source: trunk/server/source3/smbd/server.c@ 750

Last change on this file since 750 was 745, checked in by Silvan Scherrer, 13 years ago

Samba Server: updated trunk to 3.6.0
File size: 35.0 KB
Line 
1/*
2 Unix SMB/CIFS implementation.
3 Main SMB server routines
4 Copyright (C) Andrew Tridgell 1992-1998
5 Copyright (C) Martin Pool 2002
6 Copyright (C) Jelmer Vernooij 2002-2003
7 Copyright (C) Volker Lendecke 1993-2007
8 Copyright (C) Jeremy Allison 1993-2007
9
10 This program is free software; you can redistribute it and/or modify
11 it under the terms of the GNU General Public License as published by
12 the Free Software Foundation; either version 3 of the License, or
13 (at your option) any later version.
14
15 This program is distributed in the hope that it will be useful,
16 but WITHOUT ANY WARRANTY; without even the implied warranty of
17 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
18 GNU General Public License for more details.
19
20 You should have received a copy of the GNU General Public License
21 along with this program. If not, see <http://www.gnu.org/licenses/>.
22*/
23
24#include "includes.h"
25#include "system/filesys.h"
26#include "popt_common.h"
27#include "smbd/smbd.h"
28#include "smbd/globals.h"
29#include "registry/reg_init_full.h"
30#include "libcli/auth/schannel.h"
31#include "secrets.h"
32#include "memcache.h"
33#include "ctdbd_conn.h"
34#include "printing/printer_list.h"
35#include "rpc_server/rpc_ep_setup.h"
36#include "printing/pcap.h"
37#include "printing.h"
38#include "serverid.h"
39#include "passdb.h"
40#include "auth.h"
41#include "messages.h"
42#include "smbprofile.h"
43
44extern void start_epmd(struct tevent_context *ev_ctx,
45 struct messaging_context *msg_ctx);
46
47extern void start_spoolssd(struct event_context *ev_ctx,
48 struct messaging_context *msg_ctx);
49
50#ifdef WITH_DFS
51extern int dcelogin_atmost_once;
52#endif /* WITH_DFS */
53
54static void smbd_set_server_fd(int fd)
55{
56 struct smbd_server_connection *sconn = smbd_server_conn;
57 char addr[INET6_ADDRSTRLEN];
58 const char *name;
59
60 sconn->sock = fd;
61
62 /*
63 * Initialize sconn->client_id: If we can't find the client's
64 * name, default to its address.
65 */
66
67 client_addr(fd, sconn->client_id.addr, sizeof(sconn->client_id.addr));
68
69 name = client_name(sconn->sock);
70 if (strcmp(name, "UNKNOWN") != 0) {
71 name = talloc_strdup(sconn, name);
72 } else {
73 name = NULL;
74 }
75 sconn->client_id.name =
76 (name != NULL) ? name : sconn->client_id.addr;
77
78 sub_set_socket_ids(sconn->client_id.addr, sconn->client_id.name,
79 client_socket_addr(sconn->sock, addr,
80 sizeof(addr)));
81}
82
83struct event_context *smbd_event_context(void)
84{
85 return server_event_context();
86}
87
88/*******************************************************************
89 What to do when smb.conf is updated.
90 ********************************************************************/
91
92static void smb_conf_updated(struct messaging_context *msg,
93 void *private_data,
94 uint32_t msg_type,
95 struct server_id server_id,
96 DATA_BLOB *data)
97{
98 struct tevent_context *ev_ctx =
99 talloc_get_type_abort(private_data, struct tevent_context);
100
101 DEBUG(10,("smb_conf_updated: Got message saying smb.conf was "
102 "updated. Reloading.\n"));
103 change_to_root_user();
104 reload_services(msg, smbd_server_conn->sock, False);
105 if (am_parent) {
106 pcap_cache_reload(ev_ctx, msg,
107 &reload_pcap_change_notify);
108 }
109}
110
111/*******************************************************************
112 What to do when printcap is updated.
113 ********************************************************************/
114
115static void smb_pcap_updated(struct messaging_context *msg,
116 void *private_data,
117 uint32_t msg_type,
118 struct server_id server_id,
119 DATA_BLOB *data)
120{
121 struct tevent_context *ev_ctx =
122 talloc_get_type_abort(private_data, struct tevent_context);
123
124 DEBUG(10,("Got message saying pcap was updated. Reloading.\n"));
125 change_to_root_user();
126 reload_printers(ev_ctx, msg);
127}
128
129/*******************************************************************
130 Delete a statcache entry.
131 ********************************************************************/
132
133static void smb_stat_cache_delete(struct messaging_context *msg,
134 void *private_data,
135 uint32_t msg_tnype,
136 struct server_id server_id,
137 DATA_BLOB *data)
138{
139 const char *name = (const char *)data->data;
140 DEBUG(10,("smb_stat_cache_delete: delete name %s\n", name));
141 stat_cache_delete(name);
142}
143
144/****************************************************************************
145 Send a SIGTERM to our process group.
146*****************************************************************************/
147
148static void killkids(void)
149{
150 if(am_parent) kill(0,SIGTERM);
151}
152
153/****************************************************************************
154 Process a sam sync message - not sure whether to do this here or
155 somewhere else.
