xref: /titanic_41/usr/src/cmd/smbsrv/smbd/smbd_main.c (revision aff4bce51ecc47df7e5a6351b7cee6bc20408c63)
1 /*
2  * CDDL HEADER START
3  *
4  * The contents of this file are subject to the terms of the
5  * Common Development and Distribution License (the "License").
6  * You may not use this file except in compliance with the License.
7  *
8  * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
9  * or http://www.opensolaris.org/os/licensing.
10  * See the License for the specific language governing permissions
11  * and limitations under the License.
12  *
13  * When distributing Covered Code, include this CDDL HEADER in each
14  * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
15  * If applicable, add the following below this CDDL HEADER, with the
16  * fields enclosed by brackets "[]" replaced with your own identifying
17  * information: Portions Copyright [yyyy] [name of copyright owner]
18  *
19  * CDDL HEADER END
20  */
21 /*
22  * Copyright 2009 Sun Microsystems, Inc.  All rights reserved.
23  * Use is subject to license terms.
24  */
25 
26 #include <sys/types.h>
27 #include <sys/stat.h>
28 #include <sys/ioccom.h>
29 #include <sys/corectl.h>
30 #include <stdio.h>
31 #include <string.h>
32 #include <strings.h>
33 #include <stdlib.h>
34 #include <unistd.h>
35 #include <stdarg.h>
36 #include <fcntl.h>
37 #include <wait.h>
38 #include <signal.h>
39 #include <atomic.h>
40 #include <libscf.h>
41 #include <limits.h>
42 #include <priv_utils.h>
43 #include <door.h>
44 #include <errno.h>
45 #include <pthread.h>
46 #include <time.h>
47 #include <libscf.h>
48 #include <zone.h>
49 #include <libgen.h>
50 #include <pwd.h>
51 #include <grp.h>
52 
53 #include <smbsrv/smb_door_svc.h>
54 #include <smbsrv/smb_ioctl.h>
55 #include <smbsrv/libsmb.h>
56 #include <smbsrv/libsmbns.h>
57 #include <smbsrv/libsmbrdr.h>
58 #include <smbsrv/libmlsvc.h>
59 #include "smbd.h"
60 
61 #define	DRV_DEVICE_PATH	"/devices/pseudo/smbsrv@0:smbsrv"
62 #define	SMB_DBDIR "/var/smb"
63 
64 static void *smbd_nbt_listener(void *);
65 static void *smbd_tcp_listener(void *);
66 static void *smbd_nbt_receiver(void *);
67 static void *smbd_tcp_receiver(void *);
68 
69 static int smbd_daemonize_init(void);
70 static void smbd_daemonize_fini(int, int);
71 static int smb_init_daemon_priv(int, uid_t, gid_t);
72 
73 static int smbd_kernel_bind(void);
74 static void smbd_kernel_unbind(void);
75 static int smbd_already_running(void);
76 
77 static int smbd_service_init(void);
78 static void smbd_service_fini(void);
79 
80 static int smbd_setup_options(int argc, char *argv[]);
81 static void smbd_usage(FILE *fp);
82 static void smbd_report(const char *fmt, ...);
83 
84 static void smbd_sig_handler(int sig);
85 
86 static int32_t smbd_gmtoff(void);
87 static int smbd_localtime_init(void);
88 static void *smbd_localtime_monitor(void *arg);
89 
90 static pthread_t localtime_thr;
91 
92 static int smbd_refresh_init(void);
93 static void smbd_refresh_fini(void);
94 static void *smbd_refresh_monitor(void *);
95 static void smbd_refresh_dc(void);
96 
97 static void *smbd_nbt_receiver(void *);
98 static void *smbd_nbt_listener(void *);
99 
100 static void *smbd_tcp_receiver(void *);
101 static void *smbd_tcp_listener(void *);
102 
103 static int smbd_start_listeners(void);
104 static void smbd_stop_listeners(void);
105 static int smbd_kernel_start(void);
106 
107 static void smbd_fatal_error(const char *);
108 
109 static pthread_t refresh_thr;
110 static pthread_cond_t refresh_cond;
111 static pthread_mutex_t refresh_mutex;
112 
113 smbd_t smbd;
114 
115 /*
116  * smbd user land daemon
117  *
118  * Use SMF error codes only on return or exit.
