s3-smbd: Pass ev_ctx and msg_ctx to smbd_accept_connection().
[Samba/gebeck_regimport.git] / source3 / smbd / server.c
blob4991331a8f2f38154be7eb85378425b8ade55275
1 /*
2 Unix SMB/CIFS implementation.
3 Main SMB server routines
4 Copyright (C) Andrew Tridgell 1992-1998
5 Copyright (C) Martin Pool 2002
6 Copyright (C) Jelmer Vernooij 2002-2003
7 Copyright (C) Volker Lendecke 1993-2007
8 Copyright (C) Jeremy Allison 1993-2007
10 This program is free software; you can redistribute it and/or modify
11 it under the terms of the GNU General Public License as published by
12 the Free Software Foundation; either version 3 of the License, or
13 (at your option) any later version.
15 This program is distributed in the hope that it will be useful,
16 but WITHOUT ANY WARRANTY; without even the implied warranty of
17 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
18 GNU General Public License for more details.
20 You should have received a copy of the GNU General Public License
21 along with this program. If not, see <http://www.gnu.org/licenses/>.
24 #include "includes.h"
25 #include "system/filesys.h"
26 #include "popt_common.h"
27 #include "smbd/smbd.h"
28 #include "smbd/globals.h"
29 #include "registry/reg_init_full.h"
30 #include "libcli/auth/schannel.h"
31 #include "secrets.h"
32 #include "memcache.h"
33 #include "ctdbd_conn.h"
34 #include "printing/printer_list.h"
35 #include "rpc_server/rpc_ep_setup.h"
36 #include "printing/pcap.h"
37 #include "printing.h"
38 #include "serverid.h"
39 #include "passdb.h"
40 #include "auth.h"
41 #include "messages.h"
42 #include "smbprofile.h"
44 extern void start_epmd(struct tevent_context *ev_ctx,
45 struct messaging_context *msg_ctx);
47 extern void start_spoolssd(struct event_context *ev_ctx,
48 struct messaging_context *msg_ctx);
50 #ifdef WITH_DFS
51 extern int dcelogin_atmost_once;
52 #endif /* WITH_DFS */
54 /*******************************************************************
55 What to do when smb.conf is updated.
56 ********************************************************************/
58 static void smb_conf_updated(struct messaging_context *msg,
59 void *private_data,
60 uint32_t msg_type,
61 struct server_id server_id,
62 DATA_BLOB *data)
64 struct tevent_context *ev_ctx =
65 talloc_get_type_abort(private_data, struct tevent_context);
67 DEBUG(10,("smb_conf_updated: Got message saying smb.conf was "
68 "updated. Reloading.\n"));
69 change_to_root_user();
70 reload_services(msg, smbd_server_conn->sock, False);
71 if (am_parent) {
72 pcap_cache_reload(ev_ctx, msg,
73 &reload_pcap_change_notify);
77 /*******************************************************************
78 What to do when printcap is updated.
79 ********************************************************************/
81 static void smb_pcap_updated(struct messaging_context *msg,
82 void *private_data,
83 uint32_t msg_type,
84 struct server_id server_id,
85 DATA_BLOB *data)
87 struct tevent_context *ev_ctx =
88 talloc_get_type_abort(private_data, struct tevent_context);
90 DEBUG(10,("Got message saying pcap was updated. Reloading.\n"));
91 change_to_root_user();
92 reload_printers(ev_ctx, msg);
95 /*******************************************************************
96 Delete a statcache entry.
97 ********************************************************************/
99 static void smb_stat_cache_delete(struct messaging_context *msg,
100 void *private_data,
101 uint32_t msg_tnype,
102 struct server_id server_id,
103 DATA_BLOB *data)
105 const char *name = (const char *)data->data;
106 DEBUG(10,("smb_stat_cache_delete: delete name %s\n", name));
107 stat_cache_delete(name);
110 /****************************************************************************
111 Send a SIGTERM to our process group.
112 *****************************************************************************/
114 static void killkids(void)
116 if(am_parent) kill(0,SIGTERM);
119 /****************************************************************************
120 Process a sam sync message - not sure whether to do this here or
121 somewhere else.
122 ****************************************************************************/
124 static void msg_sam_sync(struct messaging_context *msg,
125 void *private_data,
126 uint32_t msg_type,
127 struct server_id server_id,
128 DATA_BLOB *data)
130 DEBUG(10, ("** sam sync message received, ignoring\n"));
133 static void msg_exit_server(struct messaging_context *msg,
134 void *private_data,
135 uint32_t msg_type,
136 struct server_id server_id,
137 DATA_BLOB *data)
139 DEBUG(3, ("got a SHUTDOWN message\n"));
140 exit_server_cleanly(NULL);
143 #ifdef DEVELOPER
144 static void msg_inject_fault(struct messaging_context *msg,
145 void *private_data,
146 uint32_t msg_type,
147 struct server_id src,
148 DATA_BLOB *data)
150 int sig;
152 if (data->length != sizeof(sig)) {
153 DEBUG(0, ("Process %s sent bogus signal injection request\n",
154 procid_str_static(&src)));
155 return;
158 sig = *(int *)data->data;
159 if (sig == -1) {
160 exit_server("internal error injected");
161 return;
164 #if HAVE_STRSIGNAL
165 DEBUG(0, ("Process %s requested injection of signal %d (%s)\n",
166 procid_str_static(&src), sig, strsignal(sig)));
167 #else
168 DEBUG(0, ("Process %s requested injection of signal %d\n",
169 procid_str_static(&src), sig));
170 #endif
172 kill(sys_getpid(), sig);
174 #endif /* DEVELOPER */
177 * Parent smbd process sets its own debug level first and then
178 * sends a message to all the smbd children to adjust their debug
179 * level to that of the parent.