156****************************************************************************/
157
158static void msg_sam_sync(struct messaging_context *msg,
159 void *private_data,
160 uint32_t msg_type,
161 struct server_id server_id,
162 DATA_BLOB *data)
163{
164 DEBUG(10, ("** sam sync message received, ignoring\n"));
165}
166
167static void msg_exit_server(struct messaging_context *msg,
168 void *private_data,
169 uint32_t msg_type,
170 struct server_id server_id,
171 DATA_BLOB *data)
172{
173 DEBUG(3, ("got a SHUTDOWN message\n"));
174 exit_server_cleanly(NULL);
175}
176
177#ifdef DEVELOPER
178static void msg_inject_fault(struct messaging_context *msg,
179 void *private_data,
180 uint32_t msg_type,
181 struct server_id src,
182 DATA_BLOB *data)
183{
184 int sig;
185
186 if (data->length != sizeof(sig)) {
187 DEBUG(0, ("Process %s sent bogus signal injection request\n",
188 procid_str_static(&src)));
189 return;
190 }
191
192 sig = *(int *)data->data;
193 if (sig == -1) {
194 exit_server("internal error injected");
195 return;
196 }
197
198#if HAVE_STRSIGNAL
199 DEBUG(0, ("Process %s requested injection of signal %d (%s)\n",
200 procid_str_static(&src), sig, strsignal(sig)));
201#else
202 DEBUG(0, ("Process %s requested injection of signal %d\n",
203 procid_str_static(&src), sig));
204#endif
205
206 kill(sys_getpid(), sig);
207}
208#endif /* DEVELOPER */
209
210/*
211 * Parent smbd process sets its own debug level first and then
212 * sends a message to all the smbd children to adjust their debug
213 * level to that of the parent.
214 */
215
216static void smbd_msg_debug(struct messaging_context *msg_ctx,
217 void *private_data,
218 uint32_t msg_type,
219 struct server_id server_id,
220 DATA_BLOB *data)
221{
222 struct child_pid *child;
223
224 debug_message(msg_ctx, private_data, MSG_DEBUG, server_id, data);
225
226 for (child = children; child != NULL; child = child->next) {
227 messaging_send_buf(msg_ctx, pid_to_procid(child->pid),
228 MSG_DEBUG,
229 data->data,
230 strlen((char *) data->data) + 1);
231 }
232}
233
234static void add_child_pid(pid_t pid)
235{
236 struct child_pid *child;
237
238 child = SMB_MALLOC_P(struct child_pid);
239 if (child == NULL) {
240 DEBUG(0, ("Could not add child struct -- malloc failed\n"));
241 return;
242 }
243 child->pid = pid;
244 DLIST_ADD(children, child);
245 num_children += 1;
246}
247
248/*
249 at most every smbd:cleanuptime seconds (default 20), we scan the BRL
250 and locking database for entries to cleanup. As a side effect this
251 also cleans up dead entries in the connections database (due to the
252 traversal in message_send_all()
253
254 Using a timer for this prevents a flood of traversals when a large
255 number of clients disconnect at the same time (perhaps due to a
256 network outage).
257*/
258
259static void cleanup_timeout_fn(struct event_context *event_ctx,
260 struct timed_event *te,
261 struct timeval now,
262 void *private_data)
263{
264 struct timed_event **cleanup_te = (struct timed_event **)private_data;
265
266 DEBUG(1,("Cleaning up brl and lock database after unclean shutdown\n"));
267 message_send_all(smbd_messaging_context(), MSG_SMB_UNLOCK, NULL, 0, NULL);
268 messaging_send_buf(smbd_messaging_context(), procid_self(),
269 MSG_SMB_BRL_VALIDATE, NULL, 0);
270 /* mark the cleanup as having been done */
271 (*cleanup_te) = NULL;
272}
273
274static void remove_child_pid(pid_t pid, bool unclean_shutdown)
275{
276 struct child_pid *child;
277 static struct timed_event *cleanup_te;
278 struct server_id child_id;
279
280 if (unclean_shutdown) {
281 /* a child terminated uncleanly so tickle all
282 processes to see if they can grab any of the
283 pending locks
284 */
285 DEBUG(3,(__location__ " Unclean shutdown of pid %u\n",
286 (unsigned int)pid));
287 if (!cleanup_te) {
288 /* call the cleanup timer, but not too often */
289 int cleanup_time = lp_parm_int(-1, "smbd", "cleanuptime", 20);
290 cleanup_te = event_add_timed(smbd_event_context(), NULL,
291 timeval_current_ofs(cleanup_time, 0),
292 cleanup_timeout_fn,
293 &cleanup_te);
294 DEBUG(1,("Scheduled cleanup of brl and lock database after unclean shutdown\n"));
295 }
296 }
297
298 child_id = procid_self(); /* Just initialize pid and potentially vnn */
299 child_id.pid = pid;
300
301 if (!serverid_deregister(child_id)) {
302 DEBUG(1, ("Could not remove pid %d from serverid.tdb\n",
303 (int)pid));
304 }
305
306 for (child = children; child != NULL; child = child->next) {
307 if (child->pid == pid) {
308 struct child_pid *tmp = child;
309 DLIST_REMOVE(children, child);
310 SAFE_FREE(tmp);
311 num_children -= 1;
312 return;
313 }
314 }
315
316 /* not all forked child processes are added to the children list */
317 DEBUG(1, ("Could not find child %d -- ignoring\n", (int)pid));
318}
319
320/****************************************************************************
321 Have we reached the process limit ?
322****************************************************************************/
323
324static bool allowable_number_of_smbd_processes(void)
325{
326 int max_processes = lp_max_smbd_processes();
327
328 if (!max_processes)
329 return True;
330
331 return num_children < max_processes;
332}
333
334static void smbd_sig_chld_handler(struct tevent_context *ev,
335 struct tevent_signal *se,
336 int signum,
337 int count,
338 void *siginfo,
339 void *private_data)
340{
341 pid_t pid;
342 int status;
343
344 while ((pid = sys_waitpid(-1, &status, WNOHANG)) > 0) {
345 bool unclean_shutdown = False;
346
347 /* If the child terminated normally, assume
348 it was an unclean shutdown unless the
349 status is 0
350 */
351 if (WIFEXITED(status)) {
352 unclean_shutdown = WEXITSTATUS(status);
353 }
354 /* If the child terminated due to a signal
355 we always assume it was unclean.
