mirror of
https://github.com/samba-team/samba.git
synced 2024-12-25 23:21:54 +03:00
cc48010f41
It hurts, but I think this global variable is necessary for transition, and it
has the potential to remove quite a few other global variables without messing
with APIs too much.
(This used to be commit c131d0dc52
)
1328 lines
31 KiB
C
1328 lines
31 KiB
C
/*
|
|
Unix SMB/CIFS implementation.
|
|
Main SMB server routines
|
|
Copyright (C) Andrew Tridgell 1992-1998
|
|
Copyright (C) Martin Pool 2002
|
|
Copyright (C) Jelmer Vernooij 2002-2003
|
|
Copyright (C) Volker Lendecke 1993-2007
|
|
Copyright (C) Jeremy Allison 1993-2007
|
|
|
|
This program is free software; you can redistribute it and/or modify
|
|
it under the terms of the GNU General Public License as published by
|
|
the Free Software Foundation; either version 3 of the License, or
|
|
(at your option) any later version.
|
|
|
|
This program is distributed in the hope that it will be useful,
|
|
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
GNU General Public License for more details.
|
|
|
|
You should have received a copy of the GNU General Public License
|
|
along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
*/
|
|
|
|
#include "includes.h"
|
|
|
|
static_decl_rpc;
|
|
|
|
static int am_parent = 1;
|
|
|
|
extern struct auth_context *negprot_global_auth_context;
|
|
extern SIG_ATOMIC_T got_sig_term;
|
|
extern SIG_ATOMIC_T reload_after_sighup;
|
|
static SIG_ATOMIC_T got_sig_cld;
|
|
|
|
#ifdef WITH_DFS
|
|
extern int dcelogin_atmost_once;
|
|
#endif /* WITH_DFS */
|
|
|
|
/* really we should have a top level context structure that has the
|
|
client file descriptor as an element. That would require a major rewrite :(
|
|
|
|
the following 2 functions are an alternative - they make the file
|
|
descriptor private to smbd
|
|
*/
|
|
static int server_fd = -1;
|
|
|
|
int smbd_server_fd(void)
|
|
{
|
|
return server_fd;
|
|
}
|
|
|
|
static void smbd_set_server_fd(int fd)
|
|
{
|
|
server_fd = fd;
|
|
}
|
|
|
|
int get_client_fd(void)
|
|
{
|
|
return server_fd;
|
|
}
|
|
|
|
struct event_context *smbd_event_context(void)
|
|
{
|
|
static struct event_context *ctx;
|
|
|
|
if (!ctx && !(ctx = event_context_init(NULL))) {
|
|
smb_panic("Could not init smbd event context");
|
|
}
|
|
return ctx;
|
|
}
|
|
|
|
struct messaging_context *smbd_messaging_context(void)
|
|
{
|
|
static struct messaging_context *ctx;
|
|
|
|
if (!ctx && !(ctx = messaging_init(NULL, server_id_self(),
|
|
smbd_event_context()))) {
|
|
smb_panic("Could not init smbd messaging context");
|
|
}
|
|
return ctx;
|
|
}
|
|
|
|
struct memcache *smbd_memcache(void)
|
|
{
|
|
static struct memcache *cache;
|
|
|
|
if (!cache
|
|
&& !(cache = memcache_init(NULL,
|
|
lp_max_stat_cache_size()*1024))) {
|
|
|
|
smb_panic("Could not init smbd memcache");
|
|
}
|
|
return cache;
|
|
}
|
|
|
|
/*******************************************************************
|
|
What to do when smb.conf is updated.
|
|
********************************************************************/
|
|
|
|
static void smb_conf_updated(struct messaging_context *msg,
|
|
void *private_data,
|
|
uint32_t msg_type,
|
|
struct server_id server_id,
|
|
DATA_BLOB *data)
|
|
{
|
|
DEBUG(10,("smb_conf_updated: Got message saying smb.conf was "
|
|
"updated. Reloading.\n"));
|
|
reload_services(False);
|
|
}
|
|
|
|
|
|
/*******************************************************************
|
|
Delete a statcache entry.
|
|
********************************************************************/
|
|
|
|
static void smb_stat_cache_delete(struct messaging_context *msg,
|
|
void *private_data,
|
|
uint32_t msg_tnype,
|
|
struct server_id server_id,
|
|
DATA_BLOB *data)
|
|
{
|
|
const char *name = (const char *)data->data;
|
|
DEBUG(10,("smb_stat_cache_delete: delete name %s\n", name));
|
|
stat_cache_delete(name);
|
|
}
|
|
|
|
/****************************************************************************
|
|
Terminate signal.
|
|
****************************************************************************/
|
|
|
|
static void sig_term(void)
|
|
{
|
|
got_sig_term = 1;
|
|
sys_select_signal(SIGTERM);
|
|
}
|
|
|
|
/****************************************************************************
|
|
Catch a sighup.
|
|
****************************************************************************/
|
|
|
|
static void sig_hup(int sig)
|
|
{
|
|
reload_after_sighup = 1;
|
|
sys_select_signal(SIGHUP);
|
|
}
|
|
|
|
/****************************************************************************
|
|
Catch a sigcld
|
|
****************************************************************************/
|
|
static void sig_cld(int sig)
|
|
{
|
|
got_sig_cld = 1;
|
|
sys_select_signal(SIGCLD);
|
|
}
|
|
|
|
/****************************************************************************
|
|
Send a SIGTERM to our process group.
|
|
*****************************************************************************/
|
|
|
|
static void killkids(void)
|
|
{
|
|
if(am_parent) kill(0,SIGTERM);
|
|
}
|
|
|
|
/****************************************************************************
|
|
Process a sam sync message - not sure whether to do this here or
|
|
somewhere else.
