git.sur5r.net Git - openldap/blob - servers/slapd/daemon.c

   1 /* $OpenLDAP$ */
   2 /*
   3  * Copyright 1998-2000 The OpenLDAP Foundation, All Rights Reserved.
   4  * COPYING RESTRICTIONS APPLY, see COPYRIGHT file
   5  */
   6
   7 #include "portable.h"
   8
   9 #include <stdio.h>
  10
  11 #include <ac/ctype.h>
  12 #include <ac/errno.h>
  13 #include <ac/signal.h>
  14 #include <ac/socket.h>
  15 #include <ac/string.h>
  16 #include <ac/time.h>
  17 #include <ac/unistd.h>
  18
  19 #include "ldap_pvt.h"
  20 #include "lutil.h"
  21 #include "slap.h"
  22
  23 #ifdef HAVE_TCPD
  24 #include <tcpd.h>
  25
  26 int allow_severity = LOG_INFO;
  27 int deny_severity = LOG_NOTICE;
  28 #endif /* TCP Wrappers */
  29
  30 #ifdef LDAP_PF_LOCAL
  31 #include <sys/stat.h>
  32 #endif /* LDAP_PF_LOCAL */
  33
  34 /* globals */
  35 time_t starttime;
  36 ber_socket_t dtblsize;
  37
  38 typedef union slap_sockaddr {
  39         struct sockaddr sa_addr;
  40         struct sockaddr_in sa_in_addr;
  41 #ifdef LDAP_PF_INET6
  42         struct sockaddr_in6 sa_in6_addr;
  43 #endif
  44 #ifdef LDAP_PF_LOCAL
  45         struct sockaddr_un sa_un_addr;
  46 #endif
  47 } Sockaddr;
  48
  49 typedef struct slap_listener {
  50         char* sl_url;
  51         char* sl_name;
  52 #ifdef HAVE_TLS
  53         int             sl_is_tls;
  54 #endif
  55         ber_socket_t            sl_sd;
  56         Sockaddr sl_sa;
  57 #define sl_addr sl_sa.sa_in_addr
  58 } Listener;
  59
  60 Listener **slap_listeners = NULL;
  61
  62 #define SLAPD_LISTEN 10
  63
  64 static ber_socket_t wake_sds[2];
  65
  66 #ifdef NO_THREADS
  67 static int waking;
  68 #define WAKE_LISTENER(w) \
  69 ((w && !waking) ? tcp_write( wake_sds[1], "0", 1 ), waking=1 : 0)
  70 #else
  71 #define WAKE_LISTENER(w) \
  72 do { if (w) tcp_write( wake_sds[1], "0", 1 ); } while(0)
  73 #endif
  74
  75 #ifdef HAVE_NT_SERVICE_MANAGER
  76 /* in nt_main.c */
  77 extern ldap_pvt_thread_cond_t                   started_event;
  78 extern int        is_NT_Service;
  79 #endif
  80
  81 #ifndef HAVE_WINSOCK
  82 static
  83 #endif
  84 volatile sig_atomic_t slapd_shutdown = 0;
  85
  86 static struct slap_daemon {
  87         ldap_pvt_thread_mutex_t sd_mutex;
  88
  89         int sd_nactives;
  90
  91 #ifndef HAVE_WINSOCK
  92         /* In winsock, accept() returns values higher than dtblsize
  93                 so don't bother with this optimization */
  94         int sd_nfds;
  95 #endif
  96
  97         fd_set sd_actives;
  98         fd_set sd_readers;
  99         fd_set sd_writers;
 100 } slap_daemon;
 101
 102
 103
 104 #ifdef HAVE_SLP
 105 /*
 106  * SLP related functions
 107  */
 108 #include <slp.h>
 109
 110 #define MAX_HOSTNAME_LEN 256
 111 #define LDAP_SRVTYPE_PREFIX "service:ldap://"
 112 static char** slapd_srvurls = 0;
 113 static SLPHandle slapd_hslp = 0;
 114
 115 void slapd_slp_init( const char* urls ) {
 116         int i;
 117         struct hostent* he;
 118         char hn[MAX_HOSTNAME_LEN];
 119
 120         slapd_srvurls = str2charray( urls, " " );
 121
 122         for( i=0; slapd_srvurls[i]!=NULL; i++ ) {
 123                 if( strcmp( slapd_srvurls[i], "ldap:///" ) == 0) {
 124                         /* INADDR_ANY urls should be marked up with host.domainname */
 125                         if ( gethostname( hn, MAX_HOSTNAME_LEN ) == 0) {
 126                                 he = gethostbyname( hn );
 127                                 if( he ) {
 128                                         slapd_srvurls[i] = (char *) realloc( slapd_srvurls[i],
 129                                                 strlen( he->h_name ) +
 130                                                 strlen( LDAP_SRVTYPE_PREFIX ) + 1);
 131                                         strcpy( slapd_srvurls[i], LDAP_SRVTYPE_PREFIX );
 132                                         strcat( slapd_srvurls[i], he->h_name );
 133                                 }
 134                         }
 135                 }
 136         }
 137
 138         /* open the SLP handle */
 139         SLPOpen("en", 0, &slapd_hslp);
 140 }
 141
 142 void slapd_slp_deinit() {
 143         if ( slapd_srvurls ) {
 144                 charray_free( slapd_srvurls );
 145         }
 146
 147         /* close the SLP handle */
 148         SLPClose( slapd_hslp );
 149 }
 150
 151 void slapd_slp_regreport(
 152         SLPHandle hslp,
 153         SLPError errcode,
 154         void* cookie )
 155 {
 156         /* empty report */
 157 }
 158
 159 void slapd_slp_reg() {
 160         int i;
 161
 162         for( i=0; slapd_srvurls[i] != NULL; i++ ) {
 163                 SLPReg( slapd_hslp,
 164                         slapd_srvurls[i],
 165                         SLP_LIFETIME_MAXIMUM,
 166                         "ldap",
 167                         "",
 168                         1,
 169                         slapd_slp_regreport,
 170                         NULL );
 171         }
 172 }
 173
 174 void slapd_slp_dereg() {
 175         int i;
 176
 177         for( i=0; slapd_srvurls[i] != NULL; i++ ) {
 178                 SLPDereg( slapd_hslp,
 179                         slapd_srvurls[i],
 180                         slapd_slp_regreport,
 181                         NULL );
 182         }
 183 }
 184 #endif /* HAVE_SLP */
 185
 186 /*
 187  * Add a descriptor to daemon control
 188  */
 189 static void slapd_add(ber_socket_t s) {
 190         ldap_pvt_thread_mutex_lock( &slap_daemon.sd_mutex );
 191
 192         assert( !FD_ISSET( s, &slap_daemon.sd_actives ));
 193         assert( !FD_ISSET( s, &slap_daemon.sd_readers ));
 194         assert( !FD_ISSET( s, &slap_daemon.sd_writers ));
 195
 196 #ifndef HAVE_WINSOCK
 197         if (s >= slap_daemon.sd_nfds) {
 198                 slap_daemon.sd_nfds = s + 1;
 199         }
 200 #endif
 201
 202         FD_SET( s, &slap_daemon.sd_actives );
 203         FD_SET( s, &slap_daemon.sd_readers );
 204
 205 #ifdef NEW_LOGGING
 206         LDAP_LOG(( "connection", LDAP_LEVEL_DETAIL1,
 207                    "slapd_add: added %ld%s%s\n",
 208                    (long)s,
 209                    FD_ISSET(s, &slap_daemon.sd_readers) ? "r" : "",
 210                    FD_ISSET(s, &slap_daemon.sd_writers) ? "w" : "" ));
 211 #else
 212         Debug( LDAP_DEBUG_CONNS, "daemon: added %ld%s%s\n",
 213                 (long) s,
 214             FD_ISSET(s, &slap_daemon.sd_readers) ? "r" : "",
 215                 FD_ISSET(s, &slap_daemon.sd_writers) ? "w" : "" );
 216 #endif
 217         ldap_pvt_thread_mutex_unlock( &slap_daemon.sd_mutex );
 218 }
 219
 220 /*
 221  * Remove the descriptor from daemon control
 222  */
 223 void slapd_remove(ber_socket_t s, int wake) {
 224         ldap_pvt_thread_mutex_lock( &slap_daemon.sd_mutex );
 225
 226 #ifdef NEW_LOGGING
 227         LDAP_LOG(( "connection", LDAP_LEVEL_DETAIL1,
 228                    "slapd_remove: removing %ld%s%s\n",
 229                    (long) s,
 230                    FD_ISSET(s, &slap_daemon.sd_readers) ? "r" : "",
 231                    FD_ISSET(s, &slap_daemon.sd_writers) ? "w" : ""  ));
 232 #else
 233         Debug( LDAP_DEBUG_CONNS, "daemon: removing %ld%s%s\n",
 234                 (long) s,
 235             FD_ISSET(s, &slap_daemon.sd_readers) ? "r" : "",
 236                 FD_ISSET(s, &slap_daemon.sd_writers) ? "w" : "" );
 237 #endif
 238         FD_CLR( s, &slap_daemon.sd_actives );