119  */
120 int
121 main(int argc, char *argv[])
122 {
123 	struct sigaction	act;
124 	sigset_t		set;
125 	uid_t			uid;
126 	int			pfd = -1;
127 	uint_t			sigval;
128 
129 	smbd.s_pname = basename(argv[0]);
130 	openlog(smbd.s_pname, LOG_PID | LOG_NOWAIT, LOG_DAEMON);
131 
132 	if (smbd_setup_options(argc, argv) != 0)
133 		return (SMF_EXIT_ERR_FATAL);
134 
135 	if ((uid = getuid()) != smbd.s_uid) {
136 		smbd_report("user %d: %s", uid, strerror(EPERM));
137 		return (SMF_EXIT_ERR_FATAL);
138 	}
139 
140 	if (getzoneid() != GLOBAL_ZONEID) {
141 		smbd_report("non-global zones are not supported");
142 		return (SMF_EXIT_ERR_FATAL);
143 	}
144 
145 	if (is_system_labeled()) {
146 		smbd_report("Trusted Extensions not supported");
147 		return (SMF_EXIT_ERR_FATAL);
148 	}
149 
150 	if (smbd_already_running())
151 		return (SMF_EXIT_OK);
152 
153 	(void) sigfillset(&set);
154 	(void) sigdelset(&set, SIGABRT);
155 
156 	(void) sigfillset(&act.sa_mask);
157 	act.sa_handler = smbd_sig_handler;
158 	act.sa_flags = 0;
159 
160 	(void) sigaction(SIGTERM, &act, NULL);
161 	(void) sigaction(SIGHUP, &act, NULL);
162 	(void) sigaction(SIGINT, &act, NULL);
163 	(void) sigaction(SIGPIPE, &act, NULL);
164 
165 	(void) sigdelset(&set, SIGTERM);
166 	(void) sigdelset(&set, SIGHUP);
167 	(void) sigdelset(&set, SIGINT);
168 	(void) sigdelset(&set, SIGPIPE);
169 
170 	if (smbd.s_fg) {
171 		(void) sigdelset(&set, SIGTSTP);
172 		(void) sigdelset(&set, SIGTTIN);
173 		(void) sigdelset(&set, SIGTTOU);
174 
175 		if (smbd_service_init() != 0) {
176 			smbd_report("service initialization failed");
177 			exit(SMF_EXIT_ERR_FATAL);
178 		}
179 	} else {
180 		/*
181 		 * "pfd" is a pipe descriptor -- any fatal errors
182 		 * during subsequent initialization of the child
183 		 * process should be written to this pipe and the
184 		 * parent will report this error as the exit status.
185 		 */
186 		pfd = smbd_daemonize_init();
187 
188 		if (smbd_service_init() != 0) {
189 			smbd_report("daemon initialization failed");
190 			exit(SMF_EXIT_ERR_FATAL);
191 		}
192 
193 		smbd_daemonize_fini(pfd, SMF_EXIT_OK);
194 	}
195 
196 	(void) atexit(smbd_service_fini);
197 
198 	while (!smbd.s_shutting_down) {
199 		if (smbd.s_sigval == 0 && smbd.s_refreshes == 0)
200 			(void) sigsuspend(&set);
201 
202 		sigval = atomic_swap_uint(&smbd.s_sigval, 0);
203 
204 		switch (sigval) {
205 		case 0:
206 		case SIGPIPE:
207 			break;
208 
209 		case SIGHUP:
210 			syslog(LOG_DEBUG, "refresh requested");
211 			(void) pthread_cond_signal(&refresh_cond);
212 			break;
213 
214 		default:
215 			/*
216 			 * Typically SIGINT or SIGTERM.
217 			 */
218 			smbd.s_shutting_down = B_TRUE;
219 			break;
220 		}
221 	}
222 
223 	smbd_service_fini();
224 	closelog();
225 	return ((smbd.s_fatal_error) ? SMF_EXIT_ERR_FATAL : SMF_EXIT_OK);
226 }
227 
228 /*
229  * This function will fork off a child process,
230  * from which only the child will return.
231  *
232  * Use SMF error codes only on exit.
233  */
234 static int
235 smbd_daemonize_init(void)
236 {
237 	int status, pfds[2];
238 	sigset_t set, oset;
239 	pid_t pid;
240 	int rc;
241 
242 	/*
243 	 * Reset privileges to the minimum set required. We continue
244 	 * to run as root to create and access files in /var.
245 	 */
246 	rc = smb_init_daemon_priv(PU_RESETGROUPS, smbd.s_uid, smbd.s_gid);
247 
248 	if (rc != 0) {
249 		smbd_report("insufficient privileges");
250 		exit(SMF_EXIT_ERR_FATAL);
251 	}
252 
253 	/*
254 	 * Block all signals prior to the fork and leave them blocked in the
255 	 * parent so we don't get in a situation where the parent gets SIGINT
256 	 * and returns non-zero exit status and the child is actually running.
257 	 * In the child, restore the signal mask once we've done our setsid().
258 	 */
259 	(void) sigfillset(&set);
260 	(void) sigdelset(&set, SIGABRT);
261 	(void) sigprocmask(SIG_BLOCK, &set, &oset);
262 
263 	if (pipe(pfds) == -1) {
264 		smbd_report("unable to create pipe");
265 		exit(SMF_EXIT_ERR_FATAL);
266 	}
267 
268 	closelog();
269 
270 	if ((pid = fork()) == -1) {
271 		openlog(smbd.s_pname, LOG_PID | LOG_NOWAIT, LOG_DAEMON);
272 		smbd_report("unable to fork");
273 		closelog();
274 		exit(SMF_EXIT_ERR_FATAL);
275 	}
276 
277 	/*
278 	 * If we're the parent process, wait for either the child to send us
279 	 * the appropriate exit status over the pipe or for the read to fail
280 	 * (presumably with 0 for EOF if our child terminated abnormally).