|
|
****************************************************************************/
|
|
|
|
static void msg_sam_sync(struct messaging_context *msg,
|
|
void *private_data,
|
|
uint32_t msg_type,
|
|
struct server_id server_id,
|
|
DATA_BLOB *data)
|
|
{
|
|
DEBUG(10, ("** sam sync message received, ignoring\n"));
|
|
}
|
|
|
|
|
|
/****************************************************************************
|
|
Open the socket communication - inetd.
|
|
****************************************************************************/
|
|
|
|
static bool open_sockets_inetd(void)
|
|
{
|
|
/* Started from inetd. fd 0 is the socket. */
|
|
/* We will abort gracefully when the client or remote system
|
|
goes away */
|
|
smbd_set_server_fd(dup(0));
|
|
|
|
/* close our standard file descriptors */
|
|
close_low_fds(False); /* Don't close stderr */
|
|
|
|
set_socket_options(smbd_server_fd(),"SO_KEEPALIVE");
|
|
set_socket_options(smbd_server_fd(), lp_socket_options());
|
|
|
|
return True;
|
|
}
|
|
|
|
static void msg_exit_server(struct messaging_context *msg,
|
|
void *private_data,
|
|
uint32_t msg_type,
|
|
struct server_id server_id,
|
|
DATA_BLOB *data)
|
|
{
|
|
DEBUG(3, ("got a SHUTDOWN message\n"));
|
|
exit_server_cleanly(NULL);
|
|
}
|
|
|
|
#ifdef DEVELOPER
|
|
static void msg_inject_fault(struct messaging_context *msg,
|
|
void *private_data,
|
|
uint32_t msg_type,
|
|
struct server_id src,
|
|
DATA_BLOB *data)
|
|
{
|
|
int sig;
|
|
|
|
if (data->length != sizeof(sig)) {
|
|
|
|
DEBUG(0, ("Process %s sent bogus signal injection request\n",
|
|
procid_str_static(&src)));
|
|
return;
|
|
}
|
|
|
|
sig = *(int *)data->data;
|
|
if (sig == -1) {
|
|
exit_server("internal error injected");
|
|
return;
|
|
}
|
|
|
|
#if HAVE_STRSIGNAL
|
|
DEBUG(0, ("Process %s requested injection of signal %d (%s)\n",
|
|
procid_str_static(&src), sig, strsignal(sig)));
|
|
#else
|
|
DEBUG(0, ("Process %s requested injection of signal %d\n",
|
|
procid_str_static(&src), sig));
|
|
#endif
|
|
|
|
kill(sys_getpid(), sig);
|
|
}
|
|
#endif /* DEVELOPER */
|
|
|
|
struct child_pid {
|
|
struct child_pid *prev, *next;
|
|
pid_t pid;
|
|
};
|
|
|
|
static struct child_pid *children;
|
|
static int num_children;
|
|
|
|
static void add_child_pid(pid_t pid)
|
|
{
|
|
struct child_pid *child;
|
|
|
|
if (lp_max_smbd_processes() == 0) {
|
|
/* Don't bother with the child list if we don't care anyway */
|
|
return;
|
|
}
|
|
|
|
child = SMB_MALLOC_P(struct child_pid);
|
|
if (child == NULL) {
|
|
DEBUG(0, ("Could not add child struct -- malloc failed\n"));
|
|
return;
|
|
}
|
|
child->pid = pid;
|
|
DLIST_ADD(children, child);
|
|
num_children += 1;
|
|
}
|
|
|
|
static void remove_child_pid(pid_t pid)
|
|
{
|
|
struct child_pid *child;
|
|
|
|
if (lp_max_smbd_processes() == 0) {
|
|
/* Don't bother with the child list if we don't care anyway */
|
|
return;
|
|
}
|
|
|
|
for (child = children; child != NULL; child = child->next) {
|
|
if (child->pid == pid) {
|
|
struct child_pid *tmp = child;
|
|
DLIST_REMOVE(children, child);
|
|
SAFE_FREE(tmp);
|
|
num_children -= 1;
|
|
return;
|
|
}
|
|
}
|
|
|
|
DEBUG(0, ("Could not find child %d -- ignoring\n", (int)pid));
|
|
}
|
|
|
|
/****************************************************************************
|
|
Have we reached the process limit ?
|
|
****************************************************************************/
|
|
|
|
static bool allowable_number_of_smbd_processes(void)
|
|
{
|
|
int max_processes = lp_max_smbd_processes();
|
|
|
|
if (!max_processes)
|
|
return True;
|
|
|
|
return num_children < max_processes;
|
|
}
|
|
|
|
/****************************************************************************
|
|
Open the socket communication.
|
|
****************************************************************************/
|
|
|
|
static bool open_sockets_smbd(bool is_daemon, bool interactive, const char *smb_ports)
|
|
{
|
|
int num_interfaces = iface_count();
|
|
int num_sockets = 0;
|
|
int fd_listenset[FD_SETSIZE];
|
|
fd_set listen_set;
|
|
int s;
|
|
int maxfd = 0;
|
|
int i;
|
|
char *ports;
|
|
struct dns_reg_state * dns_reg = NULL;
|
|
unsigned dns_port = 0;
|
|
|
|
if (!is_daemon) {
|
|
return open_sockets_inetd();
|
|
}
|
|
|
|
#ifdef HAVE_ATEXIT
|
|
{
|
|
static int atexit_set;
|
|
if(atexit_set == 0) {
|
|
atexit_set=1;
|
|
atexit(killkids);
|
|
}
|
|
}
|
|
#endif
|
|
|
|
/* Stop zombies */
|
|
CatchSignal(SIGCLD, sig_cld);
|
|
|
|
FD_ZERO(&listen_set);
|
|
|
|
/* use a reasonable default set of ports - listing on 445 and 139 */
|
|
if (!smb_ports) {
|
|
ports = lp_smb_ports();
|
|
if (!ports || !*ports) {
|
|
ports = smb_xstrdup(SMB_PORTS);
|
|
} else {
|
|
ports = smb_xstrdup(ports);
|
|
}
|
|
} else {
|
|
ports = smb_xstrdup(smb_ports);
|
|
}
|
|
|
|
if (lp_interfaces() && lp_bind_interfaces_only()) {
|
|
/* We have been given an interfaces line, and been
|
|
told to only bind to those interfaces. Create a
|
|
socket per interface and bind to only these.
