git.sur5r.net Git - openldap/blob - servers/slapd/daemon.c

   1 /* $OpenLDAP$ */
   2 /*
   3  * Copyright 1998-2000 The OpenLDAP Foundation, All Rights Reserved.
   4  * COPYING RESTRICTIONS APPLY, see COPYRIGHT file
   5  */
   6
   7 #include "portable.h"
   8
   9 #include <stdio.h>
  10
  11 #include <ac/ctype.h>
  12 #include <ac/errno.h>
  13 #include <ac/signal.h>
  14 #include <ac/socket.h>
  15 #include <ac/string.h>
  16 #include <ac/time.h>
  17 #include <ac/unistd.h>
  18
  19 #include "ldap_pvt.h"
  20 #include "lutil.h"
  21 #include "slap.h"
  22
  23 #ifdef HAVE_TCPD
  24 #include <tcpd.h>
  25
  26 int allow_severity = LOG_INFO;
  27 int deny_severity = LOG_NOTICE;
  28 #endif /* TCP Wrappers */
  29
  30 #ifdef LDAP_PF_LOCAL
  31 #include <sys/stat.h>
  32 #endif /* LDAP_PF_LOCAL */
  33
  34 /* globals */
  35 time_t starttime;
  36 ber_socket_t dtblsize;
  37
  38 typedef union slap_sockaddr {
  39         struct sockaddr sa_addr;
  40         struct sockaddr_in sa_in_addr;
  41 #ifdef LDAP_PF_INET6
  42         struct sockaddr_in6 sa_in6_addr;
  43 #endif
  44 #ifdef LDAP_PF_LOCAL
  45         struct sockaddr_un sa_un_addr;
  46 #endif
  47 } Sockaddr;
  48
  49 typedef struct slap_listener {
  50         char* sl_url;
  51         char* sl_name;
  52 #ifdef HAVE_TLS
  53         int             sl_is_tls;
  54 #endif
  55         ber_socket_t            sl_sd;
  56         Sockaddr sl_sa;
  57 #define sl_addr sl_sa.sa_in_addr
  58 } Listener;
  59
  60 Listener **slap_listeners = NULL;
  61
  62 #define SLAPD_LISTEN 10
  63
  64 static ber_socket_t wake_sds[2];
  65
  66 #ifdef NO_THREADS
  67 static int waking;
  68 #define WAKE_LISTENER(w) \
  69 ((w && !waking) ? tcp_write( wake_sds[1], "0", 1 ), waking=1 : 0)
  70 #else
  71 #define WAKE_LISTENER(w) \
  72 do { if (w) tcp_write( wake_sds[1], "0", 1 ); } while(0)
  73 #endif
  74
  75 #ifdef HAVE_NT_SERVICE_MANAGER
  76 /* in nt_main.c */
  77 extern ldap_pvt_thread_cond_t                   started_event;
  78 extern int        is_NT_Service;
  79 #endif
  80
  81 #ifndef HAVE_WINSOCK
  82 static
  83 #endif
  84 volatile sig_atomic_t slapd_shutdown = 0;
  85
  86 static struct slap_daemon {
  87         ldap_pvt_thread_mutex_t sd_mutex;
  88
  89         int sd_nactives;
  90
  91 #ifndef HAVE_WINSOCK
  92         /* In winsock, accept() returns values higher than dtblsize
  93                 so don't bother with this optimization */
  94         int sd_nfds;
  95 #endif
  96
  97         fd_set sd_actives;
  98         fd_set sd_readers;
  99         fd_set sd_writers;
 100 } slap_daemon;
 101
 102 /*
 103  * Add a descriptor to daemon control
 104  */
 105 static void slapd_add(ber_socket_t s) {
 106         ldap_pvt_thread_mutex_lock( &slap_daemon.sd_mutex );
 107
 108         assert( !FD_ISSET( s, &slap_daemon.sd_actives ));
 109         assert( !FD_ISSET( s, &slap_daemon.sd_readers ));
 110         assert( !FD_ISSET( s, &slap_daemon.sd_writers ));
 111
 112 #ifndef HAVE_WINSOCK
 113         if (s >= slap_daemon.sd_nfds) {
 114                 slap_daemon.sd_nfds = s + 1;
 115         }
 116 #endif
 117
 118         FD_SET( s, &slap_daemon.sd_actives );
 119         FD_SET( s, &slap_daemon.sd_readers );
 120
 121 #ifdef NEW_LOGGING
 122         LDAP_LOG(( "connection", LDAP_LEVEL_DETAIL1,
 123                    "slapd_add: added %ld%s%s\n",
 124                    (long)s,
 125                    FD_ISSET(s, &slap_daemon.sd_readers) ? "r" : "",
 126                    FD_ISSET(s, &slap_daemon.sd_writers) ? "w" : "" ));
 127 #else
 128         Debug( LDAP_DEBUG_CONNS, "daemon: added %ld%s%s\n",
 129                 (long) s,
 130             FD_ISSET(s, &slap_daemon.sd_readers) ? "r" : "",
 131                 FD_ISSET(s, &slap_daemon.sd_writers) ? "w" : "" );
 132 #endif
 133         ldap_pvt_thread_mutex_unlock( &slap_daemon.sd_mutex );
 134 }
 135
 136 /*
 137  * Remove the descriptor from daemon control
 138  */
 139 void slapd_remove(ber_socket_t s, int wake) {
 140         ldap_pvt_thread_mutex_lock( &slap_daemon.sd_mutex );
 141
 142 #ifdef NEW_LOGGING
 143         LDAP_LOG(( "connection", LDAP_LEVEL_DETAIL1,
 144                    "slapd_remove: removing %ld%s%s\n",
 145                    (long) s,
 146                    FD_ISSET(s, &slap_daemon.sd_readers) ? "r" : "",
 147                    FD_ISSET(s, &slap_daemon.sd_writers) ? "w" : ""  ));
 148 #else
 149         Debug( LDAP_DEBUG_CONNS, "daemon: removing %ld%s%s\n",
 150                 (long) s,
 151             FD_ISSET(s, &slap_daemon.sd_readers) ? "r" : "",
 152                 FD_ISSET(s, &slap_daemon.sd_writers) ? "w" : "" );
 153 #endif
 154         FD_CLR( s, &slap_daemon.sd_actives );
 155         FD_CLR( s, &slap_daemon.sd_readers );
 156         FD_CLR( s, &slap_daemon.sd_writers );
 157
 158         ldap_pvt_thread_mutex_unlock( &slap_daemon.sd_mutex );
 159         WAKE_LISTENER(wake);
 160 }
 161
 162 void slapd_clr_write(ber_socket_t s, int wake) {
 163         ldap_pvt_thread_mutex_lock( &slap_daemon.sd_mutex );
 164
 165         assert( FD_ISSET( s, &slap_daemon.sd_actives) );
 166         FD_CLR( s, &slap_daemon.sd_writers );
 167
 168         ldap_pvt_thread_mutex_unlock( &slap_daemon.sd_mutex );
 169         WAKE_LISTENER(wake);
 170 }
 171
 172 void slapd_set_write(ber_socket_t s, int wake) {
 173         ldap_pvt_thread_mutex_lock( &slap_daemon.sd_mutex );
 174
 175         assert( FD_ISSET( s, &slap_daemon.sd_actives) );
 176         if (!FD_ISSET(s, &slap_daemon.sd_writers))
 177             FD_SET( (unsigned) s, &slap_daemon.sd_writers );
 178
 179         ldap_pvt_thread_mutex_unlock( &slap_daemon.sd_mutex );
 180         WAKE_LISTENER(wake);
 181 }
 182
 183 void slapd_clr_read(ber_socket_t s, int wake) {
 184         ldap_pvt_thread_mutex_lock( &slap_daemon.sd_mutex );
 185
 186         assert( FD_ISSET( s, &slap_daemon.sd_actives) );
 187         FD_CLR( s, &slap_daemon.sd_readers );
 188
 189         ldap_pvt_thread_mutex_unlock( &slap_daemon.sd_mutex );
 190         WAKE_LISTENER(wake);
 191 }
 192
 193 void slapd_set_read(ber_socket_t s, int wake) {
 194         ldap_pvt_thread_mutex_lock( &slap_daemon.sd_mutex );
 195
 196         assert( FD_ISSET( s, &slap_daemon.sd_actives) );
 197         if (!FD_ISSET(s, &slap_daemon.sd_readers))
 198             FD_SET( s, &slap_daemon.sd_readers );
 199
 200         ldap_pvt_thread_mutex_unlock( &slap_daemon.sd_mutex );
 201         WAKE_LISTENER(wake);
 202 }
 203
 204 static void slapd_close(ber_socket_t s) {
 205 #ifdef NEW_LOGGING
 206     LDAP_LOG(( "connection", LDAP_LEVEL_DETAIL1,
 207                "slapd_close: closing %ld\n", (long)s ));
 208 #else
 209         Debug( LDAP_DEBUG_CONNS, "daemon: closing %ld\n",
 210                 (long) s, 0, 0 );
 211 #endif
 212         tcp_close(s);
 213 }
 214
 215 static void slap_free_listener_addresses(struct sockaddr **sal)
 216 {
 217         struct sockaddr **sap;
 218
 219         if (sal == NULL) {
 220                 return;
 221         }
 222
 223         for (sap = sal; *sap != NULL; sap++) {
 224                 ch_free(*sap);
 225         }
 226
 227         ch_free(sal);
 228 }
 229
 230 /* port = 0 indicates AF_LOCAL */
 231 static int slap_get_listener_addresses(
 232         const char *host,
 233         unsigned short port,
 234         struct sockaddr ***sal)
 235 {
 236         struct sockaddr **sap;
 237 #ifdef HAVE_GETADDRINFO
 238         struct addrinfo hints, *res, *sai;
 239         int n, err;
 240
 241         memset( &hints, '\0', sizeof(hints) );
 242         hints.ai_flags = AI_PASSIVE;
 243         hints.ai_socktype = SOCK_STREAM;
 244 #  ifdef LDAP_PF_LOCAL
 245         if ( port == 0 ) {
 246                 hints.ai_family = AF_LOCAL;
 247                 /* host specifies a service in this case */
 248                 if (err = getaddrinfo(NULL, host, &hints, &res)) {
 249 #ifdef NEW_LOGGING
 250                     LDAP_LOG(( "connection", LDAP_LEVEL_INFO,
 251                                "slap_get_listener_addresses: getaddrinfo failed: %s\n",
 252                                AC_GAI_STRERROR(err) ));
 253 #else
 254                         Debug( LDAP_DEBUG_ANY, "daemon: getaddrinfo failed: %s\n",