281 	 * If the read fails, exit with either the child's exit status if it
282 	 * exited or with SMF_EXIT_ERR_FATAL if it died from a fatal signal.
283 	 */
284 	if (pid != 0) {
285 		(void) close(pfds[1]);
286 
287 		if (read(pfds[0], &status, sizeof (status)) == sizeof (status))
288 			_exit(status);
289 
290 		if (waitpid(pid, &status, 0) == pid && WIFEXITED(status))
291 			_exit(WEXITSTATUS(status));
292 
293 		_exit(SMF_EXIT_ERR_FATAL);
294 	}
295 
296 	openlog(smbd.s_pname, LOG_PID | LOG_NOWAIT, LOG_DAEMON);
297 	(void) setsid();
298 	(void) sigprocmask(SIG_SETMASK, &oset, NULL);
299 	(void) chdir("/");
300 	(void) umask(022);
301 	(void) close(pfds[0]);
302 
303 	return (pfds[1]);
304 }
305 
306 /*
307  * This function is based on __init_daemon_priv() and replaces
308  * __init_daemon_priv() since we want smbd to have all privileges so that it
309  * can execute map/unmap commands with all privileges during share
310  * connection/disconnection.  Unused privileges are disabled until command
311  * execution.  The permitted and the limit set contains all privileges.  The
312  * inheritable set contains no privileges.
313  */
314 
315 static const char root_cp[] = "/core.%f.%t";
316 static const char daemon_cp[] = "/var/tmp/core.%f.%t";
317 
318 static int
319 smb_init_daemon_priv(int flags, uid_t uid, gid_t gid)
320 {
321 	priv_set_t *perm = NULL;
322 	int ret = -1;
323 	char buf[1024];
324 
325 	/*
326 	 * This is not a significant failure: it allows us to start programs
327 	 * with sufficient privileges and with the proper uid.   We don't
328 	 * care enough about the extra groups in that case.
329 	 */
330 	if (flags & PU_RESETGROUPS)
331 		(void) setgroups(0, NULL);
332 
333 	if (gid != (gid_t)-1 && setgid(gid) != 0)
334 		goto end;
335 
336 	perm = priv_allocset();
337 	if (perm == NULL)
338 		goto end;
339 
340 	/* E = P */
341 	(void) getppriv(PRIV_PERMITTED, perm);
342 	(void) setppriv(PRIV_SET, PRIV_EFFECTIVE, perm);
343 
344 	/* Now reset suid and euid */
345 	if (uid != (uid_t)-1 && setreuid(uid, uid) != 0)
346 		goto end;
347 
348 	/* I = 0 */
349 	priv_emptyset(perm);
350 	ret = setppriv(PRIV_SET, PRIV_INHERITABLE, perm);
351 end:
352 	priv_freeset(perm);
353 
354 	if (core_get_process_path(buf, sizeof (buf), getpid()) == 0 &&
355 	    strcmp(buf, "core") == 0) {
356 
357 		if ((uid == (uid_t)-1 ? geteuid() : uid) == 0) {
358 			(void) core_set_process_path(root_cp, sizeof (root_cp),
359 			    getpid());
360 		} else {
361 			(void) core_set_process_path(daemon_cp,
362 			    sizeof (daemon_cp), getpid());
363 		}
364 	}
365 	(void) setpflags(__PROC_PROTECT, 0);
366 
367 	return (ret);
368 }
369 
370 /*
371  * Most privileges, except the ones that are required for smbd, are turn off
372  * in the effective set.  They will be turn on when needed for command
373  * execution during share connection/disconnection.
374  */
375 static void
376 smbd_daemonize_fini(int fd, int exit_status)
377 {
378 	priv_set_t *pset;
379 
380 	/*
381 	 * Now that we're running, if a pipe fd was specified, write an exit
382 	 * status to it to indicate that our parent process can safely detach.
383 	 * Then proceed to loading the remaining non-built-in modules.