 239         FD_CLR( s, &slap_daemon.sd_readers );
 240         FD_CLR( s, &slap_daemon.sd_writers );
 241
 242         ldap_pvt_thread_mutex_unlock( &slap_daemon.sd_mutex );
 243         WAKE_LISTENER(wake);
 244 }
 245
 246 void slapd_clr_write(ber_socket_t s, int wake) {
 247         ldap_pvt_thread_mutex_lock( &slap_daemon.sd_mutex );
 248
 249         assert( FD_ISSET( s, &slap_daemon.sd_actives) );
 250         FD_CLR( s, &slap_daemon.sd_writers );
 251
 252         ldap_pvt_thread_mutex_unlock( &slap_daemon.sd_mutex );
 253         WAKE_LISTENER(wake);
 254 }
 255
 256 void slapd_set_write(ber_socket_t s, int wake) {
 257         ldap_pvt_thread_mutex_lock( &slap_daemon.sd_mutex );
 258
 259         assert( FD_ISSET( s, &slap_daemon.sd_actives) );
 260         if (!FD_ISSET(s, &slap_daemon.sd_writers))
 261             FD_SET( (unsigned) s, &slap_daemon.sd_writers );
 262
 263         ldap_pvt_thread_mutex_unlock( &slap_daemon.sd_mutex );
 264         WAKE_LISTENER(wake);
 265 }
 266
 267 void slapd_clr_read(ber_socket_t s, int wake) {
 268         ldap_pvt_thread_mutex_lock( &slap_daemon.sd_mutex );
 269
 270         assert( FD_ISSET( s, &slap_daemon.sd_actives) );
 271         FD_CLR( s, &slap_daemon.sd_readers );
 272
 273         ldap_pvt_thread_mutex_unlock( &slap_daemon.sd_mutex );
 274         WAKE_LISTENER(wake);
 275 }
 276
 277 void slapd_set_read(ber_socket_t s, int wake) {
 278         ldap_pvt_thread_mutex_lock( &slap_daemon.sd_mutex );
 279
 280         assert( FD_ISSET( s, &slap_daemon.sd_actives) );
 281         if (!FD_ISSET(s, &slap_daemon.sd_readers))
 282             FD_SET( s, &slap_daemon.sd_readers );
 283
 284         ldap_pvt_thread_mutex_unlock( &slap_daemon.sd_mutex );
 285         WAKE_LISTENER(wake);
 286 }
 287
 288 static void slapd_close(ber_socket_t s) {
 289 #ifdef NEW_LOGGING
 290     LDAP_LOG(( "connection", LDAP_LEVEL_DETAIL1,
 291                "slapd_close: closing %ld\n", (long)s ));
 292 #else
 293         Debug( LDAP_DEBUG_CONNS, "daemon: closing %ld\n",
 294                 (long) s, 0, 0 );
 295 #endif
 296         tcp_close(s);
 297 }
 298
 299 static void slap_free_listener_addresses(struct sockaddr **sal)
 300 {
 301         struct sockaddr **sap;
 302
 303         if (sal == NULL) {
 304                 return;
 305         }
 306
 307         for (sap = sal; *sap != NULL; sap++) {
 308                 ch_free(*sap);
 309         }
 310
 311         ch_free(sal);
 312 }
 313
 314 /* port = 0 indicates AF_LOCAL */
 315 static int slap_get_listener_addresses(
 316         const char *host,
 317         unsigned short port,
 318         struct sockaddr ***sal)
 319 {
 320         struct sockaddr **sap;
 321 #ifdef HAVE_GETADDRINFO
 322         struct addrinfo hints, *res, *sai;
 323         int n, err;
 324
 325         memset( &hints, '\0', sizeof(hints) );
 326         hints.ai_flags = AI_PASSIVE;
 327         hints.ai_socktype = SOCK_STREAM;
 328 #  ifdef LDAP_PF_LOCAL
 329         if ( port == 0 ) {
 330                 hints.ai_family = AF_LOCAL;
 331                 /* host specifies a service in this case */
 332                 if (err = getaddrinfo(NULL, host, &hints, &res)) {
 333 #ifdef NEW_LOGGING
 334                     LDAP_LOG(( "connection", LDAP_LEVEL_INFO,
 335                                "slap_get_listener_addresses: getaddrinfo failed: %s\n",
 336                                AC_GAI_STRERROR(err) ));
 337 #else
 338                         Debug( LDAP_DEBUG_ANY, "daemon: getaddrinfo failed: %s\n",
 339                                 AC_GAI_STRERROR(err), 0, 0);
 340 #endif
 341                         return -1;
 342                 }
 343         } else
 344 #  endif
 345         {
 346                 char serv[7];
 347
 348                 snprintf(serv, sizeof serv, "%d", port);
 349                 hints.ai_family = AF_UNSPEC;
 350                 if (err = getaddrinfo(host, serv, &hints, &res)) {
 351 #ifdef NEW_LOGGING
 352                     LDAP_LOG(( "connection", LDAP_LEVEL_INFO,
 353                                "slap_get_listener_addresses: getaddrinfo failed: %s\n",
 354                                AC_GAI_STRERROR(err) ));
 355 #else
 356                         Debug( LDAP_DEBUG_ANY, "daemon: getaddrinfo failed: %s\n",
 357                                 AC_GAI_STRERROR(err), 0, 0);
 358 #endif
 359                         return -1;
 360                 }
 361         }
 362
 363         sai = res;
 364         for (n=2; (sai = sai->ai_next) != NULL; n++) {
 365                 /* EMPTY */ ;
 366         }
 367         *sal = ch_malloc(n * sizeof(*sal));
 368         if (*sal == NULL) {
 369                 return -1;
 370         }
 371
 372         sai = res;
 373         sap = *sal;
 374         do {
 375                 switch (sai->ai_family) {
 376 #  ifdef LDAP_PF_LOCAL
 377                 case AF_LOCAL: {
 378                         *sap = ch_malloc(sizeof(struct sockaddr_un));
 379                         if (*sap == NULL) {
 380                                 freeaddrinfo(res);
 381                                 goto errexit;
 382                         }
 383                         *(struct sockaddr_un *)*sap =
 384                                 *((struct sockaddr_un *)sai->ai_addr);
 385                 } break;
 386 #  endif
 387 #  ifdef LDAP_PF_INET6
 388                 case AF_INET6: {
 389                         *sap = ch_malloc(sizeof(struct sockaddr_in6));
 390                         if (*sap == NULL) {
 391                                 freeaddrinfo(res);
 392                                 goto errexit;
 393                         }
 394                         *(struct sockaddr_in6 *)*sap =
 395                                 *((struct sockaddr_in6 *)sai->ai_addr);
 396                 } break;
 397 #  endif
 398                 case AF_INET: {
 399                         *sap = ch_malloc(sizeof(struct sockaddr_in));
 400                         if (*sap == NULL) {
 401                                 freeaddrinfo(res);
 402                                 goto errexit;
 403                         }
 404                         *(struct sockaddr_in *)*sap =
 405                                 *((struct sockaddr_in *)sai->ai_addr);
 406                 } break;
 407                 default:
 408                         *sap = NULL;
 409                         break;
 410                 }
 411                 if (*sap != NULL) {
 412                         (*sap)->sa_family = sai->ai_family;
 413                         sap++;
 414                 }
 415         } while ((sai = sai->ai_next) != NULL);
 416
 417         freeaddrinfo(res);
 418
 419 #else
 420 #  ifdef LDAP_PF_LOCAL
 421         if ( port == 0 ) {
 422                 *sal = ch_malloc(2 * sizeof(*sal));
 423                 if (*sal == NULL) {
 424                         return -1;
 425                 }
 426                 sap = *sal;
 427                 *sap = ch_malloc(sizeof(struct sockaddr_un));
 428                 if (*sap == NULL)
 429                         goto errexit;
 430                 (void)memset( (void *)*sap, '\0', sizeof(struct sockaddr_un) );
 431                 (*sap)->sa_family = AF_LOCAL;
 432                 if ( strlen(host) >
 433                      (sizeof(((struct sockaddr_un *)*sal)->sun_path) - 1) ) {
 434 #ifdef NEW_LOGGING
 435                     LDAP_LOG(( "connection", LDAP_LEVEL_INFO,