182 static void smbd_msg_debug(struct messaging_context *msg_ctx,
183 void *private_data,
184 uint32_t msg_type,
185 struct server_id server_id,
186 DATA_BLOB *data)
188 struct child_pid *child;
190 debug_message(msg_ctx, private_data, MSG_DEBUG, server_id, data);
192 for (child = children; child != NULL; child = child->next) {
193 messaging_send_buf(msg_ctx, pid_to_procid(child->pid),
194 MSG_DEBUG,
195 data->data,
196 strlen((char *) data->data) + 1);
200 static void add_child_pid(pid_t pid)
202 struct child_pid *child;
204 child = SMB_MALLOC_P(struct child_pid);
205 if (child == NULL) {
206 DEBUG(0, ("Could not add child struct -- malloc failed\n"));
207 return;
209 child->pid = pid;
210 DLIST_ADD(children, child);
211 num_children += 1;
215 at most every smbd:cleanuptime seconds (default 20), we scan the BRL
216 and locking database for entries to cleanup. As a side effect this
217 also cleans up dead entries in the connections database (due to the
218 traversal in message_send_all()
220 Using a timer for this prevents a flood of traversals when a large
221 number of clients disconnect at the same time (perhaps due to a
222 network outage).
225 static void cleanup_timeout_fn(struct event_context *event_ctx,
226 struct timed_event *te,
227 struct timeval now,
228 void *private_data)
230 struct timed_event **cleanup_te = (struct timed_event **)private_data;
232 DEBUG(1,("Cleaning up brl and lock database after unclean shutdown\n"));
233 message_send_all(smbd_messaging_context(), MSG_SMB_UNLOCK, NULL, 0, NULL);
234 messaging_send_buf(smbd_messaging_context(), procid_self(),
235 MSG_SMB_BRL_VALIDATE, NULL, 0);
236 /* mark the cleanup as having been done */
237 (*cleanup_te) = NULL;
240 static void remove_child_pid(pid_t pid, bool unclean_shutdown)
242 struct child_pid *child;
243 static struct timed_event *cleanup_te;
244 struct server_id child_id;
246 if (unclean_shutdown) {
247 /* a child terminated uncleanly so tickle all
248 processes to see if they can grab any of the
249 pending locks
251 DEBUG(3,(__location__ " Unclean shutdown of pid %u\n",
252 (unsigned int)pid));
253 if (!cleanup_te) {
254 /* call the cleanup timer, but not too often */
255 int cleanup_time = lp_parm_int(-1, "smbd", "cleanuptime", 20);
256 cleanup_te = event_add_timed(server_event_context(), NULL,
257 timeval_current_ofs(cleanup_time, 0),
258 cleanup_timeout_fn,
259 &cleanup_te);
260 DEBUG(1,("Scheduled cleanup of brl and lock database after unclean shutdown\n"));
264 child_id = procid_self(); /* Just initialize pid and potentially vnn */
265 child_id.pid = pid;
267 if (!serverid_deregister(child_id)) {
268 DEBUG(1, ("Could not remove pid %d from serverid.tdb\n",
269 (int)pid));
272 for (child = children; child != NULL; child = child->next) {
273 if (child->pid == pid) {
274 struct child_pid *tmp = child;
275 DLIST_REMOVE(children, child);
276 SAFE_FREE(tmp);
277 num_children -= 1;
278 return;
282 /* not all forked child processes are added to the children list */
283 DEBUG(1, ("Could not find child %d -- ignoring\n", (int)pid));
286 /****************************************************************************
287 Have we reached the process limit ?
288 ****************************************************************************/
290 static bool allowable_number_of_smbd_processes(void)
292 int max_processes = lp_max_smbd_processes();
294 if (!max_processes)
295 return True;
297 return num_children < max_processes;
300 static void smbd_sig_chld_handler(struct tevent_context *ev,
301 struct tevent_signal *se,
302 int signum,
303 int count,
304 void *siginfo,
305 void *private_data)
307 pid_t pid;
308 int status;
310 while ((pid = sys_waitpid(-1, &status, WNOHANG)) > 0) {
311 bool unclean_shutdown = False;
313 /* If the child terminated normally, assume
314 it was an unclean shutdown unless the
315 status is 0
317 if (WIFEXITED(status)) {
318 unclean_shutdown = WEXITSTATUS(status);
320 /* If the child terminated due to a signal
321 we always assume it was unclean.
