source: trunk/server/source3/smbd/server.c@ 832

Last change on this file since 832 was 757, checked in by Silvan Scherrer, 13 years ago

Samba Server 3.6: add a maintained message
File size: 34.5 KB
Line 
1/*
2 Unix SMB/CIFS implementation.
3 Main SMB server routines
4 Copyright (C) Andrew Tridgell 1992-1998
5 Copyright (C) Martin Pool 2002
6 Copyright (C) Jelmer Vernooij 2002-2003
7 Copyright (C) Volker Lendecke 1993-2007
8 Copyright (C) Jeremy Allison 1993-2007
9
10 This program is free software; you can redistribute it and/or modify
11 it under the terms of the GNU General Public License as published by
12 the Free Software Foundation; either version 3 of the License, or
13 (at your option) any later version.
14
15 This program is distributed in the hope that it will be useful,
16 but WITHOUT ANY WARRANTY; without even the implied warranty of
17 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
18 GNU General Public License for more details.
19
20 You should have received a copy of the GNU General Public License
21 along with this program. If not, see <http://www.gnu.org/licenses/>.
22*/
23
24#include "includes.h"
25#include "system/filesys.h"
26#include "popt_common.h"
27#include "smbd/smbd.h"
28#include "smbd/globals.h"
29#include "registry/reg_init_full.h"
30#include "libcli/auth/schannel.h"
31#include "secrets.h"
32#include "memcache.h"
33#include "ctdbd_conn.h"
34#include "printing/printer_list.h"
35#include "rpc_server/rpc_ep_setup.h"
36#include "printing/pcap.h"
37#include "printing.h"
38#include "serverid.h"
39#include "passdb.h"
40#include "auth.h"
41#include "messages.h"
42#include "smbprofile.h"
43
44extern void start_epmd(struct tevent_context *ev_ctx,
45 struct messaging_context *msg_ctx);
46
47extern void start_spoolssd(struct event_context *ev_ctx,
48 struct messaging_context *msg_ctx);
49
50#ifdef WITH_DFS
51extern int dcelogin_atmost_once;
52#endif /* WITH_DFS */
53
54static void smbd_set_server_fd(int fd)
55{
56 struct smbd_server_connection *sconn = smbd_server_conn;
57 char addr[INET6_ADDRSTRLEN];
58 const char *name;
59
60 sconn->sock = fd;
61
62 /*
63 * Initialize sconn->client_id: If we can't find the client's
64 * name, default to its address.
65 */
66
67 if (sconn->client_id.name != NULL &&
68 sconn->client_id.name != sconn->client_id.addr) {
69 talloc_free(discard_const_p(char, sconn->client_id.name));
70 sconn->client_id.name = NULL;
71 }
72
73 client_addr(fd, sconn->client_id.addr, sizeof(sconn->client_id.addr));
74
75 name = client_name(sconn->sock);
76 if (strcmp(name, "UNKNOWN") != 0) {
77 name = talloc_strdup(sconn, name);
78 } else {
79 name = NULL;
80 }
81 sconn->client_id.name =
82 (name != NULL) ? name : sconn->client_id.addr;
83
84 sub_set_socket_ids(sconn->client_id.addr, sconn->client_id.name,
85 client_socket_addr(sconn->sock, addr,
86 sizeof(addr)));
87}
88
89struct event_context *smbd_event_context(void)
90{
91 return server_event_context();
92}
93
94/*******************************************************************
95 What to do when smb.conf is updated.
96 ********************************************************************/
97
98static void smb_conf_updated(struct messaging_context *msg,
99 void *private_data,
100 uint32_t msg_type,
101 struct server_id server_id,
102 DATA_BLOB *data)
103{
104 struct tevent_context *ev_ctx =
105 talloc_get_type_abort(private_data, struct tevent_context);
106
107 DEBUG(10,("smb_conf_updated: Got message saying smb.conf was "
108 "updated. Reloading.\n"));
109 change_to_root_user();
110 reload_services(msg, smbd_server_conn->sock, False);
111 if (am_parent) {
112 pcap_cache_reload(ev_ctx, msg,
113 &reload_pcap_change_notify);
114 }
115}
116
117/*******************************************************************
118 What to do when printcap is updated.
119 ********************************************************************/
120
121static void smb_pcap_updated(struct messaging_context *msg,
122 void *private_data,
123 uint32_t msg_type,
124 struct server_id server_id,
125 DATA_BLOB *data)
126{
127 struct tevent_context *ev_ctx =
128 talloc_get_type_abort(private_data, struct tevent_context);
129
130 DEBUG(10,("Got message saying pcap was updated. Reloading.\n"));
131 change_to_root_user();
132 reload_printers(ev_ctx, msg);
133}
134
135/*******************************************************************
136 Delete a statcache entry.
137 ********************************************************************/
138
139static void smb_stat_cache_delete(struct messaging_context *msg,
140 void *private_data,
141 uint32_t msg_tnype,
142 struct server_id server_id,
143 DATA_BLOB *data)
144{
145 const char *name = (const char *)data->data;
146 DEBUG(10,("smb_stat_cache_delete: delete name %s\n", name));
147 stat_cache_delete(name);
148}
149
150/****************************************************************************
151 Send a SIGTERM to our process group.
152*****************************************************************************/
153
154static void killkids(void)
155{
156 if(am_parent) kill(0,SIGTERM);
157}
158
159/****************************************************************************
160 Process a sam sync message - not sure whether to do this here or
161 somewhere else.