|
|
*/
|
|
|
|
/* Now open a listen socket for each of the
|
|
interfaces. */
|
|
for(i = 0; i < num_interfaces; i++) {
|
|
TALLOC_CTX *frame = NULL;
|
|
const struct sockaddr_storage *ifss =
|
|
iface_n_sockaddr_storage(i);
|
|
char *tok;
|
|
const char *ptr;
|
|
|
|
if (ifss == NULL) {
|
|
DEBUG(0,("open_sockets_smbd: "
|
|
"interface %d has NULL IP address !\n",
|
|
i));
|
|
continue;
|
|
}
|
|
|
|
frame = talloc_stackframe();
|
|
for (ptr=ports;
|
|
next_token_talloc(frame,&ptr, &tok, " \t,");) {
|
|
unsigned port = atoi(tok);
|
|
if (port == 0 || port > 0xffff) {
|
|
continue;
|
|
}
|
|
|
|
/* Keep the first port for mDNS service
|
|
* registration.
|
|
*/
|
|
if (dns_port == 0) {
|
|
dns_port = port;
|
|
}
|
|
|
|
s = fd_listenset[num_sockets] =
|
|
open_socket_in(SOCK_STREAM, port, 0,
|
|
ifss, True);
|
|
if(s == -1) {
|
|
continue;
|
|
}
|
|
|
|
/* ready to listen */
|
|
set_socket_options(s,"SO_KEEPALIVE");
|
|
set_socket_options(s,lp_socket_options());
|
|
|
|
/* Set server socket to
|
|
* non-blocking for the accept. */
|
|
set_blocking(s,False);
|
|
|
|
if (listen(s, SMBD_LISTEN_BACKLOG) == -1) {
|
|
DEBUG(0,("open_sockets_smbd: listen: "
|
|
"%s\n", strerror(errno)));
|
|
close(s);
|
|
TALLOC_FREE(frame);
|
|
return False;
|
|
}
|
|
FD_SET(s,&listen_set);
|
|
maxfd = MAX( maxfd, s);
|
|
|
|
num_sockets++;
|
|
if (num_sockets >= FD_SETSIZE) {
|
|
DEBUG(0,("open_sockets_smbd: Too "
|
|
"many sockets to bind to\n"));
|
|
TALLOC_FREE(frame);
|
|
return False;
|
|
}
|
|
}
|
|
TALLOC_FREE(frame);
|
|
}
|
|
} else {
|
|
/* Just bind to 0.0.0.0 - accept connections
|
|
from anywhere. */
|
|
|
|
TALLOC_CTX *frame = talloc_stackframe();
|
|
char *tok;
|
|
const char *ptr;
|
|
const char *sock_addr = lp_socket_address();
|
|
char *sock_tok;
|
|
const char *sock_ptr;
|
|
|
|
if (strequal(sock_addr, "0.0.0.0") ||
|
|
strequal(sock_addr, "::")) {
|
|
#if HAVE_IPV6
|
|
sock_addr = "::,0.0.0.0";
|
|
#else
|
|
sock_addr = "0.0.0.0";
|
|
#endif
|
|
}
|
|
|
|
for (sock_ptr=sock_addr;
|
|
next_token_talloc(frame, &sock_ptr, &sock_tok, " \t,"); ) {
|
|
for (ptr=ports; next_token_talloc(frame, &ptr, &tok, " \t,"); ) {
|
|
struct sockaddr_storage ss;
|
|
|
|
unsigned port = atoi(tok);
|
|
if (port == 0 || port > 0xffff) {
|
|
continue;
|
|
}
|
|
|
|
/* Keep the first port for mDNS service
|
|
* registration.
|
|
*/
|
|
if (dns_port == 0) {
|
|
dns_port = port;
|
|
}
|
|
|
|
/* open an incoming socket */
|
|
if (!interpret_string_addr(&ss, sock_tok,
|
|
AI_NUMERICHOST|AI_PASSIVE)) {
|
|
continue;
|
|
}
|
|
|
|
s = open_socket_in(SOCK_STREAM, port, 0,
|
|
&ss, true);
|
|
if (s == -1) {
|
|
continue;
|
|
}
|
|
|
|
/* ready to listen */
|
|
set_socket_options(s,"SO_KEEPALIVE");
|
|
set_socket_options(s,lp_socket_options());
|
|
|
|
/* Set server socket to non-blocking
|
|
* for the accept. */
|
|
set_blocking(s,False);
|
|
|
|
if (listen(s, SMBD_LISTEN_BACKLOG) == -1) {
|
|
DEBUG(0,("open_sockets_smbd: "
|
|
"listen: %s\n",
|
|
strerror(errno)));
|
|
close(s);
|
|
TALLOC_FREE(frame);
|
|
return False;
|
|
}
|
|
|
|
fd_listenset[num_sockets] = s;
|
|
FD_SET(s,&listen_set);
|
|
maxfd = MAX( maxfd, s);
|
|
|
|
num_sockets++;
|
|
|
|
if (num_sockets >= FD_SETSIZE) {
|
|
DEBUG(0,("open_sockets_smbd: Too "
|
|
"many sockets to bind to\n"));
|
|
TALLOC_FREE(frame);
|
|
return False;
|
|
}
|
|
}
|
|
}
|
|
TALLOC_FREE(frame);
|
|
}
|
|
|
|
SAFE_FREE(ports);
|
|
|
|
if (num_sockets == 0) {
|
|
DEBUG(0,("open_sockets_smbd: No "
|
|
"sockets available to bind to.\n"));
|
|
return false;
|
|
}
|
|
|
|
/* Setup the main smbd so that we can get messages. Note that
|
|
do this after starting listening. This is needed as when in
|
|
clustered mode, ctdb won't allow us to start doing database
|
|
operations until it has gone thru a full startup, which
|
|
includes checking to see that smbd is listening. */
|
|
claim_connection(NULL,"",FLAG_MSG_GENERAL|FLAG_MSG_SMBD);
|
|
|
|
/* Listen to messages */
|
|
|
|
messaging_register(smbd_messaging_context(), NULL,
|
|
MSG_SMB_SAM_SYNC, msg_sam_sync);
|
|
messaging_register(smbd_messaging_context(), NULL,
|
|
MSG_SHUTDOWN, msg_exit_server);
|
|
messaging_register(smbd_messaging_context(), NULL,
|
|
MSG_SMB_FILE_RENAME, msg_file_was_renamed);
|
|
messaging_register(smbd_messaging_context(), NULL,
|
|
MSG_SMB_CONF_UPDATED, smb_conf_updated);
|
|
messaging_register(smbd_messaging_context(), NULL,
|
|
MSG_SMB_STAT_CACHE_DELETE, smb_stat_cache_delete);