356 */
357 if (WIFSIGNALED(status)) {
358 unclean_shutdown = True;
359 }
360 remove_child_pid(pid, unclean_shutdown);
361 }
362}
363
364static void smbd_setup_sig_chld_handler(void)
365{
366 struct tevent_signal *se;
367
368 se = tevent_add_signal(smbd_event_context(),
369 smbd_event_context(),
370 SIGCHLD, 0,
371 smbd_sig_chld_handler,
372 NULL);
373 if (!se) {
374 exit_server("failed to setup SIGCHLD handler");
375 }
376}
377
378struct smbd_open_socket;
379
380struct smbd_parent_context {
381 bool interactive;
382
383 /* the list of listening sockets */
384 struct smbd_open_socket *sockets;
385};
386
387struct smbd_open_socket {
388 struct smbd_open_socket *prev, *next;
389 struct smbd_parent_context *parent;
390 int fd;
391 struct tevent_fd *fde;
392};
393
394static void smbd_open_socket_close_fn(struct tevent_context *ev,
395 struct tevent_fd *fde,
396 int fd,
397 void *private_data)
398{
399 /* this might be the socket_wrapper swrap_close() */
400 close(fd);
401}
402
403static void smbd_accept_connection(struct tevent_context *ev,
404 struct tevent_fd *fde,
405 uint16_t flags,
406 void *private_data)
407{
408 struct smbd_open_socket *s = talloc_get_type_abort(private_data,
409 struct smbd_open_socket);
410 struct sockaddr_storage addr;
411 socklen_t in_addrlen = sizeof(addr);
412 int fd;
413 pid_t pid = 0;
414 uint64_t unique_id;
415
416 fd = accept(s->fd, (struct sockaddr *)(void *)&addr,&in_addrlen);
417 smbd_set_server_fd(fd);
418
419 if (fd == -1 && errno == EINTR)
420 return;
421
422 if (fd == -1) {
423 DEBUG(0,("open_sockets_smbd: accept: %s\n",
424 strerror(errno)));
425 return;
426 }
427
428 if (s->parent->interactive) {
429 smbd_process(smbd_server_conn);
430 exit_server_cleanly("end of interactive mode");
431 return;
432 }
433
434 if (!allowable_number_of_smbd_processes()) {
435 close(fd);
436 smbd_set_server_fd(-1);
437 return;
438 }
439
440 /*
441 * Generate a unique id in the parent process so that we use
442 * the global random state in the parent.
443 */
444 generate_random_buffer((uint8_t *)&unique_id, sizeof(unique_id));
445
446 pid = sys_fork();
447 if (pid == 0) {
448 NTSTATUS status = NT_STATUS_OK;
449
450 /* Child code ... */
451 am_parent = 0;
452
453 set_my_unique_id(unique_id);
454
455 /* Stop zombies, the parent explicitly handles
456 * them, counting worker smbds. */
457 CatchChild();
458
459 /* close our standard file
460 descriptors */
461 close_low_fds(False);
462
463 /*
464 * Can't use TALLOC_FREE here. Nulling out the argument to it
465 * would overwrite memory we've just freed.
466 */
467 talloc_free(s->parent);
468 s = NULL;
469
470 status = reinit_after_fork(smbd_messaging_context(),
471 smbd_event_context(), procid_self(),
472 true);
473 if (!NT_STATUS_IS_OK(status)) {
474 if (NT_STATUS_EQUAL(status,
475 NT_STATUS_TOO_MANY_OPENED_FILES)) {
476 DEBUG(0,("child process cannot initialize "
477 "because too many files are open\n"));
478 goto exit;
479 }
480 if (lp_clustering() &&
481 NT_STATUS_EQUAL(status,
482 NT_STATUS_INTERNAL_DB_ERROR)) {
483 DEBUG(1,("child process cannot initialize "
484 "because connection to CTDB "
485 "has failed\n"));
486 goto exit;
487 }
488
489 DEBUG(0,("reinit_after_fork() failed\n"));
490 smb_panic("reinit_after_fork() failed");
491 }
492
493 smbd_setup_sig_term_handler();
494 smbd_setup_sig_hup_handler(server_event_context(),
495 server_messaging_context());
496
497 if (!serverid_register(procid_self(),
498 FLAG_MSG_GENERAL|FLAG_MSG_SMBD
499 |FLAG_MSG_DBWRAP
500 |FLAG_MSG_PRINT_GENERAL)) {
501 exit_server_cleanly("Could not register myself in "
502 "serverid.tdb");
503 }
504
505 smbd_process(smbd_server_conn);
506 exit:
507 exit_server_cleanly("end of child");
508 return;
509 }
510
511 if (pid < 0) {
512 DEBUG(0,("smbd_accept_connection: sys_fork() failed: %s\n",
513 strerror(errno)));
514 }
515
516 /* The parent doesn't need this socket */
517 close(fd);
518
519 /* Sun May 6 18:56:14 2001 ackley@cs.unm.edu:
520 Clear the closed fd info out of server_fd --
521 and more importantly, out of client_fd in
522 util_sock.c, to avoid a possible
523 getpeername failure if we reopen the logs
524 and use %I in the filename.