162****************************************************************************/
163
164static void msg_sam_sync(struct messaging_context *msg,
165 void *private_data,
166 uint32_t msg_type,
167 struct server_id server_id,
168 DATA_BLOB *data)
169{
170 DEBUG(10, ("** sam sync message received, ignoring\n"));
171}
172
173static void msg_exit_server(struct messaging_context *msg,
174 void *private_data,
175 uint32_t msg_type,
176 struct server_id server_id,
177 DATA_BLOB *data)
178{
179 DEBUG(3, ("got a SHUTDOWN message\n"));
180 exit_server_cleanly(NULL);
181}
182
183#ifdef DEVELOPER
184static void msg_inject_fault(struct messaging_context *msg,
185 void *private_data,
186 uint32_t msg_type,
187 struct server_id src,
188 DATA_BLOB *data)
189{
190 int sig;
191
192 if (data->length != sizeof(sig)) {
193 DEBUG(0, ("Process %s sent bogus signal injection request\n",
194 procid_str_static(&src)));
195 return;
196 }
197
198 sig = *(int *)data->data;
199 if (sig == -1) {
200 exit_server("internal error injected");
201 return;
202 }
203
204#if HAVE_STRSIGNAL
205 DEBUG(0, ("Process %s requested injection of signal %d (%s)\n",
206 procid_str_static(&src), sig, strsignal(sig)));
207#else
208 DEBUG(0, ("Process %s requested injection of signal %d\n",
209 procid_str_static(&src), sig));
210#endif
211
212 kill(sys_getpid(), sig);
213}
214#endif /* DEVELOPER */
215
216/*
217 * Parent smbd process sets its own debug level first and then
218 * sends a message to all the smbd children to adjust their debug
219 * level to that of the parent.
220 */
221
222static void smbd_msg_debug(struct messaging_context *msg_ctx,
223 void *private_data,
224 uint32_t msg_type,
225 struct server_id server_id,
226 DATA_BLOB *data)
227{
228 struct child_pid *child;
229
230 debug_message(msg_ctx, private_data, MSG_DEBUG, server_id, data);
231
232 for (child = children; child != NULL; child = child->next) {
233 messaging_send_buf(msg_ctx, pid_to_procid(child->pid),
234 MSG_DEBUG,
235 data->data,
236 strlen((char *) data->data) + 1);
237 }
238}
239
240static void add_child_pid(pid_t pid)
241{
242 struct child_pid *child;
243
244 child = SMB_MALLOC_P(struct child_pid);
245 if (child == NULL) {
246 DEBUG(0, ("Could not add child struct -- malloc failed\n"));
247 return;
248 }
249 child->pid = pid;
250 DLIST_ADD(children, child);
251 num_children += 1;
252}
253
254/*
255 at most every smbd:cleanuptime seconds (default 20), we scan the BRL
256 and locking database for entries to cleanup. As a side effect this
257 also cleans up dead entries in the connections database (due to the
258 traversal in message_send_all()
259
260 Using a timer for this prevents a flood of traversals when a large
261 number of clients disconnect at the same time (perhaps due to a
262 network outage).
263*/
264
265static void cleanup_timeout_fn(struct event_context *event_ctx,
266 struct timed_event *te,
267 struct timeval now,
268 void *private_data)
269{
270 struct timed_event **cleanup_te = (struct timed_event **)private_data;
271
272 DEBUG(1,("Cleaning up brl and lock database after unclean shutdown\n"));
273 message_send_all(smbd_messaging_context(), MSG_SMB_UNLOCK, NULL, 0, NULL);
274 messaging_send_buf(smbd_messaging_context(), procid_self(),
275 MSG_SMB_BRL_VALIDATE, NULL, 0);
276 /* mark the cleanup as having been done */
277 (*cleanup_te) = NULL;
278}
279
280static void remove_child_pid(pid_t pid, bool unclean_shutdown)
281{
282 struct child_pid *child;
283 static struct timed_event *cleanup_te;
284 struct server_id child_id;
285
286 child_id = procid_self(); /* Just initialize pid and potentially vnn */
287 child_id.pid = pid;
288
289 for (child = children; child != NULL; child = child->next) {
290 if (child->pid == pid) {
291 struct child_pid *tmp = child;
292 DLIST_REMOVE(children, child);
293 SAFE_FREE(tmp);
294 num_children -= 1;
295 break;
296 }
297 }
298
299 if (child == NULL) {
300 /* not all forked child processes are added to the children list */
301 DEBUG(2, ("Could not find child %d -- ignoring\n", (int)pid));
302 return;
303 }
304
305 if (unclean_shutdown) {
306 /* a child terminated uncleanly so tickle all
307 processes to see if they can grab any of the
308 pending locks
309 */
310 DEBUG(3,(__location__ " Unclean shutdown of pid %u\n",
311 (unsigned int)pid));
312 if (!cleanup_te) {
313 /* call the cleanup timer, but not too often */
314 int cleanup_time = lp_parm_int(-1, "smbd", "cleanuptime", 20);
315 cleanup_te = event_add_timed(smbd_event_context(), NULL,
316 timeval_current_ofs(cleanup_time, 0),
317 cleanup_timeout_fn,
318 &cleanup_te);
319 DEBUG(1,("Scheduled cleanup of brl and lock database after unclean shutdown\n"));
320 }
321 }
322
323 if (!serverid_deregister(child_id)) {
324 DEBUG(1, ("Could not remove pid %d from serverid.tdb\n",
325 (int)pid));