|
|
brl_register_msgs(smbd_messaging_context());
|
|
|
|
#ifdef DEVELOPER
|
|
messaging_register(smbd_messaging_context(), NULL,
|
|
MSG_SMB_INJECT_FAULT, msg_inject_fault);
|
|
#endif
|
|
|
|
/* now accept incoming connections - forking a new process
|
|
for each incoming connection */
|
|
DEBUG(2,("waiting for a connection\n"));
|
|
while (1) {
|
|
struct timeval now, idle_timeout;
|
|
fd_set r_fds, w_fds;
|
|
int num;
|
|
|
|
/* Ensure we respond to PING and DEBUG messages from the main smbd. */
|
|
message_dispatch(smbd_messaging_context());
|
|
|
|
if (got_sig_cld) {
|
|
pid_t pid;
|
|
got_sig_cld = False;
|
|
|
|
while ((pid = sys_waitpid(-1, NULL, WNOHANG)) > 0) {
|
|
remove_child_pid(pid);
|
|
}
|
|
}
|
|
|
|
idle_timeout = timeval_zero();
|
|
|
|
memcpy((char *)&r_fds, (char *)&listen_set,
|
|
sizeof(listen_set));
|
|
FD_ZERO(&w_fds);
|
|
GetTimeOfDay(&now);
|
|
|
|
/* Kick off our mDNS registration. */
|
|
if (dns_port != 0) {
|
|
dns_register_smbd(&dns_reg, dns_port, &maxfd,
|
|
&r_fds, &idle_timeout);
|
|
}
|
|
|
|
event_add_to_select_args(smbd_event_context(), &now,
|
|
&r_fds, &w_fds, &idle_timeout,
|
|
&maxfd);
|
|
|
|
num = sys_select(maxfd+1,&r_fds,&w_fds,NULL,
|
|
timeval_is_zero(&idle_timeout) ?
|
|
NULL : &idle_timeout);
|
|
|
|
if (num == -1 && errno == EINTR) {
|
|
if (got_sig_term) {
|
|
exit_server_cleanly(NULL);
|
|
}
|
|
|
|
/* check for sighup processing */
|
|
if (reload_after_sighup) {
|
|
change_to_root_user();
|
|
DEBUG(1,("Reloading services after SIGHUP\n"));
|
|
reload_services(False);
|
|
reload_after_sighup = 0;
|
|
}
|
|
|
|
continue;
|
|
}
|
|
|
|
/* process pending nDNS responses */
|
|
if (dns_register_smbd_reply(dns_reg, &r_fds, &idle_timeout)) {
|
|
--num;
|
|
}
|
|
|
|
if (run_events(smbd_event_context(), num, &r_fds, &w_fds)) {
|
|
continue;
|
|
}
|
|
|
|
/* check if we need to reload services */
|
|
check_reload(time(NULL));
|
|
|
|
/* Find the sockets that are read-ready -
|
|
accept on these. */
|
|
for( ; num > 0; num--) {
|
|
struct sockaddr addr;
|
|
socklen_t in_addrlen = sizeof(addr);
|
|
pid_t child = 0;
|
|
|
|
s = -1;
|
|
for(i = 0; i < num_sockets; i++) {
|
|
if(FD_ISSET(fd_listenset[i],&r_fds)) {
|
|
s = fd_listenset[i];
|
|
/* Clear this so we don't look
|
|
at it again. */
|
|
FD_CLR(fd_listenset[i],&r_fds);
|
|
break;
|
|
}
|
|
}
|
|
|
|
smbd_set_server_fd(accept(s,&addr,&in_addrlen));
|
|
|
|
if (smbd_server_fd() == -1 && errno == EINTR)
|
|
continue;
|
|
|
|
if (smbd_server_fd() == -1) {
|
|
DEBUG(0,("open_sockets_smbd: accept: %s\n",
|
|
strerror(errno)));
|
|
continue;
|
|
}
|
|
|
|
/* Ensure child is set to blocking mode */
|
|
set_blocking(smbd_server_fd(),True);
|
|
|
|
if (smbd_server_fd() != -1 && interactive)
|
|
return True;
|
|
|
|
if (allowable_number_of_smbd_processes() &&
|
|
smbd_server_fd() != -1 &&
|
|
((child = sys_fork())==0)) {
|
|
char remaddr[INET6_ADDRSTRLEN];
|
|
|
|
/* Child code ... */
|
|
|
|
/* Stop zombies, the parent explicitly handles
|
|
* them, counting worker smbds. */
|
|
CatchChild();
|
|
|
|
/* close the listening socket(s) */
|
|
for(i = 0; i < num_sockets; i++)
|
|
close(fd_listenset[i]);
|
|
|
|
/* close our mDNS daemon handle */
|
|
dns_register_close(&dns_reg);
|
|
|
|
/* close our standard file
|
|
descriptors */
|
|
close_low_fds(False);
|
|
am_parent = 0;
|
|
|
|
set_socket_options(smbd_server_fd(),"SO_KEEPALIVE");
|
|
set_socket_options(smbd_server_fd(),
|
|
lp_socket_options());
|
|
|
|
/* this is needed so that we get decent entries
|
|
in smbstatus for port 445 connects */
|
|
set_remote_machine_name(get_peer_addr(smbd_server_fd(),
|
|
remaddr,
|
|
sizeof(remaddr)),
|
|
false);
|
|
|
|
/* Reset the state of the random
|
|
* number generation system, so
|
|
* children do not get the same random
|
|
* numbers as each other */
|
|
|
|
set_need_random_reseed();
|
|
/* tdb needs special fork handling - remove
|
|
* CLEAR_IF_FIRST flags */
|
|
if (tdb_reopen_all(1) == -1) {
|
|
DEBUG(0,("tdb_reopen_all failed.\n"));
|
|
smb_panic("tdb_reopen_all failed");
|
|
}
|
|
|
|
return True;
|
|
}
|
|
/* The parent doesn't need this socket */
|
|
close(smbd_server_fd());
|
|
|
|
/* Sun May 6 18:56:14 2001 ackley@cs.unm.edu:
|
|
Clear the closed fd info out of server_fd --
|
|
and more importantly, out of client_fd in
|
|
util_sock.c, to avoid a possible
|
|
getpeername failure if we reopen the logs
|
|
and use %I in the filename.