525 */
526
527 smbd_set_server_fd(-1);
528
529 if (pid != 0) {
530 add_child_pid(pid);
531 }
532
533 /* Force parent to check log size after
534 * spawning child. Fix from
535 * klausr@ITAP.Physik.Uni-Stuttgart.De. The
536 * parent smbd will log to logserver.smb. It
537 * writes only two messages for each child
538 * started/finished. But each child writes,
539 * say, 50 messages also in logserver.smb,
540 * begining with the debug_count of the
541 * parent, before the child opens its own log
542 * file logserver.client. In a worst case
543 * scenario the size of logserver.smb would be
544 * checked after about 50*50=2500 messages
545 * (ca. 100kb).
546 * */
547 force_check_log_size();
548}
549
550static bool smbd_open_one_socket(struct smbd_parent_context *parent,
551 const struct sockaddr_storage *ifss,
552 uint16_t port)
553{
554 struct smbd_open_socket *s;
555
556 s = talloc(parent, struct smbd_open_socket);
557 if (!s) {
558 return false;
559 }
560
561 s->parent = parent;
562 s->fd = open_socket_in(SOCK_STREAM,
563 port,
564 parent->sockets == NULL ? 0 : 2,
565 ifss,
566 true);
567 if (s->fd == -1) {
568 DEBUG(0,("smbd_open_once_socket: open_socket_in: "
569 "%s\n", strerror(errno)));
570 TALLOC_FREE(s);
571 /*
572 * We ignore an error here, as we've done before
573 */
574 return true;
575 }
576
577 /* ready to listen */
578 set_socket_options(s->fd, "SO_KEEPALIVE");
579 set_socket_options(s->fd, lp_socket_options());
580
581 /* Set server socket to
582 * non-blocking for the accept. */
583 set_blocking(s->fd, False);
584
585 if (listen(s->fd, SMBD_LISTEN_BACKLOG) == -1) {
586 DEBUG(0,("open_sockets_smbd: listen: "
587 "%s\n", strerror(errno)));
588 close(s->fd);
589 TALLOC_FREE(s);
590 return false;
591 }
592
593 s->fde = tevent_add_fd(smbd_event_context(),
594 s,
595 s->fd, TEVENT_FD_READ,
596 smbd_accept_connection,
597 s);
598 if (!s->fde) {
599 DEBUG(0,("open_sockets_smbd: "
600 "tevent_add_fd: %s\n",
601 strerror(errno)));
602 close(s->fd);
603 TALLOC_FREE(s);
604 return false;
605 }
606 tevent_fd_set_close_fn(s->fde, smbd_open_socket_close_fn);
607
608 DLIST_ADD_END(parent->sockets, s, struct smbd_open_socket *);
609
610 return true;
611}
612
613static bool smbd_parent_housekeeping(const struct timeval *now, void *private_data)
614{
615 time_t printcap_cache_time = (time_t)lp_printcap_cache_time();
616 time_t t = time_mono(NULL);
617
618 DEBUG(5, ("parent housekeeping\n"));
619
620 /* if periodic printcap rescan is enabled, see if it's time to reload */
621 if ((printcap_cache_time != 0)
622 && (t >= (last_printer_reload_time + printcap_cache_time))) {
623 DEBUG( 3,( "Printcap cache time expired.\n"));
624 pcap_cache_reload(server_event_context(),
625 smbd_messaging_context(),
626 &reload_pcap_change_notify);
627 last_printer_reload_time = t;
628 }
629
630 return true;
631}
632
633/****************************************************************************
634 Open the socket communication.
635****************************************************************************/
636
637static bool open_sockets_smbd(struct smbd_parent_context *parent,
638 struct messaging_context *msg_ctx,
639 const char *smb_ports)
640{
641 int num_interfaces = iface_count();
642 int i;
643 char *ports;
644 unsigned dns_port = 0;
645
646#ifdef HAVE_ATEXIT
647 atexit(killkids);
648#endif
649
650 /* Stop zombies */
651 smbd_setup_sig_chld_handler();
652
653 /* use a reasonable default set of ports - listing on 445 and 139 */
654 if (!smb_ports) {
655 ports = lp_smb_ports();
656 if (!ports || !*ports) {
657 ports = talloc_strdup(talloc_tos(), SMB_PORTS);
658 } else {
659 ports = talloc_strdup(talloc_tos(), ports);
660 }
661 } else {
662 ports = talloc_strdup(talloc_tos(), smb_ports);
663 }
664
665 if (lp_interfaces() && lp_bind_interfaces_only()) {
666 /* We have been given an interfaces line, and been
667 told to only bind to those interfaces. Create a
668 socket per interface and bind to only these.
669 */
670
671 /* Now open a listen socket for each of the
672 interfaces. */
673 for(i = 0; i < num_interfaces; i++) {
674 const struct sockaddr_storage *ifss =
675 iface_n_sockaddr_storage(i);
676 char *tok;
677 const char *ptr;
678
679 if (ifss == NULL) {
680 DEBUG(0,("open_sockets_smbd: "
681 "interface %d has NULL IP address !\n",
682 i));
683 continue;
684 }
685
686 for (ptr=ports;
687 next_token_talloc(talloc_tos(),&ptr, &tok, " \t,");) {
688 unsigned port = atoi(tok);
689 if (port == 0 || port > 0xffff) {
690 continue;
691 }
692
693 /* Keep the first port for mDNS service
694 * registration.
