source: trunk/server/source3/smbd/server.c@ 996

Last change on this file since 996 was 978, checked in by Silvan Scherrer, 9 years ago

Samba server: remove exceptq handling, as now globaly installed when using libcx. And libcx is mandatory for samba
File size: 34.6 KB
Line 
1/*
2 Unix SMB/CIFS implementation.
3 Main SMB server routines
4 Copyright (C) Andrew Tridgell 1992-1998
5 Copyright (C) Martin Pool 2002
6 Copyright (C) Jelmer Vernooij 2002-2003
7 Copyright (C) Volker Lendecke 1993-2007
8 Copyright (C) Jeremy Allison 1993-2007
9
10 This program is free software; you can redistribute it and/or modify
11 it under the terms of the GNU General Public License as published by
12 the Free Software Foundation; either version 3 of the License, or
13 (at your option) any later version.
14
15 This program is distributed in the hope that it will be useful,
16 but WITHOUT ANY WARRANTY; without even the implied warranty of
17 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
18 GNU General Public License for more details.
19
20 You should have received a copy of the GNU General Public License
21 along with this program. If not, see <http://www.gnu.org/licenses/>.
22*/
23
24#include "includes.h"
25#include "system/filesys.h"
26#include "popt_common.h"
27#include "smbd/smbd.h"
28#include "smbd/globals.h"
29#include "registry/reg_init_full.h"
30#include "libcli/auth/schannel.h"
31#include "secrets.h"
32#include "memcache.h"
33#include "ctdbd_conn.h"
34#include "printing/printer_list.h"
35#include "rpc_server/rpc_ep_setup.h"
36#include "printing/pcap.h"
37#include "printing.h"
38#include "serverid.h"
39#include "passdb.h"
40#include "auth.h"
41#include "messages.h"
42#include "smbprofile.h"
43
44extern void start_epmd(struct tevent_context *ev_ctx,
45 struct messaging_context *msg_ctx);
46
47extern void start_spoolssd(struct event_context *ev_ctx,
48 struct messaging_context *msg_ctx);
49
50#ifdef WITH_DFS
51extern int dcelogin_atmost_once;
52#endif /* WITH_DFS */
53
54static void smbd_set_server_fd(int fd)
55{
56 struct smbd_server_connection *sconn = smbd_server_conn;
57 char addr[INET6_ADDRSTRLEN];
58 const char *name;
59
60 sconn->sock = fd;
61
62 /*
63 * Initialize sconn->client_id: If we can't find the client's
64 * name, default to its address.
65 */
66
67 if (sconn->client_id.name != NULL &&
68 sconn->client_id.name != sconn->client_id.addr) {
69 talloc_free(discard_const_p(char, sconn->client_id.name));
70 sconn->client_id.name = NULL;
71 }
72
73 client_addr(fd, sconn->client_id.addr, sizeof(sconn->client_id.addr));
74
75 name = client_name(sconn->sock);
76 if (strcmp(name, "UNKNOWN") != 0) {
77 name = talloc_strdup(sconn, name);
78 } else {
79 name = NULL;
80 }
81 sconn->client_id.name =
82 (name != NULL) ? name : sconn->client_id.addr;
83
84 sub_set_socket_ids(sconn->client_id.addr, sconn->client_id.name,
85 client_socket_addr(sconn->sock, addr,
86 sizeof(addr)));
87}
88
89struct event_context *smbd_event_context(void)
90{
91 return server_event_context();
92}
93
94/*******************************************************************
95 What to do when smb.conf is updated.
96 ********************************************************************/
97
98static void smb_conf_updated(struct messaging_context *msg,
99 void *private_data,
100 uint32_t msg_type,
101 struct server_id server_id,
102 DATA_BLOB *data)
103{
104 struct tevent_context *ev_ctx =
105 talloc_get_type_abort(private_data, struct tevent_context);
106
107 DEBUG(10,("smb_conf_updated: Got message saying smb.conf was "
108 "updated. Reloading.\n"));
109 change_to_root_user();
110 reload_services(msg, smbd_server_conn->sock, False);
111 /* printer reload triggered by background printing process */
112}
113
114/*******************************************************************
115 What to do when printcap is updated.
116 ********************************************************************/
117
118static void smb_pcap_updated(struct messaging_context *msg,
119 void *private_data,
120 uint32_t msg_type,
121 struct server_id server_id,
122 DATA_BLOB *data)
123{
124 struct tevent_context *ev_ctx =
125 talloc_get_type_abort(private_data, struct tevent_context);
126
127 DEBUG(10,("Got message saying pcap was updated. Reloading.\n"));
128 change_to_root_user();
129 reload_printers(ev_ctx, msg);
130}
131
132static void smbd_sig_term_handler(struct tevent_context *ev,
133 struct tevent_signal *se,
134 int signum,
135 int count,
136 void *siginfo,
137 void *private_data)
138{
139 exit_server_cleanly("termination signal");
140}
141
142static void smbd_setup_sig_term_handler(void)
143{
144 struct tevent_signal *se;
145
146 se = tevent_add_signal(smbd_event_context(),
147 smbd_event_context(),
148 SIGTERM, 0,
149 smbd_sig_term_handler,
150 NULL);
151 if (!se) {
152 exit_server("failed to setup SIGTERM handler");
153 }
154}
155
156static void smbd_sig_hup_handler(struct tevent_context *ev,
157 struct tevent_signal *se,
158 int signum,
159 int count,
160 void *siginfo,
161 void *private_data)
162{
163 struct messaging_context *msg_ctx = talloc_get_type_abort(
164 private_data, struct messaging_context);
165 change_to_root_user();
166 DEBUG(1,("Reloading services after SIGHUP\n"));
167 reload_services(msg_ctx, smbd_server_conn->sock, false);
168}
169
170static void smbd_setup_sig_hup_handler(struct tevent_context *ev,
171 struct messaging_context *msg_ctx)
172{
173 struct tevent_signal *se;
174
175 se = tevent_add_signal(ev, ev, SIGHUP, 0, smbd_sig_hup_handler,
176 msg_ctx);
177 if (!se) {
178 exit_server("failed to setup SIGHUP handler");