323 if (WIFSIGNALED(status)) {
324 unclean_shutdown = True;
326 remove_child_pid(pid, unclean_shutdown);
330 static void smbd_setup_sig_chld_handler(void)
332 struct tevent_signal *se;
334 se = tevent_add_signal(server_event_context(),
335 server_event_context(),
336 SIGCHLD, 0,
337 smbd_sig_chld_handler,
338 NULL);
339 if (!se) {
340 exit_server("failed to setup SIGCHLD handler");
344 struct smbd_open_socket;
346 struct smbd_parent_context {
347 bool interactive;
349 /* the list of listening sockets */
350 struct smbd_open_socket *sockets;
353 struct smbd_open_socket {
354 struct smbd_open_socket *prev, *next;
355 struct smbd_parent_context *parent;
356 int fd;
357 struct tevent_fd *fde;
360 static void smbd_open_socket_close_fn(struct tevent_context *ev,
361 struct tevent_fd *fde,
362 int fd,
363 void *private_data)
365 /* this might be the socket_wrapper swrap_close() */
366 close(fd);
369 static void smbd_accept_connection(struct tevent_context *ev,
370 struct tevent_fd *fde,
371 uint16_t flags,
372 void *private_data)
374 struct smbd_server_connection *sconn = smbd_server_conn;
375 struct smbd_open_socket *s = talloc_get_type_abort(private_data,
376 struct smbd_open_socket);
377 struct sockaddr_storage addr;
378 socklen_t in_addrlen = sizeof(addr);
379 int fd;
380 pid_t pid = 0;
381 uint64_t unique_id;
383 fd = accept(s->fd, (struct sockaddr *)(void *)&addr,&in_addrlen);
384 sconn->sock = fd;
385 if (fd == -1 && errno == EINTR)
386 return;
388 if (fd == -1) {
389 DEBUG(0,("open_sockets_smbd: accept: %s\n",
390 strerror(errno)));
391 return;
394 if (s->parent->interactive) {
395 smbd_process(sconn);
396 exit_server_cleanly("end of interactive mode");
397 return;
400 if (!allowable_number_of_smbd_processes()) {
401 close(fd);
402 sconn->sock = -1;
403 return;
407 * Generate a unique id in the parent process so that we use
408 * the global random state in the parent.
410 generate_random_buffer((uint8_t *)&unique_id, sizeof(unique_id));
412 pid = sys_fork();
413 if (pid == 0) {
414 NTSTATUS status = NT_STATUS_OK;
416 /* Child code ... */
417 am_parent = 0;
419 set_my_unique_id(unique_id);
421 /* Stop zombies, the parent explicitly handles
422 * them, counting worker smbds. */
423 CatchChild();
425 /* close our standard file
426 descriptors */
427 close_low_fds(False);
430 * Can't use TALLOC_FREE here. Nulling out the argument to it
431 * would overwrite memory we've just freed.
433 talloc_free(s->parent);
434 s = NULL;
436 status = reinit_after_fork(smbd_messaging_context(),
437 server_event_context(), procid_self(),
438 true);
439 if (!NT_STATUS_IS_OK(status)) {
440 if (NT_STATUS_EQUAL(status,
441 NT_STATUS_TOO_MANY_OPENED_FILES)) {
442 DEBUG(0,("child process cannot initialize "
443 "because too many files are open\n"));
444 goto exit;
446 if (lp_clustering() &&
447 NT_STATUS_EQUAL(status,
448 NT_STATUS_INTERNAL_DB_ERROR)) {
449 DEBUG(1,("child process cannot initialize "
450 "because connection to CTDB "
451 "has failed\n"));
452 goto exit;
455 DEBUG(0,("reinit_after_fork() failed\n"));
456 smb_panic("reinit_after_fork() failed");
459 smbd_setup_sig_term_handler();
460 smbd_setup_sig_hup_handler(server_event_context(),
461 server_messaging_context());
463 if (!serverid_register(procid_self(),
464 FLAG_MSG_GENERAL|FLAG_MSG_SMBD
465 |FLAG_MSG_DBWRAP
466 |FLAG_MSG_PRINT_GENERAL)) {
467 exit_server_cleanly("Could not register myself in "
468 "serverid.tdb");
471 smbd_process(smbd_server_conn);
472 exit:
473 exit_server_cleanly("end of child");
474 return;
477 if (pid < 0) {
478 DEBUG(0,("smbd_accept_connection: sys_fork() failed: %s\n",
479 strerror(errno)));
482 /* The parent doesn't need this socket */
483 close(fd);
485 /* Sun May 6 18:56:14 2001 ackley@cs.unm.edu:
486 Clear the closed fd info out of server_fd --
487 and more importantly, out of client_fd in
488 util_sock.c, to avoid a possible
489 getpeername failure if we reopen the logs
490 and use %I in the filename.
