
643 change_to_root_user();
644 DEBUG(1,("Reloading services after SIGHUP\n"));
645 reload_services(False);
646 reload_after_sighup = 0;
647 }
648
649 continue;
650 }
651
652
653 /* If the idle timeout fired and we don't have any connected
654 * users, exit gracefully. We should be running under a process
655 * controller that will restart us if necessry.
656 */
657 if (num == 0 && count_all_current_connections() == 0) {
658 exit_server_cleanly("idle timeout");
659 }
660
661 /* process pending nDNS responses */
662 if (dns_register_smbd_reply(dns_reg, &r_fds, &idle_timeout)) {
663 --num;
664 }
665
666 if (run_events(smbd_event_context(), num, &r_fds, &w_fds)) {
667 continue;
668 }
669
670 /* check if we need to reload services */
671 check_reload(time(NULL));
672
673 /* Find the sockets that are read-ready -
674 accept on these. */
675 for( ; num > 0; num--) {
676 struct sockaddr addr;
677 socklen_t in_addrlen = sizeof(addr);
678 pid_t child = 0;
679
680 s = -1;
681 for(i = 0; i < num_sockets; i++) {
682 if(FD_ISSET(fd_listenset[i],&r_fds)) {
683 s = fd_listenset[i];
684 /* Clear this so we don't look
685 at it again. */
686 FD_CLR(fd_listenset[i],&r_fds);
687 break;
688 }
689 }
690
691 smbd_set_server_fd(accept(s,&addr,&in_addrlen));
692
693 if (smbd_server_fd() == -1 && errno == EINTR)
694 continue;
695
696 if (smbd_server_fd() == -1) {
697 DEBUG(2,("open_sockets_smbd: accept: %s\n",
698 strerror(errno)));
699 continue;
700 }
701
702 /* Ensure child is set to blocking mode */
703 set_blocking(smbd_server_fd(),True);
704
705 if (smbd_server_fd() != -1 && interactive)
706 return True;
707
708 if (allowable_number_of_smbd_processes() &&
709 smbd_server_fd() != -1 &&
710 ((child = sys_fork())==0)) {
711 char remaddr[INET6_ADDRSTRLEN];
712
713 /* Child code ... */
714
715 /* Stop zombies, the parent explicitly handles
716 * them, counting worker smbds. */
717 CatchChild();
718
719 /* close the listening socket(s) */
720 for(i = 0; i < num_sockets; i++)
721 close(fd_listenset[i]);
722
723 /* close our mDNS daemon handle */
724 dns_register_close(&dns_reg);
725
726 /* close our standard file
727 descriptors */
728 close_low_fds(False);
729 am_parent = 0;
730
731 set_socket_options(smbd_server_fd(),"SO_KEEPALIVE");
732 set_socket_options(smbd_server_fd(),
733 lp_socket_options());
734
735 /* this is needed so that we get decent entries
736 in smbstatus for port 445 connects */
737 set_remote_machine_name(get_peer_addr(smbd_server_fd(),
738 remaddr,
739 sizeof(remaddr)),
740 false);
741
742 if (!reinit_after_fork(smbd_messaging_context())) {
743 DEBUG(0,("reinit_after_fork() failed\n"));
744 smb_panic("reinit_after_fork() failed");
745 }
746
747 return True;
748 }
749 /* The parent doesn't need this socket */
750 close(smbd_server_fd());
751
752 /* Sun May 6 18:56:14 2001 ackley@cs.unm.edu:
753 Clear the closed fd info out of server_fd --
754 and more importantly, out of client_fd in
755 util_sock.c, to avoid a possible
756 getpeername failure if we reopen the logs
757 and use %I in the filename.
758 */
759
760 smbd_set_server_fd(-1);
761
762 if (child != 0) {
763 add_child_pid(child);
764 }
765
766 /* Force parent to check log size after
767 * spawning child. Fix from
768 * klausr@ITAP.Physik.Uni-Stuttgart.De. The
769 * parent smbd will log to logserver.smb. It
770 * writes only two messages for each child
771 * started/finished. But each child writes,
772 * say, 50 messages also in logserver.smb,
773 * begining with the debug_count of the
774 * parent, before the child opens its own log
775 * file logserver.client. In a worst case
776 * scenario the size of logserver.smb would be
777 * checked after about 50*50=2500 messages
778 * (ca. 100kb).