179 }
180}
181
182
183/*******************************************************************
184 Delete a statcache entry.
185 ********************************************************************/
186
187static void smb_stat_cache_delete(struct messaging_context *msg,
188 void *private_data,
189 uint32_t msg_tnype,
190 struct server_id server_id,
191 DATA_BLOB *data)
192{
193 const char *name = (const char *)data->data;
194 DEBUG(10,("smb_stat_cache_delete: delete name %s\n", name));
195 stat_cache_delete(name);
196}
197
198/****************************************************************************
199 Send a SIGTERM to our process group.
200*****************************************************************************/
201
202static void killkids(void)
203{
204 if(am_parent) kill(0,SIGTERM);
205}
206
207/****************************************************************************
208 Process a sam sync message - not sure whether to do this here or
209 somewhere else.
210****************************************************************************/
211
212static void msg_sam_sync(struct messaging_context *msg,
213 void *private_data,
214 uint32_t msg_type,
215 struct server_id server_id,
216 DATA_BLOB *data)
217{
218 DEBUG(10, ("** sam sync message received, ignoring\n"));
219}
220
221static void msg_exit_server(struct messaging_context *msg,
222 void *private_data,
223 uint32_t msg_type,
224 struct server_id server_id,
225 DATA_BLOB *data)
226{
227 DEBUG(3, ("got a SHUTDOWN message\n"));
228 exit_server_cleanly(NULL);
229}
230
231#ifdef DEVELOPER
232static void msg_inject_fault(struct messaging_context *msg,
233 void *private_data,
234 uint32_t msg_type,
235 struct server_id src,
236 DATA_BLOB *data)
237{
238 int sig;
239
240 if (data->length != sizeof(sig)) {
241 DEBUG(0, ("Process %s sent bogus signal injection request\n",
242 procid_str_static(&src)));
243 return;
244 }
245
246 sig = *(int *)data->data;
247 if (sig == -1) {
248 exit_server("internal error injected");
249 return;
250 }
251
252#if HAVE_STRSIGNAL
253 DEBUG(0, ("Process %s requested injection of signal %d (%s)\n",
254 procid_str_static(&src), sig, strsignal(sig)));
255#else
256 DEBUG(0, ("Process %s requested injection of signal %d\n",
257 procid_str_static(&src), sig));
258#endif
259
260 kill(sys_getpid(), sig);
261}
262#endif /* DEVELOPER */
263
264/*
265 * Parent smbd process sets its own debug level first and then
266 * sends a message to all the smbd children to adjust their debug
267 * level to that of the parent.
268 */
269
270static void smbd_msg_debug(struct messaging_context *msg_ctx,
271 void *private_data,
272 uint32_t msg_type,
273 struct server_id server_id,
274 DATA_BLOB *data)
275{
276 struct child_pid *child;
277
278 debug_message(msg_ctx, private_data, MSG_DEBUG, server_id, data);
279
280 for (child = children; child != NULL; child = child->next) {
281 messaging_send_buf(msg_ctx, pid_to_procid(child->pid),
282 MSG_DEBUG,
283 data->data,
284 strlen((char *) data->data) + 1);
285 }
286}
287
288static void add_child_pid(pid_t pid)
289{
290 struct child_pid *child;
291
292 child = SMB_MALLOC_P(struct child_pid);
293 if (child == NULL) {
294 DEBUG(0, ("Could not add child struct -- malloc failed\n"));
295 return;
296 }
297 child->pid = pid;
298 DLIST_ADD(children, child);
299 num_children += 1;
300}
301
302/*
303 at most every smbd:cleanuptime seconds (default 20), we scan the BRL
304 and locking database for entries to cleanup. As a side effect this
305 also cleans up dead entries in the connections database (due to the
306 traversal in message_send_all()
307
308 Using a timer for this prevents a flood of traversals when a large
309 number of clients disconnect at the same time (perhaps due to a
310 network outage).
311*/
312
313static void cleanup_timeout_fn(struct event_context *event_ctx,
314 struct timed_event *te,
315 struct timeval now,
316 void *private_data)
317{
318 struct timed_event **cleanup_te = (struct timed_event **)private_data;
319
320 DEBUG(1,("Cleaning up brl and lock database after unclean shutdown\n"));
321 message_send_all(smbd_messaging_context(), MSG_SMB_UNLOCK, NULL, 0, NULL);
322 messaging_send_buf(smbd_messaging_context(), procid_self(),
323 MSG_SMB_BRL_VALIDATE, NULL, 0);
324 /* mark the cleanup as having been done */
325 (*cleanup_te) = NULL;
326}
327
328static void remove_child_pid(pid_t pid, bool unclean_shutdown)
329{
330 struct child_pid *child;
331 static struct timed_event *cleanup_te;
332 struct server_id child_id;
333
334 child_id = procid_self(); /* Just initialize pid and potentially vnn */
335 child_id.pid = pid;
336
337 for (child = children; child != NULL; child = child->next) {
338 if (child->pid == pid) {
339 struct child_pid *tmp = child;
340 DLIST_REMOVE(children, child);
341 SAFE_FREE(tmp);
342 num_children -= 1;
343 break;
344 }
345 }
346
347 if (child == NULL) {
348 /* not all forked child processes are added to the children list */
349 DEBUG(2, ("Could not find child %d -- ignoring\n", (int)pid));
350 return;
351 }
352
353 if (unclean_shutdown) {
354 /* a child terminated uncleanly so tickle all
355 processes to see if they can grab any of the
356 pending locks
357 */
358 DEBUG(3,(__location__ " Unclean shutdown of pid %u\n",
359 (unsigned int)pid));
360 if (!cleanup_te) {
361 /* call the cleanup timer, but not too often */
362 int cleanup_time = lp_parm_int(-1, "smbd", "cleanuptime", 20);
363 cleanup_te = event_add_timed(smbd_event_context(), NULL,
364 timeval_current_ofs(cleanup_time, 0),
365 cleanup_timeout_fn,
366 &cleanup_te);
367 DEBUG(1,("Scheduled cleanup of brl and lock database after unclean shutdown\n"));
368 }
369 }
370
371 if (!serverid_deregister(child_id)) {
372 DEBUG(1, ("Could not remove pid %d from serverid.tdb\n",
373 (int)pid));