|
|
*/
|
|
|
|
smbd_set_server_fd(-1);
|
|
|
|
if (child != 0) {
|
|
add_child_pid(child);
|
|
}
|
|
|
|
/* Force parent to check log size after
|
|
* spawning child. Fix from
|
|
* klausr@ITAP.Physik.Uni-Stuttgart.De. The
|
|
* parent smbd will log to logserver.smb. It
|
|
* writes only two messages for each child
|
|
* started/finished. But each child writes,
|
|
* say, 50 messages also in logserver.smb,
|
|
* begining with the debug_count of the
|
|
* parent, before the child opens its own log
|
|
* file logserver.client. In a worst case
|
|
* scenario the size of logserver.smb would be
|
|
* checked after about 50*50=2500 messages
|
|
* (ca. 100kb).
|
|
* */
|
|
force_check_log_size();
|
|
|
|
} /* end for num */
|
|
} /* end while 1 */
|
|
|
|
/* NOTREACHED return True; */
|
|
}
|
|
|
|
/****************************************************************************
|
|
Reload printers
|
|
**************************************************************************/
|
|
void reload_printers(void)
|
|
{
|
|
int snum;
|
|
int n_services = lp_numservices();
|
|
int pnum = lp_servicenumber(PRINTERS_NAME);
|
|
const char *pname;
|
|
|
|
pcap_cache_reload();
|
|
|
|
/* remove stale printers */
|
|
for (snum = 0; snum < n_services; snum++) {
|
|
/* avoid removing PRINTERS_NAME or non-autoloaded printers */
|
|
if (snum == pnum || !(lp_snum_ok(snum) && lp_print_ok(snum) &&
|
|
lp_autoloaded(snum)))
|
|
continue;
|
|
|
|
pname = lp_printername(snum);
|
|
if (!pcap_printername_ok(pname)) {
|
|
DEBUG(3, ("removing stale printer %s\n", pname));
|
|
|
|
if (is_printer_published(NULL, snum, NULL))
|
|
nt_printer_publish(NULL, snum, SPOOL_DS_UNPUBLISH);
|
|
del_a_printer(pname);
|
|
lp_killservice(snum);
|
|
}
|
|
}
|
|
|
|
load_printers();
|
|
}
|
|
|
|
/****************************************************************************
|
|
Reload the services file.
|
|
**************************************************************************/
|
|
|
|
bool reload_services(bool test)
|
|
{
|
|
bool ret;
|
|
|
|
if (lp_loaded()) {
|
|
char *fname = lp_configfile();
|
|
if (file_exist(fname, NULL) &&
|
|
!strcsequal(fname, get_dyn_CONFIGFILE())) {
|
|
set_dyn_CONFIGFILE(fname);
|
|
test = False;
|
|
}
|
|
}
|
|
|
|
reopen_logs();
|
|
|
|
if (test && !lp_file_list_changed())
|
|
return(True);
|
|
|
|
lp_killunused(conn_snum_used);
|
|
|
|
ret = lp_load(get_dyn_CONFIGFILE(), False, False, True, True);
|
|
|
|
reload_printers();
|
|
|
|
/* perhaps the config filename is now set */
|
|
if (!test)
|
|
reload_services(True);
|
|
|
|
reopen_logs();
|
|
|
|
load_interfaces();
|
|
|
|
if (smbd_server_fd() != -1) {
|
|
set_socket_options(smbd_server_fd(),"SO_KEEPALIVE");
|
|
set_socket_options(smbd_server_fd(), lp_socket_options());
|
|
}
|
|
|
|
mangle_reset_cache();
|
|
reset_stat_cache();
|
|
|
|
/* this forces service parameters to be flushed */
|
|
set_current_service(NULL,0,True);
|
|
|
|
return(ret);
|
|
}
|
|
|
|
/****************************************************************************
|
|
Exit the server.