384 	 */
385 	if (fd >= 0)
386 		(void) write(fd, &exit_status, sizeof (exit_status));
387 
388 	(void) close(fd);
389 
390 	if ((fd = open("/dev/null", O_RDWR)) >= 0) {
391 		(void) fcntl(fd, F_DUP2FD, STDIN_FILENO);
392 		(void) fcntl(fd, F_DUP2FD, STDOUT_FILENO);
393 		(void) fcntl(fd, F_DUP2FD, STDERR_FILENO);
394 		(void) close(fd);
395 	}
396 
397 	pset = priv_allocset();
398 	if (pset == NULL)
399 		return;
400 
401 	priv_emptyset(pset);
402 
403 	/* list of privileges for smbd */
404 	(void) priv_addset(pset, PRIV_NET_MAC_AWARE);
405 	(void) priv_addset(pset, PRIV_NET_PRIVADDR);
406 	(void) priv_addset(pset, PRIV_PROC_AUDIT);
407 	(void) priv_addset(pset, PRIV_SYS_DEVICES);
408 	(void) priv_addset(pset, PRIV_SYS_SMB);
409 
410 	priv_inverse(pset);
411 
412 	/* turn off unneeded privileges */
413 	(void) setppriv(PRIV_OFF, PRIV_EFFECTIVE, pset);
414 
415 	priv_freeset(pset);
416 
417 	/* reenable core dumps */
418 	__fini_daemon_priv(NULL);
419 }
420 
421 /*
422  * smbd_service_init
423  */
424 static int
425 smbd_service_init(void)
426 {
427 	int	rc;
428 
429 	smbd.s_pid = getpid();
430 	if ((mkdir(SMB_DBDIR, 0700) < 0) && (errno != EEXIST)) {
431 		smbd_report("mkdir %s: %s", SMB_DBDIR, strerror(errno));
432 		return (1);
433 	}
434 
435 	if ((rc = smb_ccache_init(SMB_VARRUN_DIR, SMB_CCACHE_FILE)) != 0) {
436 		if (rc == -1)
437 			smbd_report("mkdir %s: %s", SMB_VARRUN_DIR,
438 			    strerror(errno));
439 		else
440 			smbd_report("unable to set KRB5CCNAME");
441 		return (1);
442 	}
443 
444 
445 	(void) oem_language_set("english");
446 
447 	if (!smb_wka_init()) {
448 		smbd_report("out of memory");
449 		return (1);
450 	}
451 
452 	if (smb_nicmon_start(SMBD_DEFAULT_INSTANCE_FMRI) != 0)
453 		smbd_report("NIC monitoring failed to start");
454 
455 	(void) dyndns_start();
456 	smbrdr_init();
457 
458 	if (smb_netbios_start() != 0)
459 		smbd_report("NetBIOS services failed to start");
460 	else
461 		smbd_report("NetBIOS services started");
462 
463 	/* Get the ID map client handle */
464 	if ((rc = smb_idmap_start()) != 0) {
465 		smbd_report("no idmap handle");
466 		return (rc);
467 	}
468 
469 	smbd.s_secmode = smb_config_get_secmode();
470 	if ((rc = nt_domain_init(smbd.s_secmode)) != 0) {
471 		if (rc == SMB_DOMAIN_NOMACHINE_SID) {
472 			smbd_report(
473 			    "no machine SID: check idmap configuration");
474 			return (rc);
475 		}
476 	}
477 
478 	smb_ads_init();
479 	if ((rc = mlsvc_init()) != 0) {
480 		smbd_report("msrpc initialization failed");
481 		return (rc);
482 	}
483 
484 	if (smbd.s_secmode == SMB_SECMODE_DOMAIN)
485 		if (smbd_locate_dc_start() != 0)
486 			smbd_report("dc discovery failed %s", strerror(errno));
487 
488 	smbd.s_door_srv = smb_door_srv_start();
489 	if (smbd.s_door_srv < 0)
490 		return (rc);
491 
492 	if ((rc = smbd_refresh_init()) != 0)
493 		return (rc);
494 
495 	dyndns_update_zones();
496 
497 	(void) smbd_localtime_init();
498 
499 	smbd.s_door_opipe = smbd_opipe_dsrv_start();
500 	if (smbd.s_door_opipe < 0) {
501 		smbd_report("opipe initialization failed %s",
502 		    strerror(errno));
503 		return (rc);
504 	}
505 
506 	(void) smb_lgrp_start();
507 
508 	smb_pwd_init(B_TRUE);
509 
510 	if ((rc = smb_shr_start()) != 0) {
511 		smbd_report("share initialization failed: %s", strerror(errno));
512 		return (rc);
513 	}
514 
515 	smbd.s_door_lmshr = smb_share_dsrv_start();
516 	if (smbd.s_door_lmshr < 0) {
517 		smbd_report("share initialization failed");
518 	}
519 
520 	if ((rc = smbd_kernel_bind()) != 0) {
521 		smbd_report("kernel bind error: %s", strerror(errno));
522 		return (rc);
523 	}
524 
525 	if ((rc = smb_shr_load()) != 0) {
526 		smbd_report("failed to start loading shares: %s",
527 		    strerror(errno));
528 		return (rc);
529 	}
530 
531 	return (0);
532 }
533 
534 /*
535  * Close the kernel service and shutdown smbd services.
536  * This function is registered with atexit(): ensure that anything
537  * called from here is safe to be called multiple times.