 436                                "slap_get_listener_addresses: domain socket path (%s) too long in URL\n",
 437                                host ));
 438 #else
 439                         Debug( LDAP_DEBUG_ANY,
 440                                "daemon: domain socket path (%s) too long in URL",
 441                                host, 0, 0);
 442 #endif
 443                         goto errexit;
 444                 }
 445                 strcpy( ((struct sockaddr_un *)*sap)->sun_path, host );
 446         } else
 447 #  endif
 448         {
 449                 struct in_addr in;
 450
 451                 if ( host == NULL ) {
 452                         in.s_addr = htonl(INADDR_ANY);
 453
 454                 } else if ( !inet_aton( host, &in ) ) {
 455                         struct hostent *he = gethostbyname( host );
 456                         if( he == NULL ) {
 457 #ifdef NEW_LOGGING
 458                             LDAP_LOG(( "connection", LDAP_LEVEL_INFO,
 459                                        "slap_get_listener_addresses: invalid host %s\n",
 460                                        host ));
 461 #else
 462                                 Debug( LDAP_DEBUG_ANY,
 463                                        "daemon: invalid host %s", host, 0, 0);
 464 #endif
 465                                 return -1;
 466                         }
 467                         AC_MEMCPY( &in, he->h_addr, sizeof( in ) );
 468                 }
 469
 470                 *sal = ch_malloc(2 * sizeof(*sal));
 471                 if (*sal == NULL) {
 472                         return -1;
 473                 }
 474
 475                 sap = *sal;
 476                 *sap = ch_malloc(sizeof(struct sockaddr_in));
 477                 if (*sap == NULL) {
 478                         goto errexit;
 479                 }
 480
 481                 (void)memset( (void *)*sap, '\0', sizeof(struct sockaddr_in) );
 482                 (*sap)->sa_family = AF_INET;
 483                 ((struct sockaddr_in *)*sap)->sin_port = htons(port);
 484                 ((struct sockaddr_in *)*sap)->sin_addr = in;
 485         }
 486         sap++;
 487 #endif
 488
 489         *sap = NULL;
 490         return 0;
 491
 492 errexit:
 493         slap_free_listener_addresses(*sal);
 494         return -1;
 495 }
 496
 497 static Listener * slap_open_listener(
 498         const char* url )
 499 {
 500         int     tmp, rc;
 501         Listener l;
 502         Listener *li;
 503         LDAPURLDesc *lud;
 504         unsigned short port;
 505         int err, addrlen;
 506         struct sockaddr **sal, **psal;
 507
 508         rc = ldap_url_parse( url, &lud );
 509
 510         if( rc != LDAP_URL_SUCCESS ) {
 511 #ifdef NEW_LOGGING
 512             LDAP_LOG(( "connection", LDAP_LEVEL_ERR,
 513                        "slap_open_listener: listen URL \"%s\" parse error %d\n",
 514                        url, rc ));
 515 #else
 516                 Debug( LDAP_DEBUG_ANY,
 517                         "daemon: listen URL \"%s\" parse error=%d\n",
 518                         url, rc, 0 );
 519 #endif
 520                 return NULL;
 521         }
 522
 523 #ifndef HAVE_TLS
 524         if( ldap_pvt_url_scheme2tls( lud->lud_scheme ) ) {
 525 #ifdef NEW_LOGGING
 526             LDAP_LOG(( "connection", LDAP_LEVEL_INFO,
 527                        "slap_open_listener: TLS is not supported (%s)\n",
 528                        url ));
 529 #else
 530                 Debug( LDAP_DEBUG_ANY,
 531                         "daemon: TLS not supported (%s)\n",
 532                         url, 0, 0 );
 533 #endif
 534                 ldap_free_urldesc( lud );
 535                 return NULL;
 536         }
 537
 538         if(! lud->lud_port ) {
 539                 lud->lud_port = LDAP_PORT;
 540         }
 541
 542 #else
 543         l.sl_is_tls = ldap_pvt_url_scheme2tls( lud->lud_scheme );
 544
 545         if(! lud->lud_port ) {
 546                 lud->lud_port = l.sl_is_tls ? LDAPS_PORT : LDAP_PORT;
 547         }
 548 #endif
 549
 550         port = (unsigned short) lud->lud_port;
 551
 552         if ( ldap_pvt_url_scheme2proto(lud->lud_scheme) == LDAP_PROTO_IPC ) {
 553 #ifdef LDAP_PF_LOCAL
 554                 if ( lud->lud_host == NULL || lud->lud_host[0] == '\0' ) {
 555                         err = slap_get_listener_addresses(LDAPI_SOCK, 0, &sal);
 556                 } else {
 557                         err = slap_get_listener_addresses(lud->lud_host, 0, &sal);
 558                 }
 559 #else
 560
 561 #ifdef NEW_LOGGING
 562                 LDAP_LOG(( "connection", LDAP_LEVEL_INFO,
 563                            "slap_open_listener: URL scheme is not supported: %s\n",
 564                            url ));
 565 #else
 566                 Debug( LDAP_DEBUG_ANY, "daemon: URL scheme not supported: %s",
 567                         url, 0, 0);
 568 #endif
 569                 ldap_free_urldesc( lud );
 570                 return NULL;
 571 #endif
 572         } else {
 573                 if( lud->lud_host == NULL || lud->lud_host[0] == '\0'
 574                         || strcmp(lud->lud_host, "*") == 0 )
 575                 {
 576                         err = slap_get_listener_addresses(NULL, port, &sal);
 577                 } else {
 578                         err = slap_get_listener_addresses(lud->lud_host, port, &sal);
 579                 }
 580         }
 581
 582         ldap_free_urldesc( lud );
 583         if ( err ) {
 584                 return NULL;
 585         }
 586
 587         psal = sal;
 588         while ( *sal != NULL ) {
 589                 switch( (*sal)->sa_family ) {
 590                 case AF_INET:
 591 #ifdef LDAP_PF_INET6
 592                 case AF_INET6:
 593 #endif
 594 #ifdef LDAP_PF_LOCAL
 595                 case AF_LOCAL:
 596 #endif
 597                         break;
 598                 default:
 599                         sal++;
 600                         continue;
 601                 }
 602                 l.sl_sd = socket( (*sal)->sa_family, SOCK_STREAM, 0);
 603                 if ( l.sl_sd == AC_SOCKET_INVALID ) {
 604                         int err = sock_errno();
 605 #ifdef NEW_LOGGING
 606                         LDAP_LOG(( "connection", LDAP_LEVEL_ERR,
 607                                    "slap_open_listener: socket() failed errno=%d (%s)\n",
 608                                    err, sock_errstr(err) ));
 609 #else
 610                         Debug( LDAP_DEBUG_ANY,
 611                                 "daemon: socket() failed errno=%d (%s)\n", err,
 612                                 sock_errstr(err), 0 );
 613 #endif
 614                         sal++;
 615                         continue;
 616                 }
 617 #ifndef HAVE_WINSOCK
 618                 if ( l.sl_sd >= dtblsize ) {
 619 #ifdef NEW_LOGGING
 620                     LDAP_LOG(( "connection", LDAP_LEVEL_ERR,
 621                                "slap_open_listener: listener descriptor %ld is too great %ld\n",
 622                                (long)l.sl_sd, (long)dtblsize ));
 623 #else
 624                         Debug( LDAP_DEBUG_ANY,
 625                                "daemon: listener descriptor %ld is too great %ld\n",
 626                                (long) l.sl_sd, (long) dtblsize, 0 );
 627 #endif
 628                         tcp_close( l.sl_sd );
 629                         sal++;