374 }
375}
376
377/****************************************************************************
378 Have we reached the process limit ?
379****************************************************************************/
380
381static bool allowable_number_of_smbd_processes(void)
382{
383 int max_processes = lp_max_smbd_processes();
384
385 if (!max_processes)
386 return True;
387
388 return num_children < max_processes;
389}
390
391static void smbd_sig_chld_handler(struct tevent_context *ev,
392 struct tevent_signal *se,
393 int signum,
394 int count,
395 void *siginfo,
396 void *private_data)
397{
398 pid_t pid;
399 int status;
400
401 while ((pid = sys_waitpid(-1, &status, WNOHANG)) > 0) {
402 bool unclean_shutdown = False;
403
404 /* If the child terminated normally, assume
405 it was an unclean shutdown unless the
406 status is 0
407 */
408 if (WIFEXITED(status)) {
409 unclean_shutdown = WEXITSTATUS(status);
410 }
411 /* If the child terminated due to a signal
412 we always assume it was unclean.
413 */
414 if (WIFSIGNALED(status)) {
415 unclean_shutdown = True;
416 }
417 remove_child_pid(pid, unclean_shutdown);
418 }
419}
420
421static void smbd_setup_sig_chld_handler(void)
422{
423 struct tevent_signal *se;
424
425 se = tevent_add_signal(smbd_event_context(),
426 smbd_event_context(),
427 SIGCHLD, 0,
428 smbd_sig_chld_handler,
429 NULL);
430 if (!se) {
431 exit_server("failed to setup SIGCHLD handler");
432 }
433}
434
435struct smbd_open_socket;
436
437struct smbd_parent_context {
438 bool interactive;
439
440 /* the list of listening sockets */
441 struct smbd_open_socket *sockets;
442};
443
444struct smbd_open_socket {
445 struct smbd_open_socket *prev, *next;
446 struct smbd_parent_context *parent;
447 int fd;
448 struct tevent_fd *fde;
449};
450
451static void smbd_open_socket_close_fn(struct tevent_context *ev,
452 struct tevent_fd *fde,
453 int fd,
454 void *private_data)
455{
456 /* this might be the socket_wrapper swrap_close() */
457 close(fd);
458}
459
460static void smbd_accept_connection(struct tevent_context *ev,
461 struct tevent_fd *fde,
462 uint16_t flags,
463 void *private_data)
464{
465 struct smbd_open_socket *s = talloc_get_type_abort(private_data,
466 struct smbd_open_socket);
467 struct sockaddr_storage addr;
468 socklen_t in_addrlen = sizeof(addr);
469 int fd;
470 pid_t pid = 0;
471 uint64_t unique_id;
472
473 fd = accept(s->fd, (struct sockaddr *)(void *)&addr,&in_addrlen);
474 smbd_set_server_fd(fd);
475
476 if (fd == -1 && errno == EINTR)
477 return;
478
479 if (fd == -1) {
480 DEBUG(0,("open_sockets_smbd: accept: %s\n",
481 strerror(errno)));
482 return;
483 }
484
485 if (s->parent->interactive) {
486 smbd_process(smbd_server_conn);
487 exit_server_cleanly("end of interactive mode");
488 return;
489 }
490
491 if (!allowable_number_of_smbd_processes()) {
492 close(fd);
493 smbd_set_server_fd(-1);
494 return;
495 }
496
497 /*
498 * Generate a unique id in the parent process so that we use
499 * the global random state in the parent.
500 */
501 unique_id = serverid_get_random_unique_id();
502
503 pid = sys_fork();
504 if (pid == 0) {
505 NTSTATUS status = NT_STATUS_OK;
506
507 /* Child code ... */
508 am_parent = 0;
509
510 set_my_unique_id(unique_id);
511
512 /* Stop zombies, the parent explicitly handles
513 * them, counting worker smbds. */
514 CatchChild();
515
516 /* close our standard file
517 descriptors */
518 close_low_fds(False);
519
520 /*
521 * Can't use TALLOC_FREE here. Nulling out the argument to it
522 * would overwrite memory we've just freed.