779 * */
780 force_check_log_size();
781
782 } /* end for num */
783 } /* end while 1 */
784
785 /* NOTREACHED return True; */
786 }
787
788 /****************************************************************************
789 Reload printers
790 **************************************************************************/
791 void reload_printers(void)
792 {
793 int snum;
794 int n_services = lp_numservices();
795 int pnum = lp_servicenumber(PRINTERS_NAME);
796 const char *pname;
797
798 pcap_cache_reload();
799
800 /* remove stale printers */
801 for (snum = 0; snum < n_services; snum++) {
802 /* avoid removing PRINTERS_NAME or non-autoloaded printers */
803 if (snum == pnum || !(lp_snum_ok(snum) && lp_print_ok(snum) &&
804 lp_autoloaded(snum)))
805 continue;
806
807 pname = lp_printername(snum);
808 if (!pcap_printername_ok(pname)) {
809 DEBUG(3, ("removing stale printer %s\n", pname));
810
811 if (is_printer_published(NULL, snum, NULL))
812 nt_printer_publish(NULL, snum, SPOOL_DS_UNPUBLISH);
813 del_a_printer(pname);
814 lp_killservice(snum);
815 }
816 }
817
818 load_printers();
819 }
820
821 /****************************************************************************
822 Reload the services file.
823 **************************************************************************/
824
825 bool reload_services(bool test)
826 {
827 bool ret;
828
829 if (lp_loaded()) {
830 char *fname = lp_configfile();
831 if (file_exist(fname, NULL) &&
832 !strcsequal(fname, get_dyn_CONFIGFILE())) {
833 set_dyn_CONFIGFILE(fname);
834 test = False;
835 }
836 }
837
838 reopen_logs();
839
840 if (test && !lp_file_list_changed())
841 return(True);
842
843 lp_killunused(conn_snum_used);
844
845 ret = lp_load(get_dyn_CONFIGFILE(), False, False, True, True);
846
847 reload_printers();
848
849 /* perhaps the config filename is now set */
850 if (!test)
851 reload_services(True);
852
853 reopen_logs();
854
855 load_interfaces();
856
857 if (smbd_server_fd() != -1) {
858 set_socket_options(smbd_server_fd(),"SO_KEEPALIVE");
859 set_socket_options(smbd_server_fd(), lp_socket_options());
860 }
861
862 mangle_reset_cache();
863 reset_stat_cache();
864
865 /* this forces service parameters to be flushed */
866 set_current_service(NULL,0,True);
867
868 return(ret);
869 }
870
871 /****************************************************************************
872 Exit the server.
873 ****************************************************************************/
874
875 /* Reasons for shutting down a server process. */
876 enum server_exit_reason { SERVER_EXIT_NORMAL, SERVER_EXIT_ABNORMAL };
877
878 static void exit_server_common(enum server_exit_reason how,
879 const char *const reason) NORETURN_ATTRIBUTE;
880
881 static void exit_server_common(enum server_exit_reason how,
882 const char *const reason)
883 {
884 static int firsttime=1;
885
886 if (!firsttime)
887 exit(0);
888 firsttime = 0;
889
890 change_to_root_user();
891
892 if (negprot_global_auth_context) {
893 (negprot_global_auth_context->free)(&negprot_global_auth_context);
894 }
895
896 conn_close_all();
897
898 invalidate_all_vuids();
899
900 /* 3 second timeout. */
901 print_notify_send_messages(smbd_messaging_context(), 3);
902
903 /* delete our entry in the connections database. */
904 yield_connection(NULL,"");
905
906 respond_to_all_remaining_local_messages();
907
908 #ifdef WITH_DFS
909 if (dcelogin_atmost_once) {
910 dfs_unlogin();
911 }
912 #endif
913