695 */
696 if (dns_port == 0) {
697 dns_port = port;
698 }
699
700 if (!smbd_open_one_socket(parent, ifss, port)) {
701 return false;
702 }
703 }
704 }
705 } else {
706 /* Just bind to 0.0.0.0 - accept connections
707 from anywhere. */
708
709 char *tok;
710 const char *ptr;
711 const char *sock_addr = lp_socket_address();
712 char *sock_tok;
713 const char *sock_ptr;
714
715 if (strequal(sock_addr, "0.0.0.0") ||
716 strequal(sock_addr, "::")) {
717#if HAVE_IPV6
718 sock_addr = "::,0.0.0.0";
719#else
720 sock_addr = "0.0.0.0";
721#endif
722 }
723
724 for (sock_ptr=sock_addr;
725 next_token_talloc(talloc_tos(), &sock_ptr, &sock_tok, " \t,"); ) {
726 for (ptr=ports; next_token_talloc(talloc_tos(), &ptr, &tok, " \t,"); ) {
727 struct sockaddr_storage ss;
728
729 unsigned port = atoi(tok);
730 if (port == 0 || port > 0xffff) {
731 continue;
732 }
733
734 /* Keep the first port for mDNS service
735 * registration.
736 */
737 if (dns_port == 0) {
738 dns_port = port;
739 }
740
741 /* open an incoming socket */
742 if (!interpret_string_addr(&ss, sock_tok,
743 AI_NUMERICHOST|AI_PASSIVE)) {
744 continue;
745 }
746
747 if (!smbd_open_one_socket(parent, &ss, port)) {
748 return false;
749 }
750 }
751 }
752 }
753
754 if (parent->sockets == NULL) {
755 DEBUG(0,("open_sockets_smbd: No "
756 "sockets available to bind to.\n"));
757 return false;
758 }
759
760 /* Setup the main smbd so that we can get messages. Note that
761 do this after starting listening. This is needed as when in
762 clustered mode, ctdb won't allow us to start doing database
763 operations until it has gone thru a full startup, which
764 includes checking to see that smbd is listening. */
765
766 if (!serverid_register(procid_self(),
767 FLAG_MSG_GENERAL|FLAG_MSG_SMBD
768 |FLAG_MSG_DBWRAP)) {
769 DEBUG(0, ("open_sockets_smbd: Failed to register "
770 "myself in serverid.tdb\n"));
771 return false;
772 }
773
774 if (!(event_add_idle(smbd_event_context(), NULL,
775 timeval_set(SMBD_HOUSEKEEPING_INTERVAL, 0),
776 "parent_housekeeping", smbd_parent_housekeeping,
777 NULL))) {
778 DEBUG(0, ("Could not add parent_housekeeping event\n"));
779 return false;
780 }
781
782 /* Listen to messages */
783
784 messaging_register(msg_ctx, NULL, MSG_SMB_SAM_SYNC, msg_sam_sync);
785 messaging_register(msg_ctx, NULL, MSG_SHUTDOWN, msg_exit_server);
786 messaging_register(msg_ctx, NULL, MSG_SMB_FILE_RENAME,
787 msg_file_was_renamed);
788 messaging_register(msg_ctx, server_event_context(), MSG_SMB_CONF_UPDATED,
789 smb_conf_updated);
790 messaging_register(msg_ctx, NULL, MSG_SMB_STAT_CACHE_DELETE,
791 smb_stat_cache_delete);
792 messaging_register(msg_ctx, NULL, MSG_DEBUG, smbd_msg_debug);
793 messaging_register(msg_ctx, server_event_context(), MSG_PRINTER_PCAP,
794 smb_pcap_updated);
795 brl_register_msgs(msg_ctx);
796
797 msg_idmap_register_msgs(msg_ctx);
798
799#ifdef CLUSTER_SUPPORT
800 if (lp_clustering()) {
801 ctdbd_register_reconfigure(messaging_ctdbd_connection());
802 }
803#endif
804
805#ifdef DEVELOPER
806 messaging_register(msg_ctx, NULL, MSG_SMB_INJECT_FAULT,
807 msg_inject_fault);
808#endif
809
810 if (lp_multicast_dns_register() && (dns_port != 0)) {
811#ifdef WITH_DNSSD_SUPPORT
812 smbd_setup_mdns_registration(smbd_event_context(),
813 parent, dns_port);
814#endif
815#ifdef WITH_AVAHI_SUPPORT
816 void *avahi_conn;
817
818 avahi_conn = avahi_start_register(
819 smbd_event_context(), smbd_event_context(), dns_port);
820 if (avahi_conn == NULL) {
821 DEBUG(10, ("avahi_start_register failed\n"));
822 }
823#endif
824 }
825
826 return true;
827}
828
829static void smbd_parent_loop(struct smbd_parent_context *parent)
830{
831 /* now accept incoming connections - forking a new process
832 for each incoming connection */
833 DEBUG(2,("waiting for connections\n"));
834 while (1) {
835 int ret;
836 TALLOC_CTX *frame = talloc_stackframe();
837
838 ret = tevent_loop_once(smbd_event_context());
839 if (ret != 0) {
840 exit_server_cleanly("tevent_loop_once() error");
841 }
842
843 TALLOC_FREE(frame);
844 } /* end while 1 */
845
846/* NOTREACHED return True; */
847}
848
849
850/****************************************************************************
851 Initialise connect, service and file structs.
852****************************************************************************/
853
854static bool init_structs(void )
855{
856 /*
857 * Set the machine NETBIOS name if not already
858 * set from the config file.