 255                                 AC_GAI_STRERROR(err), 0, 0);
 256 #endif
 257                         return -1;
 258                 }
 259         } else
 260 #  endif
 261         {
 262                 char serv[7];
 263
 264                 snprintf(serv, sizeof serv, "%d", port);
 265                 hints.ai_family = AF_UNSPEC;
 266                 if (err = getaddrinfo(host, serv, &hints, &res)) {
 267 #ifdef NEW_LOGGING
 268                     LDAP_LOG(( "connection", LDAP_LEVEL_INFO,
 269                                "slap_get_listener_addresses: getaddrinfo failed: %s\n",
 270                                AC_GAI_STRERROR(err) ));
 271 #else
 272                         Debug( LDAP_DEBUG_ANY, "daemon: getaddrinfo failed: %s\n",
 273                                 AC_GAI_STRERROR(err), 0, 0);
 274 #endif
 275                         return -1;
 276                 }
 277         }
 278
 279         sai = res;
 280         for (n=2; (sai = sai->ai_next) != NULL; n++) {
 281                 /* EMPTY */ ;
 282         }
 283         *sal = ch_malloc(n * sizeof(*sal));
 284         if (*sal == NULL) {
 285                 return -1;
 286         }
 287
 288         sai = res;
 289         sap = *sal;
 290         do {
 291                 switch (sai->ai_family) {
 292 #  ifdef LDAP_PF_LOCAL
 293                 case AF_LOCAL: {
 294                         *sap = ch_malloc(sizeof(struct sockaddr_un));
 295                         if (*sap == NULL) {
 296                                 freeaddrinfo(res);
 297                                 goto errexit;
 298                         }
 299                         *(struct sockaddr_un *)*sap =
 300                                 *((struct sockaddr_un *)sai->ai_addr);
 301                 } break;
 302 #  endif
 303 #  ifdef LDAP_PF_INET6
 304                 case AF_INET6: {
 305                         *sap = ch_malloc(sizeof(struct sockaddr_in6));
 306                         if (*sap == NULL) {
 307                                 freeaddrinfo(res);
 308                                 goto errexit;
 309                         }
 310                         *(struct sockaddr_in6 *)*sap =
 311                                 *((struct sockaddr_in6 *)sai->ai_addr);
 312                 } break;
 313 #  endif
 314                 case AF_INET: {
 315                         *sap = ch_malloc(sizeof(struct sockaddr_in));
 316                         if (*sap == NULL) {
 317                                 freeaddrinfo(res);
 318                                 goto errexit;
 319                         }
 320                         *(struct sockaddr_in *)*sap =
 321                                 *((struct sockaddr_in *)sai->ai_addr);
 322                 } break;
 323                 default:
 324                         *sap = NULL;
 325                         break;
 326                 }
 327                 if (*sap != NULL) {
 328                         (*sap)->sa_family = sai->ai_family;
 329                         sap++;
 330                 }
 331         } while ((sai = sai->ai_next) != NULL);
 332
 333         freeaddrinfo(res);
 334
 335 #else
 336 #  ifdef LDAP_PF_LOCAL
 337         if ( port == 0 ) {
 338                 *sal = ch_malloc(2 * sizeof(*sal));
 339                 if (*sal == NULL) {
 340                         return -1;
 341                 }
 342                 sap = *sal;
 343                 *sap = ch_malloc(sizeof(struct sockaddr_un));
 344                 if (*sap == NULL)
 345                         goto errexit;
 346                 (void)memset( (void *)*sap, '\0', sizeof(struct sockaddr_un) );
 347                 (*sap)->sa_family = AF_LOCAL;
 348                 if ( strlen(host) >
 349                      (sizeof(((struct sockaddr_un *)*sal)->sun_path) - 1) ) {
 350 #ifdef NEW_LOGGING
 351                     LDAP_LOG(( "connection", LDAP_LEVEL_INFO,
 352                                "slap_get_listener_addresses: domain socket path (%s) too long in URL\n",
 353                                host ));
 354 #else
 355                         Debug( LDAP_DEBUG_ANY,
 356                                "daemon: domain socket path (%s) too long in URL",
 357                                host, 0, 0);
 358 #endif
 359                         goto errexit;
 360                 }
 361                 strcpy( ((struct sockaddr_un *)*sap)->sun_path, host );
 362         } else
 363 #  endif
 364         {
 365                 struct in_addr in;
 366
 367                 if ( host == NULL ) {
 368                         in.s_addr = htonl(INADDR_ANY);
 369
 370                 } else if ( !inet_aton( host, &in ) ) {
 371                         struct hostent *he = gethostbyname( host );
 372                         if( he == NULL ) {
 373 #ifdef NEW_LOGGING
 374                             LDAP_LOG(( "connection", LDAP_LEVEL_INFO,
 375                                        "slap_get_listener_addresses: invalid host %s\n",
 376                                        host ));
 377 #else
 378                                 Debug( LDAP_DEBUG_ANY,
 379                                        "daemon: invalid host %s", host, 0, 0);
 380 #endif
 381                                 return -1;
 382                         }
 383                         AC_MEMCPY( &in, he->h_addr, sizeof( in ) );
 384                 }
 385
 386                 *sal = ch_malloc(2 * sizeof(*sal));
 387                 if (*sal == NULL) {
 388                         return -1;
 389                 }
 390
 391                 sap = *sal;
 392                 *sap = ch_malloc(sizeof(struct sockaddr_in));
 393                 if (*sap == NULL) {
 394                         goto errexit;
 395                 }
 396
 397                 (void)memset( (void *)*sap, '\0', sizeof(struct sockaddr_in) );
 398                 (*sap)->sa_family = AF_INET;
 399                 ((struct sockaddr_in *)*sap)->sin_port = htons(port);
 400                 ((struct sockaddr_in *)*sap)->sin_addr = in;
 401         }
 402         sap++;
 403 #endif
 404
 405         *sap = NULL;
 406         return 0;
 407
 408 errexit:
 409         slap_free_listener_addresses(*sal);
 410         return -1;
 411 }
 412
 413 static Listener * slap_open_listener(
 414         const char* url )
 415 {
 416         int     tmp, rc;
 417         Listener l;
 418         Listener *li;
 419         LDAPURLDesc *lud;
 420         unsigned short port;
 421         int err, addrlen;
 422         struct sockaddr **sal, **psal;
 423
 424         rc = ldap_url_parse( url, &lud );
 425
 426         if( rc != LDAP_URL_SUCCESS ) {
 427 #ifdef NEW_LOGGING
 428             LDAP_LOG(( "connection", LDAP_LEVEL_ERR,
 429                        "slap_open_listener: listen URL \"%s\" parse error %d\n",
 430                        url, rc ));
 431 #else
 432                 Debug( LDAP_DEBUG_ANY,
 433                         "daemon: listen URL \"%s\" parse error=%d\n",
 434                         url, rc, 0 );
 435 #endif
 436                 return NULL;
 437         }
 438
 439 #ifndef HAVE_TLS
 440         if( ldap_pvt_url_scheme2tls( lud->lud_scheme ) ) {
 441 #ifdef NEW_LOGGING
 442             LDAP_LOG(( "connection", LDAP_LEVEL_INFO,
 443                        "slap_open_listener: TLS is not supported (%s)\n",
 444                        url ));
 445 #else
 446                 Debug( LDAP_DEBUG_ANY,
 447                         "daemon: TLS not supported (%s)\n",
 448                         url, 0, 0 );
 449 #endif
 450                 ldap_free_urldesc( lud );
 451                 return NULL;
 452         }
 453
 454         if(! lud->lud_port ) {
 455                 lud->lud_port = LDAP_PORT;
 456         }
 457
 458 #else
 459         l.sl_is_tls = ldap_pvt_url_scheme2tls( lud->lud_scheme );
 460
 461         if(! lud->lud_port ) {
 462                 lud->lud_port = l.sl_is_tls ? LDAPS_PORT : LDAP_PORT;
 463         }
 464 #endif
 465
 466         port = (unsigned short) lud->lud_port;
 467
 468         if ( ldap_pvt_url_scheme2proto(lud->lud_scheme) == LDAP_PROTO_IPC ) {
 469 #ifdef LDAP_PF_LOCAL
 470                 if ( lud->lud_host == NULL || lud->lud_host[0] == '\0' ) {
 471                         err = slap_get_listener_addresses(LDAPI_SOCK, 0, &sal);