492 sconn->sock = -1;
494 if (pid != 0) {
495 add_child_pid(pid);
498 /* Force parent to check log size after
499 * spawning child. Fix from
500 * klausr@ITAP.Physik.Uni-Stuttgart.De. The
501 * parent smbd will log to logserver.smb. It
502 * writes only two messages for each child
503 * started/finished. But each child writes,
504 * say, 50 messages also in logserver.smb,
505 * begining with the debug_count of the
506 * parent, before the child opens its own log
507 * file logserver.client. In a worst case
508 * scenario the size of logserver.smb would be
509 * checked after about 50*50=2500 messages
510 * (ca. 100kb).
511 * */
512 force_check_log_size();
515 static bool smbd_open_one_socket(struct smbd_parent_context *parent,
516 struct tevent_context *ev_ctx,
517 struct messaging_context *msg_ctx,
518 const struct sockaddr_storage *ifss,
519 uint16_t port)
521 struct smbd_open_socket *s;
523 s = talloc(parent, struct smbd_open_socket);
524 if (!s) {
525 return false;
528 s->parent = parent;
529 s->fd = open_socket_in(SOCK_STREAM,
530 port,
531 parent->sockets == NULL ? 0 : 2,
532 ifss,
533 true);
534 if (s->fd == -1) {
535 DEBUG(0,("smbd_open_once_socket: open_socket_in: "
536 "%s\n", strerror(errno)));
537 TALLOC_FREE(s);
539 * We ignore an error here, as we've done before
541 return true;
544 /* ready to listen */
545 set_socket_options(s->fd, "SO_KEEPALIVE");
546 set_socket_options(s->fd, lp_socket_options());
548 /* Set server socket to
549 * non-blocking for the accept. */
550 set_blocking(s->fd, False);
552 if (listen(s->fd, SMBD_LISTEN_BACKLOG) == -1) {
553 DEBUG(0,("open_sockets_smbd: listen: "
554 "%s\n", strerror(errno)));
555 close(s->fd);
556 TALLOC_FREE(s);
557 return false;
560 s->fde = tevent_add_fd(ev_ctx,
562 s->fd, TEVENT_FD_READ,
563 smbd_accept_connection,
565 if (!s->fde) {
566 DEBUG(0,("open_sockets_smbd: "
567 "tevent_add_fd: %s\n",
568 strerror(errno)));
569 close(s->fd);
570 TALLOC_FREE(s);
571 return false;
573 tevent_fd_set_close_fn(s->fde, smbd_open_socket_close_fn);
575 DLIST_ADD_END(parent->sockets, s, struct smbd_open_socket *);
577 return true;
580 static bool smbd_parent_housekeeping(const struct timeval *now, void *private_data)
582 time_t printcap_cache_time = (time_t)lp_printcap_cache_time();
583 time_t t = time_mono(NULL);
585 DEBUG(5, ("parent housekeeping\n"));
587 /* if periodic printcap rescan is enabled, see if it's time to reload */
588 if ((printcap_cache_time != 0)
589 && (t >= (last_printer_reload_time + printcap_cache_time))) {
590 DEBUG( 3,( "Printcap cache time expired.\n"));
591 pcap_cache_reload(server_event_context(),
592 smbd_messaging_context(),
593 &reload_pcap_change_notify);
594 last_printer_reload_time = t;
597 return true;
600 /****************************************************************************
601 Open the socket communication.
602 ****************************************************************************/
604 static bool open_sockets_smbd(struct smbd_parent_context *parent,
605 struct tevent_context *ev_ctx,
606 struct messaging_context *msg_ctx,
607 const char *smb_ports)
609 int num_interfaces = iface_count();
610 int i;
611 const char *ports;
612 unsigned dns_port = 0;
614 #ifdef HAVE_ATEXIT
615 atexit(killkids);
616 #endif
618 /* Stop zombies */
619 smbd_setup_sig_chld_handler();
621 /* use a reasonable default set of ports - listing on 445 and 139 */
622 if (!smb_ports) {
623 ports = lp_smb_ports();
624 if (!ports || !*ports) {
625 ports = talloc_strdup(talloc_tos(), SMB_PORTS);
626 } else {
627 ports = talloc_strdup(talloc_tos(), ports);
629 } else {
630 ports = talloc_strdup(talloc_tos(), smb_ports);
633 if (lp_interfaces() && lp_bind_interfaces_only()) {
634 /* We have been given an interfaces line, and been
635 told to only bind to those interfaces. Create a
636 socket per interface and bind to only these.
639 /* Now open a listen socket for each of the
640 interfaces. */
641 for(i = 0; i < num_interfaces; i++) {
642 const struct sockaddr_storage *ifss =
643 iface_n_sockaddr_storage(i);
644 char *tok;
645 const char *ptr;
647 if (ifss == NULL) {
648 DEBUG(0,("open_sockets_smbd: "
649 "interface %d has NULL IP address !\n",
650 i));
651 continue;
654 for (ptr=ports;
655 next_token_talloc(talloc_tos(),&ptr, &tok, " \t,");) {
656 unsigned port = atoi(tok);
657 if (port == 0 || port > 0xffff) {
658 continue;
661 /* Keep the first port for mDNS service
662 * registration.