326 }
327}
328
329/****************************************************************************
330 Have we reached the process limit ?
331****************************************************************************/
332
333static bool allowable_number_of_smbd_processes(void)
334{
335 int max_processes = lp_max_smbd_processes();
336
337 if (!max_processes)
338 return True;
339
340 return num_children < max_processes;
341}
342
343static void smbd_sig_chld_handler(struct tevent_context *ev,
344 struct tevent_signal *se,
345 int signum,
346 int count,
347 void *siginfo,
348 void *private_data)
349{
350 pid_t pid;
351 int status;
352
353 while ((pid = sys_waitpid(-1, &status, WNOHANG)) > 0) {
354 bool unclean_shutdown = False;
355
356 /* If the child terminated normally, assume
357 it was an unclean shutdown unless the
358 status is 0
359 */
360 if (WIFEXITED(status)) {
361 unclean_shutdown = WEXITSTATUS(status);
362 }
363 /* If the child terminated due to a signal
364 we always assume it was unclean.
365 */
366 if (WIFSIGNALED(status)) {
367 unclean_shutdown = True;
368 }
369 remove_child_pid(pid, unclean_shutdown);
370 }
371}
372
373static void smbd_setup_sig_chld_handler(void)
374{
375 struct tevent_signal *se;
376
377 se = tevent_add_signal(smbd_event_context(),
378 smbd_event_context(),
379 SIGCHLD, 0,
380 smbd_sig_chld_handler,
381 NULL);
382 if (!se) {
383 exit_server("failed to setup SIGCHLD handler");
384 }
385}
386
387struct smbd_open_socket;
388
389struct smbd_parent_context {
390 bool interactive;
391
392 /* the list of listening sockets */
393 struct smbd_open_socket *sockets;
394};
395
396struct smbd_open_socket {
397 struct smbd_open_socket *prev, *next;
398 struct smbd_parent_context *parent;
399 int fd;
400 struct tevent_fd *fde;
401};
402
403static void smbd_open_socket_close_fn(struct tevent_context *ev,
404 struct tevent_fd *fde,
405 int fd,
406 void *private_data)
407{
408 /* this might be the socket_wrapper swrap_close() */
409 close(fd);
410}
411
412static void smbd_accept_connection(struct tevent_context *ev,
413 struct tevent_fd *fde,
414 uint16_t flags,
415 void *private_data)
416{
417 struct smbd_open_socket *s = talloc_get_type_abort(private_data,
418 struct smbd_open_socket);
419 struct sockaddr_storage addr;
420 socklen_t in_addrlen = sizeof(addr);
421 int fd;
422 pid_t pid = 0;
423 uint64_t unique_id;
424
425 fd = accept(s->fd, (struct sockaddr *)(void *)&addr,&in_addrlen);
426 smbd_set_server_fd(fd);
427
428 if (fd == -1 && errno == EINTR)
429 return;
430
431 if (fd == -1) {
432 DEBUG(0,("open_sockets_smbd: accept: %s\n",
433 strerror(errno)));
434 return;
435 }
436
437 if (s->parent->interactive) {
438 smbd_process(smbd_server_conn);
439 exit_server_cleanly("end of interactive mode");
440 return;
441 }
442
443 if (!allowable_number_of_smbd_processes()) {
444 close(fd);
445 smbd_set_server_fd(-1);
446 return;
447 }
448
449 /*
450 * Generate a unique id in the parent process so that we use
451 * the global random state in the parent.
452 */
453 unique_id = serverid_get_random_unique_id();
454
455 pid = sys_fork();
456 if (pid == 0) {
457 NTSTATUS status = NT_STATUS_OK;
458
459 /* Child code ... */
460 am_parent = 0;
461
462 set_my_unique_id(unique_id);
463
464 /* Stop zombies, the parent explicitly handles
465 * them, counting worker smbds. */
466 CatchChild();
467
468 /* close our standard file
469 descriptors */
470 close_low_fds(False);
471
472 /*
473 * Can't use TALLOC_FREE here. Nulling out the argument to it
474 * would overwrite memory we've just freed.
475 */
476 talloc_free(s->parent);
477 s = NULL;
478
479 status = reinit_after_fork(smbd_messaging_context(),
480 smbd_event_context(), procid_self(),
481 true);
482 if (!NT_STATUS_IS_OK(status)) {
483 if (NT_STATUS_EQUAL(status,
484 NT_STATUS_TOO_MANY_OPENED_FILES)) {
485 DEBUG(0,("child process cannot initialize "
486 "because too many files are open\n"));
487 goto exit;
488 }
489 if (lp_clustering() &&
490 NT_STATUS_EQUAL(status,
491 NT_STATUS_INTERNAL_DB_ERROR)) {
492 DEBUG(1,("child process cannot initialize "
493 "because connection to CTDB "
494 "has failed\n"));
495 goto exit;
496 }
497
498 DEBUG(0,("reinit_after_fork() failed\n"));
499 smb_panic("reinit_after_fork() failed");
500 }
501
502 smbd_setup_sig_term_handler();
503 smbd_setup_sig_hup_handler(server_event_context(),
504 server_messaging_context());
505
506 if (!serverid_register(procid_self(),
507 FLAG_MSG_GENERAL|FLAG_MSG_SMBD
508 |FLAG_MSG_DBWRAP
509 |FLAG_MSG_PRINT_GENERAL)) {
510 exit_server_cleanly("Could not register myself in "
511 "serverid.tdb");
512 }
513
514 smbd_process(smbd_server_conn);
515 exit:
516 exit_server_cleanly("end of child");
517 return;
518 }
519
520 if (pid < 0) {
521 DEBUG(0,("smbd_accept_connection: sys_fork() failed: %s\n",
522 strerror(errno)));
523 }
524
525 /* The parent doesn't need this socket */
526 close(fd);
527
528 /* Sun May 6 18:56:14 2001 ackley@cs.unm.edu:
529 Clear the closed fd info out of server_fd --
530 and more importantly, out of client_fd in
531 util_sock.c, to avoid a possible
532 getpeername failure if we reopen the logs
533 and use %I in the filename.