|
|
****************************************************************************/
|
|
|
|
/* Reasons for shutting down a server process. */
|
|
enum server_exit_reason { SERVER_EXIT_NORMAL, SERVER_EXIT_ABNORMAL };
|
|
|
|
static void exit_server_common(enum server_exit_reason how,
|
|
const char *const reason) NORETURN_ATTRIBUTE;
|
|
|
|
static void exit_server_common(enum server_exit_reason how,
|
|
const char *const reason)
|
|
{
|
|
static int firsttime=1;
|
|
|
|
if (!firsttime)
|
|
exit(0);
|
|
firsttime = 0;
|
|
|
|
change_to_root_user();
|
|
|
|
if (negprot_global_auth_context) {
|
|
(negprot_global_auth_context->free)(&negprot_global_auth_context);
|
|
}
|
|
|
|
conn_close_all();
|
|
|
|
invalidate_all_vuids();
|
|
|
|
/* 3 second timeout. */
|
|
print_notify_send_messages(smbd_messaging_context(), 3);
|
|
|
|
/* delete our entry in the connections database. */
|
|
yield_connection(NULL,"");
|
|
|
|
respond_to_all_remaining_local_messages();
|
|
|
|
#ifdef WITH_DFS
|
|
if (dcelogin_atmost_once) {
|
|
dfs_unlogin();
|
|
}
|
|
#endif
|
|
|
|
locking_end();
|
|
printing_end();
|
|
|
|
if (how != SERVER_EXIT_NORMAL) {
|
|
int oldlevel = DEBUGLEVEL;
|
|
|
|
DEBUGLEVEL = 10;
|
|
|
|
DEBUGSEP(0);
|
|
DEBUG(0,("Abnormal server exit: %s\n",
|
|
reason ? reason : "no explanation provided"));
|
|
DEBUGSEP(0);
|
|
|
|
log_stack_trace();
|
|
|
|
DEBUGLEVEL = oldlevel;
|
|
dump_core();
|
|
|
|
} else {
|
|
DEBUG(3,("Server exit (%s)\n",
|
|
(reason ? reason : "normal exit")));
|
|
}
|
|
|
|
exit(0);
|
|
}
|
|
|
|
void exit_server(const char *const explanation)
|
|
{
|
|
exit_server_common(SERVER_EXIT_ABNORMAL, explanation);
|
|
}
|
|
|
|
void exit_server_cleanly(const char *const explanation)
|
|
{
|
|
exit_server_common(SERVER_EXIT_NORMAL, explanation);
|
|
}
|
|
|
|
void exit_server_fault(void)
|
|
{
|
|
exit_server("critical server fault");
|
|
}
|
|
|
|
/****************************************************************************
|
|
Initialise connect, service and file structs.
|
|
****************************************************************************/
|
|
|
|
static bool init_structs(void )
|
|
{
|
|
/*
|
|
* Set the machine NETBIOS name if not already
|
|
* set from the config file.
|
|
*/
|
|
|
|
if (!init_names())
|
|
return False;
|
|
|
|
conn_init();
|
|
|
|
file_init();
|
|
|
|
/* for RPC pipes */
|
|
init_rpc_pipe_hnd();
|
|
|
|
init_dptrs();
|
|
|
|
secrets_init();
|
|
|
|
return True;
|
|
}
|
|
|
|
/*
|
|
* Send keepalive packets to our client
|
|
*/
|
|
static bool keepalive_fn(const struct timeval *now, void *private_data)
|
|
{
|
|
if (!send_keepalive(smbd_server_fd())) {
|
|
DEBUG( 2, ( "Keepalive failed - exiting.\n" ) );
|
|
return False;
|
|
}
|
|
return True;
|
|
}
|
|
|
|
/*
|
|
* Do the recurring check if we're idle
|
|
*/
|
|
static bool deadtime_fn(const struct timeval *now, void *private_data)
|
|
{
|
|
if ((conn_num_open() == 0)
|
|
|| (conn_idle_all(now->tv_sec))) {
|
|
DEBUG( 2, ( "Closing idle connection\n" ) );
|
|
messaging_send(smbd_messaging_context(), procid_self(),
|
|
MSG_SHUTDOWN, &data_blob_null);
|
|
return False;
|
|
}
|
|
|
|
return True;
|
|
}
|
|
|
|
|
|
/****************************************************************************
|
|
main program.
|
|
****************************************************************************/
|
|
|
|
/* Declare prototype for build_options() to avoid having to run it through
|
|
mkproto.h. Mixing $(builddir) and $(srcdir) source files in the current
|
|
prototype generation system is too complicated. */
|
|
|
|
extern void build_options(bool screen);
|
|
|
|
int main(int argc,const char *argv[])
|
|
{
|
|
/* shall I run as a daemon */
|
|
static bool is_daemon = False;
|
|
static bool interactive = False;
|
|
static bool Fork = True;
|
|
static bool no_process_group = False;
|
|
static bool log_stdout = False;
|
|
static char *ports = NULL;
|
|
static char *profile_level = NULL;
|
|
int opt;
|
|
poptContext pc;
|
|
bool print_build_options = False;
|
|
enum {
|
|
OPT_DAEMON = 1000,
|
|
OPT_INTERACTIVE,
|
|
OPT_FORK,
|
|
OPT_NO_PROCESS_GROUP,
|
|
OPT_LOG_STDOUT
|
|
};
|
|
struct poptOption long_options[] = {