 472                 } else {
 473                         err = slap_get_listener_addresses(lud->lud_host, 0, &sal);
 474                 }
 475 #else
 476
 477 #ifdef NEW_LOGGING
 478                 LDAP_LOG(( "connection", LDAP_LEVEL_INFO,
 479                            "slap_open_listener: URL scheme is not supported: %s\n",
 480                            url ));
 481 #else
 482                 Debug( LDAP_DEBUG_ANY, "daemon: URL scheme not supported: %s",
 483                         url, 0, 0);
 484 #endif
 485                 ldap_free_urldesc( lud );
 486                 return NULL;
 487 #endif
 488         } else {
 489                 if( lud->lud_host == NULL || lud->lud_host[0] == '\0'
 490                         || strcmp(lud->lud_host, "*") == 0 )
 491                 {
 492                         err = slap_get_listener_addresses(NULL, port, &sal);
 493                 } else {
 494                         err = slap_get_listener_addresses(lud->lud_host, port, &sal);
 495                 }
 496         }
 497
 498         ldap_free_urldesc( lud );
 499         if ( err ) {
 500                 return NULL;
 501         }
 502
 503         psal = sal;
 504         while ( *sal != NULL ) {
 505                 switch( (*sal)->sa_family ) {
 506                 case AF_INET:
 507 #ifdef LDAP_PF_INET6
 508                 case AF_INET6:
 509 #endif
 510 #ifdef LDAP_PF_LOCAL
 511                 case AF_LOCAL:
 512 #endif
 513                         break;
 514                 default:
 515                         sal++;
 516                         continue;
 517                 }
 518                 l.sl_sd = socket( (*sal)->sa_family, SOCK_STREAM, 0);
 519                 if ( l.sl_sd == AC_SOCKET_INVALID ) {
 520                         int err = sock_errno();
 521 #ifdef NEW_LOGGING
 522                         LDAP_LOG(( "connection", LDAP_LEVEL_ERR,
 523                                    "slap_open_listener: socket() failed errno=%d (%s)\n",
 524                                    err, sock_errstr(err) ));
 525 #else
 526                         Debug( LDAP_DEBUG_ANY,
 527                                 "daemon: socket() failed errno=%d (%s)\n", err,
 528                                 sock_errstr(err), 0 );
 529 #endif
 530                         sal++;
 531                         continue;
 532                 }
 533 #ifndef HAVE_WINSOCK
 534                 if ( l.sl_sd >= dtblsize ) {
 535 #ifdef NEW_LOGGING
 536                     LDAP_LOG(( "connection", LDAP_LEVEL_ERR,
 537                                "slap_open_listener: listener descriptor %ld is too great %ld\n",
 538                                (long)l.sl_sd, (long)dtblsize ));
 539 #else
 540                         Debug( LDAP_DEBUG_ANY,
 541                                "daemon: listener descriptor %ld is too great %ld\n",
 542                                (long) l.sl_sd, (long) dtblsize, 0 );
 543 #endif
 544                         tcp_close( l.sl_sd );
 545                         sal++;
 546                         continue;
 547                 }
 548 #endif
 549 #ifdef LDAP_PF_LOCAL
 550                 if ( (*sal)->sa_family == AF_LOCAL ) {
 551                         unlink ( ((struct sockaddr_un *)*sal)->sun_path );
 552                 } else
 553 #endif
 554                 {
 555 #ifdef SO_REUSEADDR
 556                         /* enable address reuse */
 557                         tmp = 1;
 558                         rc = setsockopt( l.sl_sd, SOL_SOCKET, SO_REUSEADDR,
 559                                          (char *) &tmp, sizeof(tmp) );
 560                         if ( rc == AC_SOCKET_ERROR ) {
 561                                 int err = sock_errno();
 562 #ifdef NEW_LOGGING
 563                                 LDAP_LOG(( "connection", LDAP_LEVEL_INFO,
 564                                            "slap_open_listener: setsockopt( %ld, SO_REUSEADDR ) failed errno %d (%s)\n",
 565                                            (long)l.sl_sd, err, sock_errstr(err) ));
 566 #else
 567                                 Debug( LDAP_DEBUG_ANY,
 568                                        "slapd(%ld): setsockopt(SO_REUSEADDR) failed errno=%d (%s)\n",
 569                                        (long) l.sl_sd, err, sock_errstr(err) );
 570 #endif
 571                         }
 572 #endif
 573                 }
 574
 575                 switch( (*sal)->sa_family ) {
 576                 case AF_INET:
 577                         addrlen = sizeof(struct sockaddr_in);
 578                         break;
 579 #ifdef LDAP_PF_INET6
 580                 case AF_INET6:
 581                         addrlen = sizeof(struct sockaddr_in6);
 582                         break;
 583 #endif
 584 #ifdef LDAP_PF_LOCAL
 585                 case AF_LOCAL:
 586                         addrlen = sizeof(struct sockaddr_un);
 587                         break;
 588 #endif
 589                 }
 590
 591                 if (!bind(l.sl_sd, *sal, addrlen))
 592                         break;
 593                 err = sock_errno();
 594 #ifdef NEW_LOGGING
 595                 LDAP_LOG(( "connection", LDAP_LEVEL_INFO,
 596                            "slap_open_listener: bind(%ld) failed errno=%d (%s)\n",
 597                            (long)l.sl_sd, err, sock_errstr(err) ));
 598 #else
 599                 Debug( LDAP_DEBUG_ANY, "daemon: bind(%ld) failed errno=%d (%s)\n",
 600                        (long) l.sl_sd, err, sock_errstr(err) );
 601 #endif
 602                 tcp_close( l.sl_sd );
 603                 sal++;
 604         } /* while ( *sal != NULL ) */
 605
 606         if ( *sal == NULL ) {
 607 #ifdef NEW_LOGGING
 608             LDAP_LOG(( "connection", LDAP_LEVEL_INFO,
 609                        "slap_open_listener: bind(%ld) failed.\n", (long)l.sl_sd ));
 610 #else
 611                 Debug( LDAP_DEBUG_ANY, "daemon: bind(%ld) failed\n",
 612                         (long) l.sl_sd, 0, 0 );
 613 #endif
 614                 slap_free_listener_addresses(psal);
 615                 return NULL;
 616         }
 617
 618         switch ( (*sal)->sa_family ) {
 619 #ifdef LDAP_PF_LOCAL
 620         case AF_LOCAL: {
 621                 char *addr = ((struct sockaddr_un *)*sal)->sun_path;
 622                 if ( chmod( addr, S_IRWXU ) < 0 ) {
 623                         int err = sock_errno();
 624 #ifdef NEW_LOGGING
 625                         LDAP_LOG(( "connection", LDAP_LEVEL_INFO,
 626                                    "slap_open_listener: fchmod(%ld) failed errno=%d (%s)\n",
 627                                    (long)l.sl_sd, err, sock_errstr(err) ));
 628 #else
 629                         Debug( LDAP_DEBUG_ANY, "daemon: fchmod(%ld) failed errno=%d (%s)",
 630                                (long) l.sl_sd, err, sock_errstr(err) );
 631 #endif
 632                         tcp_close( l.sl_sd );
 633                         slap_free_listener_addresses(psal);
 634                         return NULL;
 635                 }
 636                 l.sl_name = ch_malloc( strlen(addr) + sizeof("PATH=") );
 637                 sprintf( l.sl_name, "PATH=%s", addr );
 638         } break;
 639 #endif /* LDAP_PF_LOCAL */
 640
 641         case AF_INET: {
 642                 char *s;
 643 #ifdef HAVE_GETADDRINFO
 644                 char addr[INET_ADDRSTRLEN];
 645                 inet_ntop( AF_INET, &((struct sockaddr_in *)*sal)->sin_addr,
 646                            addr, sizeof(addr) );
 647                 s = addr;
 648 #else
 649                 s = inet_ntoa( l.sl_addr.sin_addr );
 650 #endif
 651                 l.sl_name = ch_malloc( sizeof("IP=255.255.255.255:65535") );
 652                 sprintf( l.sl_name, "IP=%s:%d",
 653                          s != NULL ? s : "unknown" , port );
 654         } break;
 655
 656 #ifdef LDAP_PF_INET6
 657         case AF_INET6: {
 658                 char addr[INET6_ADDRSTRLEN];
 659                 inet_ntop( AF_INET6, &((struct sockaddr_in6 *)*sal)->sin6_addr,
 660                            addr, sizeof addr);
 661                 l.sl_name = ch_malloc( strlen(addr) + sizeof("IP= 65535") );
 662                 sprintf( l.sl_name, "IP=%s %d", addr, port );