664 if (dns_port == 0) {
665 dns_port = port;
668 if (!smbd_open_one_socket(parent,
669 ev_ctx,
670 msg_ctx,
671 ifss,
672 port)) {
673 return false;
677 } else {
678 /* Just bind to 0.0.0.0 - accept connections
679 from anywhere. */
681 char *tok;
682 const char *ptr;
683 const char *sock_addr = lp_socket_address();
684 char *sock_tok;
685 const char *sock_ptr;
687 if (strequal(sock_addr, "0.0.0.0") ||
688 strequal(sock_addr, "::")) {
689 #if HAVE_IPV6
690 sock_addr = "::,0.0.0.0";
691 #else
692 sock_addr = "0.0.0.0";
693 #endif
696 for (sock_ptr=sock_addr;
697 next_token_talloc(talloc_tos(), &sock_ptr, &sock_tok, " \t,"); ) {
698 for (ptr=ports; next_token_talloc(talloc_tos(), &ptr, &tok, " \t,"); ) {
699 struct sockaddr_storage ss;
701 unsigned port = atoi(tok);
702 if (port == 0 || port > 0xffff) {
703 continue;
706 /* Keep the first port for mDNS service
707 * registration.
709 if (dns_port == 0) {
710 dns_port = port;
713 /* open an incoming socket */
714 if (!interpret_string_addr(&ss, sock_tok,
715 AI_NUMERICHOST|AI_PASSIVE)) {
716 continue;
719 if (!smbd_open_one_socket(parent,
720 ev_ctx,
721 msg_ctx,
722 &ss,
723 port)) {
724 return false;
730 if (parent->sockets == NULL) {
731 DEBUG(0,("open_sockets_smbd: No "
732 "sockets available to bind to.\n"));
733 return false;
736 /* Setup the main smbd so that we can get messages. Note that
737 do this after starting listening. This is needed as when in
738 clustered mode, ctdb won't allow us to start doing database
739 operations until it has gone thru a full startup, which
740 includes checking to see that smbd is listening. */
742 if (!serverid_register(procid_self(),
743 FLAG_MSG_GENERAL|FLAG_MSG_SMBD
744 |FLAG_MSG_DBWRAP)) {
745 DEBUG(0, ("open_sockets_smbd: Failed to register "
746 "myself in serverid.tdb\n"));
747 return false;
750 if (!(event_add_idle(ev_ctx, NULL,
751 timeval_set(SMBD_HOUSEKEEPING_INTERVAL, 0),
752 "parent_housekeeping", smbd_parent_housekeeping,
753 NULL))) {
754 DEBUG(0, ("Could not add parent_housekeeping event\n"));
755 return false;
758 /* Listen to messages */
760 messaging_register(msg_ctx, NULL, MSG_SMB_SAM_SYNC, msg_sam_sync);
761 messaging_register(msg_ctx, NULL, MSG_SHUTDOWN, msg_exit_server);
762 messaging_register(msg_ctx, NULL, MSG_SMB_FILE_RENAME,
763 msg_file_was_renamed);
764 messaging_register(msg_ctx, ev_ctx, MSG_SMB_CONF_UPDATED,
765 smb_conf_updated);
766 messaging_register(msg_ctx, NULL, MSG_SMB_STAT_CACHE_DELETE,
767 smb_stat_cache_delete);
768 messaging_register(msg_ctx, NULL, MSG_DEBUG, smbd_msg_debug);
769 messaging_register(msg_ctx, ev_ctx, MSG_PRINTER_PCAP,
770 smb_pcap_updated);
771 brl_register_msgs(msg_ctx);
773 msg_idmap_register_msgs(msg_ctx);
775 #ifdef CLUSTER_SUPPORT
776 if (lp_clustering()) {
777 ctdbd_register_reconfigure(messaging_ctdbd_connection());
779 #endif
781 #ifdef DEVELOPER
782 messaging_register(msg_ctx, NULL, MSG_SMB_INJECT_FAULT,
783 msg_inject_fault);
784 #endif
786 if (lp_multicast_dns_register() && (dns_port != 0)) {
787 #ifdef WITH_DNSSD_SUPPORT
788 smbd_setup_mdns_registration(ev_ctx,
789 parent, dns_port);
790 #endif
791 #ifdef WITH_AVAHI_SUPPORT
792 void *avahi_conn;
794 avahi_conn = avahi_start_register(ev_ctx,
795 ev_ctx,
796 dns_port);
797 if (avahi_conn == NULL) {
798 DEBUG(10, ("avahi_start_register failed\n"));
800 #endif
803 return true;
806 static void smbd_parent_loop(struct tevent_context *ev_ctx,
807 struct smbd_parent_context *parent)
809 /* now accept incoming connections - forking a new process
810 for each incoming connection */
811 DEBUG(2,("waiting for connections\n"));
812 while (1) {
813 int ret;
814 TALLOC_CTX *frame = talloc_stackframe();
816 ret = tevent_loop_once(ev_ctx);
817 if (ret != 0) {
818 exit_server_cleanly("tevent_loop_once() error");
821 TALLOC_FREE(frame);
822 } /* end while 1 */
824 /* NOTREACHED return True; */
828 /****************************************************************************
829 Initialise connect, service and file structs.
830 ****************************************************************************/
832 static bool init_structs(void )
835 * Set the machine NETBIOS name if not already
836 * set from the config file.