859 */
860
861 if (!init_names())
862 return False;
863
864 if (!secrets_init())
865 return False;
866
867 return True;
868}
869
870/****************************************************************************
871 main program.
872****************************************************************************/
873
874/* Declare prototype for build_options() to avoid having to run it through
875 mkproto.h. Mixing $(builddir) and $(srcdir) source files in the current
876 prototype generation system is too complicated. */
877
878extern void build_options(bool screen);
879
880 int main(int argc,const char *argv[])
881{
882 /* shall I run as a daemon */
883 bool is_daemon = false;
884 bool interactive = false;
885 bool Fork = true;
886 bool no_process_group = false;
887 bool log_stdout = false;
888 char *ports = NULL;
889 char *profile_level = NULL;
890 int opt;
891 poptContext pc;
892 bool print_build_options = False;
893 enum {
894 OPT_DAEMON = 1000,
895 OPT_INTERACTIVE,
896 OPT_FORK,
897 OPT_NO_PROCESS_GROUP,
898 OPT_LOG_STDOUT
899 };
900 struct poptOption long_options[] = {
901 POPT_AUTOHELP
902 {"daemon", 'D', POPT_ARG_NONE, NULL, OPT_DAEMON, "Become a daemon (default)" },
903 {"interactive", 'i', POPT_ARG_NONE, NULL, OPT_INTERACTIVE, "Run interactive (not a daemon)"},
904 {"foreground", 'F', POPT_ARG_NONE, NULL, OPT_FORK, "Run daemon in foreground (for daemontools, etc.)" },
905 {"no-process-group", '\0', POPT_ARG_NONE, NULL, OPT_NO_PROCESS_GROUP, "Don't create a new process group" },
906 {"log-stdout", 'S', POPT_ARG_NONE, NULL, OPT_LOG_STDOUT, "Log to stdout" },
907 {"build-options", 'b', POPT_ARG_NONE, NULL, 'b', "Print build options" },
908 {"port", 'p', POPT_ARG_STRING, &ports, 0, "Listen on the specified ports"},
909 {"profiling-level", 'P', POPT_ARG_STRING, &profile_level, 0, "Set profiling level","PROFILE_LEVEL"},
910 POPT_COMMON_SAMBA
911 POPT_COMMON_DYNCONFIG
912 POPT_TABLEEND
913 };
914 struct smbd_parent_context *parent = NULL;
915 TALLOC_CTX *frame;
916 NTSTATUS status;
917 uint64_t unique_id;
918
919 /*
920 * Do this before any other talloc operation
921 */
922 talloc_enable_null_tracking();
923 frame = talloc_stackframe();
924
925 load_case_tables();
926
927 /* Initialize the event context, it will panic on error */
928 smbd_event_context();
929
930 smbd_init_globals();
931
932 TimeInit();
933
934#ifdef HAVE_SET_AUTH_PARAMETERS
935 set_auth_parameters(argc,argv);
936#endif
937
938 pc = poptGetContext("smbd", argc, argv, long_options, 0);
939 while((opt = poptGetNextOpt(pc)) != -1) {
940 switch (opt) {
941 case OPT_DAEMON:
942 is_daemon = true;
943 break;
944 case OPT_INTERACTIVE:
945 interactive = true;
946 break;
947 case OPT_FORK:
948 Fork = false;
949 break;
950 case OPT_NO_PROCESS_GROUP:
951 no_process_group = true;
952 break;
953 case OPT_LOG_STDOUT:
954 log_stdout = true;
955 break;
956 case 'b':
957 print_build_options = True;
958 break;
959 default:
960 d_fprintf(stderr, "\nInvalid option %s: %s\n\n",
961 poptBadOption(pc, 0), poptStrerror(opt));
962 poptPrintUsage(pc, stderr, 0);
963 exit(1);
964 }
965 }
966 poptFreeContext(pc);
967
968 if (interactive) {
969 Fork = False;
970 log_stdout = True;
971 }
972
973 if (log_stdout) {
974 setup_logging(argv[0], DEBUG_STDOUT);
975 } else {
976 setup_logging(argv[0], DEBUG_FILE);
977 }
978
979 if (print_build_options) {
980 build_options(True); /* Display output to screen as well as debug */
981 exit(0);
982 }
983
984#ifdef HAVE_SETLUID
985 /* needed for SecureWare on SCO */
986 setluid(0);
987#endif
988
989 set_remote_machine_name("smbd", False);
990
991 if (interactive && (DEBUGLEVEL >= 9)) {
992 talloc_enable_leak_report();
993 }
994
995 if (log_stdout && Fork) {
996 DEBUG(0,("ERROR: Can't log to stdout (-S) unless daemon is in foreground (-F) or interactive (-i)\n"));
997 exit(1);
998 }
999
1000 /* we want to re-seed early to prevent time delays causing
1001 client problems at a later date. (tridge) */