 663         } break;
 664 #endif /* LDAP_PF_INET6 */
 665
 666         default:
 667 #ifdef NEW_LOGGING
 668             LDAP_LOG(( "connection", LDAP_LEVEL_INFO,
 669                        "slap_open_listener: unsupported address family (%d)\n",
 670                        (int)(*sal)->sa_family ));
 671 #else
 672                 Debug( LDAP_DEBUG_ANY, "daemon: unsupported address family (%d)\n",
 673                         (int) (*sal)->sa_family, 0, 0 );
 674 #endif
 675                 break;
 676         }
 677
 678         slap_free_listener_addresses(psal);
 679
 680         l.sl_url = ch_strdup( url );
 681         li = ch_malloc( sizeof( Listener ) );
 682         *li = l;
 683
 684 #ifdef NEW_LOGGING
 685         LDAP_LOG(( "connection", LDAP_LEVEL_RESULTS,
 686                    "slap_open_listener: daemon initialzed %s\n", l.sl_url ));
 687 #else
 688         Debug( LDAP_DEBUG_TRACE, "daemon: initialized %s\n",
 689                 l.sl_url, 0, 0 );
 690 #endif
 691         return li;
 692 }
 693
 694 static int sockinit(void);
 695 static int sockdestroy(void);
 696
 697 int slapd_daemon_init( const char *urls )
 698 {
 699         int i, rc;
 700         char **u;
 701
 702 #ifdef NEW_LOGGING
 703         LDAP_LOG(( "connection", LDAP_LEVEL_ARGS,
 704                    "slapd_daemon_init: %s\n",
 705                    urls ? urls : "<null>" ));
 706 #else
 707         Debug( LDAP_DEBUG_ARGS, "daemon_init: %s\n",
 708                 urls ? urls : "<null>", 0, 0 );
 709 #endif
 710         if( (rc = sockinit()) != 0 ) {
 711                 return rc;
 712         }
 713
 714 #ifdef HAVE_SYSCONF
 715         dtblsize = sysconf( _SC_OPEN_MAX );
 716 #elif HAVE_GETDTABLESIZE
 717         dtblsize = getdtablesize();
 718 #else
 719         dtblsize = FD_SETSIZE;
 720 #endif
 721
 722 #ifdef FD_SETSIZE
 723         if(dtblsize > FD_SETSIZE) {
 724                 dtblsize = FD_SETSIZE;
 725         }
 726 #endif  /* !FD_SETSIZE */
 727
 728         /* open a pipe (or something equivalent connected to itself).
 729          * we write a byte on this fd whenever we catch a signal. The main
 730          * loop will be select'ing on this socket, and will wake up when
 731          * this byte arrives.
 732          */
 733         if( (rc = lutil_pair( wake_sds )) < 0 ) {
 734 #ifdef NEW_LOGGING
 735             LDAP_LOG(( "connection", LDAP_LEVEL_ERR,
 736                        "slap_daemon_init: lutil_pair() failed rc=%d\n", rc ));
 737 #else
 738                 Debug( LDAP_DEBUG_ANY,
 739                         "daemon: lutil_pair() failed rc=%d\n", rc, 0, 0 );
 740 #endif
 741                 return rc;
 742         }
 743
 744         FD_ZERO( &slap_daemon.sd_readers );
 745         FD_ZERO( &slap_daemon.sd_writers );
 746
 747         if( urls == NULL ) {
 748                 urls = "ldap:///";
 749         }
 750
 751         u = str2charray( urls, " " );
 752
 753         if( u == NULL || u[0] == NULL ) {
 754 #ifdef NEW_LOGGING
 755             LDAP_LOG(( "connection", LDAP_LEVEL_ERR,
 756                        "slap_daemon_init: no urls (%s) provided.\n", urls ));
 757 #else
 758                 Debug( LDAP_DEBUG_ANY, "daemon_init: no urls (%s) provided.\n",
 759                         urls, 0, 0 );
 760 #endif
 761                 return -1;
 762         }
 763
 764         for( i=0; u[i] != NULL; i++ ) {
 765 #ifdef NEW_LOGGING
 766             LDAP_LOG(( "connection", LDAP_LEVEL_DETAIL1,
 767                        "slap_daemon_init: listen on %s\n.", u[i] ));
 768 #else
 769                 Debug( LDAP_DEBUG_TRACE, "daemon_init: listen on %s\n",
 770                         u[i], 0, 0 );
 771 #endif
 772         }
 773
 774         if( i == 0 ) {
 775 #ifdef NEW_LOGGING
 776             LDAP_LOG(( "connection", LDAP_LEVEL_INFO,
 777                        "slap_daemon_init: no listeners to open (%s)\n", urls ));
 778 #else
 779                 Debug( LDAP_DEBUG_ANY, "daemon_init: no listeners to open (%s)\n",
 780                         urls, 0, 0 );
 781 #endif
 782                 charray_free( u );
 783                 return -1;
 784         }
 785
 786 #ifdef NEW_LOGGING
 787         LDAP_LOG(( "connection", LDAP_LEVEL_INFO,
 788                    "slap_daemon_init: %d listeners to open...\n", i ));
 789 #else
 790         Debug( LDAP_DEBUG_TRACE, "daemon_init: %d listeners to open...\n",
 791                 i, 0, 0 );
 792 #endif
 793         slap_listeners = ch_malloc( (i+1)*sizeof(Listener *) );
 794
 795         for(i = 0; u[i] != NULL; i++ ) {
 796                 slap_listeners[i] = slap_open_listener( u[i] );
 797
 798                 if( slap_listeners[i] == NULL ) {
 799                         charray_free( u );
 800                         return -1;
 801                 }
 802         }
 803         slap_listeners[i] = NULL;
 804
 805 #ifdef NEW_LOGGING
 806         LDAP_LOG(( "connection", LDAP_LEVEL_DETAIL1,
 807                    "slap_daemon_init: %d listeners opened\n", i ));
 808 #else
 809         Debug( LDAP_DEBUG_TRACE, "daemon_init: %d listeners opened\n",
 810                 i, 0, 0 );
 811 #endif
 812         charray_free( u );
 813         ldap_pvt_thread_mutex_init( &slap_daemon.sd_mutex );
 814         return !i;
 815 }
 816
 817
 818 int
 819 slapd_daemon_destroy(void)
 820 {
 821         connections_destroy();
 822         tcp_close( wake_sds[1] );
 823         tcp_close( wake_sds[0] );
 824         sockdestroy();
 825         return 0;
 826 }
 827
 828
 829 static void *
 830 slapd_daemon_task(
 831         void *ptr
 832 )
 833 {
 834         int l;
 835         time_t  last_idle_check = slap_get_time();
 836         time( &starttime );
 837
 838         for ( l = 0; slap_listeners[l] != NULL; l++ ) {
 839                 if ( slap_listeners[l]->sl_sd == AC_SOCKET_INVALID )
 840                         continue;
 841
 842                 if ( listen( slap_listeners[l]->sl_sd, SLAPD_LISTEN ) == -1 ) {
 843                         int err = sock_errno();
 844 #ifdef NEW_LOGGING
 845                         LDAP_LOG(( "connection", LDAP_LEVEL_ERR,
 846                                    "slapd_daemon_task: listen( %s, 5 ) failed errno=%d (%s)\n",
 847                                    slap_listeners[l]->sl_url, err, sock_errstr(err) ));
 848 #else
 849                         Debug( LDAP_DEBUG_ANY,
 850                                 "daemon: listen(%s, 5) failed errno=%d (%s)\n",
 851                                         slap_listeners[l]->sl_url, err,
 852                                         sock_errstr(err) );
 853 #endif
 854                         return( (void*)-1 );
 855                 }
 856
 857                 slapd_add( slap_listeners[l]->sl_sd );
 858         }
 859
 860 #ifdef HAVE_NT_SERVICE_MANAGER
 861         if ( started_event != NULL ) {
 862                 ldap_pvt_thread_cond_signal( &started_event );
 863         }
 864 #endif
 865         /* initialization complete. Here comes the loop. */
 866
 867         while ( !slapd_shutdown ) {
 868                 ber_socket_t i;
 869                 int ns;
 870                 int at;
 871                 ber_socket_t nfds;
 872 #define SLAPD_EBADF_LIMIT 16
 873                 int ebadf = 0;
 874
 875 #define SLAPD_IDLE_CHECK_LIMIT 4
 876                 time_t  now = slap_get_time();
 877
 878
 879                 fd_set                  readfds;
 880                 fd_set                  writefds;
 881                 Sockaddr                from;
 882
 883 #if defined(SLAPD_RLOOKUPS)
 884         struct hostent          *hp;
 885 #endif
 886                 struct timeval          zero;
 887                 struct timeval          *tvp;
 888
 889                 if( global_idletimeout > 0 && difftime(
 890                         last_idle_check+global_idletimeout/SLAPD_IDLE_CHECK_LIMIT,
 891                         now ) < 0 )
 892                 {
 893                         connections_timeout_idle(now);
 894                 }
 895
 896                 FD_ZERO( &writefds );
 897                 FD_ZERO( &readfds );
 898
 899                 zero.tv_sec = 0;
 900                 zero.tv_usec = 0;
 901
 902                 ldap_pvt_thread_mutex_lock( &slap_daemon.sd_mutex );