534 */
535
536 smbd_set_server_fd(-1);
537
538 if (pid != 0) {
539 add_child_pid(pid);
540 }
541
542 /* Force parent to check log size after
543 * spawning child. Fix from
544 * klausr@ITAP.Physik.Uni-Stuttgart.De. The
545 * parent smbd will log to logserver.smb. It
546 * writes only two messages for each child
547 * started/finished. But each child writes,
548 * say, 50 messages also in logserver.smb,
549 * begining with the debug_count of the
550 * parent, before the child opens its own log
551 * file logserver.client. In a worst case
552 * scenario the size of logserver.smb would be
553 * checked after about 50*50=2500 messages
554 * (ca. 100kb).
555 * */
556 force_check_log_size();
557}
558
559static bool smbd_open_one_socket(struct smbd_parent_context *parent,
560 const struct sockaddr_storage *ifss,
561 uint16_t port)
562{
563 struct smbd_open_socket *s;
564
565 s = talloc(parent, struct smbd_open_socket);
566 if (!s) {
567 return false;
568 }
569
570 s->parent = parent;
571 s->fd = open_socket_in(SOCK_STREAM,
572 port,
573 parent->sockets == NULL ? 0 : 2,
574 ifss,
575 true);
576 if (s->fd == -1) {
577 DEBUG(0,("smbd_open_once_socket: open_socket_in: "
578 "%s\n", strerror(errno)));
579 TALLOC_FREE(s);
580 /*
581 * We ignore an error here, as we've done before
582 */
583 return true;
584 }
585
586 /* ready to listen */
587 set_socket_options(s->fd, "SO_KEEPALIVE");
588 set_socket_options(s->fd, lp_socket_options());
589
590 /* Set server socket to
591 * non-blocking for the accept. */
592 set_blocking(s->fd, False);
593
594 if (listen(s->fd, SMBD_LISTEN_BACKLOG) == -1) {
595 DEBUG(0,("open_sockets_smbd: listen: "
596 "%s\n", strerror(errno)));
597 close(s->fd);
598 TALLOC_FREE(s);
599 return false;
600 }
601
602 s->fde = tevent_add_fd(smbd_event_context(),
603 s,
604 s->fd, TEVENT_FD_READ,
605 smbd_accept_connection,
606 s);
607 if (!s->fde) {
608 DEBUG(0,("open_sockets_smbd: "
609 "tevent_add_fd: %s\n",
610 strerror(errno)));
611 close(s->fd);
612 TALLOC_FREE(s);
613 return false;
614 }
615 tevent_fd_set_close_fn(s->fde, smbd_open_socket_close_fn);
616
617 DLIST_ADD_END(parent->sockets, s, struct smbd_open_socket *);
618
619 return true;
620}
621
622/****************************************************************************
623 Open the socket communication.
624****************************************************************************/
625
626static bool open_sockets_smbd(struct smbd_parent_context *parent,
627 struct messaging_context *msg_ctx,
628 const char *smb_ports)
629{
630 int num_interfaces = iface_count();
631 int i;
632 char *ports;
633 char *tok;
634 const char *ptr;
635 unsigned dns_port = 0;
636
637#ifdef HAVE_ATEXIT
638 atexit(killkids);
639#endif
640
641 /* Stop zombies */
642 smbd_setup_sig_chld_handler();
643
644 /* use a reasonable default set of ports - listing on 445 and 139 */
645 if (!smb_ports) {
646 ports = lp_smb_ports();
647 if (!ports || !*ports) {
648 ports = talloc_strdup(talloc_tos(), SMB_PORTS);
649 } else {
650 ports = talloc_strdup(talloc_tos(), ports);
651 }
652 } else {
653 ports = talloc_strdup(talloc_tos(), smb_ports);
654 }
655
656 for (ptr = ports;
657 next_token_talloc(talloc_tos(),&ptr, &tok, " \t,");) {
658 unsigned port = atoi(tok);
659
660 if (port == 0 || port > 0xffff) {
661 exit_server_cleanly("Invalid port in the config or on "
662 "the commandline specified!");
663 }
664 }
665
666 if (lp_interfaces() && lp_bind_interfaces_only()) {
667 /* We have been given an interfaces line, and been
668 told to only bind to those interfaces. Create a
669 socket per interface and bind to only these.
670 */
671
672 /* Now open a listen socket for each of the
673 interfaces. */
674 for(i = 0; i < num_interfaces; i++) {
675 const struct sockaddr_storage *ifss =
676 iface_n_sockaddr_storage(i);
677
678 if (ifss == NULL) {
679 DEBUG(0,("open_sockets_smbd: "
680 "interface %d has NULL IP address !\n",
681 i));
682 continue;
683 }
684
685 for (ptr=ports;
686 next_token_talloc(talloc_tos(),&ptr, &tok, " \t,");) {
687 unsigned port = atoi(tok);
688
689 /* Keep the first port for mDNS service
690 * registration.