1002 generate_random_buffer(NULL, 0);
1003
1004 /* get initial effective uid and gid */
1005 sec_init();
1006
1007 /* make absolutely sure we run as root - to handle cases where people
1008 are crazy enough to have it setuid */
1009 gain_root_privilege();
1010 gain_root_group_privilege();
1011
1012 fault_setup((void (*)(void *))exit_server_fault);
1013 dump_core_setup("smbd");
1014
1015 /* we are never interested in SIGPIPE */
1016 BlockSignals(True,SIGPIPE);
1017
1018#if defined(SIGFPE)
1019 /* we are never interested in SIGFPE */
1020 BlockSignals(True,SIGFPE);
1021#endif
1022
1023#if defined(SIGUSR2)
1024 /* We are no longer interested in USR2 */
1025 BlockSignals(True,SIGUSR2);
1026#endif
1027
1028 /* POSIX demands that signals are inherited. If the invoking process has
1029 * these signals masked, we will have problems, as we won't recieve them. */
1030 BlockSignals(False, SIGHUP);
1031 BlockSignals(False, SIGUSR1);
1032 BlockSignals(False, SIGTERM);
1033
1034 /* Ensure we leave no zombies until we
1035 * correctly set up child handling below. */
1036
1037 CatchChild();
1038
1039 /* we want total control over the permissions on created files,
1040 so set our umask to 0 */
1041 umask(0);
1042
1043 reopen_logs();
1044
1045#ifdef __OS2__
1046 unsigned long _System DosSetPriority (unsigned long ulScope, unsigned long ulClass, long lDelta, unsigned long ulID);
1047 int rc;
1048 rc = DosSetPriority(
1049 0, /* Scope: only one process */
1050 4, /* set to PRTYC_FOREGROUNDSERVER */
1051 0, /* set delta - was 0 */
1052 0); /* Assume current process */
1053 DEBUG(0,( "Server priority set to PRTYC_FOREGROUNDSERVER\n"));
1054#endif
1055
1056 DEBUG(0,("smbd version %s started.\n", samba_version_string()));
1057 DEBUGADD(0,("%s\n", COPYRIGHT_STARTUP_MESSAGE));
1058
1059 DEBUG(2,("uid=%d gid=%d euid=%d egid=%d\n",
1060 (int)getuid(),(int)getgid(),(int)geteuid(),(int)getegid()));
1061
1062 /* Output the build options to the debug log */
1063 build_options(False);
1064
1065 if (sizeof(uint16) < 2 || sizeof(uint32) < 4) {
1066 DEBUG(0,("ERROR: Samba is not configured correctly for the word size on your machine\n"));
1067 exit(1);
1068 }
1069
1070 if (!lp_load_initial_only(get_dyn_CONFIGFILE())) {
1071 DEBUG(0, ("error opening config file\n"));
1072 exit(1);
1073 }
1074
1075 /* Init the security context and global current_user */
1076 init_sec_ctx();
1077
1078 if (smbd_messaging_context() == NULL)
1079 exit(1);
1080
1081 /*
1082 * Reloading of the printers will not work here as we don't have a
1083 * server info and rpc services set up. It will be called later.
1084 */
1085 if (!reload_services(smbd_messaging_context(), -1, False)) {
1086 exit(1);
1087 }
1088
1089 /* ...NOTE... Log files are working from this point! */
1090
1091 DEBUG(3,("loaded services\n"));
1092
1093 init_structs();
1094
1095#ifdef WITH_PROFILE
1096 if (!profile_setup(smbd_messaging_context(), False)) {
1097 DEBUG(0,("ERROR: failed to setup profiling\n"));
1098 return -1;
1099 }
1100 if (profile_level != NULL) {
1101 int pl = atoi(profile_level);
1102 struct server_id src;
1103
1104 DEBUG(1, ("setting profiling level: %s\n",profile_level));
1105 src.pid = getpid();
1106 set_profile_level(pl, src);
1107 }
1108#endif
1109
1110 if (!is_daemon && !is_a_socket(0)) {
1111 if (!interactive)
1112 DEBUG(0,("standard input is not a socket, assuming -D option\n"));
1113
1114 /*
1115 * Setting is_daemon here prevents us from eventually calling
1116 * the open_sockets_inetd()
1117 */
1118
1119 is_daemon = True;
1120 }
1121
1122 if (is_daemon && !interactive) {
1123 DEBUG( 3, ( "Becoming a daemon.\n" ) );
1124 become_daemon(Fork, no_process_group, log_stdout);
1125 }
1126
1127 generate_random_buffer((uint8_t *)&unique_id, sizeof(unique_id));
1128 set_my_unique_id(unique_id);
1129
1130#if HAVE_SETPGID
1131 /*
1132 * If we're interactive we want to set our own process group for
1133 * signal management.