839 if (!init_names())
840 return False;
842 if (!secrets_init())
843 return False;
845 return True;
848 /****************************************************************************
849 main program.
850 ****************************************************************************/
852 /* Declare prototype for build_options() to avoid having to run it through
853 mkproto.h. Mixing $(builddir) and $(srcdir) source files in the current
854 prototype generation system is too complicated. */
856 extern void build_options(bool screen);
858 int main(int argc,const char *argv[])
860 /* shall I run as a daemon */
861 bool is_daemon = false;
862 bool interactive = false;
863 bool Fork = true;
864 bool no_process_group = false;
865 bool log_stdout = false;
866 char *ports = NULL;
867 char *profile_level = NULL;
868 int opt;
869 poptContext pc;
870 bool print_build_options = False;
871 enum {
872 OPT_DAEMON = 1000,
873 OPT_INTERACTIVE,
874 OPT_FORK,
875 OPT_NO_PROCESS_GROUP,
876 OPT_LOG_STDOUT
878 struct poptOption long_options[] = {
879 POPT_AUTOHELP
880 {"daemon", 'D', POPT_ARG_NONE, NULL, OPT_DAEMON, "Become a daemon (default)" },
881 {"interactive", 'i', POPT_ARG_NONE, NULL, OPT_INTERACTIVE, "Run interactive (not a daemon)"},
882 {"foreground", 'F', POPT_ARG_NONE, NULL, OPT_FORK, "Run daemon in foreground (for daemontools, etc.)" },
883 {"no-process-group", '\0', POPT_ARG_NONE, NULL, OPT_NO_PROCESS_GROUP, "Don't create a new process group" },
884 {"log-stdout", 'S', POPT_ARG_NONE, NULL, OPT_LOG_STDOUT, "Log to stdout" },
885 {"build-options", 'b', POPT_ARG_NONE, NULL, 'b', "Print build options" },
886 {"port", 'p', POPT_ARG_STRING, &ports, 0, "Listen on the specified ports"},
887 {"profiling-level", 'P', POPT_ARG_STRING, &profile_level, 0, "Set profiling level","PROFILE_LEVEL"},
888 POPT_COMMON_SAMBA
889 POPT_COMMON_DYNCONFIG
890 POPT_TABLEEND
892 struct smbd_parent_context *parent = NULL;
893 TALLOC_CTX *frame;
894 NTSTATUS status;
895 uint64_t unique_id;
896 struct tevent_context *ev_ctx;
897 struct messaging_context *msg_ctx;
900 * Do this before any other talloc operation
902 talloc_enable_null_tracking();
903 frame = talloc_stackframe();
905 load_case_tables();
907 smbd_init_globals();
909 TimeInit();
911 #ifdef HAVE_SET_AUTH_PARAMETERS
912 set_auth_parameters(argc,argv);
913 #endif
915 pc = poptGetContext("smbd", argc, argv, long_options, 0);
916 while((opt = poptGetNextOpt(pc)) != -1) {
917 switch (opt) {
918 case OPT_DAEMON:
919 is_daemon = true;
920 break;
921 case OPT_INTERACTIVE:
922 interactive = true;
923 break;
924 case OPT_FORK:
925 Fork = false;
926 break;
927 case OPT_NO_PROCESS_GROUP:
928 no_process_group = true;
929 break;
930 case OPT_LOG_STDOUT:
931 log_stdout = true;
932 break;
933 case 'b':
934 print_build_options = True;
935 break;
936 default:
937 d_fprintf(stderr, "\nInvalid option %s: %s\n\n",
938 poptBadOption(pc, 0), poptStrerror(opt));
939 poptPrintUsage(pc, stderr, 0);
940 exit(1);
943 poptFreeContext(pc);
945 if (interactive) {
946 Fork = False;
947 log_stdout = True;
950 if (log_stdout) {
951 setup_logging(argv[0], DEBUG_STDOUT);
952 } else {
953 setup_logging(argv[0], DEBUG_FILE);
956 if (print_build_options) {
957 build_options(True); /* Display output to screen as well as debug */
958 exit(0);
961 #ifdef HAVE_SETLUID
962 /* needed for SecureWare on SCO */
963 setluid(0);
964 #endif
966 set_remote_machine_name("smbd", False);
968 if (interactive && (DEBUGLEVEL >= 9)) {
969 talloc_enable_leak_report();
972 if (log_stdout && Fork) {
973 DEBUG(0,("ERROR: Can't log to stdout (-S) unless daemon is in foreground (-F) or interactive (-i)\n"));
974 exit(1);
977 /* we want to re-seed early to prevent time delays causing