 630                         continue;
 631                 }
 632 #endif
 633 #ifdef LDAP_PF_LOCAL
 634                 if ( (*sal)->sa_family == AF_LOCAL ) {
 635                         unlink ( ((struct sockaddr_un *)*sal)->sun_path );
 636                 } else
 637 #endif
 638                 {
 639 #ifdef SO_REUSEADDR
 640                         /* enable address reuse */
 641                         tmp = 1;
 642                         rc = setsockopt( l.sl_sd, SOL_SOCKET, SO_REUSEADDR,
 643                                          (char *) &tmp, sizeof(tmp) );
 644                         if ( rc == AC_SOCKET_ERROR ) {
 645                                 int err = sock_errno();
 646 #ifdef NEW_LOGGING
 647                                 LDAP_LOG(( "connection", LDAP_LEVEL_INFO,
 648                                            "slap_open_listener: setsockopt( %ld, SO_REUSEADDR ) failed errno %d (%s)\n",
 649                                            (long)l.sl_sd, err, sock_errstr(err) ));
 650 #else
 651                                 Debug( LDAP_DEBUG_ANY,
 652                                        "slapd(%ld): setsockopt(SO_REUSEADDR) failed errno=%d (%s)\n",
 653                                        (long) l.sl_sd, err, sock_errstr(err) );
 654 #endif
 655                         }
 656 #endif
 657                 }
 658
 659                 switch( (*sal)->sa_family ) {
 660                 case AF_INET:
 661                         addrlen = sizeof(struct sockaddr_in);
 662                         break;
 663 #ifdef LDAP_PF_INET6
 664                 case AF_INET6:
 665                         addrlen = sizeof(struct sockaddr_in6);
 666                         break;
 667 #endif
 668 #ifdef LDAP_PF_LOCAL
 669                 case AF_LOCAL:
 670                         addrlen = sizeof(struct sockaddr_un);
 671                         break;
 672 #endif
 673                 }
 674
 675                 if (!bind(l.sl_sd, *sal, addrlen))
 676                         break;
 677                 err = sock_errno();
 678 #ifdef NEW_LOGGING
 679                 LDAP_LOG(( "connection", LDAP_LEVEL_INFO,
 680                            "slap_open_listener: bind(%ld) failed errno=%d (%s)\n",
 681                            (long)l.sl_sd, err, sock_errstr(err) ));
 682 #else
 683                 Debug( LDAP_DEBUG_ANY, "daemon: bind(%ld) failed errno=%d (%s)\n",
 684                        (long) l.sl_sd, err, sock_errstr(err) );
 685 #endif
 686                 tcp_close( l.sl_sd );
 687                 sal++;
 688         } /* while ( *sal != NULL ) */
 689
 690         if ( *sal == NULL ) {
 691 #ifdef NEW_LOGGING
 692             LDAP_LOG(( "connection", LDAP_LEVEL_INFO,
 693                        "slap_open_listener: bind(%ld) failed.\n", (long)l.sl_sd ));
 694 #else
 695                 Debug( LDAP_DEBUG_ANY, "daemon: bind(%ld) failed\n",
 696                         (long) l.sl_sd, 0, 0 );
 697 #endif
 698                 slap_free_listener_addresses(psal);
 699                 return NULL;
 700         }
 701
 702         switch ( (*sal)->sa_family ) {
 703 #ifdef LDAP_PF_LOCAL
 704         case AF_LOCAL: {
 705                 char *addr = ((struct sockaddr_un *)*sal)->sun_path;
 706                 if ( chmod( addr, S_IRWXU ) < 0 ) {
 707                         int err = sock_errno();
 708 #ifdef NEW_LOGGING
 709                         LDAP_LOG(( "connection", LDAP_LEVEL_INFO,
 710                                    "slap_open_listener: fchmod(%ld) failed errno=%d (%s)\n",
 711                                    (long)l.sl_sd, err, sock_errstr(err) ));
 712 #else
 713                         Debug( LDAP_DEBUG_ANY, "daemon: fchmod(%ld) failed errno=%d (%s)",
 714                                (long) l.sl_sd, err, sock_errstr(err) );
 715 #endif
 716                         tcp_close( l.sl_sd );
 717                         slap_free_listener_addresses(psal);
 718                         return NULL;
 719                 }
 720                 l.sl_name = ch_malloc( strlen(addr) + sizeof("PATH=") );
 721                 sprintf( l.sl_name, "PATH=%s", addr );
 722         } break;
 723 #endif /* LDAP_PF_LOCAL */
 724
 725         case AF_INET: {
 726                 char *s;
 727 #ifdef HAVE_GETADDRINFO
 728                 char addr[INET_ADDRSTRLEN];
 729                 inet_ntop( AF_INET, &((struct sockaddr_in *)*sal)->sin_addr,
 730                            addr, sizeof(addr) );
 731                 s = addr;
 732 #else
 733                 s = inet_ntoa( l.sl_addr.sin_addr );
 734 #endif
 735                 l.sl_name = ch_malloc( sizeof("IP=255.255.255.255:65535") );
 736                 sprintf( l.sl_name, "IP=%s:%d",
 737                          s != NULL ? s : "unknown" , port );
 738         } break;
 739
 740 #ifdef LDAP_PF_INET6
 741         case AF_INET6: {
 742                 char addr[INET6_ADDRSTRLEN];
 743                 inet_ntop( AF_INET6, &((struct sockaddr_in6 *)*sal)->sin6_addr,
 744                            addr, sizeof addr);
 745                 l.sl_name = ch_malloc( strlen(addr) + sizeof("IP= 65535") );
 746                 sprintf( l.sl_name, "IP=%s %d", addr, port );
 747         } break;
 748 #endif /* LDAP_PF_INET6 */
 749
 750         default:
 751 #ifdef NEW_LOGGING
 752             LDAP_LOG(( "connection", LDAP_LEVEL_INFO,
 753                        "slap_open_listener: unsupported address family (%d)\n",
 754                        (int)(*sal)->sa_family ));
 755 #else
 756                 Debug( LDAP_DEBUG_ANY, "daemon: unsupported address family (%d)\n",
 757                         (int) (*sal)->sa_family, 0, 0 );
 758 #endif
 759                 break;
 760         }
 761
 762         slap_free_listener_addresses(psal);
 763
 764         l.sl_url = ch_strdup( url );
 765         li = ch_malloc( sizeof( Listener ) );
 766         *li = l;
 767
 768 #ifdef NEW_LOGGING
 769         LDAP_LOG(( "connection", LDAP_LEVEL_RESULTS,
 770                    "slap_open_listener: daemon initialzed %s\n", l.sl_url ));
 771 #else
 772         Debug( LDAP_DEBUG_TRACE, "daemon: initialized %s\n",
 773                 l.sl_url, 0, 0 );
 774 #endif
 775         return li;
 776 }
 777
 778 static int sockinit(void);
 779 static int sockdestroy(void);
 780
 781 int slapd_daemon_init( const char *urls )
 782 {
 783         int i, rc;
 784         char **u;
 785
 786 #ifdef NEW_LOGGING
 787         LDAP_LOG(( "connection", LDAP_LEVEL_ARGS,
 788                    "slapd_daemon_init: %s\n",
 789                    urls ? urls : "<null>" ));
 790 #else
 791         Debug( LDAP_DEBUG_ARGS, "daemon_init: %s\n",
 792                 urls ? urls : "<null>", 0, 0 );
 793 #endif
 794         if( (rc = sockinit()) != 0 ) {
 795                 return rc;
 796         }
 797
 798 #ifdef HAVE_SYSCONF
 799         dtblsize = sysconf( _SC_OPEN_MAX );
 800 #elif HAVE_GETDTABLESIZE
 801         dtblsize = getdtablesize();
 802 #else
 803         dtblsize = FD_SETSIZE;
 804 #endif
 805
 806 #ifdef FD_SETSIZE
 807         if(dtblsize > FD_SETSIZE) {
 808                 dtblsize = FD_SETSIZE;
 809         }
 810 #endif  /* !FD_SETSIZE */
 811
 812         /* open a pipe (or something equivalent connected to itself).
 813          * we write a byte on this fd whenever we catch a signal. The main
 814          * loop will be select'ing on this socket, and will wake up when
 815          * this byte arrives.