691 */
692 if (dns_port == 0) {
693 dns_port = port;
694 }
695
696 if (!smbd_open_one_socket(parent, ifss, port)) {
697 return false;
698 }
699 }
700 }
701 } else {
702 /* Just bind to 0.0.0.0 - accept connections
703 from anywhere. */
704
705 const char *sock_addr = lp_socket_address();
706 char *sock_tok;
707 const char *sock_ptr;
708
709 if (strequal(sock_addr, "0.0.0.0") ||
710 strequal(sock_addr, "::")) {
711#if HAVE_IPV6
712 sock_addr = "::,0.0.0.0";
713#else
714 sock_addr = "0.0.0.0";
715#endif
716 }
717
718 for (sock_ptr=sock_addr;
719 next_token_talloc(talloc_tos(), &sock_ptr, &sock_tok, " \t,"); ) {
720 for (ptr=ports; next_token_talloc(talloc_tos(), &ptr, &tok, " \t,"); ) {
721 struct sockaddr_storage ss;
722 unsigned port = atoi(tok);
723
724 /* Keep the first port for mDNS service
725 * registration.
726 */
727 if (dns_port == 0) {
728 dns_port = port;
729 }
730
731 /* open an incoming socket */
732 if (!interpret_string_addr(&ss, sock_tok,
733 AI_NUMERICHOST|AI_PASSIVE)) {
734 continue;
735 }
736
737 if (!smbd_open_one_socket(parent, &ss, port)) {
738 return false;
739 }
740 }
741 }
742 }
743
744 if (parent->sockets == NULL) {
745 DEBUG(0,("open_sockets_smbd: No "
746 "sockets available to bind to.\n"));
747 return false;
748 }
749
750 /* Setup the main smbd so that we can get messages. Note that
751 do this after starting listening. This is needed as when in
752 clustered mode, ctdb won't allow us to start doing database
753 operations until it has gone thru a full startup, which
754 includes checking to see that smbd is listening. */
755
756 if (!serverid_register(procid_self(),
757 FLAG_MSG_GENERAL|FLAG_MSG_SMBD
758 |FLAG_MSG_DBWRAP)) {
759 DEBUG(0, ("open_sockets_smbd: Failed to register "
760 "myself in serverid.tdb\n"));
761 return false;
762 }
763
764 /* Listen to messages */
765
766 messaging_register(msg_ctx, NULL, MSG_SMB_SAM_SYNC, msg_sam_sync);
767 messaging_register(msg_ctx, NULL, MSG_SHUTDOWN, msg_exit_server);
768 messaging_register(msg_ctx, NULL, MSG_SMB_FILE_RENAME,
769 msg_file_was_renamed);
770 messaging_register(msg_ctx, server_event_context(), MSG_SMB_CONF_UPDATED,
771 smb_conf_updated);
772 messaging_register(msg_ctx, NULL, MSG_SMB_STAT_CACHE_DELETE,
773 smb_stat_cache_delete);
774 messaging_register(msg_ctx, NULL, MSG_DEBUG, smbd_msg_debug);
775 messaging_register(msg_ctx, server_event_context(), MSG_PRINTER_PCAP,
776 smb_pcap_updated);
777 brl_register_msgs(msg_ctx);
778
779 msg_idmap_register_msgs(msg_ctx);
780
781#ifdef CLUSTER_SUPPORT
782 if (lp_clustering()) {
783 ctdbd_register_reconfigure(messaging_ctdbd_connection());
784 }
785#endif
786
787#ifdef DEVELOPER
788 messaging_register(msg_ctx, NULL, MSG_SMB_INJECT_FAULT,
789 msg_inject_fault);
790#endif
791
792 if (lp_multicast_dns_register() && (dns_port != 0)) {
793#ifdef WITH_DNSSD_SUPPORT
794 smbd_setup_mdns_registration(smbd_event_context(),
795 parent, dns_port);
796#endif
797#ifdef WITH_AVAHI_SUPPORT
798 void *avahi_conn;
799
800 avahi_conn = avahi_start_register(
801 smbd_event_context(), smbd_event_context(), dns_port);
802 if (avahi_conn == NULL) {
803 DEBUG(10, ("avahi_start_register failed\n"));
804 }
805#endif
806 }
807
808 return true;
809}
810
811static void smbd_parent_loop(struct smbd_parent_context *parent)
812{
813 /* now accept incoming connections - forking a new process
814 for each incoming connection */
815 DEBUG(2,("waiting for connections\n"));
816 while (1) {
817 int ret;
818 TALLOC_CTX *frame = talloc_stackframe();
819
820 ret = tevent_loop_once(smbd_event_context());
821 if (ret != 0) {
822 exit_server_cleanly("tevent_loop_once() error");
823 }
824
825 TALLOC_FREE(frame);
826 } /* end while 1 */
827
828/* NOTREACHED return True; */
829}
830
831
832/****************************************************************************
833 Initialise connect, service and file structs.
834****************************************************************************/
835
836static bool init_structs(void )
837{
838 /*
839 * Set the machine NETBIOS name if not already
840 * set from the config file.
841 */
842
843 if (!init_names())
844 return False;
845
846 if (!secrets_init())
847 return False;
848
849 return True;
850}
851
852/****************************************************************************
853 main program.