914 #ifdef USE_DMAPI
915 /* Destroy Samba DMAPI session only if we are master smbd process */
916 if (am_parent) {
917 if (!dmapi_destroy_session()) {
918 DEBUG(0,("Unable to close Samba DMAPI session\n"));
919 }
920 }
921 #endif
922
923 locking_end();
924 printing_end();
925
926 if (how != SERVER_EXIT_NORMAL) {
927 int oldlevel = DEBUGLEVEL;
928
929 DEBUGLEVEL = 10;
930
931 DEBUGSEP(0);
932 DEBUG(0,("Abnormal server exit: %s\n",
933 reason ? reason : "no explanation provided"));
934 DEBUGSEP(0);
935
936 log_stack_trace();
937
938 DEBUGLEVEL = oldlevel;
939 dump_core();
940
941 } else {
942 DEBUG(3,("Server exit (%s)\n",
943 (reason ? reason : "normal exit")));
944 }
945
946 exit(0);
947 }
948
949 void exit_server(const char *const explanation)
950 {
951 exit_server_common(SERVER_EXIT_ABNORMAL, explanation);
952 }
953
954 void exit_server_cleanly(const char *const explanation)
955 {
956 exit_server_common(SERVER_EXIT_NORMAL, explanation);
957 }
958
959 void exit_server_fault(void)
960 {
961 exit_server("critical server fault");
962 }
963
964
965 /****************************************************************************
966 received when we should release a specific IP
967 ****************************************************************************/
968 static void release_ip(const char *ip, void *priv)
969 {
970 char addr[INET6_ADDRSTRLEN];
971
972 if (strcmp(client_socket_addr(get_client_fd(),addr,sizeof(addr)), ip) == 0) {
973 /* we can't afford to do a clean exit - that involves
974 database writes, which would potentially mean we
975 are still running after the failover has finished -
976 we have to get rid of this process ID straight
977 away */
978 DEBUG(0,("Got release IP message for our IP %s - exiting immediately\n",
979 ip));
980 _exit(0);
981 }
982 }
983
984 static void msg_release_ip(struct messaging_context *msg_ctx, void *private_data,
985 uint32_t msg_type, struct server_id server_id, DATA_BLOB *data)
986 {
987 release_ip((char *)data->data, NULL);
988 }
989
990 /****************************************************************************
991 Initialise connect, service and file structs.
992 ****************************************************************************/
993
994 static bool init_structs(void )
995 {
996 /*
997 * Set the machine NETBIOS name if not already
998 * set from the config file.
999 */
1000
1001 if (!init_names())
1002 return False;
1003
1004 conn_init();
1005
1006 file_init();
1007
1008 /* for RPC pipes */
1009 init_rpc_pipe_hnd();
1010
1011 init_dptrs();
1012
1013 if (!secrets_init())
1014 return False;
1015
1016 return True;
1017 }
1018
1019 /*
1020 * Send keepalive packets to our client
1021 */
1022 static bool keepalive_fn(const struct timeval *now, void *private_data)
1023 {
1024 if (!send_keepalive(smbd_server_fd())) {
1025 DEBUG( 2, ( "Keepalive failed - exiting.\n" ) );
1026 return False;
1027 }
1028 return True;
1029 }
1030
1031 /*
1032 * Do the recurring check if we're idle
1033 */
1034 static bool deadtime_fn(const struct timeval *now, void *private_data)
1035 {
1036 if ((conn_num_open() == 0)
1037 || (conn_idle_all(now->tv_sec))) {
1038 DEBUG( 2, ( "Closing idle connection\n" ) );
1039 messaging_send(smbd_messaging_context(), procid_self(),
1040 MSG_SHUTDOWN, &data_blob_null);
1041 return False;
1042 }
1043
1044 return True;
1045 }
1046
1047
1048 /****************************************************************************
1049 main program.