 816          */
 817         if( (rc = lutil_pair( wake_sds )) < 0 ) {
 818 #ifdef NEW_LOGGING
 819             LDAP_LOG(( "connection", LDAP_LEVEL_ERR,
 820                        "slap_daemon_init: lutil_pair() failed rc=%d\n", rc ));
 821 #else
 822                 Debug( LDAP_DEBUG_ANY,
 823                         "daemon: lutil_pair() failed rc=%d\n", rc, 0, 0 );
 824 #endif
 825                 return rc;
 826         }
 827
 828         FD_ZERO( &slap_daemon.sd_readers );
 829         FD_ZERO( &slap_daemon.sd_writers );
 830
 831         if( urls == NULL ) {
 832                 urls = "ldap:///";
 833         }
 834
 835         u = str2charray( urls, " " );
 836
 837         if( u == NULL || u[0] == NULL ) {
 838 #ifdef NEW_LOGGING
 839             LDAP_LOG(( "connection", LDAP_LEVEL_ERR,
 840                        "slap_daemon_init: no urls (%s) provided.\n", urls ));
 841 #else
 842                 Debug( LDAP_DEBUG_ANY, "daemon_init: no urls (%s) provided.\n",
 843                         urls, 0, 0 );
 844 #endif
 845                 return -1;
 846         }
 847
 848         for( i=0; u[i] != NULL; i++ ) {
 849 #ifdef NEW_LOGGING
 850             LDAP_LOG(( "connection", LDAP_LEVEL_DETAIL1,
 851                        "slap_daemon_init: listen on %s\n.", u[i] ));
 852 #else
 853                 Debug( LDAP_DEBUG_TRACE, "daemon_init: listen on %s\n",
 854                         u[i], 0, 0 );
 855 #endif
 856         }
 857
 858         if( i == 0 ) {
 859 #ifdef NEW_LOGGING
 860             LDAP_LOG(( "connection", LDAP_LEVEL_INFO,
 861                        "slap_daemon_init: no listeners to open (%s)\n", urls ));
 862 #else
 863                 Debug( LDAP_DEBUG_ANY, "daemon_init: no listeners to open (%s)\n",
 864                         urls, 0, 0 );
 865 #endif
 866                 charray_free( u );
 867                 return -1;
 868         }
 869
 870 #ifdef NEW_LOGGING
 871         LDAP_LOG(( "connection", LDAP_LEVEL_INFO,
 872                    "slap_daemon_init: %d listeners to open...\n", i ));
 873 #else
 874         Debug( LDAP_DEBUG_TRACE, "daemon_init: %d listeners to open...\n",
 875                 i, 0, 0 );
 876 #endif
 877         slap_listeners = ch_malloc( (i+1)*sizeof(Listener *) );
 878
 879         for(i = 0; u[i] != NULL; i++ ) {
 880                 slap_listeners[i] = slap_open_listener( u[i] );
 881
 882                 if( slap_listeners[i] == NULL ) {
 883                         charray_free( u );
 884                         return -1;
 885                 }
 886         }
 887         slap_listeners[i] = NULL;
 888
 889 #ifdef NEW_LOGGING
 890         LDAP_LOG(( "connection", LDAP_LEVEL_DETAIL1,
 891                    "slap_daemon_init: %d listeners opened\n", i ));
 892 #else
 893         Debug( LDAP_DEBUG_TRACE, "daemon_init: %d listeners opened\n",
 894                 i, 0, 0 );
 895 #endif
 896
 897 #ifdef HAVE_SLP
 898         slapd_slp_init( urls );
 899         slapd_slp_reg();
 900 #endif
 901
 902         charray_free( u );
 903         ldap_pvt_thread_mutex_init( &slap_daemon.sd_mutex );
 904         return !i;
 905 }
 906
 907
 908 int
 909 slapd_daemon_destroy(void)
 910 {
 911         connections_destroy();
 912         tcp_close( wake_sds[1] );
 913         tcp_close( wake_sds[0] );
 914         sockdestroy();
 915
 916 #ifdef HAVE_SLP
 917         slapd_slp_dereg();
 918         slapd_slp_deinit();
 919 #endif
 920
 921         return 0;
 922 }
 923
 924
 925 static void *
 926 slapd_daemon_task(
 927         void *ptr
 928 )
 929 {
 930         int l;
 931         time_t  last_idle_check = slap_get_time();
 932         time( &starttime );
 933
 934         for ( l = 0; slap_listeners[l] != NULL; l++ ) {
 935                 if ( slap_listeners[l]->sl_sd == AC_SOCKET_INVALID )
 936                         continue;
 937
 938                 if ( listen( slap_listeners[l]->sl_sd, SLAPD_LISTEN ) == -1 ) {
 939                         int err = sock_errno();
 940 #ifdef NEW_LOGGING
 941                         LDAP_LOG(( "connection", LDAP_LEVEL_ERR,
 942                                    "slapd_daemon_task: listen( %s, 5 ) failed errno=%d (%s)\n",
 943                                    slap_listeners[l]->sl_url, err, sock_errstr(err) ));
 944 #else
 945                         Debug( LDAP_DEBUG_ANY,
 946                                 "daemon: listen(%s, 5) failed errno=%d (%s)\n",
 947                                         slap_listeners[l]->sl_url, err,
 948                                         sock_errstr(err) );
 949 #endif
 950                         return( (void*)-1 );
 951                 }
 952
 953                 slapd_add( slap_listeners[l]->sl_sd );
 954         }
 955
 956 #ifdef HAVE_NT_SERVICE_MANAGER
 957         if ( started_event != NULL ) {
 958                 ldap_pvt_thread_cond_signal( &started_event );
 959         }
 960 #endif
 961         /* initialization complete. Here comes the loop. */
 962
 963         while ( !slapd_shutdown ) {
 964                 ber_socket_t i;
 965                 int ns;
 966                 int at;
 967                 ber_socket_t nfds;
 968 #define SLAPD_EBADF_LIMIT 16
 969                 int ebadf = 0;
 970
 971 #define SLAPD_IDLE_CHECK_LIMIT 4
 972                 time_t  now = slap_get_time();
 973
 974
 975                 fd_set                  readfds;
 976                 fd_set                  writefds;
 977                 Sockaddr                from;
 978
 979 #if defined(SLAPD_RLOOKUPS)
 980         struct hostent          *hp;
 981 #endif
 982                 struct timeval          zero;
 983                 struct timeval          *tvp;
 984
 985                 if( global_idletimeout > 0 && difftime(
 986                         last_idle_check+global_idletimeout/SLAPD_IDLE_CHECK_LIMIT,
 987                         now ) < 0 )
 988                 {
 989                         connections_timeout_idle(now);
 990                 }
 991
 992                 FD_ZERO( &writefds );
 993                 FD_ZERO( &readfds );
 994
 995                 zero.tv_sec = 0;
 996                 zero.tv_usec = 0;
 997
 998                 ldap_pvt_thread_mutex_lock( &slap_daemon.sd_mutex );
 999
1000 #ifdef FD_SET_MANUAL_COPY
1001                 for( s = 0; s < nfds; s++ ) {
1002                         if(FD_ISSET( &slap_sd_readers, s )) {
1003                                 FD_SET( s, &readfds );
1004                         }
1005                         if(FD_ISSET( &slap_sd_writers, s )) {
1006                                 FD_SET( s, &writefds );
1007                         }
1008                 }
1009 #else
1010                 AC_MEMCPY( &readfds, &slap_daemon.sd_readers, sizeof(fd_set) );
1011                 AC_MEMCPY( &writefds, &slap_daemon.sd_writers, sizeof(fd_set) );
1012 #endif
1013                 assert(!FD_ISSET(wake_sds[0], &readfds));
1014                 FD_SET( wake_sds[0], &readfds );
1015
1016                 for ( l = 0; slap_listeners[l] != NULL; l++ ) {
1017                         if ( slap_listeners[l]->sl_sd == AC_SOCKET_INVALID )
1018                                 continue;
1019                         if (!FD_ISSET(slap_listeners[l]->sl_sd, &readfds))
1020                             FD_SET( slap_listeners[l]->sl_sd, &readfds );
1021                 }
1022
1023 #ifndef HAVE_WINSOCK
1024                 nfds = slap_daemon.sd_nfds;
1025 #else
1026                 nfds = dtblsize;
1027 #endif
1028
1029                 ldap_pvt_thread_mutex_unlock( &slap_daemon.sd_mutex );
1030
1031                 at = ldap_pvt_thread_pool_backload(&connection_pool);
1032
1033 #if defined( HAVE_YIELDING_SELECT ) || defined( NO_THREADS )
1034                 tvp = NULL;
1035 #else
1036                 tvp = at ? &zero : NULL;
1037 #endif
1038
1039                 for ( l = 0; slap_listeners[l] != NULL; l++ ) {
1040                         if ( slap_listeners[l]->sl_sd == AC_SOCKET_INVALID )
1041                                 continue;
1042
1043 #ifdef NEW_LOGGING
1044                         LDAP_LOG(( "connection", LDAP_LEVEL_DETAIL1,
1045                                    "slapd_daemon_task: select: listen=%d active_threads=%d tvp=%s\n",
1046                                    slap_listeners[l]->sl_sd, at, tvp == NULL ? "NULL" : "zero" ));
1047 #else
1048                         Debug( LDAP_DEBUG_CONNS,
1049                                 "daemon: select: listen=%d active_threads=%d tvp=%s\n",
1050                                         slap_listeners[l]->sl_sd, at,
1051                                         tvp == NULL ? "NULL" : "zero" );
1052 #endif
1053                 }
1054
1055                 switch(ns = select( nfds, &readfds,
1056 #ifdef HAVE_WINSOCK
1057                         /* don't pass empty fd_set */
1058                         ( writefds.fd_count > 0 ? &writefds : NULL ),
1059 #else
1060                         &writefds,
1061 #endif
1062                         NULL, tvp ))
1063                 {
1064                 case -1: {      /* failure - try again */
1065                                 int err = sock_errno();
1066
1067                                 if( err == EBADF
1068 #ifdef WSAENOTSOCK
1069                                         /* you'd think this would be EBADF */
1070                                         || err == WSAENOTSOCK
1071 #endif
1072                                 ) {
1073                                         if (++ebadf < SLAPD_EBADF_LIMIT)
1074                                                 continue;
1075                                 }
1076
1077                                 if( err != EINTR ) {
1078 #ifdef NEW_LOGGING
1079                                     LDAP_LOG(( "connection", LDAP_LEVEL_INFO,
1080                                                "slapd_daemon_task: select failed (%d): %s\n",
1081                                                err, sock_errstr(err) ));
1082 #else
1083                                         Debug( LDAP_DEBUG_CONNS,
1084                                                 "daemon: select failed (%d): %s\n",
1085                                                 err, sock_errstr(err), 0 );
1086 #endif
1087                                         slapd_shutdown = -1;
1088                                 }