|
|
POPT_AUTOHELP
|
|
{"daemon", 'D', POPT_ARG_NONE, NULL, OPT_DAEMON, "Become a daemon (default)" },
|
|
{"interactive", 'i', POPT_ARG_NONE, NULL, OPT_INTERACTIVE, "Run interactive (not a daemon)"},
|
|
{"foreground", 'F', POPT_ARG_NONE, NULL, OPT_FORK, "Run daemon in foreground (for daemontools, etc.)" },
|
|
{"no-process-group", '\0', POPT_ARG_NONE, NULL, OPT_NO_PROCESS_GROUP, "Don't create a new process group" },
|
|
{"log-stdout", 'S', POPT_ARG_NONE, NULL, OPT_LOG_STDOUT, "Log to stdout" },
|
|
{"build-options", 'b', POPT_ARG_NONE, NULL, 'b', "Print build options" },
|
|
{"port", 'p', POPT_ARG_STRING, &ports, 0, "Listen on the specified ports"},
|
|
{"profiling-level", 'P', POPT_ARG_STRING, &profile_level, 0, "Set profiling level","PROFILE_LEVEL"},
|
|
POPT_COMMON_SAMBA
|
|
POPT_COMMON_DYNCONFIG
|
|
POPT_TABLEEND
|
|
};
|
|
TALLOC_CTX *frame = talloc_stackframe(); /* Setup tos. */
|
|
|
|
TimeInit();
|
|
|
|
#ifdef HAVE_SET_AUTH_PARAMETERS
|
|
set_auth_parameters(argc,argv);
|
|
#endif
|
|
|
|
pc = poptGetContext("smbd", argc, argv, long_options, 0);
|
|
while((opt = poptGetNextOpt(pc)) != -1) {
|
|
switch (opt) {
|
|
case OPT_DAEMON:
|
|
is_daemon = true;
|
|
break;
|
|
case OPT_INTERACTIVE:
|
|
interactive = true;
|
|
break;
|
|
case OPT_FORK:
|
|
Fork = false;
|
|
break;
|
|
case OPT_NO_PROCESS_GROUP:
|
|
no_process_group = true;
|
|
break;
|
|
case OPT_LOG_STDOUT:
|
|
log_stdout = true;
|
|
break;
|
|
case 'b':
|
|
print_build_options = True;
|
|
break;
|
|
default:
|
|
d_fprintf(stderr, "\nInvalid option %s: %s\n\n",
|
|
poptBadOption(pc, 0), poptStrerror(opt));
|
|
poptPrintUsage(pc, stderr, 0);
|
|
exit(1);
|
|
}
|
|
}
|
|
poptFreeContext(pc);
|
|
|
|
if (interactive) {
|
|
Fork = False;
|
|
log_stdout = True;
|
|
}
|
|
|
|
setup_logging(argv[0],log_stdout);
|
|
|
|
if (print_build_options) {
|
|
build_options(True); /* Display output to screen as well as debug */
|
|
exit(0);
|
|
}
|
|
|
|
load_case_tables();
|
|
|
|
#ifdef HAVE_SETLUID
|
|
/* needed for SecureWare on SCO */
|
|
setluid(0);
|
|
#endif
|
|
|
|
sec_init();
|
|
|
|
set_remote_machine_name("smbd", False);
|
|
|
|
if (interactive && (DEBUGLEVEL >= 9)) {
|
|
talloc_enable_leak_report();
|
|
}
|
|
|
|
if (log_stdout && Fork) {
|
|
DEBUG(0,("ERROR: Can't log to stdout (-S) unless daemon is in foreground (-F) or interactive (-i)\n"));
|
|
exit(1);
|
|
}
|
|
|
|
/* we want to re-seed early to prevent time delays causing
|
|
client problems at a later date. (tridge) */
|
|
generate_random_buffer(NULL, 0);
|
|
|
|
/* make absolutely sure we run as root - to handle cases where people
|
|
are crazy enough to have it setuid */
|
|
|
|
gain_root_privilege();
|
|
gain_root_group_privilege();
|
|
|
|
fault_setup((void (*)(void *))exit_server_fault);
|
|
dump_core_setup("smbd");
|
|
|
|
CatchSignal(SIGTERM , SIGNAL_CAST sig_term);
|
|
CatchSignal(SIGHUP,SIGNAL_CAST sig_hup);
|
|
|
|
/* we are never interested in SIGPIPE */
|
|
BlockSignals(True,SIGPIPE);
|
|
|
|
#if defined(SIGFPE)
|
|
/* we are never interested in SIGFPE */
|
|
BlockSignals(True,SIGFPE);
|
|
#endif
|
|
|
|
#if defined(SIGUSR2)
|
|
/* We are no longer interested in USR2 */
|
|
BlockSignals(True,SIGUSR2);
|
|
#endif
|
|
|
|
/* POSIX demands that signals are inherited. If the invoking process has
|
|
* these signals masked, we will have problems, as we won't recieve them. */
|
|
BlockSignals(False, SIGHUP);
|
|
BlockSignals(False, SIGUSR1);
|
|
BlockSignals(False, SIGTERM);
|
|
|
|
/* we want total control over the permissions on created files,
|
|
so set our umask to 0 */
|
|
umask(0);
|
|
|
|
init_sec_ctx();
|
|
|
|
reopen_logs();
|
|
|
|
DEBUG(0,("smbd version %s started.\n", SAMBA_VERSION_STRING));
|
|
DEBUGADD(0,("%s\n", COPYRIGHT_STARTUP_MESSAGE));
|
|
|
|
DEBUG(2,("uid=%d gid=%d euid=%d egid=%d\n",
|
|
(int)getuid(),(int)getgid(),(int)geteuid(),(int)getegid()));
|
|
|
|
/* Output the build options to the debug log */
|
|
build_options(False);
|
|
|
|
if (sizeof(uint16) < 2 || sizeof(uint32) < 4) {
|
|
DEBUG(0,("ERROR: Samba is not configured correctly for the word size on your machine\n"));
|
|
exit(1);
|
|
}
|
|
|
|
/*
|
|
* Do this before reload_services.
