mirror of
https://github.com/samba-team/samba.git
synced 2025-01-26 10:04:02 +03:00
b70009649a
in Samba4. This allows us to start winbindd by default, including in 'make test'. This is via a new 'winbindd socket directory' parameter for utilities linked against loadparm, as well as a --with-winbindd-socket-dir option to configure (setting the default and the value for simple clients). I hope to add basic winbindd tests, to ensure continued correct operation, but at least now I don't have to manually change my 'server services' line. The other problem with the hard-coded /tmp/.winbind is that RedHat has moved this in Fedora (to /var/run I think). For this reason, this functionality should probably be ported to Samba3 as well. The default for Samba4 is PREFIX/var/run/winbind_pipe. I have also re-added the paranoia checks from Samba3 for correct permissions on the socket directory. Andrew Bartlett (This used to be commit 8866aa06ffc3896094c878e9c07b40c03826d9a7)
203 lines
6.1 KiB
C
203 lines
6.1 KiB
C
/*
|
|
Unix SMB/CIFS implementation.
|
|
Main winbindd server routines
|
|
|
|
Copyright (C) Stefan Metzmacher 2005
|
|
Copyright (C) Andrew Tridgell 2005
|
|
|
|
This program is free software; you can redistribute it and/or modify
|
|
it under the terms of the GNU General Public License as published by
|
|
the Free Software Foundation; either version 2 of the License, or
|
|
(at your option) any later version.
|
|
|
|
This program is distributed in the hope that it will be useful,
|
|
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
GNU General Public License for more details.
|
|
|
|
You should have received a copy of the GNU General Public License
|
|
along with this program; if not, write to the Free Software
|
|
Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
|
|
*/
|
|
|
|
#include "includes.h"
|
|
#include "lib/socket/socket.h"
|
|
#include "dlinklist.h"
|
|
#include "lib/events/events.h"
|
|
#include "smbd/service_task.h"
|
|
#include "smbd/service_stream.h"
|
|
#include "nsswitch/winbind_nss_config.h"
|
|
#include "winbind/wb_server.h"
|
|
#include "lib/stream/packet.h"
|
|
|
|
void wbsrv_terminate_connection(struct wbsrv_connection *wbconn, const char *reason)
|
|
{
|
|
stream_terminate_connection(wbconn->conn, reason);
|
|
}
|
|
|
|
/*
|
|
called on a tcp recv error
|
|
*/
|
|
static void wbsrv_recv_error(void *private, NTSTATUS status)
|
|
{
|
|
struct wbsrv_connection *wbconn = talloc_get_type(private, struct wbsrv_connection);
|
|
wbsrv_terminate_connection(wbconn, nt_errstr(status));
|
|
}
|
|
|
|
static void wbsrv_accept(struct stream_connection *conn)
|
|
{
|
|
struct wbsrv_listen_socket *listen_socket = talloc_get_type(conn->private,
|
|
struct wbsrv_listen_socket);
|
|
struct wbsrv_connection *wbconn;
|
|
|
|
wbconn = talloc_zero(conn, struct wbsrv_connection);
|
|
if (!wbconn) {
|
|
stream_terminate_connection(conn, "wbsrv_accept: out of memory");
|
|
return;
|
|
}
|
|
wbconn->conn = conn;
|
|
wbconn->listen_socket = listen_socket;
|
|
conn->private = wbconn;
|
|
|
|
wbconn->packet = packet_init(wbconn);
|
|
if (wbconn->packet == NULL) {
|
|
wbsrv_terminate_connection(wbconn, "wbsrv_accept: out of memory");
|
|
return;
|
|
}
|
|
packet_set_private(wbconn->packet, wbconn);
|
|
packet_set_socket(wbconn->packet, conn->socket);
|
|
packet_set_callback(wbconn->packet, wbsrv_samba3_process);
|
|
packet_set_full_request(wbconn->packet, wbsrv_samba3_packet_full_request);
|
|
packet_set_error_handler(wbconn->packet, wbsrv_recv_error);
|
|
packet_set_event_context(wbconn->packet, conn->event.ctx);
|
|
packet_set_fde(wbconn->packet, conn->event.fde);
|
|
packet_set_serialise(wbconn->packet);
|
|
}
|
|
|
|
/*
|
|
receive some data on a winbind connection
|
|
*/
|
|
static void wbsrv_recv(struct stream_connection *conn, uint16_t flags)