1089                         }
1090                         continue;
1091
1092                 case 0:         /* timeout - let threads run */
1093                         ebadf = 0;
1094 #ifdef NEW_LOGGING
1095                         LDAP_LOG(( "connection", LDAP_LEVEL_DETAIL2,
1096                                    "slapd_daemon_task: select timeout - yielding\n" ));
1097 #else
1098                         Debug( LDAP_DEBUG_CONNS, "daemon: select timeout - yielding\n",
1099                             0, 0, 0 );
1100 #endif
1101                 ldap_pvt_thread_yield();
1102                         continue;
1103
1104                 default:        /* something happened - deal with it */
1105                         if( slapd_shutdown ) continue;
1106
1107                         ebadf = 0;
1108 #ifdef NEW_LOGGING
1109                         LDAP_LOG(( "connection", LDAP_LEVEL_DETAIL2,
1110                                    "slapd_daemon_task: activity on %d descriptors\n", ns ));
1111 #else
1112                         Debug( LDAP_DEBUG_CONNS, "daemon: activity on %d descriptors\n",
1113                                 ns, 0, 0 );
1114 #endif
1115                         /* FALL THRU */
1116                 }
1117
1118                 if( FD_ISSET( wake_sds[0], &readfds ) ) {
1119                         char c[BUFSIZ];
1120                         tcp_read( wake_sds[0], c, sizeof(c) );
1121 #ifdef NO_THREADS
1122                         waking = 0;
1123 #endif
1124                         continue;
1125                 }
1126
1127                 for ( l = 0; slap_listeners[l] != NULL; l++ ) {
1128                         ber_socket_t s;
1129                         socklen_t len = sizeof(from);
1130                         long id;
1131                         slap_ssf_t ssf = 0;
1132                         char *authid = NULL;
1133
1134                         char    *dnsname;
1135                         char    *peeraddr;
1136 #ifdef LDAP_PF_LOCAL
1137                         char    peername[MAXPATHLEN + sizeof("PATH=")];
1138 #elif defined(LDAP_PF_INET6)
1139                         char    peername[sizeof("IP=ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff 65535")];
1140 #else
1141                         char    peername[sizeof("IP=255.255.255.255:65336")];
1142 #endif /* LDAP_PF_LOCAL */
1143
1144                         peername[0] = '\0';
1145
1146                         if ( slap_listeners[l]->sl_sd == AC_SOCKET_INVALID )
1147                                 continue;
1148
1149                         if ( !FD_ISSET( slap_listeners[l]->sl_sd, &readfds ) )
1150                                 continue;
1151
1152                         s = accept( slap_listeners[l]->sl_sd,
1153                                 (struct sockaddr *) &from, &len );
1154                         if ( s == AC_SOCKET_INVALID ) {
1155                                 int err = sock_errno();
1156 #ifdef NEW_LOGGING
1157                                 LDAP_LOG(( "connection", LDAP_LEVEL_ERR,
1158                                            "slapd_daemon_task: accept(%ld) failed errno=%d (%s)\n",
1159                                            (long)slap_listeners[l]->sl_sd, err, sock_errstr(err) ));
1160 #else
1161                                 Debug( LDAP_DEBUG_ANY,
1162                                     "daemon: accept(%ld) failed errno=%d (%s)\n",
1163                                     (long) slap_listeners[l]->sl_sd, err,
1164                                     sock_errstr(err) );
1165 #endif
1166                                 continue;
1167                         }
1168
1169 #ifndef HAVE_WINSOCK
1170                         /* make sure descriptor number isn't too great */
1171                         if ( s >= dtblsize ) {
1172 #ifdef NEW_LGGING
1173                             LDAP_LOG(( "connection", LDAP_LEVEL_ERR,
1174                                        "slapd_daemon_task: %ld beyond descriptor table size %ld\n",
1175                                        (long)s, (long)dtblsize ));
1176 #else
1177                                 Debug( LDAP_DEBUG_ANY,
1178                                         "daemon: %ld beyond descriptor table size %ld\n",
1179                                         (long) s, (long) dtblsize, 0 );
1180 #endif
1181                                 slapd_close(s);
1182                                 continue;
1183                         }
1184 #endif
1185
1186 #ifdef LDAP_DEBUG
1187                         ldap_pvt_thread_mutex_lock( &slap_daemon.sd_mutex );
1188
1189                         /* newly accepted stream should not be in any of the FD SETS */
1190                         assert( !FD_ISSET( s, &slap_daemon.sd_actives) );
1191                         assert( !FD_ISSET( s, &slap_daemon.sd_readers) );
1192                         assert( !FD_ISSET( s, &slap_daemon.sd_writers) );
1193
1194                         ldap_pvt_thread_mutex_unlock( &slap_daemon.sd_mutex );
1195 #endif
1196
1197 #if defined( SO_KEEPALIVE ) || defined( TCP_NODELAY )
1198 #ifdef LDAP_PF_LOCAL
1199                         /* for IPv4 and IPv6 sockets only */
1200                         if ( from.sa_addr.sa_family != AF_LOCAL )
1201 #endif /* LDAP_PF_LOCAL */
1202                         {
1203                                 int rc;
1204                                 int tmp;
1205 #ifdef SO_KEEPALIVE
1206                                 /* enable keep alives */
1207                                 tmp = 1;
1208                                 rc = setsockopt( s, SOL_SOCKET, SO_KEEPALIVE,
1209                                         (char *) &tmp, sizeof(tmp) );
1210                                 if ( rc == AC_SOCKET_ERROR ) {
1211                                         int err = sock_errno();
1212 #ifdef NEW_LOGGING
1213                                         LDAP_LOG(( "connection", LDAP_LEVEL_ERR,
1214                                                    "slapd_daemon_task: setsockopt( %ld, SO_KEEPALIVE) failed errno=%d (%s)\n",
1215                                                    (long)s, err, sock_errstr(err) ));
1216 #else
1217                                         Debug( LDAP_DEBUG_ANY,
1218                                                 "slapd(%ld): setsockopt(SO_KEEPALIVE) failed "
1219                                                 "errno=%d (%s)\n", (long) s, err, sock_errstr(err) );
1220 #endif
1221                                 }
1222 #endif
1223 #ifdef TCP_NODELAY
1224                                 /* enable no delay */
1225                                 tmp = 1;
1226                                 rc = setsockopt( s, IPPROTO_TCP, TCP_NODELAY,
1227                                         (char *)&tmp, sizeof(tmp) );
1228                                 if ( rc == AC_SOCKET_ERROR ) {
1229                                         int err = sock_errno();
1230 #ifdef NEW_LOGGING
1231                                         LDAP_LOG(( "connection", LDAP_LEVEL_ERR,
1232                                                    "slapd_daemon_task: setsockopt( %ld, TCP_NODELAY) failed errno=%d (%s)\n",
1233                                                    (long)s, err, sock_errstr(err) ));
1234 #else
1235                                         Debug( LDAP_DEBUG_ANY,
1236                                                 "slapd(%ld): setsockopt(TCP_NODELAY) failed "
1237                                                 "errno=%d (%s)\n", (long) s, err, sock_errstr(err) );
1238 #endif
1239                                 }
1240 #endif
1241                         }
1242 #endif
1243
1244 #ifdef NEW_LOGGING
1245                         LDAP_LOG(( "connection", LDAP_LEVEL_DETAIL1,
1246                                    "slapd_daemon_task: new connection on %ld\n", (long)s ));
1247 #else
1248                         Debug( LDAP_DEBUG_CONNS, "daemon: new connection on %ld\n",
1249                                 (long) s, 0, 0 );
1250 #endif
1251                         switch ( from.sa_addr.sa_family ) {
1252 #  ifdef LDAP_PF_LOCAL
1253                         case AF_LOCAL:
1254                                 sprintf( peername, "PATH=%s", from.sa_un_addr.sun_path );
1255                                 ssf = LDAP_PVT_SASL_LOCAL_SSF;
1256                                 break;
1257 #endif /* LDAP_PF_LOCAL */
1258
1259 #  ifdef LDAP_PF_INET6
1260                         case AF_INET6:
1261                         if ( IN6_IS_ADDR_V4MAPPED(&from.sa_in6_addr.sin6_addr) ) {
1262                                 peeraddr = inet_ntoa( *((struct in_addr *)
1263                                                         &from.sa_in6_addr.sin6_addr.s6_addr[12]) );
1264                                 sprintf( peername, "IP=%s:%d",
1265                                          peeraddr != NULL ? peeraddr : "unknown",
1266                                          (unsigned) ntohs( from.sa_in6_addr.sin6_port ) );
1267                         } else {
1268                                 char addr[INET6_ADDRSTRLEN];
1269                                 sprintf( peername, "IP=%s %d",
1270                                          inet_ntop( AF_INET6,
1271                                                     &from.sa_in6_addr.sin6_addr,
1272                                                     addr, sizeof addr) ? addr : "unknown",
1273                                          (unsigned) ntohs( from.sa_in6_addr.sin6_port ) );
1274                         }
1275                         break;
1276 #  endif /* LDAP_PF_INET6 */
1277
1278                         case AF_INET:
1279                         peeraddr = inet_ntoa( from.sa_in_addr.sin_addr );
1280                         sprintf( peername, "IP=%s:%d",
1281                                 peeraddr != NULL ? peeraddr : "unknown",
1282                                 (unsigned) ntohs( from.sa_in_addr.sin_port ) );
1283                                 break;
1284
1285                         default:
1286                                 slapd_close(s);
1287                                 continue;
1288                         }
1289
1290                         if ( ( from.sa_addr.sa_family == AF_INET )
1291 #ifdef LDAP_PF_INET6
1292                                 || ( from.sa_addr.sa_family == AF_INET6 )