978 client problems at a later date. (tridge) */
979 generate_random_buffer(NULL, 0);
981 /* get initial effective uid and gid */
982 sec_init();
984 /* make absolutely sure we run as root - to handle cases where people
985 are crazy enough to have it setuid */
986 gain_root_privilege();
987 gain_root_group_privilege();
989 fault_setup();
990 dump_core_setup("smbd", lp_logfile());
992 /* we are never interested in SIGPIPE */
993 BlockSignals(True,SIGPIPE);
995 #if defined(SIGFPE)
996 /* we are never interested in SIGFPE */
997 BlockSignals(True,SIGFPE);
998 #endif
1000 #if defined(SIGUSR2)
1001 /* We are no longer interested in USR2 */
1002 BlockSignals(True,SIGUSR2);
1003 #endif
1005 /* POSIX demands that signals are inherited. If the invoking process has
1006 * these signals masked, we will have problems, as we won't recieve them. */
1007 BlockSignals(False, SIGHUP);
1008 BlockSignals(False, SIGUSR1);
1009 BlockSignals(False, SIGTERM);
1011 /* Ensure we leave no zombies until we
1012 * correctly set up child handling below. */
1014 CatchChild();
1016 /* we want total control over the permissions on created files,
1017 so set our umask to 0 */
1018 umask(0);
1020 reopen_logs();
1022 DEBUG(0,("smbd version %s started.\n", samba_version_string()));
1023 DEBUGADD(0,("%s\n", COPYRIGHT_STARTUP_MESSAGE));
1025 DEBUG(2,("uid=%d gid=%d euid=%d egid=%d\n",
1026 (int)getuid(),(int)getgid(),(int)geteuid(),(int)getegid()));
1028 /* Output the build options to the debug log */
1029 build_options(False);
1031 if (sizeof(uint16) < 2 || sizeof(uint32) < 4) {
1032 DEBUG(0,("ERROR: Samba is not configured correctly for the word size on your machine\n"));
1033 exit(1);
1036 if (!lp_load_initial_only(get_dyn_CONFIGFILE())) {
1037 DEBUG(0, ("error opening config file '%s'\n", get_dyn_CONFIGFILE()));
1038 exit(1);
1041 /* Init the security context and global current_user */
1042 init_sec_ctx();
1045 * Initialize the event context. The event context needs to be
1046 * initialized before the messaging context, cause the messaging
1047 * context holds an event context.
1048 * FIXME: This should be s3_tevent_context_init()
1050 ev_ctx = server_event_context();
1051 if (ev_ctx == NULL) {
1052 exit(1);
1056 * Init the messaging context
1057 * FIXME: This should only call messaging_init()
1059 msg_ctx = server_messaging_context();
1060 if (msg_ctx == NULL) {
1061 exit(1);
1065 * Reloading of the printers will not work here as we don't have a
1066 * server info and rpc services set up. It will be called later.
1068 if (!reload_services(NULL, -1, False)) {
1069 exit(1);
1072 /* ...NOTE... Log files are working from this point! */
1074 DEBUG(3,("loaded services\n"));
1076 init_structs();
1078 #ifdef WITH_PROFILE
1079 if (!profile_setup(msg_ctx, False)) {
1080 DEBUG(0,("ERROR: failed to setup profiling\n"));
1081 return -1;
1083 if (profile_level != NULL) {
1084 int pl = atoi(profile_level);
1085 struct server_id src;
1087 DEBUG(1, ("setting profiling level: %s\n",profile_level));
1088 src.pid = getpid();
1089 set_profile_level(pl, src);
1091 #endif
1093 if (!is_daemon && !is_a_socket(0)) {
1094 if (!interactive)
1095 DEBUG(0,("standard input is not a socket, assuming -D option\n"));
1098 * Setting is_daemon here prevents us from eventually calling
1099 * the open_sockets_inetd()
1102 is_daemon = True;
1105 if (is_daemon && !interactive) {
1106 DEBUG( 3, ( "Becoming a daemon.\n" ) );
1107 become_daemon(Fork, no_process_group, log_stdout);
1110 generate_random_buffer((uint8_t *)&unique_id, sizeof(unique_id));
1111 set_my_unique_id(unique_id);
1113 #if HAVE_SETPGID
1115 * If we're interactive we want to set our own process group for
1116 * signal management.