 903
 904 #ifdef FD_SET_MANUAL_COPY
 905                 for( s = 0; s < nfds; s++ ) {
 906                         if(FD_ISSET( &slap_sd_readers, s )) {
 907                                 FD_SET( s, &readfds );
 908                         }
 909                         if(FD_ISSET( &slap_sd_writers, s )) {
 910                                 FD_SET( s, &writefds );
 911                         }
 912                 }
 913 #else
 914                 AC_MEMCPY( &readfds, &slap_daemon.sd_readers, sizeof(fd_set) );
 915                 AC_MEMCPY( &writefds, &slap_daemon.sd_writers, sizeof(fd_set) );
 916 #endif
 917                 assert(!FD_ISSET(wake_sds[0], &readfds));
 918                 FD_SET( wake_sds[0], &readfds );
 919
 920                 for ( l = 0; slap_listeners[l] != NULL; l++ ) {
 921                         if ( slap_listeners[l]->sl_sd == AC_SOCKET_INVALID )
 922                                 continue;
 923                         if (!FD_ISSET(slap_listeners[l]->sl_sd, &readfds))
 924                             FD_SET( slap_listeners[l]->sl_sd, &readfds );
 925                 }
 926
 927 #ifndef HAVE_WINSOCK
 928                 nfds = slap_daemon.sd_nfds;
 929 #else
 930                 nfds = dtblsize;
 931 #endif
 932
 933                 ldap_pvt_thread_mutex_unlock( &slap_daemon.sd_mutex );
 934
 935                 at = ldap_pvt_thread_pool_backload(&connection_pool);
 936
 937 #if defined( HAVE_YIELDING_SELECT ) || defined( NO_THREADS )
 938                 tvp = NULL;
 939 #else
 940                 tvp = at ? &zero : NULL;
 941 #endif
 942
 943                 for ( l = 0; slap_listeners[l] != NULL; l++ ) {
 944                         if ( slap_listeners[l]->sl_sd == AC_SOCKET_INVALID )
 945                                 continue;
 946
 947 #ifdef NEW_LOGGING
 948                         LDAP_LOG(( "connection", LDAP_LEVEL_DETAIL1,
 949                                    "slapd_daemon_task: select: listen=%d active_threads=%d tvp=%s\n",
 950                                    slap_listeners[l]->sl_sd, at, tvp == NULL ? "NULL" : "zero" ));
 951 #else
 952                         Debug( LDAP_DEBUG_CONNS,
 953                                 "daemon: select: listen=%d active_threads=%d tvp=%s\n",
 954                                         slap_listeners[l]->sl_sd, at,
 955                                         tvp == NULL ? "NULL" : "zero" );
 956 #endif
 957                 }
 958
 959                 switch(ns = select( nfds, &readfds,
 960 #ifdef HAVE_WINSOCK
 961                         /* don't pass empty fd_set */
 962                         ( writefds.fd_count > 0 ? &writefds : NULL ),
 963 #else
 964                         &writefds,
 965 #endif
 966                         NULL, tvp ))
 967                 {
 968                 case -1: {      /* failure - try again */
 969                                 int err = sock_errno();
 970
 971                                 if( err == EBADF
 972 #ifdef WSAENOTSOCK
 973                                         /* you'd think this would be EBADF */
 974                                         || err == WSAENOTSOCK
 975 #endif
 976                                 ) {
 977                                         if (++ebadf < SLAPD_EBADF_LIMIT)
 978                                                 continue;
 979                                 }
 980
 981                                 if( err != EINTR ) {
 982 #ifdef NEW_LOGGING
 983                                     LDAP_LOG(( "connection", LDAP_LEVEL_INFO,
 984                                                "slapd_daemon_task: select failed (%d): %s\n",
 985                                                err, sock_errstr(err) ));
 986 #else
 987                                         Debug( LDAP_DEBUG_CONNS,
 988                                                 "daemon: select failed (%d): %s\n",
 989                                                 err, sock_errstr(err), 0 );
 990 #endif
 991                                         slapd_shutdown = -1;
 992                                 }
 993                         }
 994                         continue;
 995
 996                 case 0:         /* timeout - let threads run */
 997                         ebadf = 0;
 998 #ifdef NEW_LOGGING
 999                         LDAP_LOG(( "connection", LDAP_LEVEL_DETAIL2,
1000                                    "slapd_daemon_task: select timeout - yielding\n" ));
1001 #else
1002                         Debug( LDAP_DEBUG_CONNS, "daemon: select timeout - yielding\n",
1003                             0, 0, 0 );
1004 #endif
1005                 ldap_pvt_thread_yield();
1006                         continue;
1007
1008                 default:        /* something happened - deal with it */
1009                         if( slapd_shutdown ) continue;
1010
1011                         ebadf = 0;
1012 #ifdef NEW_LOGGING
1013                         LDAP_LOG(( "connection", LDAP_LEVEL_DETAIL2,
1014                                    "slapd_daemon_task: activity on %d descriptors\n", ns ));
1015 #else
1016                         Debug( LDAP_DEBUG_CONNS, "daemon: activity on %d descriptors\n",
1017                                 ns, 0, 0 );
1018 #endif
1019                         /* FALL THRU */
1020                 }
1021
1022                 if( FD_ISSET( wake_sds[0], &readfds ) ) {
1023                         char c[BUFSIZ];
1024                         tcp_read( wake_sds[0], c, sizeof(c) );
1025 #ifdef NO_THREADS
1026                         waking = 0;
1027 #endif
1028                         continue;
1029                 }
1030
1031                 for ( l = 0; slap_listeners[l] != NULL; l++ ) {
1032                         ber_socket_t s;
1033                         socklen_t len = sizeof(from);
1034                         long id;
1035                         slap_ssf_t ssf = 0;
1036                         char *authid = NULL;
1037
1038                         char    *dnsname;
1039                         char    *peeraddr;
1040 #ifdef LDAP_PF_LOCAL
1041                         char    peername[MAXPATHLEN + sizeof("PATH=")];
1042 #elif defined(LDAP_PF_INET6)
1043                         char    peername[sizeof("IP=ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff 65535")];
1044 #else
1045                         char    peername[sizeof("IP=255.255.255.255:65336")];
1046 #endif /* LDAP_PF_LOCAL */
1047
1048                         peername[0] = '\0';
1049
1050                         if ( slap_listeners[l]->sl_sd == AC_SOCKET_INVALID )
1051                                 continue;
1052
1053                         if ( !FD_ISSET( slap_listeners[l]->sl_sd, &readfds ) )
1054                                 continue;
1055
1056                         s = accept( slap_listeners[l]->sl_sd,
1057                                 (struct sockaddr *) &from, &len );
1058                         if ( s == AC_SOCKET_INVALID ) {
1059                                 int err = sock_errno();
1060 #ifdef NEW_LOGGING
1061                                 LDAP_LOG(( "connection", LDAP_LEVEL_ERR,
1062                                            "slapd_daemon_task: accept(%ld) failed errno=%d (%s)\n",
1063                                            (long)slap_listeners[l]->sl_sd, err, sock_errstr(err) ));
1064 #else
1065                                 Debug( LDAP_DEBUG_ANY,
1066                                     "daemon: accept(%ld) failed errno=%d (%s)\n",
1067                                     (long) slap_listeners[l]->sl_sd, err,
1068                                     sock_errstr(err) );
1069 #endif
1070                                 continue;
1071                         }
1072
1073 #ifndef HAVE_WINSOCK
1074                         /* make sure descriptor number isn't too great */
1075                         if ( s >= dtblsize ) {
1076 #ifdef NEW_LGGING
1077                             LDAP_LOG(( "connection", LDAP_LEVEL_ERR,
1078                                        "slapd_daemon_task: %ld beyond descriptor table size %ld\n",
1079                                        (long)s, (long)dtblsize ));
1080 #else
1081                                 Debug( LDAP_DEBUG_ANY,