1050 ****************************************************************************/
1051
1052 /* Declare prototype for build_options() to avoid having to run it through
1053 mkproto.h. Mixing $(builddir) and $(srcdir) source files in the current
1054 prototype generation system is too complicated. */
1055
1056 extern void build_options(bool screen);
1057
1058 int main(int argc,const char *argv[])
1059 {
1060 /* shall I run as a daemon */
1061 static bool is_daemon = False;
1062 static bool interactive = False;
1063 static bool Fork = True;
1064 static bool no_process_group = False;
1065 static bool log_stdout = False;
1066 static char *ports = NULL;
1067 static char *profile_level = NULL;
1068 int opt;
1069 poptContext pc;
1070 bool print_build_options = False;
1071 enum {
1072 OPT_DAEMON = 1000,
1073 OPT_INTERACTIVE,
1074 OPT_FORK,
1075 OPT_NO_PROCESS_GROUP,
1076 OPT_LOG_STDOUT
1077 };
1078 struct poptOption long_options[] = {
1079 POPT_AUTOHELP
1080 {"daemon", 'D', POPT_ARG_NONE, NULL, OPT_DAEMON, "Become a daemon (default)" },
1081 {"interactive", 'i', POPT_ARG_NONE, NULL, OPT_INTERACTIVE, "Run interactive (not a daemon)"},
1082 {"foreground", 'F', POPT_ARG_NONE, NULL, OPT_FORK, "Run daemon in foreground (for daemontools, etc.)" },
1083 {"no-process-group", '\0', POPT_ARG_NONE, NULL, OPT_NO_PROCESS_GROUP, "Don't create a new process group" },
1084 {"log-stdout", 'S', POPT_ARG_NONE, NULL, OPT_LOG_STDOUT, "Log to stdout" },
1085 {"build-options", 'b', POPT_ARG_NONE, NULL, 'b', "Print build options" },
1086 {"port", 'p', POPT_ARG_STRING, &ports, 0, "Listen on the specified ports"},
1087 {"profiling-level", 'P', POPT_ARG_STRING, &profile_level, 0, "Set profiling level","PROFILE_LEVEL"},
1088 POPT_COMMON_SAMBA
1089 POPT_COMMON_DYNCONFIG
1090 POPT_TABLEEND
1091 };
1092 TALLOC_CTX *frame = talloc_stackframe(); /* Setup tos. */
1093
1094 TimeInit();
1095
1096 db_tdb2_setup_messaging(NULL, false);
1097
1098 #ifdef HAVE_SET_AUTH_PARAMETERS
1099 set_auth_parameters(argc,argv);
1100 #endif
1101
1102 pc = poptGetContext("smbd", argc, argv, long_options, 0);
1103 while((opt = poptGetNextOpt(pc)) != -1) {
1104 switch (opt) {
1105 case OPT_DAEMON:
1106 is_daemon = true;
1107 break;
1108 case OPT_INTERACTIVE:
1109 interactive = true;
1110 break;
1111 case OPT_FORK:
1112 Fork = false;
1113 break;
1114 case OPT_NO_PROCESS_GROUP:
1115 no_process_group = true;
1116 break;
1117 case OPT_LOG_STDOUT:
1118 log_stdout = true;
1119 break;
1120 case 'b':
1121 print_build_options = True;
1122 break;
1123 default:
1124 d_fprintf(stderr, "\nInvalid option %s: %s\n\n",
1125 poptBadOption(pc, 0), poptStrerror(opt));
1126 poptPrintUsage(pc, stderr, 0);
1127 exit(1);
1128 }
1129 }
1130 poptFreeContext(pc);
1131
1132 if (interactive) {
1133 Fork = False;
1134 log_stdout = True;
1135 }
1136
1137 setup_logging(argv[0],log_stdout);
1138
1139 if (print_build_options) {
1140 build_options(True); /* Display output to screen as well as debug */
1141 exit(0);
1142 }
1143
1144 load_case_tables();
1145
1146 #ifdef HAVE_SETLUID
1147 /* needed for SecureWare on SCO */
1148 setluid(0);
1149 #endif
1150
1151 sec_init();
1152
1153 set_remote_machine_name("smbd", False);
1154
1155 if (interactive && (DEBUGLEVEL >= 9)) {
1156 talloc_enable_leak_report();
1157 }
1158
1159 if (log_stdout && Fork) {
1160 DEBUG(0,("ERROR: Can't log to stdout (-S) unless daemon is in foreground (-F) or interactive (-i)\n"));
1161 exit(1);
1162 }
1163
1164 /* we want to re-seed early to prevent time delays causing
1165 client problems at a later date. (tridge) */
1166 generate_random_buffer(NULL, 0);
1167
1168 /* make absolutely sure we run as root - to handle cases where people