523 */
524 talloc_free(s->parent);
525 s = NULL;
526
527 status = reinit_after_fork(smbd_messaging_context(),
528 smbd_event_context(), procid_self(),
529 true);
530 if (!NT_STATUS_IS_OK(status)) {
531 if (NT_STATUS_EQUAL(status,
532 NT_STATUS_TOO_MANY_OPENED_FILES)) {
533 DEBUG(0,("child process cannot initialize "
534 "because too many files are open\n"));
535 goto exit;
536 }
537 if (lp_clustering() &&
538 NT_STATUS_EQUAL(status,
539 NT_STATUS_INTERNAL_DB_ERROR)) {
540 DEBUG(1,("child process cannot initialize "
541 "because connection to CTDB "
542 "has failed\n"));
543 goto exit;
544 }
545
546 DEBUG(0,("reinit_after_fork() failed\n"));
547 smb_panic("reinit_after_fork() failed");
548 }
549
550 smbd_setup_sig_term_handler();
551 smbd_setup_sig_hup_handler(server_event_context(),
552 server_messaging_context());
553
554 if (!serverid_register(procid_self(),
555 FLAG_MSG_GENERAL|FLAG_MSG_SMBD
556 |FLAG_MSG_DBWRAP
557 |FLAG_MSG_PRINT_GENERAL)) {
558 exit_server_cleanly("Could not register myself in "
559 "serverid.tdb");
560 }
561
562 smbd_process(smbd_server_conn);
563 exit:
564 exit_server_cleanly("end of child");
565 return;
566 }
567
568 if (pid < 0) {
569 DEBUG(0,("smbd_accept_connection: sys_fork() failed: %s\n",
570 strerror(errno)));
571 }
572
573 /* The parent doesn't need this socket */
574 close(fd);
575
576 /* Sun May 6 18:56:14 2001 ackley@cs.unm.edu:
577 Clear the closed fd info out of server_fd --
578 and more importantly, out of client_fd in
579 util_sock.c, to avoid a possible
580 getpeername failure if we reopen the logs
581 and use %I in the filename.
582 */
583
584 smbd_set_server_fd(-1);
585
586 if (pid != 0) {
587 add_child_pid(pid);
588 }
589
590 /* Force parent to check log size after
591 * spawning child. Fix from
592 * klausr@ITAP.Physik.Uni-Stuttgart.De. The
593 * parent smbd will log to logserver.smb. It
594 * writes only two messages for each child
595 * started/finished. But each child writes,
596 * say, 50 messages also in logserver.smb,
597 * begining with the debug_count of the
598 * parent, before the child opens its own log
599 * file logserver.client. In a worst case
600 * scenario the size of logserver.smb would be
601 * checked after about 50*50=2500 messages
602 * (ca. 100kb).
603 * */
604 force_check_log_size();
605}
606
607static bool smbd_open_one_socket(struct smbd_parent_context *parent,
608 const struct sockaddr_storage *ifss,
609 uint16_t port)
610{
611 struct smbd_open_socket *s;
612
613 s = talloc(parent, struct smbd_open_socket);
614 if (!s) {
615 return false;
616 }
617
618 s->parent = parent;
619 s->fd = open_socket_in(SOCK_STREAM,
620 port,
621 parent->sockets == NULL ? 0 : 2,
622 ifss,
623 true);
624 if (s->fd == -1) {
625 DEBUG(0,("smbd_open_once_socket: open_socket_in: "
626 "%s\n", strerror(errno)));
627 TALLOC_FREE(s);
628 /*
629 * We ignore an error here, as we've done before
630 */
631 return true;
632 }
633
634 /* ready to listen */
635 set_socket_options(s->fd, "SO_KEEPALIVE");
636 set_socket_options(s->fd, lp_socket_options());
637
638 /* Set server socket to
639 * non-blocking for the accept. */
640 set_blocking(s->fd, False);
641
642 if (listen(s->fd, SMBD_LISTEN_BACKLOG) == -1) {
643 DEBUG(0,("open_sockets_smbd: listen: "
644 "%s\n", strerror(errno)));
645 close(s->fd);
646 TALLOC_FREE(s);
647 return false;
648 }
649
650 s->fde = tevent_add_fd(smbd_event_context(),
651 s,
652 s->fd, TEVENT_FD_READ,
653 smbd_accept_connection,
654 s);
655 if (!s->fde) {
656 DEBUG(0,("open_sockets_smbd: "
657 "tevent_add_fd: %s\n",
658 strerror(errno)));
659 close(s->fd);
660 TALLOC_FREE(s);
661 return false;
662 }
663 tevent_fd_set_close_fn(s->fde, smbd_open_socket_close_fn);
664
665 DLIST_ADD_END(parent->sockets, s, struct smbd_open_socket *);
666
667 return true;
668}
669
670/****************************************************************************
671 Open the socket communication.
672****************************************************************************/
673
674static bool open_sockets_smbd(struct smbd_parent_context *parent,
675 struct messaging_context *msg_ctx,
676 const char *smb_ports)
677{
678 int num_interfaces = iface_count();
679 int i;
680 char *ports;
681 char *tok;
682 const char *ptr;
683 unsigned dns_port = 0;
684
685#ifdef HAVE_ATEXIT
686 atexit(killkids);
687#endif
688
689 /* Stop zombies */
690 smbd_setup_sig_chld_handler();
691
692 /* use a reasonable default set of ports - listing on 445 and 139 */
693 if (!smb_ports) {
694 ports = lp_smb_ports();
695 if (!ports || !*ports) {
696 ports = talloc_strdup(talloc_tos(), SMB_PORTS);
697 } else {
698 ports = talloc_strdup(talloc_tos(), ports);
699 }
700 } else {
701 ports = talloc_strdup(talloc_tos(), smb_ports);
702 }
703
704 for (ptr = ports;
705 next_token_talloc(talloc_tos(),&ptr, &tok, " \t,");) {
706 unsigned port = atoi(tok);
707
708 if (port == 0 || port > 0xffff) {
709 exit_server_cleanly("Invalid port in the config or on "
710 "the commandline specified!");
711 }
712 }
713
714 if (lp_interfaces() && lp_bind_interfaces_only()) {
715 /* We have been given an interfaces line, and been
716 told to only bind to those interfaces. Create a
717 socket per interface and bind to only these.