538  */
539 static void
540 smbd_service_fini(void)
541 {
542 	smbd_opipe_dsrv_stop();
543 	smb_wka_fini();
544 	smbd_refresh_fini();
545 	smbd_kernel_unbind();
546 	smb_door_srv_stop();
547 	smb_share_dsrv_stop();
548 	smb_shr_stop();
549 	dyndns_stop();
550 	smb_nicmon_stop();
551 	smb_idmap_stop();
552 	smb_lgrp_stop();
553 	smb_ccache_remove(SMB_CCACHE_PATH);
554 	smb_pwd_fini();
555 	nt_domain_fini();
556 	mlsvc_fini();
557 	smb_ads_fini();
558 }
559 
560 
561 /*
562  * smbd_refresh_init()
563  *
564  * SMB service refresh thread initialization.  This thread waits for a
565  * refresh event and updates the daemon's view of the configuration
566  * before going back to sleep.
567  */
568 static int
569 smbd_refresh_init()
570 {
571 	pthread_attr_t		tattr;
572 	pthread_condattr_t	cattr;
573 	int			rc;
574 
575 	(void) pthread_condattr_init(&cattr);
576 	(void) pthread_cond_init(&refresh_cond, &cattr);
577 	(void) pthread_condattr_destroy(&cattr);
578 
579 	(void) pthread_mutex_init(&refresh_mutex, NULL);
580 
581 	(void) pthread_attr_init(&tattr);
582 	(void) pthread_attr_setdetachstate(&tattr, PTHREAD_CREATE_DETACHED);
583 	rc = pthread_create(&refresh_thr, &tattr, smbd_refresh_monitor, 0);
584 	(void) pthread_attr_destroy(&tattr);
585 
586 	return (rc);
587 }
588 
589 /*
590  * smbd_refresh_fini()
591  *
592  * Stop the refresh thread.
593  */
594 static void
595 smbd_refresh_fini()
596 {
597 	(void) pthread_cancel(refresh_thr);
598 
599 	(void) pthread_cond_destroy(&refresh_cond);
600 	(void) pthread_mutex_destroy(&refresh_mutex);
601 }
602 
603 /*
604  * smbd_refresh_monitor()
605  *
606  * Wait for a refresh event. When this thread wakes up, update the
607  * smbd configuration from the SMF config information then go back to
608  * wait for the next refresh.
609  */
610 /*ARGSUSED*/
611 static void *
612 smbd_refresh_monitor(void *arg)
613 {
614 	smb_kmod_cfg_t	cfg;
615 	int		error;
616 
617 	while (!smbd.s_shutting_down) {
618 		(void) pthread_mutex_lock(&refresh_mutex);
619 		while ((atomic_swap_uint(&smbd.s_refreshes, 0) == 0) &&
620 		    (!smbd.s_shutting_down))
621 			(void) pthread_cond_wait(&refresh_cond, &refresh_mutex);
622 		(void) pthread_mutex_unlock(&refresh_mutex);
623 
624 		if (smbd.s_shutting_down) {
625 			syslog(LOG_DEBUG, "shutting down");
626 			exit((smbd.s_fatal_error) ? SMF_EXIT_ERR_FATAL :
627 			    SMF_EXIT_OK);
628 		}
629 
630 		/*
631 		 * We've been woken up by a refresh event so go do
632 		 * what is necessary.
633 		 */
634 		smb_ads_refresh();
635 		smb_ccache_remove(SMB_CCACHE_PATH);
636 
637 		/*
638 		 * Start the dyndns thread, if required.
639 		 * Clear the DNS zones for the existing interfaces
640 		 * before updating the NIC interface list.
641 		 */
642 		(void) dyndns_start();
643 		dyndns_clear_zones();
644 
645 		/* re-initialize NIC table */
646 		if (smb_nic_init() != 0)
647 			smbd_report("failed to get NIC information");
648 		smb_netbios_name_reconfig();
649 		smb_browser_reconfig();
650 		smbd_refresh_dc();
651 		dyndns_update_zones();
652 
653 		if (smbd_set_netlogon_cred()) {
654 			/*
655 			 * Restart required because the domain changed
656 			 * or the credential chain setup failed.
657 			 */
658 			if (smb_smf_restart_service() != 0) {
659 				syslog(LOG_ERR,
660 				    "unable to restart smb service. "
661 				    "Run 'svcs -xv smb/server' for more "
662 				    "information.");
663 				smbd.s_shutting_down = B_TRUE;
664 				exit(SMF_EXIT_OK);
665 			}
666 
667 			break;
668 		}
669 
670 		if (!smbd.s_kbound) {
671 			error = smbd_kernel_bind();
672 			if (error != 0)
673 				smbd_report("kernel bind error: %s",
674 				    strerror(error));
675 			else
676 				(void) smb_shr_load();
677 
678 			continue;
679 		}
680 
681 		(void) smb_shr_load();
682 
683 		smb_load_kconfig(&cfg);
684 		error = smb_kmod_setcfg(&cfg);
685 		if (error < 0)
686 			smbd_report("configuration update failed: %s",
687 			    strerror(error));
688 	}
689 
690 	return (NULL);
691 }
692 
693 /*
694  * Update DC information on a refresh.