1118 if (interactive && !no_process_group)
1119 setpgid( (pid_t)0, (pid_t)0);
1120 #endif
1122 if (!directory_exist(lp_lockdir()))
1123 mkdir(lp_lockdir(), 0755);
1125 if (is_daemon)
1126 pidfile_create("smbd");
1128 status = reinit_after_fork(msg_ctx,
1129 ev_ctx,
1130 procid_self(), false);
1131 if (!NT_STATUS_IS_OK(status)) {
1132 DEBUG(0,("reinit_after_fork() failed\n"));
1133 exit(1);
1136 smbd_server_conn->msg_ctx = msg_ctx;
1138 smbd_setup_sig_term_handler();
1139 smbd_setup_sig_hup_handler(ev_ctx,
1140 msg_ctx);
1142 /* Setup all the TDB's - including CLEAR_IF_FIRST tdb's. */
1144 if (smbd_memcache() == NULL) {
1145 exit(1);
1148 memcache_set_global(smbd_memcache());
1150 /* Initialise the password backed before the global_sam_sid
1151 to ensure that we fetch from ldap before we make a domain sid up */
1153 if(!initialize_password_db(false, ev_ctx))
1154 exit(1);
1156 if (!secrets_init()) {
1157 DEBUG(0, ("ERROR: smbd can not open secrets.tdb\n"));
1158 exit(1);
1161 if (lp_server_role() == ROLE_DOMAIN_BDC || lp_server_role() == ROLE_DOMAIN_PDC) {
1162 if (!open_schannel_session_store(NULL, lp_private_dir())) {
1163 DEBUG(0,("ERROR: Samba cannot open schannel store for secured NETLOGON operations.\n"));
1164 exit(1);
1168 if(!get_global_sam_sid()) {
1169 DEBUG(0,("ERROR: Samba cannot create a SAM SID.\n"));
1170 exit(1);
1173 if (!sessionid_init()) {
1174 exit(1);
1177 if (!connections_init(True))
1178 exit(1);
1180 if (!locking_init())
1181 exit(1);
1183 if (!messaging_tdb_parent_init(ev_ctx)) {
1184 exit(1);
1187 if (!notify_internal_parent_init(ev_ctx)) {
1188 exit(1);
1191 if (!serverid_parent_init(ev_ctx)) {
1192 exit(1);
1195 if (!printer_list_parent_init()) {
1196 exit(1);
1199 if (!W_ERROR_IS_OK(registry_init_full()))
1200 exit(1);
1202 if (!print_backend_init(msg_ctx))
1203 exit(1);
1205 /* Open the share_info.tdb here, so we don't have to open
1206 after the fork on every single connection. This is a small
1207 performance improvment and reduces the total number of system
1208 fds used. */
1209 if (!share_info_db_init()) {
1210 DEBUG(0,("ERROR: failed to load share info db.\n"));
1211 exit(1);
1214 status = init_system_info();
1215 if (!NT_STATUS_IS_OK(status)) {
1216 DEBUG(1, ("ERROR: failed to setup system user info: %s.\n",
1217 nt_errstr(status)));
1218 return -1;
1221 if (!init_guest_info()) {
1222 DEBUG(0,("ERROR: failed to setup guest info.\n"));
1223 return -1;
1226 if (!file_init(smbd_server_conn)) {
1227 DEBUG(0, ("ERROR: file_init failed\n"));
1228 return -1;
1231 if (is_daemon && !interactive) {
1232 const char *rpcsrv_type;
1234 rpcsrv_type = lp_parm_const_string(GLOBAL_SECTION_SNUM,
1235 "rpc_server", "epmapper",
1236 "none");
1237 if (strcasecmp_m(rpcsrv_type, "daemon") == 0) {
1238 start_epmd(ev_ctx, msg_ctx);
1242 if (!dcesrv_ep_setup(ev_ctx, msg_ctx)) {
1243 exit(1);
1246 /* Publish nt printers, this requires a working winreg pipe */
1247 pcap_cache_reload(ev_ctx, msg_ctx, &reload_printers);
1249 /* only start the background queue daemon if we are
1250 running as a daemon -- bad things will happen if
1251 smbd is launched via inetd and we fork a copy of
1252 ourselves here */
1254 if (is_daemon && !interactive
1255 && lp_parm_bool(-1, "smbd", "backgroundqueue", true)) {
1256 start_background_queue(ev_ctx, msg_ctx);
1259 if (is_daemon && !_lp_disable_spoolss()) {
1260 const char *rpcsrv_type;
1262 /* start spoolss daemon */
1263 /* start as a separate daemon only if enabled */
1264 rpcsrv_type = lp_parm_const_string(GLOBAL_SECTION_SNUM,
1265 "rpc_server", "spoolss",
1266 "embedded");
1267 if (strcasecmp_m(rpcsrv_type, "daemon") == 0) {
1268 start_spoolssd(ev_ctx, msg_ctx);
1272 if (!is_daemon) {
1273 /* inetd mode */
1274 TALLOC_FREE(frame);
1276 /* Started from inetd. fd 0 is the socket. */
1277 /* We will abort gracefully when the client or remote system
1278 goes away */
1279 smbd_server_conn->sock = dup(0);
1281 /* close our standard file descriptors */
1282 close_low_fds(False); /* Don't close stderr */
1284 #ifdef HAVE_ATEXIT
1285 atexit(killkids);
1286 #endif
1288 /* Stop zombies */
1289 smbd_setup_sig_chld_handler();
1291 smbd_process(smbd_server_conn);
1293 exit_server_cleanly(NULL);
1294 return(0);
1297 parent = talloc_zero(ev_ctx, struct smbd_parent_context);
1298 if (!parent) {
1299 exit_server("talloc(struct smbd_parent_context) failed");
1301 parent->interactive = interactive;
1303 if (!open_sockets_smbd(parent, ev_ctx, msg_ctx, ports))
1304 exit_server("open_sockets_smbd() failed");
1306 TALLOC_FREE(frame);
1307 /* make sure we always have a valid stackframe */
1308 frame = talloc_stackframe();
1310 smbd_parent_loop(ev_ctx, parent);
1312 exit_server_cleanly(NULL);
1313 TALLOC_FREE(frame);
1314 return(0);