|
|
*/
|
|
|
|
if (!reload_services(False))
|
|
return(-1);
|
|
|
|
init_structs();
|
|
|
|
#ifdef WITH_PROFILE
|
|
if (!profile_setup(smbd_messaging_context(), False)) {
|
|
DEBUG(0,("ERROR: failed to setup profiling\n"));
|
|
return -1;
|
|
}
|
|
if (profile_level != NULL) {
|
|
int pl = atoi(profile_level);
|
|
struct server_id src;
|
|
|
|
DEBUG(1, ("setting profiling level: %s\n",profile_level));
|
|
src.pid = getpid();
|
|
set_profile_level(pl, src);
|
|
}
|
|
#endif
|
|
|
|
DEBUG(3,( "loaded services\n"));
|
|
|
|
if (!is_daemon && !is_a_socket(0)) {
|
|
if (!interactive)
|
|
DEBUG(0,("standard input is not a socket, assuming -D option\n"));
|
|
|
|
/*
|
|
* Setting is_daemon here prevents us from eventually calling
|
|
* the open_sockets_inetd()
|
|
*/
|
|
|
|
is_daemon = True;
|
|
}
|
|
|
|
if (is_daemon && !interactive) {
|
|
DEBUG( 3, ( "Becoming a daemon.\n" ) );
|
|
become_daemon(Fork, no_process_group);
|
|
}
|
|
|
|
#if HAVE_SETPGID
|
|
/*
|
|
* If we're interactive we want to set our own process group for
|
|
* signal management.
|
|
*/
|
|
if (interactive && !no_process_group)
|
|
setpgid( (pid_t)0, (pid_t)0);
|
|
#endif
|
|
|
|
if (!directory_exist(lp_lockdir(), NULL))
|
|
mkdir(lp_lockdir(), 0755);
|
|
|
|
if (is_daemon)
|
|
pidfile_create("smbd");
|
|
|
|
/* Setup all the TDB's - including CLEAR_IF_FIRST tdb's. */
|
|
|
|
if (smbd_messaging_context() == NULL)
|
|
exit(1);
|
|
|
|
if (smbd_memcache() == NULL) {
|
|
exit(1);
|
|
}
|
|
|
|
memcache_set_global(smbd_memcache());
|
|
|
|
/* Initialise the password backed before the global_sam_sid
|
|
to ensure that we fetch from ldap before we make a domain sid up */
|
|
|
|
if(!initialize_password_db(False, smbd_event_context()))
|
|
exit(1);
|
|
|
|
if (!secrets_init()) {
|
|
DEBUG(0, ("ERROR: smbd can not open secrets.tdb\n"));
|
|
exit(1);
|
|
}
|
|
|
|
if(!get_global_sam_sid()) {
|
|
DEBUG(0,("ERROR: Samba cannot create a SAM SID.\n"));
|
|
exit(1);
|
|
}
|
|
|
|
if (!session_init())
|
|
exit(1);
|
|
|
|
if (!connections_init(True))
|
|
exit(1);
|
|
|
|
if (!locking_init())
|
|
exit(1);
|
|
|
|
namecache_enable();
|
|
|
|
if (!init_registry())
|
|
exit(1);
|
|
|
|
#if 0
|
|
if (!init_svcctl_db())
|
|
exit(1);
|
|
#endif
|
|
|
|
if (!print_backend_init(smbd_messaging_context()))
|
|
exit(1);
|
|
|
|
if (!init_guest_info()) {
|
|
DEBUG(0,("ERROR: failed to setup guest info.\n"));
|
|
return -1;
|
|
}
|
|
|
|
/* only start the background queue daemon if we are
|
|
running as a daemon -- bad things will happen if
|
|
smbd is launched via inetd and we fork a copy of
|
|
ourselves here */
|
|
|
|
if ( is_daemon && !interactive )
|
|
start_background_queue();
|
|
|
|
/* Always attempt to initialize DMAPI. We will only use it later if
|
|
* lp_dmapi_support is set on the share, but we need a single global
|
|
* session to work with.
|
|
*/
|
|
dmapi_init_session();
|
|
|
|
if (!open_sockets_smbd(is_daemon, interactive, ports))
|
|
exit(1);
|
|
|
|
/*
|
|
* everything after this point is run after the fork()
|
|
*/
|
|
|
|
static_init_rpc;
|
|
|
|
init_modules();
|
|
|
|
/* Possibly reload the services file. Only worth doing in
|
|
* daemon mode. In inetd mode, we know we only just loaded this.
|
|
*/
|
|
if (is_daemon) {
|
|
reload_services(True);
|
|
}
|
|
|
|
if (!init_account_policy()) {
|
|
DEBUG(0,("Could not open account policy tdb.\n"));
|
|
exit(1);
|
|
}
|
|
|
|
if (*lp_rootdir()) {
|
|
if (sys_chroot(lp_rootdir()) == 0)
|
|
DEBUG(2,("Changed root to %s\n", lp_rootdir()));
|
|
}
|
|
|
|
/* Setup oplocks */
|
|
if (!init_oplocks(smbd_messaging_context()))
|
|
exit(1);
|
|
|
|
/* Setup aio signal handler. */
|
|
initialize_async_io_handler();
|
|
|
|
/*
|
|
* For clustering, we need to re-init our ctdbd connection after the
|
|
* fork
|
|
*/
|
|
if (!NT_STATUS_IS_OK(messaging_reinit(smbd_messaging_context())))
|
|
exit(1);
|
|
|
|
/* register our message handlers */
|
|
messaging_register(smbd_messaging_context(), NULL,
|
|
MSG_SMB_FORCE_TDIS, msg_force_tdis);
|
|
|
|
if ((lp_keepalive() != 0)
|
|
&& !(event_add_idle(smbd_event_context(), NULL,
|
|
timeval_set(lp_keepalive(), 0),
|
|
"keepalive", keepalive_fn,
|
|
NULL))) {
|
|
DEBUG(0, ("Could not add keepalive event\n"));
|
|
exit(1);
|
|
}
|
|
|
|
if (!(event_add_idle(smbd_event_context(), NULL,
|
|
timeval_set(IDLE_CLOSED_TIMEOUT, 0),
|
|
"deadtime", deadtime_fn, NULL))) {
|
|
DEBUG(0, ("Could not add deadtime event\n"));
|
|
exit(1);
|
|
}
|
|
|
|
TALLOC_FREE(frame);
|
|
|
|
smbd_process();
|
|
|
|
namecache_shutdown();
|
|
|
|
exit_server_cleanly(NULL);
|
|
return(0);
|
|
}
|