718 */
719
720 /* Now open a listen socket for each of the
721 interfaces. */
722 for(i = 0; i < num_interfaces; i++) {
723 const struct sockaddr_storage *ifss =
724 iface_n_sockaddr_storage(i);
725
726 if (ifss == NULL) {
727 DEBUG(0,("open_sockets_smbd: "
728 "interface %d has NULL IP address !\n",
729 i));
730 continue;
731 }
732
733 for (ptr=ports;
734 next_token_talloc(talloc_tos(),&ptr, &tok, " \t,");) {
735 unsigned port = atoi(tok);
736
737 /* Keep the first port for mDNS service
738 * registration.
739 */
740 if (dns_port == 0) {
741 dns_port = port;
742 }
743
744 if (!smbd_open_one_socket(parent, ifss, port)) {
745 return false;
746 }
747 }
748 }
749 } else {
750 /* Just bind to 0.0.0.0 - accept connections
751 from anywhere. */
752
753 const char *sock_addr = lp_socket_address();
754 char *sock_tok;
755 const char *sock_ptr;
756
757 if (strequal(sock_addr, "0.0.0.0") ||
758 strequal(sock_addr, "::")) {
759#if HAVE_IPV6
760 sock_addr = "::,0.0.0.0";
761#else
762 sock_addr = "0.0.0.0";
763#endif
764 }
765
766 for (sock_ptr=sock_addr;
767 next_token_talloc(talloc_tos(), &sock_ptr, &sock_tok, " \t,"); ) {
768 for (ptr=ports; next_token_talloc(talloc_tos(), &ptr, &tok, " \t,"); ) {
769 struct sockaddr_storage ss;
770 unsigned port = atoi(tok);
771
772 /* Keep the first port for mDNS service
773 * registration.
774 */
775 if (dns_port == 0) {
776 dns_port = port;
777 }
778
779 /* open an incoming socket */
780 if (!interpret_string_addr(&ss, sock_tok,
781 AI_NUMERICHOST|AI_PASSIVE)) {
782 continue;
783 }
784
785 if (!smbd_open_one_socket(parent, &ss, port)) {
786 return false;
787 }
788 }
789 }
790 }
791
792 if (parent->sockets == NULL) {
793 DEBUG(0,("open_sockets_smbd: No "
794 "sockets available to bind to.\n"));
795 return false;
796 }
797
798 /* Setup the main smbd so that we can get messages. Note that
799 do this after starting listening. This is needed as when in
800 clustered mode, ctdb won't allow us to start doing database
801 operations until it has gone thru a full startup, which
802 includes checking to see that smbd is listening. */
803
804 if (!serverid_register(procid_self(),
805 FLAG_MSG_GENERAL|FLAG_MSG_SMBD
806 |FLAG_MSG_DBWRAP)) {
807 DEBUG(0, ("open_sockets_smbd: Failed to register "
808 "myself in serverid.tdb\n"));
809 return false;
810 }
811
812 /* Listen to messages */
813
814 messaging_register(msg_ctx, NULL, MSG_SMB_SAM_SYNC, msg_sam_sync);
815 messaging_register(msg_ctx, NULL, MSG_SHUTDOWN, msg_exit_server);
816 messaging_register(msg_ctx, NULL, MSG_SMB_FILE_RENAME,
817 msg_file_was_renamed);
818 messaging_register(msg_ctx, server_event_context(), MSG_SMB_CONF_UPDATED,
819 smb_conf_updated);
820 messaging_register(msg_ctx, NULL, MSG_SMB_STAT_CACHE_DELETE,
821 smb_stat_cache_delete);
822 messaging_register(msg_ctx, NULL, MSG_DEBUG, smbd_msg_debug);
823 brl_register_msgs(msg_ctx);
824
825 msg_idmap_register_msgs(msg_ctx);
826
827#ifdef CLUSTER_SUPPORT
828 if (lp_clustering()) {
829 ctdbd_register_reconfigure(messaging_ctdbd_connection());
830 }
831#endif
832
833#ifdef DEVELOPER
834 messaging_register(msg_ctx, NULL, MSG_SMB_INJECT_FAULT,
835 msg_inject_fault);
836#endif
837
838 if (lp_multicast_dns_register() && (dns_port != 0)) {
839#ifdef WITH_DNSSD_SUPPORT
840 smbd_setup_mdns_registration(smbd_event_context(),
841 parent, dns_port);
842#endif
843#ifdef WITH_AVAHI_SUPPORT
844 void *avahi_conn;
845
846 avahi_conn = avahi_start_register(
847 smbd_event_context(), smbd_event_context(), dns_port);
848 if (avahi_conn == NULL) {
849 DEBUG(10, ("avahi_start_register failed\n"));
850 }
851#endif
852 }
853
854 return true;
855}
856
857static void smbd_parent_loop(struct smbd_parent_context *parent)
858{
859 /* now accept incoming connections - forking a new process
860 for each incoming connection */
861 DEBUG(2,("waiting for connections\n"));
862 while (1) {
863 int ret;
864 TALLOC_CTX *frame = talloc_stackframe();
865
866 ret = tevent_loop_once(smbd_event_context());
867 if (ret != 0) {
868 exit_server_cleanly("tevent_loop_once() error");
869 }
870
871 TALLOC_FREE(frame);
872 } /* end while 1 */
873
874/* NOTREACHED return True; */
875}
876
877
878/****************************************************************************
879 Initialise connect, service and file structs.
880****************************************************************************/
881
882static bool init_structs(void )
883{
884 /*
885 * Set the machine NETBIOS name if not already
886 * set from the config file.
887 */
888
889 if (!init_names())
890 return False;
891
892 if (!secrets_init())
893 return False;
894
895 return True;
896}
897
898/****************************************************************************
899 main program.