854****************************************************************************/
855
856/* Declare prototype for build_options() to avoid having to run it through
857 mkproto.h. Mixing $(builddir) and $(srcdir) source files in the current
858 prototype generation system is too complicated. */
859
860extern void build_options(bool screen);
861
862 int main(int argc,const char *argv[])
863{
864 /* shall I run as a daemon */
865 bool is_daemon = false;
866 bool interactive = false;
867 bool Fork = true;
868 bool no_process_group = false;
869 bool log_stdout = false;
870 char *ports = NULL;
871 char *profile_level = NULL;
872 int opt;
873 poptContext pc;
874 bool print_build_options = False;
875 enum {
876 OPT_DAEMON = 1000,
877 OPT_INTERACTIVE,
878 OPT_FORK,
879 OPT_NO_PROCESS_GROUP,
880 OPT_LOG_STDOUT
881 };
882 struct poptOption long_options[] = {
883 POPT_AUTOHELP
884 {"daemon", 'D', POPT_ARG_NONE, NULL, OPT_DAEMON, "Become a daemon (default)" },
885 {"interactive", 'i', POPT_ARG_NONE, NULL, OPT_INTERACTIVE, "Run interactive (not a daemon)"},
886 {"foreground", 'F', POPT_ARG_NONE, NULL, OPT_FORK, "Run daemon in foreground (for daemontools, etc.)" },
887 {"no-process-group", '\0', POPT_ARG_NONE, NULL, OPT_NO_PROCESS_GROUP, "Don't create a new process group" },
888 {"log-stdout", 'S', POPT_ARG_NONE, NULL, OPT_LOG_STDOUT, "Log to stdout" },
889 {"build-options", 'b', POPT_ARG_NONE, NULL, 'b', "Print build options" },
890 {"port", 'p', POPT_ARG_STRING, &ports, 0, "Listen on the specified ports"},
891 {"profiling-level", 'P', POPT_ARG_STRING, &profile_level, 0, "Set profiling level","PROFILE_LEVEL"},
892 POPT_COMMON_SAMBA
893 POPT_COMMON_DYNCONFIG
894 POPT_TABLEEND
895 };
896 struct smbd_parent_context *parent = NULL;
897 TALLOC_CTX *frame;
898 NTSTATUS status;
899
900 /*
901 * Do this before any other talloc operation
902 */
903 talloc_enable_null_tracking();
904 frame = talloc_stackframe();
905
906 load_case_tables();
907
908 /* Initialize the event context, it will panic on error */
909 smbd_event_context();
910
911 smbd_init_globals();
912
913 TimeInit();
914
915#ifdef HAVE_SET_AUTH_PARAMETERS
916 set_auth_parameters(argc,argv);
917#endif
918
919 pc = poptGetContext("smbd", argc, argv, long_options, 0);
920 while((opt = poptGetNextOpt(pc)) != -1) {
921 switch (opt) {
922 case OPT_DAEMON:
923 is_daemon = true;
924 break;
925 case OPT_INTERACTIVE:
926 interactive = true;
927 break;
928 case OPT_FORK:
929 Fork = false;
930 break;
931 case OPT_NO_PROCESS_GROUP:
932 no_process_group = true;
933 break;
934 case OPT_LOG_STDOUT:
935 log_stdout = true;
936 break;
937 case 'b':
938 print_build_options = True;
939 break;
940 default:
941 d_fprintf(stderr, "\nInvalid option %s: %s\n\n",
942 poptBadOption(pc, 0), poptStrerror(opt));
943 poptPrintUsage(pc, stderr, 0);
944 exit(1);
945 }
946 }
947 poptFreeContext(pc);
948
949 if (interactive) {
950 Fork = False;
951 log_stdout = True;
952 }
953
954 if (log_stdout) {
955 setup_logging(argv[0], DEBUG_STDOUT);
956 } else {
957 setup_logging(argv[0], DEBUG_FILE);
958 }
959
960 if (print_build_options) {
961 build_options(True); /* Display output to screen as well as debug */
962 exit(0);
963 }
964
965#ifdef HAVE_SETLUID
966 /* needed for SecureWare on SCO */
967 setluid(0);
968#endif
969
970 set_remote_machine_name("smbd", False);
971
972 if (interactive && (DEBUGLEVEL >= 9)) {
973 talloc_enable_leak_report();
974 }
975
976 if (log_stdout && Fork) {
977 DEBUG(0,("ERROR: Can't log to stdout (-S) unless daemon is in foreground (-F) or interactive (-i)\n"));
978 exit(1);
979 }
980
981 /* we want to re-seed early to prevent time delays causing
982 client problems at a later date. (tridge) */
983 generate_random_buffer(NULL, 0);
984
985 /* get initial effective uid and gid */
986 sec_init();
987
988 /* make absolutely sure we run as root - to handle cases where people
989 are crazy enough to have it setuid */
990 gain_root_privilege();
991 gain_root_group_privilege();
992
993 fault_setup((void (*)(void *))exit_server_fault);
994 dump_core_setup("smbd");
995
996 /* we are never interested in SIGPIPE */
997 BlockSignals(True,SIGPIPE);
998
999#if defined(SIGFPE)
1000 /* we are never interested in SIGFPE */
1001 BlockSignals(True,SIGFPE);
1002#endif
1003
1004#if defined(SIGUSR2)
1005 /* We are no longer interested in USR2 */
1006 BlockSignals(True,SIGUSR2);
1007#endif
1008
1009 /* POSIX demands that signals are inherited. If the invoking process has