1082                                         "daemon: %ld beyond descriptor table size %ld\n",
1083                                         (long) s, (long) dtblsize, 0 );
1084 #endif
1085                                 slapd_close(s);
1086                                 continue;
1087                         }
1088 #endif
1089
1090 #ifdef LDAP_DEBUG
1091                         ldap_pvt_thread_mutex_lock( &slap_daemon.sd_mutex );
1092
1093                         /* newly accepted stream should not be in any of the FD SETS */
1094                         assert( !FD_ISSET( s, &slap_daemon.sd_actives) );
1095                         assert( !FD_ISSET( s, &slap_daemon.sd_readers) );
1096                         assert( !FD_ISSET( s, &slap_daemon.sd_writers) );
1097
1098                         ldap_pvt_thread_mutex_unlock( &slap_daemon.sd_mutex );
1099 #endif
1100
1101 #if defined( SO_KEEPALIVE ) || defined( TCP_NODELAY )
1102 #ifdef LDAP_PF_LOCAL
1103                         /* for IPv4 and IPv6 sockets only */
1104                         if ( from.sa_addr.sa_family != AF_LOCAL )
1105 #endif /* LDAP_PF_LOCAL */
1106                         {
1107                                 int rc;
1108                                 int tmp;
1109 #ifdef SO_KEEPALIVE
1110                                 /* enable keep alives */
1111                                 tmp = 1;
1112                                 rc = setsockopt( s, SOL_SOCKET, SO_KEEPALIVE,
1113                                         (char *) &tmp, sizeof(tmp) );
1114                                 if ( rc == AC_SOCKET_ERROR ) {
1115                                         int err = sock_errno();
1116 #ifdef NEW_LOGGING
1117                                         LDAP_LOG(( "connection", LDAP_LEVEL_ERR,
1118                                                    "slapd_daemon_task: setsockopt( %ld, SO_KEEPALIVE) failed errno=%d (%s)\n",
1119                                                    (long)s, err, sock_errstr(err) ));
1120 #else
1121                                         Debug( LDAP_DEBUG_ANY,
1122                                                 "slapd(%ld): setsockopt(SO_KEEPALIVE) failed "
1123                                                 "errno=%d (%s)\n", (long) s, err, sock_errstr(err) );
1124 #endif
1125                                 }
1126 #endif
1127 #ifdef TCP_NODELAY
1128                                 /* enable no delay */
1129                                 tmp = 1;
1130                                 rc = setsockopt( s, IPPROTO_TCP, TCP_NODELAY,
1131                                         (char *)&tmp, sizeof(tmp) );
1132                                 if ( rc == AC_SOCKET_ERROR ) {
1133                                         int err = sock_errno();
1134 #ifdef NEW_LOGGING
1135                                         LDAP_LOG(( "connection", LDAP_LEVEL_ERR,
1136                                                    "slapd_daemon_task: setsockopt( %ld, TCP_NODELAY) failed errno=%d (%s)\n",
1137                                                    (long)s, err, sock_errstr(err) ));
1138 #else
1139                                         Debug( LDAP_DEBUG_ANY,
1140                                                 "slapd(%ld): setsockopt(TCP_NODELAY) failed "
1141                                                 "errno=%d (%s)\n", (long) s, err, sock_errstr(err) );
1142 #endif
1143                                 }
1144 #endif
1145                         }
1146 #endif
1147
1148 #ifdef NEW_LOGGING
1149                         LDAP_LOG(( "connection", LDAP_LEVEL_DETAIL1,
1150                                    "slapd_daemon_task: new connection on %ld\n", (long)s ));
1151 #else
1152                         Debug( LDAP_DEBUG_CONNS, "daemon: new connection on %ld\n",
1153                                 (long) s, 0, 0 );
1154 #endif
1155                         switch ( from.sa_addr.sa_family ) {
1156 #  ifdef LDAP_PF_LOCAL
1157                         case AF_LOCAL:
1158                                 sprintf( peername, "PATH=%s", from.sa_un_addr.sun_path );
1159                                 ssf = LDAP_PVT_SASL_LOCAL_SSF;
1160                                 break;
1161 #endif /* LDAP_PF_LOCAL */
1162
1163 #  ifdef LDAP_PF_INET6
1164                         case AF_INET6:
1165                         if ( IN6_IS_ADDR_V4MAPPED(&from.sa_in6_addr.sin6_addr) ) {
1166                                 peeraddr = inet_ntoa( *((struct in_addr *)
1167                                                         &from.sa_in6_addr.sin6_addr.s6_addr[12]) );
1168                                 sprintf( peername, "IP=%s:%d",
1169                                          peeraddr != NULL ? peeraddr : "unknown",
1170                                          (unsigned) ntohs( from.sa_in6_addr.sin6_port ) );
1171                         } else {
1172                                 char addr[INET6_ADDRSTRLEN];
1173                                 sprintf( peername, "IP=%s %d",
1174                                          inet_ntop( AF_INET6,
1175                                                     &from.sa_in6_addr.sin6_addr,
1176                                                     addr, sizeof addr) ? addr : "unknown",
1177                                          (unsigned) ntohs( from.sa_in6_addr.sin6_port ) );
1178                         }
1179                         break;
1180 #  endif /* LDAP_PF_INET6 */
1181
1182                         case AF_INET:
1183                         peeraddr = inet_ntoa( from.sa_in_addr.sin_addr );
1184                         sprintf( peername, "IP=%s:%d",
1185                                 peeraddr != NULL ? peeraddr : "unknown",
1186                                 (unsigned) ntohs( from.sa_in_addr.sin_port ) );
1187                                 break;
1188
1189                         default:
1190                                 slapd_close(s);
1191                                 continue;
1192                         }
1193
1194                         if ( ( from.sa_addr.sa_family == AF_INET )
1195 #ifdef LDAP_PF_INET6
1196                                 || ( from.sa_addr.sa_family == AF_INET6 )
1197 #endif
1198                         ) {
1199 #ifdef SLAPD_RLOOKUPS
1200 #  ifdef LDAP_PF_INET6
1201                                 if ( from.sa_addr.sa_family == AF_INET6 )
1202                                         hp = gethostbyaddr(
1203                                                 (char *)&(from.sa_in6_addr.sin6_addr),
1204                                                 sizeof(from.sa_in6_addr.sin6_addr),
1205                                                 AF_INET6 );
1206                                 else
1207 #  endif /* LDAP_PF_INET6 */
1208                                 hp = gethostbyaddr(
1209                                         (char *) &(from.sa_in_addr.sin_addr),
1210                                         sizeof(from.sa_in_addr.sin_addr),
1211                                         AF_INET );
1212                                 dnsname = hp ? ldap_pvt_str2lower( hp->h_name ) : NULL;
1213 #else
1214                                 dnsname = NULL;
1215 #endif /* SLAPD_RLOOKUPS */
1216
1217 #ifdef HAVE_TCPD
1218                                 if ( !hosts_ctl("slapd",
1219                                                 dnsname != NULL ? dnsname : STRING_UNKNOWN,
1220                                                 peeraddr != NULL ? peeraddr : STRING_UNKNOWN,
1221                                                 STRING_UNKNOWN ))
1222                                 {
1223                                         /* DENY ACCESS */
1224                                         Statslog( LDAP_DEBUG_ANY,
1225                                                 "fd=%ld host access from %s (%s) denied.\n",
1226                                                 (long) s,
1227                                                 dnsname != NULL ? dnsname : "unknown",
1228                                                 peeraddr != NULL ? peeraddr : "unknown",
1229                                                 0, 0 );
1230                                         slapd_close(s);
1231                                         continue;