900****************************************************************************/
901
902/* Declare prototype for build_options() to avoid having to run it through
903 mkproto.h. Mixing $(builddir) and $(srcdir) source files in the current
904 prototype generation system is too complicated. */
905
906extern void build_options(bool screen);
907
908 int main(int argc,const char *argv[])
909{
910 /* shall I run as a daemon */
911 bool is_daemon = false;
912 bool interactive = false;
913 bool Fork = true;
914 bool no_process_group = false;
915 bool log_stdout = false;
916 char *ports = NULL;
917 char *profile_level = NULL;
918 int opt;
919 poptContext pc;
920 bool print_build_options = False;
921 enum {
922 OPT_DAEMON = 1000,
923 OPT_INTERACTIVE,
924 OPT_FORK,
925 OPT_NO_PROCESS_GROUP,
926 OPT_LOG_STDOUT
927 };
928 struct poptOption long_options[] = {
929 POPT_AUTOHELP
930 {"daemon", 'D', POPT_ARG_NONE, NULL, OPT_DAEMON, "Become a daemon (default)" },
931 {"interactive", 'i', POPT_ARG_NONE, NULL, OPT_INTERACTIVE, "Run interactive (not a daemon)"},
932 {"foreground", 'F', POPT_ARG_NONE, NULL, OPT_FORK, "Run daemon in foreground (for daemontools, etc.)" },
933 {"no-process-group", '\0', POPT_ARG_NONE, NULL, OPT_NO_PROCESS_GROUP, "Don't create a new process group" },
934 {"log-stdout", 'S', POPT_ARG_NONE, NULL, OPT_LOG_STDOUT, "Log to stdout" },
935 {"build-options", 'b', POPT_ARG_NONE, NULL, 'b', "Print build options" },
936 {"port", 'p', POPT_ARG_STRING, &ports, 0, "Listen on the specified ports"},
937 {"profiling-level", 'P', POPT_ARG_STRING, &profile_level, 0, "Set profiling level","PROFILE_LEVEL"},
938 POPT_COMMON_SAMBA
939 POPT_COMMON_DYNCONFIG
940 POPT_TABLEEND
941 };
942 struct smbd_parent_context *parent = NULL;
943 TALLOC_CTX *frame;
944 NTSTATUS status;
945
946 /*
947 * Do this before any other talloc operation
948 */
949 talloc_enable_null_tracking();
950 frame = talloc_stackframe();
951
952 load_case_tables();
953
954 /* Initialize the event context, it will panic on error */
955 smbd_event_context();
956
957 smbd_init_globals();
958
959 TimeInit();
960
961#ifdef HAVE_SET_AUTH_PARAMETERS
962 set_auth_parameters(argc,argv);
963#endif
964
965 pc = poptGetContext("smbd", argc, argv, long_options, 0);
966 while((opt = poptGetNextOpt(pc)) != -1) {
967 switch (opt) {
968 case OPT_DAEMON:
969 is_daemon = true;
970 break;
971 case OPT_INTERACTIVE:
972 interactive = true;
973 break;
974 case OPT_FORK:
975 Fork = false;
976 break;
977 case OPT_NO_PROCESS_GROUP:
978 no_process_group = true;
979 break;
980 case OPT_LOG_STDOUT:
981 log_stdout = true;
982 break;
983 case 'b':
984 print_build_options = True;
985 break;
986 default:
987 d_fprintf(stderr, "\nInvalid option %s: %s\n\n",
988 poptBadOption(pc, 0), poptStrerror(opt));
989 poptPrintUsage(pc, stderr, 0);
990 exit(1);
991 }
992 }
993 poptFreeContext(pc);
994
995 if (interactive) {
996 Fork = False;
997 log_stdout = True;
998 }
999
1000 if (log_stdout) {
1001 setup_logging(argv[0], DEBUG_STDOUT);
1002 } else {
1003 setup_logging(argv[0], DEBUG_FILE);
1004 }
1005
1006 if (print_build_options) {
1007 build_options(True); /* Display output to screen as well as debug */
1008 exit(0);
1009 }
1010
1011#ifdef HAVE_SETLUID
1012 /* needed for SecureWare on SCO */
1013 setluid(0);
1014#endif
1015
1016 set_remote_machine_name("smbd", False);
1017
1018 if (interactive && (DEBUGLEVEL >= 9)) {
1019 talloc_enable_leak_report();
1020 }
1021
1022 if (log_stdout && Fork) {
1023 DEBUG(0,("ERROR: Can't log to stdout (-S) unless daemon is in foreground (-F) or interactive (-i)\n"));
1024 exit(1);
1025 }
1026
1027 /* we want to re-seed early to prevent time delays causing
1028 client problems at a later date. (tridge) */
1029 generate_random_buffer(NULL, 0);
1030
1031 /* get initial effective uid and gid */
1032 sec_init();
1033
1034 /* make absolutely sure we run as root - to handle cases where people
1035 are crazy enough to have it setuid */
1036 gain_root_privilege();
1037 gain_root_group_privilege();
1038
1039 fault_setup((void (*)(void *))exit_server_fault);
1040 dump_core_setup("smbd");
1041
1042 /* we are never interested in SIGPIPE */
1043 BlockSignals(True,SIGPIPE);
1044
1045#if defined(SIGFPE)
1046 /* we are never interested in SIGFPE */
1047 BlockSignals(True,SIGFPE);
1048#endif
1049
1050#if defined(SIGUSR2)
1051 /* We are no longer interested in USR2 */
1052 BlockSignals(True,SIGUSR2);
1053#endif
1054
1055 /* POSIX demands that signals are inherited. If the invoking process has
1056 * these signals masked, we will have problems, as we won't recieve them. */