1134 */
1135 if (interactive && !no_process_group)
1136 setpgid( (pid_t)0, (pid_t)0);
1137#endif
1138
1139 if (!directory_exist(lp_lockdir()))
1140 mkdir(lp_lockdir(), 0755);
1141
1142 if (is_daemon)
1143 pidfile_create("smbd");
1144
1145 status = reinit_after_fork(smbd_messaging_context(),
1146 smbd_event_context(),
1147 procid_self(), false);
1148 if (!NT_STATUS_IS_OK(status)) {
1149 DEBUG(0,("reinit_after_fork() failed\n"));
1150 exit(1);
1151 }
1152
1153 smbd_server_conn->msg_ctx = smbd_messaging_context();
1154
1155 smbd_setup_sig_term_handler();
1156 smbd_setup_sig_hup_handler(smbd_event_context(),
1157 smbd_server_conn->msg_ctx);
1158
1159 /* Setup all the TDB's - including CLEAR_IF_FIRST tdb's. */
1160
1161 if (smbd_memcache() == NULL) {
1162 exit(1);
1163 }
1164
1165 memcache_set_global(smbd_memcache());
1166
1167 /* Initialise the password backed before the global_sam_sid
1168 to ensure that we fetch from ldap before we make a domain sid up */
1169
1170 if(!initialize_password_db(False, smbd_event_context()))
1171 exit(1);
1172
1173 if (!secrets_init()) {
1174 DEBUG(0, ("ERROR: smbd can not open secrets.tdb\n"));
1175 exit(1);
1176 }
1177
1178 if (lp_server_role() == ROLE_DOMAIN_BDC || lp_server_role() == ROLE_DOMAIN_PDC) {
1179 if (!open_schannel_session_store(NULL, lp_private_dir())) {
1180 DEBUG(0,("ERROR: Samba cannot open schannel store for secured NETLOGON operations.\n"));
1181 exit(1);
1182 }
1183 }
1184
1185 if(!get_global_sam_sid()) {
1186 DEBUG(0,("ERROR: Samba cannot create a SAM SID.\n"));
1187 exit(1);
1188 }
1189
1190 if (!sessionid_init()) {
1191 exit(1);
1192 }
1193
1194 if (!connections_init(True))
1195 exit(1);
1196
1197 if (!locking_init())
1198 exit(1);
1199
1200 if (!messaging_tdb_parent_init(smbd_event_context())) {
1201 exit(1);
1202 }
1203
1204 if (!notify_internal_parent_init(smbd_event_context())) {
1205 exit(1);
1206 }
1207
1208 if (!serverid_parent_init(smbd_event_context())) {
1209 exit(1);
1210 }
1211
1212 if (!printer_list_parent_init()) {
1213 exit(1);
1214 }
1215
1216 if (!W_ERROR_IS_OK(registry_init_full()))
1217 exit(1);
1218
1219 if (!print_backend_init(smbd_messaging_context()))
1220 exit(1);
1221
1222 /* Open the share_info.tdb here, so we don't have to open
1223 after the fork on every single connection. This is a small
1224 performance improvment and reduces the total number of system
1225 fds used. */
1226 if (!share_info_db_init()) {
1227 DEBUG(0,("ERROR: failed to load share info db.\n"));
1228 exit(1);
1229 }
1230
1231 status = init_system_info();
1232 if (!NT_STATUS_IS_OK(status)) {
1233 DEBUG(1, ("ERROR: failed to setup system user info: %s.\n",
1234 nt_errstr(status)));
1235 return -1;
1236 }
1237
1238 if (!init_guest_info()) {
1239 DEBUG(0,("ERROR: failed to setup guest info.\n"));
1240 return -1;
1241 }
1242
1243 if (!file_init(smbd_server_conn)) {
1244 DEBUG(0, ("ERROR: file_init failed\n"));
1245 return -1;
1246 }
1247
1248 if (is_daemon && !interactive) {
1249 const char *rpcsrv_type;
1250
1251 rpcsrv_type = lp_parm_const_string(GLOBAL_SECTION_SNUM,
1252 "rpc_server", "epmapper",
1253 "none");
1254 if (StrCaseCmp(rpcsrv_type, "daemon") == 0) {
1255 start_epmd(smbd_event_context(),
1256 smbd_server_conn->msg_ctx);
1257 }
1258 }
1259
1260 if (!dcesrv_ep_setup(smbd_event_context(), smbd_server_conn->msg_ctx)) {
1261 exit(1);
1262 }
1263
1264 /* Publish nt printers, this requires a working winreg pipe */
1265 pcap_cache_reload(server_event_context(), smbd_messaging_context(),
1266 &reload_printers);
1267
1268 /* only start the background queue daemon if we are
1269 running as a daemon -- bad things will happen if
1270 smbd is launched via inetd and we fork a copy of
1271 ourselves here */
1272
1273 if (is_daemon && !interactive
1274 && lp_parm_bool(-1, "smbd", "backgroundqueue", true)) {
1275 start_background_queue(smbd_event_context(),
1276 smbd_messaging_context());
1277 }
1278
1279 if (is_daemon && !_lp_disable_spoolss()) {
1280 const char *rpcsrv_type;
1281
1282 /* start spoolss daemon */
1283 /* start as a separate daemon only if enabled */
1284 rpcsrv_type = lp_parm_const_string(GLOBAL_SECTION_SNUM,
1285 "rpc_server", "spoolss",
1286 "embedded");
1287 if (StrCaseCmp(rpcsrv_type, "daemon") == 0) {
1288 start_spoolssd(smbd_event_context(),
1289 smbd_messaging_context());
1290 }
1291 }
1292
1293 if (!is_daemon) {
1294 /* inetd mode */
1295 TALLOC_FREE(frame);
1296
1297 /* Started from inetd. fd 0 is the socket. */
1298 /* We will abort gracefully when the client or remote system
1299 goes away */
1300 smbd_set_server_fd(dup(0));
1301
1302 /* close our standard file descriptors */
1303 close_low_fds(False); /* Don't close stderr */
1304
1305#ifdef HAVE_ATEXIT
1306 atexit(killkids);
1307#endif
1308
1309 /* Stop zombies */
1310 smbd_setup_sig_chld_handler();
1311
1312 smbd_process(smbd_server_conn);
1313
1314 exit_server_cleanly(NULL);
1315 return(0);
1316 }
1317
1318 parent = talloc_zero(smbd_event_context(), struct smbd_parent_context);
1319 if (!parent) {
1320 exit_server("talloc(struct smbd_parent_context) failed");
1321 }
1322 parent->interactive = interactive;
1323
1324 if (!open_sockets_smbd(parent, smbd_messaging_context(), ports))
1325 exit_server("open_sockets_smbd() failed");
1326
1327 TALLOC_FREE(frame);
1328 /* make sure we always have a valid stackframe */
1329 frame = talloc_stackframe();
1330
1331 smbd_parent_loop(parent);
1332
1333 exit_server_cleanly(NULL);
1334 TALLOC_FREE(frame);
1335 return(0);
1336}
Note: See TracBrowser for help on using the repository browser.