1293 #endif
1294                         ) {
1295 #ifdef SLAPD_RLOOKUPS
1296 #  ifdef LDAP_PF_INET6
1297                                 if ( from.sa_addr.sa_family == AF_INET6 )
1298                                         hp = gethostbyaddr(
1299                                                 (char *)&(from.sa_in6_addr.sin6_addr),
1300                                                 sizeof(from.sa_in6_addr.sin6_addr),
1301                                                 AF_INET6 );
1302                                 else
1303 #  endif /* LDAP_PF_INET6 */
1304                                 hp = gethostbyaddr(
1305                                         (char *) &(from.sa_in_addr.sin_addr),
1306                                         sizeof(from.sa_in_addr.sin_addr),
1307                                         AF_INET );
1308                                 dnsname = hp ? ldap_pvt_str2lower( hp->h_name ) : NULL;
1309 #else
1310                                 dnsname = NULL;
1311 #endif /* SLAPD_RLOOKUPS */
1312
1313 #ifdef HAVE_TCPD
1314                                 if ( !hosts_ctl("slapd",
1315                                                 dnsname != NULL ? dnsname : STRING_UNKNOWN,
1316                                                 peeraddr != NULL ? peeraddr : STRING_UNKNOWN,
1317                                                 STRING_UNKNOWN ))
1318                                 {
1319                                         /* DENY ACCESS */
1320                                         Statslog( LDAP_DEBUG_ANY,
1321                                                 "fd=%ld host access from %s (%s) denied.\n",
1322                                                 (long) s,
1323                                                 dnsname != NULL ? dnsname : "unknown",
1324                                                 peeraddr != NULL ? peeraddr : "unknown",
1325                                                 0, 0 );
1326                                         slapd_close(s);
1327                                         continue;
1328                                 }
1329 #endif /* HAVE_TCPD */
1330                         }
1331
1332                         id = connection_init(s,
1333                                 slap_listeners[l]->sl_url,
1334                                 dnsname != NULL ? dnsname : "unknown",
1335                                 peername,
1336                                 slap_listeners[l]->sl_name,
1337 #ifdef HAVE_TLS
1338                                 slap_listeners[l]->sl_is_tls,
1339 #else
1340                                 0,
1341 #endif
1342                                 ssf,
1343                                 authid );
1344
1345                         if( authid ) ch_free(authid);
1346
1347                         if( id < 0 ) {
1348 #ifdef NEW_LOGGING
1349                             LDAP_LOG(( "connection", LDAP_LEVEL_INFO,
1350                                        "slapd_daemon_task: connection_init(%ld, %s, %s) failed.\n",
1351                                        (long)s, peername, slap_listeners[l]->sl_name ));
1352 #else
1353                                 Debug( LDAP_DEBUG_ANY,
1354                                         "daemon: connection_init(%ld, %s, %s) failed.\n",
1355                                         (long) s,
1356                                         peername,
1357                                         slap_listeners[l]->sl_name );
1358 #endif
1359                                 slapd_close(s);
1360                                 continue;
1361                         }
1362
1363                         Statslog( LDAP_DEBUG_STATS,
1364                                 "daemon: conn=%ld fd=%ld connection from %s (%s) accepted.\n",
1365                                 id, (long) s,
1366                                 peername,
1367                                 slap_listeners[l]->sl_name,
1368                                 0 );
1369
1370                         slapd_add( s );
1371                         continue;
1372                 }
1373
1374 #ifdef LDAP_DEBUG
1375 #ifdef NEW_LOGGING
1376                 LDAP_LOG(( "connection", LDAP_LEVEL_DETAIL2,
1377                            "slapd_daemon_task: activity on " ));
1378 #else
1379                 Debug( LDAP_DEBUG_CONNS, "daemon: activity on:", 0, 0, 0 );
1380 #endif
1381 #ifdef HAVE_WINSOCK
1382                 for ( i = 0; i < readfds.fd_count; i++ ) {
1383 #ifdef NEW_LOGGING
1384                     LDAP_LOG(( "connection", LDAP_LEVEL_DETAIL2,
1385                                " %d%s", readfs.fd_array[i], "r", 0 );
1386 #else
1387                         Debug( LDAP_DEBUG_CONNS, " %d%s",
1388                                 readfds.fd_array[i], "r", 0 );
1389 #endif
1390                 }
1391                 for ( i = 0; i < writefds.fd_count; i++ ) {
1392 #ifdef NEW_LOGGING
1393                     LDAP_LOG(( "connection", LDAP_LEVEL_DETAIL2,
1394                                " %d%s", writefds.fd_array[i], "w" ));
1395 #else
1396                         Debug( LDAP_DEBUG_CONNS, " %d%s",
1397                                 writefds.fd_array[i], "w", 0 );
1398 #endif
1399                 }
1400
1401 #else
1402                 for ( i = 0; i < nfds; i++ ) {
1403                         int     r, w;
1404                         int     is_listener = 0;
1405
1406                         for ( l = 0; slap_listeners[l] != NULL; l++ ) {
1407                                 if ( i == slap_listeners[l]->sl_sd ) {
1408                                         is_listener = 1;
1409                                         break;
1410                                 }
1411                         }
1412                         if ( is_listener ) {
1413                                 continue;
1414                         }
1415                         r = FD_ISSET( i, &readfds );
1416                         w = FD_ISSET( i, &writefds );
1417                         if ( r || w ) {
1418 #ifdef NEW_LOGGING
1419                             LDAP_LOG(( "connection", LDAP_LEVEL_DETAIL2,
1420                                        " %d%s%s", i,
1421                                        r ? "r" : "", w ? "w" : "" ));
1422 #else
1423                                 Debug( LDAP_DEBUG_CONNS, " %d%s%s", i,
1424                                     r ? "r" : "", w ? "w" : "" );
1425 #endif
1426                         }
1427                 }
1428 #endif
1429 #ifdef NEW_LOGGING
1430                     LDAP_LOG(( "connection", LDAP_LEVEL_DETAIL2, "\n" ));
1431 #else
1432                 Debug( LDAP_DEBUG_CONNS, "\n", 0, 0, 0 );
1433 #endif
1434
1435 #endif
1436
1437                 /* loop through the writers */
1438 #ifdef HAVE_WINSOCK
1439                 for ( i = 0; i < writefds.fd_count; i++ )
1440 #else
1441                 for ( i = 0; i < nfds; i++ )
1442 #endif
1443                 {
1444                         ber_socket_t wd;
1445                         int is_listener = 0;
1446 #ifdef HAVE_WINSOCK
1447                         wd = writefds.fd_array[i];
1448 #else
1449                         if( ! FD_ISSET( i, &writefds ) ) {
1450                                 continue;
1451                         }
1452                         wd = i;
1453 #endif
1454
1455                         for ( l = 0; slap_listeners[l] != NULL; l++ ) {
1456                                 if ( i == slap_listeners[l]->sl_sd ) {
1457                                         is_listener = 1;
1458                                         break;
1459                                 }
1460                         }
1461                         if ( is_listener ) {
1462                                 continue;
1463                         }
1464 #ifdef NEW_LOGGING
1465                         LDAP_LOG(( "connection", LDAP_LEVEL_DETAIL2,
1466                                    "slapd_daemon_task: write active on %d\n", wd ));
1467 #else
1468                         Debug( LDAP_DEBUG_CONNS,
1469                                 "daemon: write active on %d\n",
1470                                 wd, 0, 0 );
1471 #endif
1472                         /*
1473                          * NOTE: it is possible that the connection was closed
1474                          * and that the stream is now inactive.
1475                          * connection_write() must valid the stream is still
1476                          * active.
1477                          */
1478
1479                         if ( connection_write( wd ) < 0 ) {
1480                                 FD_CLR( (unsigned) wd, &readfds );
1481                                 slapd_close( wd );
1482                         }
1483                 }
1484
1485 #ifdef HAVE_WINSOCK
1486                 for ( i = 0; i < readfds.fd_count; i++ )
1487 #else
1488                 for ( i = 0; i < nfds; i++ )
1489 #endif
1490                 {
1491                         ber_socket_t rd;
1492                         int is_listener = 0;
1493
1494 #ifdef HAVE_WINSOCK
1495                         rd = readfds.fd_array[i];
1496 #else
1497                         if( ! FD_ISSET( i, &readfds ) ) {
1498                                 continue;
1499                         }
1500                         rd = i;
1501 #endif
1502
1503                         for ( l = 0; slap_listeners[l] != NULL; l++ ) {
1504                                 if ( rd == slap_listeners[l]->sl_sd ) {
1505                                         is_listener = 1;
1506                                         break;
1507                                 }
1508                         }
1509                         if ( is_listener ) {
1510                                 continue;
1511                         }
1512
1513 #ifdef NEW_LOGGING
1514                         LDAP_LOG(( "connection", LDAP_LEVEL_DETAIL2,
1515                                    "slapd_daemon_task: read activity on %d\n", rd ));
1516 #else
1517                         Debug ( LDAP_DEBUG_CONNS,
1518                                 "daemon: read activity on %d\n", rd, 0, 0 );
1519 #endif
1520                         /*
1521                          * NOTE: it is possible that the connection was closed
1522                          * and that the stream is now inactive.