1057 BlockSignals(False, SIGHUP);
1058 BlockSignals(False, SIGUSR1);
1059 BlockSignals(False, SIGTERM);
1060
1061 /* Ensure we leave no zombies until we
1062 * correctly set up child handling below. */
1063
1064 CatchChild();
1065
1066 /* we want total control over the permissions on created files,
1067 so set our umask to 0 */
1068 umask(0);
1069
1070 reopen_logs();
1071
1072#ifdef __OS2__
1073 unsigned long _System DosSetPriority (unsigned long ulScope, unsigned long ulClass, long lDelta, unsigned long ulID);
1074 int rc;
1075 rc = DosSetPriority(
1076 0, /* Scope: only one process */
1077 4, /* set to PRTYC_FOREGROUNDSERVER */
1078 0, /* set delta - was 0 */
1079 0); /* Assume current process */
1080 DEBUG(0,( "Server priority set to PRTYC_FOREGROUNDSERVER\n"));
1081#endif
1082
1083 DEBUG(0,("smbd version %s started.\n", samba_version_string()));
1084 DEBUGADD(0,("%s\n", COPYRIGHT_STARTUP_MESSAGE));
1085#ifdef __OS2__
1086 DEBUGADD(0,("%s\n", maintained_by_string()));
1087#endif
1088
1089 DEBUG(2,("uid=%d gid=%d euid=%d egid=%d\n",
1090 (int)getuid(),(int)getgid(),(int)geteuid(),(int)getegid()));
1091
1092 /* Output the build options to the debug log */
1093 build_options(False);
1094
1095 if (sizeof(uint16) < 2 || sizeof(uint32) < 4) {
1096 DEBUG(0,("ERROR: Samba is not configured correctly for the word size on your machine\n"));
1097 exit(1);
1098 }
1099
1100 if (!lp_load_initial_only(get_dyn_CONFIGFILE())) {
1101 DEBUG(0, ("error opening config file\n"));
1102 exit(1);
1103 }
1104
1105 /* Init the security context and global current_user */
1106 init_sec_ctx();
1107
1108 if (smbd_messaging_context() == NULL)
1109 exit(1);
1110
1111 /*
1112 * Reloading of the printers will not work here as we don't have a
1113 * server info and rpc services set up. It will be called later.
1114 */
1115 if (!reload_services(smbd_messaging_context(), -1, False)) {
1116 exit(1);
1117 }
1118
1119 /* ...NOTE... Log files are working from this point! */
1120
1121 DEBUG(3,("loaded services\n"));
1122
1123 init_structs();
1124
1125#ifdef WITH_PROFILE
1126 if (!profile_setup(smbd_messaging_context(), False)) {
1127 DEBUG(0,("ERROR: failed to setup profiling\n"));
1128 return -1;
1129 }
1130 if (profile_level != NULL) {
1131 int pl = atoi(profile_level);
1132 struct server_id src;
1133
1134 DEBUG(1, ("setting profiling level: %s\n",profile_level));
1135 src.pid = getpid();
1136 set_profile_level(pl, src);
1137 }
1138#endif
1139
1140 if (!is_daemon && !is_a_socket(0)) {
1141 if (!interactive)
1142 DEBUG(0,("standard input is not a socket, assuming -D option\n"));
1143
1144 /*
1145 * Setting is_daemon here prevents us from eventually calling
1146 * the open_sockets_inetd()
1147 */
1148
1149 is_daemon = True;
1150 }
1151
1152 if (is_daemon && !interactive) {
1153 DEBUG( 3, ( "Becoming a daemon.\n" ) );
1154 become_daemon(Fork, no_process_group, log_stdout);
1155 }
1156
1157 set_my_unique_id(serverid_get_random_unique_id());
1158
1159#if HAVE_SETPGID
1160 /*
1161 * If we're interactive we want to set our own process group for
1162 * signal management.
1163 */
1164 if (interactive && !no_process_group)
1165 setpgid( (pid_t)0, (pid_t)0);
1166#endif
1167
1168 if (!directory_exist(lp_lockdir()))
1169 mkdir(lp_lockdir(), 0755);
1170
1171 if (is_daemon)
1172 pidfile_create("smbd");
1173
1174 status = reinit_after_fork(smbd_messaging_context(),
1175 smbd_event_context(),
1176 procid_self(), false);
1177 if (!NT_STATUS_IS_OK(status)) {
1178 DEBUG(0,("reinit_after_fork() failed\n"));
1179 exit(1);
1180 }
1181
1182 smbd_server_conn->msg_ctx = smbd_messaging_context();
1183
1184 smbd_setup_sig_term_handler();
1185 smbd_setup_sig_hup_handler(smbd_event_context(),
1186 smbd_server_conn->msg_ctx);
1187
1188 /* Setup all the TDB's - including CLEAR_IF_FIRST tdb's. */
1189
1190 if (smbd_memcache() == NULL) {
1191 exit(1);
1192 }
1193
1194 memcache_set_global(smbd_memcache());
1195
1196 /* Initialise the password backed before the global_sam_sid
1197 to ensure that we fetch from ldap before we make a domain sid up */
1198
1199 if(!initialize_password_db(False, smbd_event_context()))
1200 exit(1);
1201
1202 if (!secrets_init()) {
1203 DEBUG(0, ("ERROR: smbd can not open secrets.tdb\n"));
1204 exit(1);
1205 }
1206
1207 if (lp_server_role() == ROLE_DOMAIN_BDC || lp_server_role() == ROLE_DOMAIN_PDC) {
1208 if (!open_schannel_session_store(NULL, lp_private_dir())) {
1209 DEBUG(0,("ERROR: Samba cannot open schannel store for secured NETLOGON operations.\n"));
1210 exit(1);
1211 }