1232                                 }
1233 #endif /* HAVE_TCPD */
1234                         }
1235
1236                         id = connection_init(s,
1237                                 slap_listeners[l]->sl_url,
1238                                 dnsname != NULL ? dnsname : "unknown",
1239                                 peername,
1240                                 slap_listeners[l]->sl_name,
1241 #ifdef HAVE_TLS
1242                                 slap_listeners[l]->sl_is_tls,
1243 #else
1244                                 0,
1245 #endif
1246                                 ssf,
1247                                 authid );
1248
1249                         if( authid ) ch_free(authid);
1250
1251                         if( id < 0 ) {
1252 #ifdef NEW_LOGGING
1253                             LDAP_LOG(( "connection", LDAP_LEVEL_INFO,
1254                                        "slapd_daemon_task: connection_init(%ld, %s, %s) failed.\n",
1255                                        (long)s, peername, slap_listeners[l]->sl_name ));
1256 #else
1257                                 Debug( LDAP_DEBUG_ANY,
1258                                         "daemon: connection_init(%ld, %s, %s) failed.\n",
1259                                         (long) s,
1260                                         peername,
1261                                         slap_listeners[l]->sl_name );
1262 #endif
1263                                 slapd_close(s);
1264                                 continue;
1265                         }
1266
1267                         Statslog( LDAP_DEBUG_STATS,
1268                                 "daemon: conn=%ld fd=%ld connection from %s (%s) accepted.\n",
1269                                 id, (long) s,
1270                                 peername,
1271                                 slap_listeners[l]->sl_name,
1272                                 0 );
1273
1274                         slapd_add( s );
1275                         continue;
1276                 }
1277
1278 #ifdef LDAP_DEBUG
1279 #ifdef NEW_LOGGING
1280                 LDAP_LOG(( "connection", LDAP_LEVEL_DETAIL2,
1281                            "slapd_daemon_task: activity on " ));
1282 #else
1283                 Debug( LDAP_DEBUG_CONNS, "daemon: activity on:", 0, 0, 0 );
1284 #endif
1285 #ifdef HAVE_WINSOCK
1286                 for ( i = 0; i < readfds.fd_count; i++ ) {
1287 #ifdef NEW_LOGGING
1288                     LDAP_LOG(( "connection", LDAP_LEVEL_DETAIL2,
1289                                " %d%s", readfs.fd_array[i], "r", 0 );
1290 #else
1291                         Debug( LDAP_DEBUG_CONNS, " %d%s",
1292                                 readfds.fd_array[i], "r", 0 );
1293 #endif
1294                 }
1295                 for ( i = 0; i < writefds.fd_count; i++ ) {
1296 #ifdef NEW_LOGGING
1297                     LDAP_LOG(( "connection", LDAP_LEVEL_DETAIL2,
1298                                " %d%s", writefds.fd_array[i], "w" ));
1299 #else
1300                         Debug( LDAP_DEBUG_CONNS, " %d%s",
1301                                 writefds.fd_array[i], "w", 0 );
1302 #endif
1303                 }
1304
1305 #else
1306                 for ( i = 0; i < nfds; i++ ) {
1307                         int     r, w;
1308                         int     is_listener = 0;
1309
1310                         for ( l = 0; slap_listeners[l] != NULL; l++ ) {
1311                                 if ( i == slap_listeners[l]->sl_sd ) {
1312                                         is_listener = 1;
1313                                         break;
1314                                 }
1315                         }
1316                         if ( is_listener ) {
1317                                 continue;
1318                         }
1319                         r = FD_ISSET( i, &readfds );
1320                         w = FD_ISSET( i, &writefds );
1321                         if ( r || w ) {
1322 #ifdef NEW_LOGGING
1323                             LDAP_LOG(( "connection", LDAP_LEVEL_DETAIL2,
1324                                        " %d%s%s", i,
1325                                        r ? "r" : "", w ? "w" : "" ));
1326 #else
1327                                 Debug( LDAP_DEBUG_CONNS, " %d%s%s", i,
1328                                     r ? "r" : "", w ? "w" : "" );
1329 #endif
1330                         }
1331                 }
1332 #endif
1333 #ifdef NEW_LOGGING
1334                     LDAP_LOG(( "connection", LDAP_LEVEL_DETAIL2, "\n" ));
1335 #else
1336                 Debug( LDAP_DEBUG_CONNS, "\n", 0, 0, 0 );
1337 #endif
1338
1339 #endif
1340
1341                 /* loop through the writers */
1342 #ifdef HAVE_WINSOCK
1343                 for ( i = 0; i < writefds.fd_count; i++ )
1344 #else
1345                 for ( i = 0; i < nfds; i++ )
1346 #endif
1347                 {
1348                         ber_socket_t wd;
1349                         int is_listener = 0;
1350 #ifdef HAVE_WINSOCK
1351                         wd = writefds.fd_array[i];
1352 #else
1353                         if( ! FD_ISSET( i, &writefds ) ) {
1354                                 continue;
1355                         }
1356                         wd = i;
1357 #endif
1358
1359                         for ( l = 0; slap_listeners[l] != NULL; l++ ) {
1360                                 if ( i == slap_listeners[l]->sl_sd ) {
1361                                         is_listener = 1;
1362                                         break;
1363                                 }
1364                         }
1365                         if ( is_listener ) {
1366                                 continue;
1367                         }
1368 #ifdef NEW_LOGGING
1369                         LDAP_LOG(( "connection", LDAP_LEVEL_DETAIL2,
1370                                    "slapd_daemon_task: write active on %d\n", wd ));
1371 #else
1372                         Debug( LDAP_DEBUG_CONNS,
1373                                 "daemon: write active on %d\n",
1374                                 wd, 0, 0 );
1375 #endif
1376                         /*
1377                          * NOTE: it is possible that the connection was closed
1378                          * and that the stream is now inactive.
1379                          * connection_write() must valid the stream is still
1380                          * active.
1381                          */
1382
1383                         if ( connection_write( wd ) < 0 ) {
1384                                 FD_CLR( (unsigned) wd, &readfds );
1385                                 slapd_close( wd );
1386                         }
1387                 }
1388
1389 #ifdef HAVE_WINSOCK
1390                 for ( i = 0; i < readfds.fd_count; i++ )
1391 #else
1392                 for ( i = 0; i < nfds; i++ )
1393 #endif
1394                 {
1395                         ber_socket_t rd;
1396                         int is_listener = 0;
1397
1398 #ifdef HAVE_WINSOCK
1399                         rd = readfds.fd_array[i];
1400 #else
1401                         if( ! FD_ISSET( i, &readfds ) ) {
1402                                 continue;
1403                         }
1404                         rd = i;
1405 #endif
1406
1407                         for ( l = 0; slap_listeners[l] != NULL; l++ ) {
1408                                 if ( rd == slap_listeners[l]->sl_sd ) {
1409                                         is_listener = 1;
1410                                         break;
1411                                 }
1412                         }
1413                         if ( is_listener ) {
1414                                 continue;
1415                         }
1416
1417 #ifdef NEW_LOGGING
1418                         LDAP_LOG(( "connection", LDAP_LEVEL_DETAIL2,
1419                                    "slapd_daemon_task: read activity on %d\n", rd ));
1420 #else
1421                         Debug ( LDAP_DEBUG_CONNS,
1422                                 "daemon: read activity on %d\n", rd, 0, 0 );
1423 #endif
1424                         /*
1425                          * NOTE: it is possible that the connection was closed
1426                          * and that the stream is now inactive.