1010 * these signals masked, we will have problems, as we won't recieve them. */
1011 BlockSignals(False, SIGHUP);
1012 BlockSignals(False, SIGUSR1);
1013 BlockSignals(False, SIGTERM);
1014
1015 /* Ensure we leave no zombies until we
1016 * correctly set up child handling below. */
1017
1018 CatchChild();
1019
1020 /* we want total control over the permissions on created files,
1021 so set our umask to 0 */
1022 umask(0);
1023
1024 reopen_logs();
1025
1026#ifdef __OS2__
1027 unsigned long _System DosSetPriority (unsigned long ulScope, unsigned long ulClass, long lDelta, unsigned long ulID);
1028 int rc;
1029 rc = DosSetPriority(
1030 0, /* Scope: only one process */
1031 4, /* set to PRTYC_FOREGROUNDSERVER */
1032 0, /* set delta - was 0 */
1033 0); /* Assume current process */
1034 DEBUG(0,( "Server priority set to PRTYC_FOREGROUNDSERVER\n"));
1035#endif
1036
1037 DEBUG(0,("smbd version %s started.\n", samba_version_string()));
1038 DEBUGADD(0,("%s\n", COPYRIGHT_STARTUP_MESSAGE));
1039#ifdef __OS2__
1040 DEBUGADD(0,("%s\n", maintained_by_string()));
1041#endif
1042
1043 DEBUG(2,("uid=%d gid=%d euid=%d egid=%d\n",
1044 (int)getuid(),(int)getgid(),(int)geteuid(),(int)getegid()));
1045
1046 /* Output the build options to the debug log */
1047 build_options(False);
1048
1049 if (sizeof(uint16) < 2 || sizeof(uint32) < 4) {
1050 DEBUG(0,("ERROR: Samba is not configured correctly for the word size on your machine\n"));
1051 exit(1);
1052 }
1053
1054 if (!lp_load_initial_only(get_dyn_CONFIGFILE())) {
1055 DEBUG(0, ("error opening config file\n"));
1056 exit(1);
1057 }
1058
1059 /* Init the security context and global current_user */
1060 init_sec_ctx();
1061
1062 if (smbd_messaging_context() == NULL)
1063 exit(1);
1064
1065 /*
1066 * Reloading of the printers will not work here as we don't have a
1067 * server info and rpc services set up. It will be called later.
1068 */
1069 if (!reload_services(smbd_messaging_context(), -1, False)) {
1070 exit(1);
1071 }
1072
1073 /* ...NOTE... Log files are working from this point! */
1074
1075 DEBUG(3,("loaded services\n"));
1076
1077 init_structs();
1078
1079#ifdef WITH_PROFILE
1080 if (!profile_setup(smbd_messaging_context(), False)) {
1081 DEBUG(0,("ERROR: failed to setup profiling\n"));
1082 return -1;
1083 }
1084 if (profile_level != NULL) {
1085 int pl = atoi(profile_level);
1086 struct server_id src;
1087
1088 DEBUG(1, ("setting profiling level: %s\n",profile_level));
1089 src.pid = getpid();
1090 set_profile_level(pl, src);
1091 }
1092#endif
1093
1094 if (!is_daemon && !is_a_socket(0)) {
1095 if (!interactive)
1096 DEBUG(0,("standard input is not a socket, assuming -D option\n"));
1097
1098 /*
1099 * Setting is_daemon here prevents us from eventually calling
1100 * the open_sockets_inetd()
1101 */
1102
1103 is_daemon = True;
1104 }
1105
1106 if (is_daemon && !interactive) {
1107 DEBUG( 3, ( "Becoming a daemon.\n" ) );
1108 become_daemon(Fork, no_process_group, log_stdout);
1109 }
1110
1111 set_my_unique_id(serverid_get_random_unique_id());
1112
1113#if HAVE_SETPGID
1114 /*
1115 * If we're interactive we want to set our own process group for
1116 * signal management.
1117 */
1118 if (interactive && !no_process_group)
1119 setpgid( (pid_t)0, (pid_t)0);
1120#endif
1121
1122 if (!directory_exist(lp_lockdir()))
1123 mkdir(lp_lockdir(), 0755);
1124
1125 if (is_daemon)
1126 pidfile_create("smbd");
1127
1128 status = reinit_after_fork(smbd_messaging_context(),
1129 smbd_event_context(),
1130 procid_self(), false);
1131 if (!NT_STATUS_IS_OK(status)) {
1132 DEBUG(0,("reinit_after_fork() failed\n"));
1133 exit(1);
1134 }
1135
1136 smbd_server_conn->msg_ctx = smbd_messaging_context();
1137
1138 smbd_setup_sig_term_handler();
1139 smbd_setup_sig_hup_handler(smbd_event_context(),
1140 smbd_server_conn->msg_ctx);
1141
1142 /* Setup all the TDB's - including CLEAR_IF_FIRST tdb's. */
1143
1144 if (smbd_memcache() == NULL) {
1145 exit(1);
1146 }
1147
1148 memcache_set_global(smbd_memcache());
1149
1150 /* Initialise the password backed before the global_sam_sid
1151 to ensure that we fetch from ldap before we make a domain sid up */
1152
1153 if(!initialize_password_db(False, smbd_event_context()))
1154 exit(1);
1155
1156 if (!secrets_init()) {
1157 DEBUG(0, ("ERROR: smbd can not open secrets.tdb\n"));
1158 exit(1);
1159 }
1160
1161 if (lp_server_role() == ROLE_DOMAIN_BDC || lp_server_role() == ROLE_DOMAIN_PDC) {