695  */
696 static void
697 smbd_refresh_dc(void)
698 {
699 	char fqdomain[MAXHOSTNAMELEN];
700 	if (smb_config_get_secmode() != SMB_SECMODE_DOMAIN)
701 		return;
702 
703 	if (smb_getfqdomainname(fqdomain, MAXHOSTNAMELEN))
704 		return;
705 
706 	if (smb_locate_dc(fqdomain, "", NULL))
707 		smbd_report("DC discovery failed");
708 }
709 
710 void
711 smbd_set_secmode(int secmode)
712 {
713 	switch (secmode) {
714 	case SMB_SECMODE_WORKGRP:
715 	case SMB_SECMODE_DOMAIN:
716 		(void) smb_config_set_secmode(secmode);
717 		smbd.s_secmode = secmode;
718 		break;
719 
720 	default:
721 		syslog(LOG_ERR, "invalid security mode: %d", secmode);
722 		syslog(LOG_ERR, "entering maintenance mode");
723 		(void) smb_smf_maintenance_mode();
724 	}
725 }
726 
727 /*
728  * If the door has already been opened by another process (non-zero pid
729  * in target), we assume that another smbd is already running.  If there
730  * is a race here, it will be caught later when smbsrv is opened because
731  * only one process is allowed to open the device at a time.
732  */
733 static int
734 smbd_already_running(void)
735 {
736 	door_info_t info;
737 	int door;
738 
739 	if ((door = open(SMB_DR_SVC_NAME, O_RDONLY)) < 0)
740 		return (0);
741 
742 	if (door_info(door, &info) < 0)
743 		return (0);
744 
745 	if (info.di_target > 0) {
746 		smbd_report("already running: pid %ld\n", info.di_target);
747 		(void) close(door);
748 		return (1);
749 	}
750 
751 	(void) close(door);
752 	return (0);
753 }
754 
755 /*
756  * smbd_kernel_bind
757  *
758  * This function open the smbsrv device and start the kernel service.
759  */
760 static int
761 smbd_kernel_bind(void)
762 {
763 	int rc;
764 
765 	smbd_kernel_unbind();
766 
767 	rc = smb_kmod_bind();
768 	if (rc == 0) {
769 		rc = smbd_kernel_start();
770 		if (rc != 0)
771 			smb_kmod_unbind();
772 		else
773 			smbd.s_kbound = B_TRUE;
774 	}
775 	return (rc);
776 }
777 
778 static int
779 smbd_kernel_start(void)
780 {
781 	smb_kmod_cfg_t	cfg;
782 	int		rc;
783 
784 	smb_load_kconfig(&cfg);
785 	rc = smb_kmod_setcfg(&cfg);
786 	if (rc != 0)
787 		return (rc);
788 
789 	rc = smb_kmod_setgmtoff(smbd_gmtoff());
790 	if (rc != 0)
791 		return (rc);
792 
793 	rc = smb_kmod_start(smbd.s_door_opipe, smbd.s_door_lmshr,
794 	    smbd.s_door_srv);
795 	if (rc != 0)
796 		return (rc);
797 
798 	rc = smbd_start_listeners();
799 	if (rc != 0)
800 		return (rc);
801 
802 	return (0);
803 }
804 
805 /*
806  * smbd_kernel_unbind
807  */
808 static void
809 smbd_kernel_unbind(void)
810 {
811 	smbd_stop_listeners();
812 	smb_kmod_unbind();
813 	smbd.s_kbound = B_FALSE;
814 }
815 
816 /*
817  * Initialization of the localtime thread.
818  * Returns 0 on success, an error number if thread creation fails.
819  */
820 
821 int
822 smbd_localtime_init(void)
823 {
824 	pthread_attr_t tattr;
825 	int rc;
826 
827 	(void) pthread_attr_init(&tattr);
828 	(void) pthread_attr_setdetachstate(&tattr, PTHREAD_CREATE_DETACHED);
829 	rc = pthread_create(&localtime_thr, &tattr, smbd_localtime_monitor, 0);
830 	(void) pthread_attr_destroy(&tattr);
831 	return (rc);
832 }
833 
834 /*
835  * Local time thread to kernel land.
836  * Send local gmtoff to kernel module one time at startup
837  * and each time it changes (up to twice a year).
838  * Local gmtoff is checked once every 15 minutes and
839  * since some timezones are aligned on half and qtr hour boundaries,
840  * once an hour would likely suffice.