1169 are crazy enough to have it setuid */
1170
1171 gain_root_privilege();
1172 gain_root_group_privilege();
1173
1174 fault_setup((void (*)(void *))exit_server_fault);
1175 dump_core_setup("smbd");
1176
1177 CatchSignal(SIGTERM , SIGNAL_CAST sig_term);
1178 CatchSignal(SIGHUP,SIGNAL_CAST sig_hup);
1179
1180 /* we are never interested in SIGPIPE */
1181 BlockSignals(True,SIGPIPE);
1182
1183 #if defined(SIGFPE)
1184 /* we are never interested in SIGFPE */
1185 BlockSignals(True,SIGFPE);
1186 #endif
1187
1188 #if defined(SIGUSR2)
1189 /* We are no longer interested in USR2 */
1190 BlockSignals(True,SIGUSR2);
1191 #endif
1192
1193 /* POSIX demands that signals are inherited. If the invoking process has
1194 * these signals masked, we will have problems, as we won't recieve them. */
1195 BlockSignals(False, SIGHUP);
1196 BlockSignals(False, SIGUSR1);
1197 BlockSignals(False, SIGTERM);
1198
1199 /* we want total control over the permissions on created files,
1200 so set our umask to 0 */
1201 umask(0);
1202
1203 init_sec_ctx();
1204
1205 reopen_logs();
1206
1207 DEBUG(0,("smbd version %s started.\n", SAMBA_VERSION_STRING));
1208 DEBUGADD(0,("%s\n", COPYRIGHT_STARTUP_MESSAGE));
1209
1210 DEBUG(2,("uid=%d gid=%d euid=%d egid=%d\n",
1211 (int)getuid(),(int)getgid(),(int)geteuid(),(int)getegid()));
1212
1213 /* Output the build options to the debug log */
1214 build_options(False);
1215
1216 if (sizeof(uint16) < 2 || sizeof(uint32) < 4) {
1217 DEBUG(0,("ERROR: Samba is not configured correctly for the word size on your machine\n"));
1218 exit(1);
1219 }
1220
1221 if (!lp_load_initial_only(get_dyn_CONFIGFILE())) {
1222 DEBUG(0, ("error opening config file\n"));
1223 exit(1);
1224 }
1225
1226 if (smbd_messaging_context() == NULL)
1227 exit(1);
1228
1229 /*
1230 * Do this before reload_services.
1231 */
1232 db_tdb2_setup_messaging(smbd_messaging_context(), true);
1233
1234 if (!reload_services(False))
1235 return(-1);
1236
1237 init_structs();
1238
1239 #ifdef WITH_PROFILE
1240 if (!profile_setup(smbd_messaging_context(), False)) {
1241 DEBUG(0,("ERROR: failed to setup profiling\n"));
1242 return -1;
1243 }
1244 if (profile_level != NULL) {
1245 int pl = atoi(profile_level);
1246 struct server_id src;
1247
1248 DEBUG(1, ("setting profiling level: %s\n",profile_level));
1249 src.pid = getpid();
1250 set_profile_level(pl, src);
1251 }
1252 #endif
1253
1254 DEBUG(3,( "loaded services\n"));
1255
1256 if (!is_daemon && !is_a_socket(0)) {
1257 if (!interactive)
1258 DEBUG(0,("standard input is not a socket, assuming -D option\n"));
1259
1260 /*
1261 * Setting is_daemon here prevents us from eventually calling
1262 * the open_sockets_inetd()
1263 */
1264
1265 is_daemon = True;
1266 }
1267
1268 if (is_daemon && !interactive) {
1269 DEBUG( 3, ( "Becoming a daemon.\n" ) );
1270 become_daemon(Fork, no_process_group);
1271 }
1272
1273 #if HAVE_SETPGID
1274 /*
1275 * If we're interactive we want to set our own process group for
1276 * signal management.
1277 */
1278 if (interactive && !no_process_group)
1279 setpgid( (pid_t)0, (pid_t)0);
1280 #endif
1281
1282 if (!directory_exist(lp_lockdir(), NULL))
1283 mkdir(lp_lockdir(), 0755);
1284
1285 if (is_daemon)
1286 pidfile_create("smbd");
1287
1288 if (!reinit_after_fork(smbd_messaging_context())) {
1289 DEBUG(0,("reinit_after_fork() failed\n"));
1290 exit(1);
1291 }
1292
1293 /* Setup all the TDB's - including CLEAR_IF_FIRST tdb's. */
1294
1295 if (smbd_memcache() == NULL) {
1296 exit(1);
1297 }
1298
1299 memcache_set_global(smbd_memcache());
1300
1301 /* Initialise the password backed before the global_sam_sid