1427                          * connection_read() must valid the stream is still
1428                          * active.
1429                          */
1430
1431                         if ( connection_read( rd ) < 0 ) {
1432                                 slapd_close( rd );
1433                         }
1434                 }
1435                 ldap_pvt_thread_yield();
1436         }
1437
1438         if( slapd_shutdown > 0 ) {
1439 #ifdef NEW_LOGGING
1440             LDAP_LOG(( "connection", LDAP_LEVEL_CRIT,
1441                        "slapd_daemon_task: shutdown requested and initiated.\n"));
1442 #else
1443                 Debug( LDAP_DEBUG_TRACE,
1444                         "daemon: shutdown requested and initiated.\n",
1445                         0, 0, 0 );
1446 #endif
1447
1448         } else if ( slapd_shutdown < 0 ) {
1449 #ifdef HAVE_NT_SERVICE_MANAGER
1450                 if (slapd_shutdown == -1)
1451 #ifdef NEW_LOGGING
1452                     LDAP_LOG(( "connection", LDAP_LEVEL_CRIT,
1453                                "slapd_daemon_task: shutdown initiated by Service Manager.\n"));
1454 #else
1455                     Debug( LDAP_DEBUG_TRACE,
1456                           "daemon: shutdown initiated by Service Manager.\n",
1457                           0, 0, 0);
1458 #endif
1459                 else
1460 #endif
1461 #ifdef NEW_LOGGING
1462                     LDAP_LOG(( "connection", LDAP_LEVEL_CRIT,
1463                                "slapd_daemon_task: abnormal condition, shutdown initiated.\n" ));
1464 #else
1465                 Debug( LDAP_DEBUG_TRACE,
1466                         "daemon: abnormal condition, shutdown initiated.\n",
1467                         0, 0, 0 );
1468 #endif
1469         } else {
1470 #ifdef NEW_LOGGING
1471             LDAP_LOG(( "connection", LDAP_LEVEL_CRIT,
1472                        "slapd_daemon_task: no active streams, shutdown initiated.\n" ));
1473 #else
1474                 Debug( LDAP_DEBUG_TRACE,
1475                         "daemon: no active streams, shutdown initiated.\n",
1476                         0, 0, 0 );
1477 #endif
1478         }
1479
1480         for ( l = 0; slap_listeners[l] != NULL; l++ ) {
1481                 if ( slap_listeners[l]->sl_sd != AC_SOCKET_INVALID ) {
1482 #ifdef LDAP_PF_LOCAL
1483                         if ( slap_listeners[l]->sl_sa.sa_addr.sa_family == AF_LOCAL ) {
1484                                 unlink( slap_listeners[l]->sl_sa.sa_un_addr.sun_path );
1485                         }
1486 #endif /* LDAP_PF_LOCAL */
1487                         slapd_close( slap_listeners[l]->sl_sd );
1488                         break;
1489                 }
1490         }
1491
1492 #ifdef NEW_LOGGING
1493         LDAP_LOG(( "connection", LDAP_LEVEL_CRIT,
1494                    "slapd_daemon_task: shutdown waiting for %d threads to terminate.\n",
1495                    ldap_pvt_thread_pool_backload(&connection_pool) ));
1496 #else
1497         Debug( LDAP_DEBUG_ANY,
1498             "slapd shutdown: waiting for %d threads to terminate\n",
1499             ldap_pvt_thread_pool_backload(&connection_pool), 0, 0 );
1500 #endif
1501         ldap_pvt_thread_pool_destroy(&connection_pool, 1);
1502
1503         return NULL;
1504 }
1505
1506
1507 int slapd_daemon( void )
1508 {
1509         int rc;
1510
1511         connections_init();
1512
1513 #define SLAPD_LISTENER_THREAD 1
1514 #if defined( SLAPD_LISTENER_THREAD )
1515         {
1516                 ldap_pvt_thread_t       listener_tid;
1517
1518                 /* listener as a separate THREAD */
1519                 rc = ldap_pvt_thread_create( &listener_tid,
1520                         0, slapd_daemon_task, NULL );
1521
1522                 if ( rc != 0 ) {
1523 #ifdef NEW_LOGGING
1524                     LDAP_LOG(( "connection", LDAP_LEVEL_ERR,
1525                                "slapd_daemon: listener ldap_pvt_thread_create failed (%d).\n", rc ));
1526 #else
1527                         Debug( LDAP_DEBUG_ANY,
1528                         "listener ldap_pvt_thread_create failed (%d)\n", rc, 0, 0 );
1529 #endif
1530                         return rc;
1531                 }
1532
1533                 /* wait for the listener thread to complete */
1534                 ldap_pvt_thread_join( listener_tid, (void *) NULL );
1535         }
1536 #else
1537         /* experimental code */
1538         slapd_daemon_task( NULL );
1539 #endif
1540
1541         return 0;
1542
1543 }
1544
1545 int sockinit(void)
1546 {
1547 #if defined( HAVE_WINSOCK2 )
1548     WORD wVersionRequested;
1549         WSADATA wsaData;
1550         int err;
1551
1552         wVersionRequested = MAKEWORD( 2, 0 );
1553
1554         err = WSAStartup( wVersionRequested, &wsaData );
1555         if ( err != 0 ) {
1556                 /* Tell the user that we couldn't find a usable */
1557                 /* WinSock DLL.                                  */
1558                 return -1;
1559         }
1560
1561         /* Confirm that the WinSock DLL supports 2.0.*/
1562         /* Note that if the DLL supports versions greater    */
1563         /* than 2.0 in addition to 2.0, it will still return */
1564         /* 2.0 in wVersion since that is the version we      */
1565         /* requested.                                        */
1566
1567         if ( LOBYTE( wsaData.wVersion ) != 2 ||
1568                 HIBYTE( wsaData.wVersion ) != 0 )
1569         {
1570             /* Tell the user that we couldn't find a usable */
1571             /* WinSock DLL.                                  */
1572             WSACleanup();
1573             return -1;
1574         }
1575
1576         /* The WinSock DLL is acceptable. Proceed. */
1577 #elif defined( HAVE_WINSOCK )
1578         WSADATA wsaData;
1579         if ( WSAStartup( 0x0101, &wsaData ) != 0 ) {
1580             return -1;
1581         }
1582 #endif
1583         return 0;
1584 }
1585
1586 int sockdestroy(void)
1587 {
1588 #if defined( HAVE_WINSOCK2 ) || defined( HAVE_WINSOCK )
1589         WSACleanup();
1590 #endif
1591         return 0;
1592 }
1593
1594 RETSIGTYPE
1595 slap_sig_shutdown( int sig )
1596 {
1597 #ifdef NEW_LOGGING
1598     LDAP_LOG(( "connection", LDAP_LEVEL_CRIT,
1599                "slap_sig_shutdown: signal %d\n", sig ));
1600 #else
1601         Debug(LDAP_DEBUG_TRACE, "slap_sig_shutdown: signal %d\n", sig, 0, 0);
1602 #endif
1603
1604         /*
1605          * If the NT Service Manager is controlling the server, we don't
1606          * want SIGBREAK to kill the server. For some strange reason,
1607          * SIGBREAK is generated when a user logs out.
1608          */
1609
1610 #if HAVE_NT_SERVICE_MANAGER && SIGBREAK
1611         if (is_NT_Service && sig == SIGBREAK)
1612 #ifdef NEW_LOGGING
1613             LDAP_LOG(( "connection", LDAP_LEVEL_CRIT,
1614                        "slap_sig_shutdown: SIGBREAK ignored.\n" ));
1615 #else
1616             Debug(LDAP_DEBUG_TRACE, "slap_sig_shutdown: SIGBREAK ignored.\n",
1617                   0, 0, 0);
1618 #endif
1619         else
1620 #endif
1621         slapd_shutdown = sig;
1622
1623         WAKE_LISTENER(1);
1624
1625         /* reinstall self */
1626         (void) SIGNAL_REINSTALL( sig, slap_sig_shutdown );
1627 }
1628
1629 RETSIGTYPE
1630 slap_sig_wake( int sig )
1631 {
1632         WAKE_LISTENER(1);
1633
1634         /* reinstall self */
1635         (void) SIGNAL_REINSTALL( sig, slap_sig_wake );
1636 }
1637
1638
1639 void slapd_add_internal(ber_socket_t s) {
1640         slapd_add(s);
1641 }