841  */
842 
843 /*ARGSUSED*/
844 static void *
845 smbd_localtime_monitor(void *arg)
846 {
847 	struct tm local_tm;
848 	time_t secs;
849 	int32_t gmtoff, last_gmtoff = -1;
850 	int timeout;
851 	int error;
852 
853 	for (;;) {
854 		gmtoff = smbd_gmtoff();
855 
856 		if ((last_gmtoff != gmtoff) && smbd.s_kbound) {
857 			error = smb_kmod_setgmtoff(gmtoff);
858 			if (error != 0)
859 				smbd_report("localtime set failed: %s",
860 				    strerror(error));
861 		}
862 
863 		/*
864 		 * Align the next iteration on a fifteen minute boundary.
865 		 */
866 		secs = time(0);
867 		(void) localtime_r(&secs, &local_tm);
868 		timeout = ((15 - (local_tm.tm_min % 15)) * SECSPERMIN);
869 		(void) sleep(timeout);
870 
871 		last_gmtoff = gmtoff;
872 	}
873 
874 	/*NOTREACHED*/
875 	return (NULL);
876 }
877 
878 /*
879  * smbd_gmtoff
880  *
881  * Determine offset from GMT. If daylight saving time use altzone,
882  * otherwise use timezone.
883  */
884 static int32_t
885 smbd_gmtoff(void)
886 {
887 	time_t clock_val;
888 	struct tm *atm;
889 	int32_t gmtoff;
890 
891 	(void) time(&clock_val);
892 	atm = localtime(&clock_val);
893 
894 	gmtoff = (atm->tm_isdst) ? altzone : timezone;
895 
896 	return (gmtoff);
897 }
898 
899 static void
900 smbd_sig_handler(int sigval)
901 {
902 	if (smbd.s_sigval == 0)
903 		(void) atomic_swap_uint(&smbd.s_sigval, sigval);
904 
905 	if (sigval == SIGHUP) {
906 		atomic_inc_uint(&smbd.s_refreshes);
907 		(void) pthread_cond_signal(&refresh_cond);
908 	}
909 
910 	if (sigval == SIGINT || sigval == SIGTERM) {
911 		smbd.s_shutting_down = B_TRUE;
912 		(void) pthread_cond_signal(&refresh_cond);
913 	}
914 }
915 
916 /*
917  * Set up configuration options and parse the command line.
918  * This function will determine if we will run as a daemon
919  * or in the foreground.
920  *
921  * Failure to find a uid or gid results in using the default (0).
922  */
923 static int
924 smbd_setup_options(int argc, char *argv[])
925 {
926 	struct passwd *pwd;
927 	struct group *grp;
928 	int c;
929 
930 	if ((pwd = getpwnam("root")) != NULL)
931 		smbd.s_uid = pwd->pw_uid;
932 
933 	if ((grp = getgrnam("sys")) != NULL)
934 		smbd.s_gid = grp->gr_gid;
935 
936 	smbd.s_fg = smb_config_get_fg_flag();
937 
938 	while ((c = getopt(argc, argv, ":f")) != -1) {
939 		switch (c) {
940 		case 'f':
941 			smbd.s_fg = 1;
942 			break;
943 
944 		case ':':
945 		case '?':
946 		default:
947 			smbd_usage(stderr);
948 			return (-1);
949 		}
950 	}
951 
952 	return (0);
953 }
954 
955 static void
956 smbd_usage(FILE *fp)
957 {
958 	static char *help[] = {
959 		"-f  run program in foreground"
960 	};
961 
962 	int i;
963 
964 	(void) fprintf(fp, "Usage: %s [-f]\n", smbd.s_pname);
965 
966 	for (i = 0; i < sizeof (help)/sizeof (help[0]); ++i)
967 		(void) fprintf(fp, "    %s\n", help[i]);
968 }
969 
970 static void
971 smbd_report(const char *fmt, ...)