1523                          * connection_read() must valid the stream is still
1524                          * active.
1525                          */
1526
1527                         if ( connection_read( rd ) < 0 ) {
1528                                 slapd_close( rd );
1529                         }
1530                 }
1531                 ldap_pvt_thread_yield();
1532         }
1533
1534         if( slapd_shutdown > 0 ) {
1535 #ifdef NEW_LOGGING
1536             LDAP_LOG(( "connection", LDAP_LEVEL_CRIT,
1537                        "slapd_daemon_task: shutdown requested and initiated.\n"));
1538 #else
1539                 Debug( LDAP_DEBUG_TRACE,
1540                         "daemon: shutdown requested and initiated.\n",
1541                         0, 0, 0 );
1542 #endif
1543
1544         } else if ( slapd_shutdown < 0 ) {
1545 #ifdef HAVE_NT_SERVICE_MANAGER
1546                 if (slapd_shutdown == -1)
1547 #ifdef NEW_LOGGING
1548                     LDAP_LOG(( "connection", LDAP_LEVEL_CRIT,
1549                                "slapd_daemon_task: shutdown initiated by Service Manager.\n"));
1550 #else
1551                     Debug( LDAP_DEBUG_TRACE,
1552                           "daemon: shutdown initiated by Service Manager.\n",
1553                           0, 0, 0);
1554 #endif
1555                 else
1556 #endif
1557 #ifdef NEW_LOGGING
1558                     LDAP_LOG(( "connection", LDAP_LEVEL_CRIT,
1559                                "slapd_daemon_task: abnormal condition, shutdown initiated.\n" ));
1560 #else
1561                 Debug( LDAP_DEBUG_TRACE,
1562                         "daemon: abnormal condition, shutdown initiated.\n",
1563                         0, 0, 0 );
1564 #endif
1565         } else {
1566 #ifdef NEW_LOGGING
1567             LDAP_LOG(( "connection", LDAP_LEVEL_CRIT,
1568                        "slapd_daemon_task: no active streams, shutdown initiated.\n" ));
1569 #else
1570                 Debug( LDAP_DEBUG_TRACE,
1571                         "daemon: no active streams, shutdown initiated.\n",
1572                         0, 0, 0 );
1573 #endif
1574         }
1575
1576         for ( l = 0; slap_listeners[l] != NULL; l++ ) {
1577                 if ( slap_listeners[l]->sl_sd != AC_SOCKET_INVALID ) {
1578 #ifdef LDAP_PF_LOCAL
1579                         if ( slap_listeners[l]->sl_sa.sa_addr.sa_family == AF_LOCAL ) {
1580                                 unlink( slap_listeners[l]->sl_sa.sa_un_addr.sun_path );
1581                         }
1582 #endif /* LDAP_PF_LOCAL */
1583                         slapd_close( slap_listeners[l]->sl_sd );
1584                         break;
1585                 }
1586         }
1587
1588 #ifdef NEW_LOGGING
1589         LDAP_LOG(( "connection", LDAP_LEVEL_CRIT,
1590                    "slapd_daemon_task: shutdown waiting for %d threads to terminate.\n",
1591                    ldap_pvt_thread_pool_backload(&connection_pool) ));
1592 #else
1593         Debug( LDAP_DEBUG_ANY,
1594             "slapd shutdown: waiting for %d threads to terminate\n",
1595             ldap_pvt_thread_pool_backload(&connection_pool), 0, 0 );
1596 #endif
1597         ldap_pvt_thread_pool_destroy(&connection_pool, 1);
1598
1599         return NULL;
1600 }
1601
1602
1603 int slapd_daemon( void )
1604 {
1605         int rc;
1606
1607         connections_init();
1608
1609 #define SLAPD_LISTENER_THREAD 1
1610 #if defined( SLAPD_LISTENER_THREAD )
1611         {
1612                 ldap_pvt_thread_t       listener_tid;
1613
1614                 /* listener as a separate THREAD */
1615                 rc = ldap_pvt_thread_create( &listener_tid,
1616                         0, slapd_daemon_task, NULL );
1617
1618                 if ( rc != 0 ) {
1619 #ifdef NEW_LOGGING
1620                     LDAP_LOG(( "connection", LDAP_LEVEL_ERR,
1621                                "slapd_daemon: listener ldap_pvt_thread_create failed (%d).\n", rc ));
1622 #else
1623                         Debug( LDAP_DEBUG_ANY,
1624                         "listener ldap_pvt_thread_create failed (%d)\n", rc, 0, 0 );
1625 #endif
1626                         return rc;
1627                 }
1628
1629                 /* wait for the listener thread to complete */
1630                 ldap_pvt_thread_join( listener_tid, (void *) NULL );
1631         }
1632 #else
1633         /* experimental code */
1634         slapd_daemon_task( NULL );
1635 #endif
1636
1637         return 0;
1638
1639 }
1640
1641 int sockinit(void)
1642 {
1643 #if defined( HAVE_WINSOCK2 )
1644     WORD wVersionRequested;
1645         WSADATA wsaData;
1646         int err;
1647
1648         wVersionRequested = MAKEWORD( 2, 0 );
1649
1650         err = WSAStartup( wVersionRequested, &wsaData );
1651         if ( err != 0 ) {
1652                 /* Tell the user that we couldn't find a usable */
1653                 /* WinSock DLL.                                  */
1654                 return -1;
1655         }
1656
1657         /* Confirm that the WinSock DLL supports 2.0.*/
1658         /* Note that if the DLL supports versions greater    */
1659         /* than 2.0 in addition to 2.0, it will still return */
1660         /* 2.0 in wVersion since that is the version we      */
1661         /* requested.                                        */
1662
1663         if ( LOBYTE( wsaData.wVersion ) != 2 ||
1664                 HIBYTE( wsaData.wVersion ) != 0 )
1665         {
1666             /* Tell the user that we couldn't find a usable */
1667             /* WinSock DLL.                                  */
1668             WSACleanup();
1669             return -1;
1670         }
1671
1672         /* The WinSock DLL is acceptable. Proceed. */
1673 #elif defined( HAVE_WINSOCK )
1674         WSADATA wsaData;
1675         if ( WSAStartup( 0x0101, &wsaData ) != 0 ) {
1676             return -1;
1677         }
1678 #endif
1679         return 0;
1680 }
1681
1682 int sockdestroy(void)
1683 {
1684 #if defined( HAVE_WINSOCK2 ) || defined( HAVE_WINSOCK )
1685         WSACleanup();
1686 #endif
1687         return 0;
1688 }
1689
1690 RETSIGTYPE
1691 slap_sig_shutdown( int sig )
1692 {
1693 #ifdef NEW_LOGGING
1694     LDAP_LOG(( "connection", LDAP_LEVEL_CRIT,
1695                "slap_sig_shutdown: signal %d\n", sig ));
1696 #else
1697         Debug(LDAP_DEBUG_TRACE, "slap_sig_shutdown: signal %d\n", sig, 0, 0);
1698 #endif
1699
1700         /*
1701          * If the NT Service Manager is controlling the server, we don't
1702          * want SIGBREAK to kill the server. For some strange reason,
1703          * SIGBREAK is generated when a user logs out.
1704          */
1705
1706 #if HAVE_NT_SERVICE_MANAGER && SIGBREAK
1707         if (is_NT_Service && sig == SIGBREAK)
1708 #ifdef NEW_LOGGING
1709             LDAP_LOG(( "connection", LDAP_LEVEL_CRIT,
1710                        "slap_sig_shutdown: SIGBREAK ignored.\n" ));
1711 #else
1712             Debug(LDAP_DEBUG_TRACE, "slap_sig_shutdown: SIGBREAK ignored.\n",
1713                   0, 0, 0);
1714 #endif
1715         else
1716 #endif
1717         slapd_shutdown = sig;
1718
1719         WAKE_LISTENER(1);
1720
1721         /* reinstall self */
1722         (void) SIGNAL_REINSTALL( sig, slap_sig_shutdown );
1723 }
1724
1725 RETSIGTYPE
1726 slap_sig_wake( int sig )
1727 {
1728         WAKE_LISTENER(1);
1729
1730         /* reinstall self */
1731         (void) SIGNAL_REINSTALL( sig, slap_sig_wake );
1732 }
1733
1734
1735 void slapd_add_internal(ber_socket_t s) {
1736         slapd_add(s);
1737 }