1212 }
1213
1214 if(!get_global_sam_sid()) {
1215 DEBUG(0,("ERROR: Samba cannot create a SAM SID.\n"));
1216 exit(1);
1217 }
1218
1219 if (!sessionid_init()) {
1220 exit(1);
1221 }
1222
1223 if (!connections_init(True))
1224 exit(1);
1225
1226 if (!locking_init())
1227 exit(1);
1228
1229 if (!messaging_tdb_parent_init(smbd_event_context())) {
1230 exit(1);
1231 }
1232
1233 if (!notify_internal_parent_init(smbd_event_context())) {
1234 exit(1);
1235 }
1236
1237 if (!serverid_parent_init(smbd_event_context())) {
1238 exit(1);
1239 }
1240
1241 if (!printer_list_parent_init()) {
1242 exit(1);
1243 }
1244
1245 if (!W_ERROR_IS_OK(registry_init_full()))
1246 exit(1);
1247
1248 /* Open the share_info.tdb here, so we don't have to open
1249 after the fork on every single connection. This is a small
1250 performance improvment and reduces the total number of system
1251 fds used. */
1252 if (!share_info_db_init()) {
1253 DEBUG(0,("ERROR: failed to load share info db.\n"));
1254 exit(1);
1255 }
1256
1257 status = init_system_info();
1258 if (!NT_STATUS_IS_OK(status)) {
1259 DEBUG(1, ("ERROR: failed to setup system user info: %s.\n",
1260 nt_errstr(status)));
1261 return -1;
1262 }
1263
1264 if (!init_guest_info()) {
1265 DEBUG(0,("ERROR: failed to setup guest info.\n"));
1266 return -1;
1267 }
1268
1269 if (!file_init(smbd_server_conn)) {
1270 DEBUG(0, ("ERROR: file_init failed\n"));
1271 return -1;
1272 }
1273
1274 if (is_daemon && !interactive) {
1275 const char *rpcsrv_type;
1276
1277 rpcsrv_type = lp_parm_const_string(GLOBAL_SECTION_SNUM,
1278 "rpc_server", "epmapper",
1279 "none");
1280 if (StrCaseCmp(rpcsrv_type, "daemon") == 0) {
1281 start_epmd(smbd_event_context(),
1282 smbd_server_conn->msg_ctx);
1283 }
1284 }
1285
1286 if (!dcesrv_ep_setup(smbd_event_context(), smbd_server_conn->msg_ctx)) {
1287 exit(1);
1288 }
1289
1290 /*
1291 * The print backend init also migrates the printing tdb's,
1292 * this requires a winreg pipe.
1293 */
1294 if (!print_backend_init(smbd_messaging_context()))
1295 exit(1);
1296
1297 /* only start the background queue daemon if we are
1298 running as a daemon -- bad things will happen if
1299 smbd is launched via inetd and we fork a copy of
1300 ourselves here */
1301
1302 if (is_daemon && !interactive
1303 && lp_parm_bool(-1, "smbd", "backgroundqueue", true)) {
1304 /* background queue is responsible for printcap cache updates */
1305 messaging_register(smbd_server_conn->msg_ctx,
1306 smbd_event_context(),
1307 MSG_PRINTER_PCAP, smb_pcap_updated);
1308 start_background_queue(server_event_context(),
1309 smbd_server_conn->msg_ctx);
1310 } else {
1311 DEBUG(3, ("running without background printer process, dynamic "
1312 "printer updates disabled\n"));
1313 /* Publish nt printers, this requires a working winreg pipe */
1314 pcap_cache_reload(server_event_context(),
1315 smbd_messaging_context(),
1316 &reload_printers_full);
1317 }
1318
1319 if (is_daemon && !_lp_disable_spoolss()) {
1320 const char *rpcsrv_type;
1321
1322 /* start spoolss daemon */
1323 /* start as a separate daemon only if enabled */
1324 rpcsrv_type = lp_parm_const_string(GLOBAL_SECTION_SNUM,
1325 "rpc_server", "spoolss",
1326 "embedded");
1327 if (StrCaseCmp(rpcsrv_type, "daemon") == 0) {
1328 start_spoolssd(smbd_event_context(),
1329 smbd_messaging_context());
1330 }
1331 }
1332
1333 if (!is_daemon) {
1334 /* inetd mode */
1335 TALLOC_FREE(frame);
1336
1337 /* Started from inetd. fd 0 is the socket. */
1338 /* We will abort gracefully when the client or remote system
1339 goes away */
1340 smbd_set_server_fd(dup(0));
1341
1342 /* close our standard file descriptors */
1343 close_low_fds(False); /* Don't close stderr */
1344
1345#ifdef HAVE_ATEXIT
1346 atexit(killkids);
1347#endif
1348
1349 /* Stop zombies */
1350 smbd_setup_sig_chld_handler();
1351
1352 smbd_process(smbd_server_conn);
1353
1354 exit_server_cleanly(NULL);
1355 return(0);
1356 }
1357
1358 parent = talloc_zero(smbd_event_context(), struct smbd_parent_context);
1359 if (!parent) {
1360 exit_server("talloc(struct smbd_parent_context) failed");
1361 }
1362 parent->interactive = interactive;
1363
1364 if (!open_sockets_smbd(parent, smbd_messaging_context(), ports))
1365 exit_server("open_sockets_smbd() failed");
1366
1367 TALLOC_FREE(frame);
1368 /* make sure we always have a valid stackframe */
1369 frame = talloc_stackframe();
1370
1371 smbd_parent_loop(parent);
1372
1373 exit_server_cleanly(NULL);
1374 TALLOC_FREE(frame);
1375 return(0);
1376}
Note: See TracBrowser for help on using the repository browser.