1162 if (!open_schannel_session_store(NULL, lp_private_dir())) {
1163 DEBUG(0,("ERROR: Samba cannot open schannel store for secured NETLOGON operations.\n"));
1164 exit(1);
1165 }
1166 }
1167
1168 if(!get_global_sam_sid()) {
1169 DEBUG(0,("ERROR: Samba cannot create a SAM SID.\n"));
1170 exit(1);
1171 }
1172
1173 if (!sessionid_init()) {
1174 exit(1);
1175 }
1176
1177 if (!connections_init(True))
1178 exit(1);
1179
1180 if (!locking_init())
1181 exit(1);
1182
1183 if (!messaging_tdb_parent_init(smbd_event_context())) {
1184 exit(1);
1185 }
1186
1187 if (!notify_internal_parent_init(smbd_event_context())) {
1188 exit(1);
1189 }
1190
1191 if (!serverid_parent_init(smbd_event_context())) {
1192 exit(1);
1193 }
1194
1195 if (!printer_list_parent_init()) {
1196 exit(1);
1197 }
1198
1199 if (!W_ERROR_IS_OK(registry_init_full()))
1200 exit(1);
1201
1202 /* Open the share_info.tdb here, so we don't have to open
1203 after the fork on every single connection. This is a small
1204 performance improvment and reduces the total number of system
1205 fds used. */
1206 if (!share_info_db_init()) {
1207 DEBUG(0,("ERROR: failed to load share info db.\n"));
1208 exit(1);
1209 }
1210
1211 status = init_system_info();
1212 if (!NT_STATUS_IS_OK(status)) {
1213 DEBUG(1, ("ERROR: failed to setup system user info: %s.\n",
1214 nt_errstr(status)));
1215 return -1;
1216 }
1217
1218 if (!init_guest_info()) {
1219 DEBUG(0,("ERROR: failed to setup guest info.\n"));
1220 return -1;
1221 }
1222
1223 if (!file_init(smbd_server_conn)) {
1224 DEBUG(0, ("ERROR: file_init failed\n"));
1225 return -1;
1226 }
1227
1228 if (is_daemon && !interactive) {
1229 const char *rpcsrv_type;
1230
1231 rpcsrv_type = lp_parm_const_string(GLOBAL_SECTION_SNUM,
1232 "rpc_server", "epmapper",
1233 "none");
1234 if (StrCaseCmp(rpcsrv_type, "daemon") == 0) {
1235 start_epmd(smbd_event_context(),
1236 smbd_server_conn->msg_ctx);
1237 }
1238 }
1239
1240 if (!dcesrv_ep_setup(smbd_event_context(), smbd_server_conn->msg_ctx)) {
1241 exit(1);
1242 }
1243
1244 /*
1245 * The print backend init also migrates the printing tdb's,
1246 * this requires a winreg pipe.
1247 */
1248 if (!print_backend_init(smbd_messaging_context()))
1249 exit(1);
1250
1251 /* Publish nt printers, this requires a working winreg pipe */
1252 pcap_cache_reload(server_event_context(), smbd_messaging_context(),
1253 &reload_printers);
1254
1255 /* only start the background queue daemon if we are
1256 running as a daemon -- bad things will happen if
1257 smbd is launched via inetd and we fork a copy of
1258 ourselves here */
1259
1260 if (is_daemon && !interactive
1261 && lp_parm_bool(-1, "smbd", "backgroundqueue", true)) {
1262 start_background_queue(smbd_event_context(),
1263 smbd_messaging_context());
1264 }
1265
1266 if (is_daemon && !_lp_disable_spoolss()) {
1267 const char *rpcsrv_type;
1268
1269 /* start spoolss daemon */
1270 /* start as a separate daemon only if enabled */
1271 rpcsrv_type = lp_parm_const_string(GLOBAL_SECTION_SNUM,
1272 "rpc_server", "spoolss",
1273 "embedded");
1274 if (StrCaseCmp(rpcsrv_type, "daemon") == 0) {
1275 start_spoolssd(smbd_event_context(),
1276 smbd_messaging_context());
1277 }
1278 }
1279
1280 if (!is_daemon) {
1281 /* inetd mode */
1282 TALLOC_FREE(frame);
1283
1284 /* Started from inetd. fd 0 is the socket. */
1285 /* We will abort gracefully when the client or remote system
1286 goes away */
1287 smbd_set_server_fd(dup(0));
1288
1289 /* close our standard file descriptors */
1290 close_low_fds(False); /* Don't close stderr */
1291
1292#ifdef HAVE_ATEXIT
1293 atexit(killkids);
1294#endif
1295
1296 /* Stop zombies */
1297 smbd_setup_sig_chld_handler();
1298
1299 smbd_process(smbd_server_conn);
1300
1301 exit_server_cleanly(NULL);
1302 return(0);
1303 }
1304
1305 parent = talloc_zero(smbd_event_context(), struct smbd_parent_context);
1306 if (!parent) {
1307 exit_server("talloc(struct smbd_parent_context) failed");
1308 }
1309 parent->interactive = interactive;
1310
1311 if (!open_sockets_smbd(parent, smbd_messaging_context(), ports))
1312 exit_server("open_sockets_smbd() failed");
1313
1314 TALLOC_FREE(frame);
1315 /* make sure we always have a valid stackframe */
1316 frame = talloc_stackframe();
1317
1318 smbd_parent_loop(parent);
1319
1320 exit_server_cleanly(NULL);
1321 TALLOC_FREE(frame);
1322 return(0);
1323}
Note: See TracBrowser for help on using the repository browser.