|
|
{
|
|
struct wbsrv_connection *wbconn = talloc_get_type(conn->private,
|
|
struct wbsrv_connection);
|
|
packet_recv(wbconn->packet);
|
|
|
|
}
|
|
|
|
/*
|
|
called when we can write to a connection
|
|
*/
|
|
static void wbsrv_send(struct stream_connection *conn, uint16_t flags)
|
|
{
|
|
struct wbsrv_connection *wbconn = talloc_get_type(conn->private,
|
|
struct wbsrv_connection);
|
|
packet_queue_run(wbconn->packet);
|
|
}
|
|
|
|
static const struct stream_server_ops wbsrv_ops = {
|
|
.name = "winbind samba3 protocol",
|
|
.accept_connection = wbsrv_accept,
|
|
.recv_handler = wbsrv_recv,
|
|
.send_handler = wbsrv_send
|
|
};
|
|
|
|
/*
|
|
startup the winbind task
|
|
*/
|
|
static void winbind_task_init(struct task_server *task)
|
|
{
|
|
uint16_t port = 1;
|
|
const struct model_ops *model_ops;
|
|
NTSTATUS status;
|
|
struct wbsrv_service *service;
|
|
struct wbsrv_listen_socket *listen_socket;
|
|
|
|
/* within the winbind task we want to be a single process, so
|
|
ask for the single process model ops and pass these to the
|
|
stream_setup_socket() call. */
|
|
model_ops = process_model_byname("single");
|
|
if (!model_ops) {
|
|
task_server_terminate(task,
|
|
"Can't find 'single' process model_ops");
|
|
return;
|
|
}
|
|
|
|
/* Make sure the directory for the Samba3 socket exists, and is of the correct permissions */
|
|
if (!directory_create_or_exist(lp_winbindd_socket_directory(), geteuid(), 0755)) {
|
|
task_server_terminate(task,
|
|
"Cannot create winbindd pipe directory");
|
|
return;
|
|
}
|
|
|
|
service = talloc_zero(task, struct wbsrv_service);
|
|
if (!service) goto nomem;
|
|
service->task = task;
|
|
|
|
service->primary_sid = secrets_get_domain_sid(service,
|
|
lp_workgroup());
|
|
if (service->primary_sid == NULL) {
|
|
task_server_terminate(
|
|
task, nt_errstr(NT_STATUS_CANT_ACCESS_DOMAIN_INFO));
|
|
return;
|
|
}
|
|
|
|
/* setup the unprivileged samba3 socket */
|
|
listen_socket = talloc(service, struct wbsrv_listen_socket);
|
|
if (!listen_socket) goto nomem;
|
|
listen_socket->socket_path = talloc_asprintf(listen_socket, "%s/%s",
|
|
lp_winbindd_socket_directory(),
|
|
WINBINDD_SAMBA3_SOCKET);
|
|
if (!listen_socket->socket_path) goto nomem;
|
|
listen_socket->service = service;
|
|
listen_socket->privileged = False;
|
|
status = stream_setup_socket(task->event_ctx, model_ops,
|
|
&wbsrv_ops, "unix",
|
|
listen_socket->socket_path, &port,
|
|
listen_socket);
|
|
if (!NT_STATUS_IS_OK(status)) goto listen_failed;
|
|
|
|
/* setup the privileged samba3 socket */
|
|
listen_socket = talloc(service, struct wbsrv_listen_socket);
|
|
if (!listen_socket) goto nomem;
|
|
listen_socket->socket_path =
|
|
smbd_tmp_path(listen_socket,
|
|
WINBINDD_SAMBA3_PRIVILEGED_SOCKET);
|
|
if (!listen_socket->socket_path) goto nomem;
|
|
listen_socket->service = service;
|
|
listen_socket->privileged = True;
|
|
status = stream_setup_socket(task->event_ctx, model_ops,
|
|
&wbsrv_ops, "unix",
|
|
listen_socket->socket_path, &port,
|
|
listen_socket);
|
|
if (!NT_STATUS_IS_OK(status)) goto listen_failed;
|
|
|
|
return;
|
|
|
|
listen_failed:
|
|
DEBUG(0,("stream_setup_socket(path=%s) failed - %s\n",
|
|
listen_socket->socket_path, nt_errstr(status)));
|
|
task_server_terminate(task, nt_errstr(status));
|
|
return;
|
|
nomem:
|
|
task_server_terminate(task, nt_errstr(NT_STATUS_NO_MEMORY));
|
|
return;
|
|
}
|
|
|
|
/*
|
|
initialise the winbind server
|
|
*/
|
|
static NTSTATUS winbind_init(struct event_context *event_ctx,
|
|
const struct model_ops *model_ops)
|
|
{
|
|
return task_server_startup(event_ctx, model_ops, winbind_task_init);
|
|
}
|
|
|
|
/*
|
|
register ourselves as a available server
|
|
*/
|
|
NTSTATUS server_service_winbind_init(void)
|
|
{
|
|
return register_server_service("winbind", winbind_init);
|
|
}
|