1302 to ensure that we fetch from ldap before we make a domain sid up */
1303
1304 if(!initialize_password_db(False, smbd_event_context()))
1305 exit(1);
1306
1307 if (!secrets_init()) {
1308 DEBUG(0, ("ERROR: smbd can not open secrets.tdb\n"));
1309 exit(1);
1310 }
1311
1312 if(!get_global_sam_sid()) {
1313 DEBUG(0,("ERROR: Samba cannot create a SAM SID.\n"));
1314 exit(1);
1315 }
1316
1317 if (!session_init())
1318 exit(1);
1319
1320 if (!connections_init(True))
1321 exit(1);
1322
1323 if (!locking_init())
1324 exit(1);
1325
1326 namecache_enable();
1327
1328 if (!W_ERROR_IS_OK(registry_init_full()))
1329 exit(1);
1330
1331 #if 0
1332 if (!init_svcctl_db())
1333 exit(1);
1334 #endif
1335
1336 if (!print_backend_init(smbd_messaging_context()))
1337 exit(1);
1338
1339 if (!init_guest_info()) {
1340 DEBUG(0,("ERROR: failed to setup guest info.\n"));
1341 return -1;
1342 }
1343
1344 /* only start the background queue daemon if we are
1345 running as a daemon -- bad things will happen if
1346 smbd is launched via inetd and we fork a copy of
1347 ourselves here */
1348
1349 if (is_daemon && !interactive
1350 && lp_parm_bool(-1, "smbd", "backgroundqueue", true)) {
1351 start_background_queue();
1352 }
1353
1354 if (!open_sockets_smbd(is_daemon, interactive, ports))
1355 exit(1);
1356
1357 /*
1358 * everything after this point is run after the fork()
1359 */
1360
1361 static_init_rpc;
1362
1363 init_modules();
1364
1365 /* Possibly reload the services file. Only worth doing in
1366 * daemon mode. In inetd mode, we know we only just loaded this.
1367 */
1368 if (is_daemon) {
1369 reload_services(True);
1370 }
1371
1372 if (!init_account_policy()) {
1373 DEBUG(0,("Could not open account policy tdb.\n"));
1374 exit(1);
1375 }
1376
1377 if (*lp_rootdir()) {
1378 if (sys_chroot(lp_rootdir()) == 0)
1379 DEBUG(2,("Changed root to %s\n", lp_rootdir()));
1380 }
1381
1382 /* Setup oplocks */
1383 if (!init_oplocks(smbd_messaging_context()))
1384 exit(1);
1385
1386 /* Setup aio signal handler. */
1387 initialize_async_io_handler();
1388
1389 /* register our message handlers */
1390 messaging_register(smbd_messaging_context(), NULL,
1391 MSG_SMB_FORCE_TDIS, msg_force_tdis);
1392 messaging_register(smbd_messaging_context(), NULL,
1393 MSG_SMB_RELEASE_IP, msg_release_ip);
1394
1395 if ((lp_keepalive() != 0)
1396 && !(event_add_idle(smbd_event_context(), NULL,
1397 timeval_set(lp_keepalive(), 0),
1398 "keepalive", keepalive_fn,
1399 NULL))) {
1400 DEBUG(0, ("Could not add keepalive event\n"));
1401 exit(1);
1402 }
1403
1404 if (!(event_add_idle(smbd_event_context(), NULL,
1405 timeval_set(IDLE_CLOSED_TIMEOUT, 0),
1406 "deadtime", deadtime_fn, NULL))) {
1407 DEBUG(0, ("Could not add deadtime event\n"));
1408 exit(1);
1409 }
1410
1411 #ifdef CLUSTER_SUPPORT
1412
1413 if (lp_clustering()) {
1414 /*
1415 * We need to tell ctdb about our client's TCP
1416 * connection, so that for failover ctdbd can send
1417 * tickle acks, triggering a reconnection by the
1418 * client.
1419 */
1420
1421 struct sockaddr_in srv, clnt;
1422
1423 if (client_get_tcp_info(&srv, &clnt) == 0) {
1424
1425 NTSTATUS status;
1426
1427 status = ctdbd_register_ips(
1428 messaging_ctdbd_connection(),
1429 &srv, &clnt, release_ip, NULL);
1430
1431 if (!NT_STATUS_IS_OK(status)) {
1432 DEBUG(0, ("ctdbd_register_ips failed: %s\n",
1433 nt_errstr(status)));
1434 }
1435 } else
1436 {
1437 DEBUG(0,("Unable to get tcp info for "
1438 "CTDB_CONTROL_TCP_CLIENT: %s\n",
1439 strerror(errno)));
1440 }
1441 }
1442
1443 #endif
1444
1445 TALLOC_FREE(frame);
1446
1447 smbd_process();
1448
1449 namecache_shutdown();
1450
1451 exit_server_cleanly(NULL);
1452 return(0);
1453 }
reg import