972 {
973 	char buf[128];
974 	va_list ap;
975 
976 	if (fmt == NULL)
977 		return;
978 
979 	va_start(ap, fmt);
980 	(void) vsnprintf(buf, 128, fmt, ap);
981 	va_end(ap);
982 
983 	(void) fprintf(stderr, "smbd: %s\n", buf);
984 }
985 
986 static int
987 smbd_start_listeners(void)
988 {
989 	int		rc1;
990 	int		rc2;
991 	pthread_attr_t	tattr;
992 
993 	(void) pthread_attr_init(&tattr);
994 
995 	if (!smbd.s_nbt_listener_running) {
996 		rc1 = pthread_create(&smbd.s_nbt_listener_id, &tattr,
997 		    smbd_nbt_listener, NULL);
998 		if (rc1 != 0)
999 			smbd_report("unable to start NBT service");
1000 		else
1001 			smbd.s_nbt_listener_running = B_TRUE;
1002 	}
1003 
1004 	if (!smbd.s_tcp_listener_running) {
1005 		rc2 = pthread_create(&smbd.s_tcp_listener_id, &tattr,
1006 		    smbd_tcp_listener, NULL);
1007 		if (rc2 != 0)
1008 			smbd_report("unable to start TCP service");
1009 		else
1010 			smbd.s_tcp_listener_running = B_TRUE;
1011 	}
1012 
1013 	(void) pthread_attr_destroy(&tattr);
1014 
1015 	if (rc1 != 0)
1016 		return (rc1);
1017 	return (rc2);
1018 }
1019 
1020 static void
1021 smbd_stop_listeners(void)
1022 {
1023 	void	*status;
1024 
1025 	if (smbd.s_nbt_listener_running) {
1026 		(void) pthread_kill(smbd.s_nbt_listener_id, SIGTERM);
1027 		(void) pthread_join(smbd.s_nbt_listener_id, &status);
1028 		smbd.s_nbt_listener_running = B_FALSE;
1029 	}
1030 
1031 	if (smbd.s_tcp_listener_running) {
1032 		(void) pthread_kill(smbd.s_tcp_listener_id, SIGTERM);
1033 		(void) pthread_join(smbd.s_tcp_listener_id, &status);
1034 		smbd.s_tcp_listener_running = B_FALSE;
1035 	}
1036 }
1037 
1038 /*
1039  * Perform fatal error exit.
1040  */
1041 static void
1042 smbd_fatal_error(const char *msg)
1043 {
1044 	if (msg == NULL)
1045 		msg = "Fatal error";
1046 
1047 	smbd_report("%s", msg);
1048 	smbd.s_fatal_error = B_TRUE;
1049 	(void) kill(smbd.s_pid, SIGTERM);
1050 }
1051 
1052 /*ARGSUSED*/
1053 static void *
1054 smbd_nbt_receiver(void *arg)
1055 {
1056 	(void) smb_kmod_nbtreceive();
1057 	return (NULL);
1058 }
1059 
1060 /*ARGSUSED*/
1061 static void *
1062 smbd_nbt_listener(void *arg)
1063 {
1064 	pthread_attr_t	tattr;
1065 	sigset_t	set;
1066 	sigset_t	oset;
1067 	pthread_t	tid;
1068 	int		error = 0;
1069 
1070 	(void) sigfillset(&set);
1071 	(void) sigdelset(&set, SIGTERM);
1072 	(void) sigdelset(&set, SIGINT);
1073 	(void) pthread_sigmask(SIG_SETMASK, &set, &oset);
1074 	(void) pthread_attr_init(&tattr);
1075 	(void) pthread_attr_setdetachstate(&tattr, PTHREAD_CREATE_DETACHED);
1076 
1077 	while (smb_kmod_nbtlisten(error) == 0)
1078 		error = pthread_create(&tid, &tattr, smbd_nbt_receiver, NULL);
1079 
1080 	(void) pthread_attr_destroy(&tattr);
1081 
1082 	if (!smbd.s_shutting_down)
1083 		smbd_fatal_error("NBT listener thread terminated unexpectedly");
1084 
1085 	return (NULL);
1086 }
1087 
1088 /*ARGSUSED*/
1089 static void *
1090 smbd_tcp_receiver(void *arg)
1091 {
1092 	(void) smb_kmod_tcpreceive();
1093 	return (NULL);
1094 }
1095 
1096 /*ARGSUSED*/
1097 static void *
1098 smbd_tcp_listener(void *arg)
1099 {
1100 	pthread_attr_t	tattr;
1101 	sigset_t	set;
1102 	sigset_t	oset;
1103 	pthread_t	tid;
1104 	int		error = 0;
1105 
1106 	(void) sigfillset(&set);
1107 	(void) sigdelset(&set, SIGTERM);
1108 	(void) sigdelset(&set, SIGINT);
1109 	(void) pthread_sigmask(SIG_SETMASK, &set, &oset);
1110 	(void) pthread_attr_init(&tattr);
1111 	(void) pthread_attr_setdetachstate(&tattr, PTHREAD_CREATE_DETACHED);
1112 
1113 	while (smb_kmod_tcplisten(error) == 0)
1114 		error = pthread_create(&tid, &tattr, smbd_tcp_receiver, NULL);
1115 
1116 	(void) pthread_attr_destroy(&tattr);
1117 
1118 	if (!smbd.s_shutting_down)
1119 		smbd_fatal_error("TCP listener thread terminated unexpectedly");
1120 
1121 	return (NULL);
1122 }
1123 
1124 /*
1125  * Enable libumem debugging by default on DEBUG builds.
1126  */
1127 #ifdef DEBUG
1128 const char *
1129 _umem_debug_init(void)
1130 {
1131 	return ("default,verbose"); /* $UMEM_DEBUG setting */
1132 }
1133 
1134 const char *
1135 _umem_logging_init(void)
1136 {
1137 	return ("fail,contents"); /* $UMEM_LOGGING setting */
1138 }
1139 #endif
1140