X-Git-Url: https://git.sur5r.net/?a=blobdiff_plain;f=bacula%2Fsrc%2Fdird%2Fdird.c;h=63a3b1ea8ac873ed4a9df9274d4d8953174dfeab;hb=9fb50a3f72d35d8a2e81558c5dd2a493bae6ba06;hp=2e368e4027209dbc6caccd53f11a9738999d7f96;hpb=fdd5aff6f1d6f8a5af349dbef35520d48f25eef0;p=bacula%2Fbacula diff --git a/bacula/src/dird/dird.c b/bacula/src/dird/dird.c index 2e368e4027..63a3b1ea8a 100644 --- a/bacula/src/dird/dird.c +++ b/bacula/src/dird/dird.c @@ -7,22 +7,17 @@ * Version $Id$ */ /* - Copyright (C) 2000-2004 Kern Sibbald and John Walker + Copyright (C) 2000-2006 Kern Sibbald This program is free software; you can redistribute it and/or - modify it under the terms of the GNU General Public License as - published by the Free Software Foundation; either version 2 of - the License, or (at your option) any later version. + modify it under the terms of the GNU General Public License + version 2 as amended with additional clauses defined in the + file LICENSE in the main source directory. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of - MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU - General Public License for more details. - - You should have received a copy of the GNU General Public - License along with this program; if not, write to the Free - Software Foundation, Inc., 59 Temple Place - Suite 330, Boston, - MA 02111-1307, USA. + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + the file LICENSE for additional details. */ @@ -42,27 +37,28 @@ extern "C" void reload_config(int sig); JCR *wait_for_next_job(char *runjob); void term_scheduler(); void term_ua_server(); -int do_backup(JCR *jcr); -void backup_cleanup(void); -void start_UA_server(char *addr, int port); +void start_UA_server(dlist *addrs); void init_job_server(int max_workers); +void term_job_server(); void store_jobtype(LEX *lc, RES_ITEM *item, int index, int pass); void store_level(LEX *lc, RES_ITEM *item, int index, int pass); void store_replace(LEX *lc, RES_ITEM *item, int index, int pass); +void init_device_resources(); -static char *configfile = NULL; static char *runjob = NULL; static int background = 1; static void init_reload(void); /* Globals Exported */ -DIRRES *director; /* Director resource */ +DIRRES *director; /* Director resource */ int FDConnectTimeout; int SDConnectTimeout; +char *configfile = NULL; /* Globals Imported */ -extern int r_first, r_last; /* first and last resources */ +extern int r_first, r_last; /* first and last resources */ extern RES_TABLE resources[]; +extern RES **res_head; extern RES_ITEM job_items[]; extern URES res_all; @@ -72,7 +68,8 @@ extern URES res_all; static void usage() { fprintf(stderr, _( -"\nVersion: " VERSION " (" BDATE ")\n\n" +"Copyright (C) 2000-2005 Kern Sibbald.\n" +"\nVersion: %s (%s)\n\n" "Usage: dird [-f -s] [-c config_file] [-d debug_level] [config_file]\n" " -c set configuration file to file\n" " -dnn set debug level to nn\n" @@ -83,8 +80,8 @@ static void usage() " -t test - read configuration and exit\n" " -u userid\n" " -v verbose user messages\n" -" -? print this message.\n" -"\n")); +" -? print this message.\n" +"\n"), VERSION, BDATE); exit(1); } @@ -92,7 +89,7 @@ static void usage() /********************************************************************* * - * Main Bacula Server program + * Main Bacula Server program * */ int main (int argc, char *argv[]) @@ -104,68 +101,71 @@ int main (int argc, char *argv[]) char *uid = NULL; char *gid = NULL; + setlocale(LC_ALL, ""); + bindtextdomain("bacula", LOCALEDIR); + textdomain("bacula"); + init_stack_dump(); my_name_is(argc, argv, "bacula-dir"); - textdomain("bacula"); - init_msg(NULL, NULL); /* initialize message handler */ + init_msg(NULL, NULL); /* initialize message handler */ init_reload(); daemon_start_time = time(NULL); while ((ch = getopt(argc, argv, "c:d:fg:r:stu:v?")) != -1) { switch (ch) { case 'c': /* specify config file */ - if (configfile != NULL) { - free(configfile); - } - configfile = bstrdup(optarg); - break; + if (configfile != NULL) { + free(configfile); + } + configfile = bstrdup(optarg); + break; case 'd': /* set debug level */ - debug_level = atoi(optarg); - if (debug_level <= 0) { - debug_level = 1; - } + debug_level = atoi(optarg); + if (debug_level <= 0) { + debug_level = 1; + } Dmsg1(0, "Debug level = %d\n", debug_level); - break; + break; case 'f': /* run in foreground */ - background = FALSE; - break; + background = FALSE; + break; case 'g': /* set group id */ - gid = optarg; - break; + gid = optarg; + break; case 'r': /* run job */ - if (runjob != NULL) { - free(runjob); - } - if (optarg) { - runjob = bstrdup(optarg); - } - break; + if (runjob != NULL) { + free(runjob); + } + if (optarg) { + runjob = bstrdup(optarg); + } + break; case 's': /* turn off signals */ - no_signals = TRUE; - break; + no_signals = TRUE; + break; case 't': /* test config */ - test_config = TRUE; - break; + test_config = TRUE; + break; case 'u': /* set uid */ - uid = optarg; - break; + uid = optarg; + break; case 'v': /* verbose */ - verbose++; - break; + verbose++; + break; case '?': default: - usage(); + usage(); - } + } } argc -= optind; argv += optind; @@ -176,10 +176,10 @@ int main (int argc, char *argv[]) if (argc) { if (configfile != NULL) { - free(configfile); + free(configfile); } configfile = bstrdup(*argv); - argc--; + argc--; argv++; } if (argc) { @@ -192,6 +192,10 @@ int main (int argc, char *argv[]) parse_config(configfile); + if (init_crypto() != 0) { + Jmsg((JCR *)NULL, M_ERROR_TERM, 0, _("Cryptography library initialization failed.\n")); + } + if (!check_resources()) { Jmsg((JCR *)NULL, M_ERROR_TERM, 0, _("Please correct configuration file: %s\n"), configfile); } @@ -207,38 +211,41 @@ int main (int argc, char *argv[]) if (background) { daemon_start(); - init_stack_dump(); /* grab new pid */ + init_stack_dump(); /* grab new pid */ } /* Create pid must come after we are a daemon -- so we have our final pid */ - create_pid_file(director->pid_directory, "bacula-dir", director->DIRport); - read_state_file(director->working_directory, "bacula-dir", director->DIRport); + create_pid_file(director->pid_directory, "bacula-dir", get_first_port_host_order(director->DIRaddrs)); + read_state_file(director->working_directory, "bacula-dir", get_first_port_host_order(director->DIRaddrs)); - drop(uid, gid); /* reduce priveleges if requested */ + drop(uid, gid); /* reduce priveleges if requested */ signal(SIGHUP, reload_config); init_console_msg(working_directory); + init_python_interpreter(director->hdr.name, director->scripts_directory, + "DirStartUp"); + set_thread_concurrency(director->MaxConcurrentJobs * 2 + 4 /* UA */ + 4 /* sched+watchdog+jobsvr+misc */); Dmsg0(200, "Start UA server\n"); - start_UA_server(director->DIRaddr, director->DIRport); + start_UA_server(director->DIRaddrs); - start_watchdog(); /* start network watchdog thread */ + start_watchdog(); /* start network watchdog thread */ - init_jcr_subsystem(); /* start JCR watchdogs etc. */ + init_jcr_subsystem(); /* start JCR watchdogs etc. */ init_job_server(director->MaxConcurrentJobs); - + Dmsg0(200, "wait for next job\n"); /* Main loop -- call scheduler to get next job to run */ - while ((jcr = wait_for_next_job(runjob))) { - run_job(jcr); /* run job */ - free_jcr(jcr); /* release jcr */ - if (runjob) { /* command line, run a single job? */ - break; /* yes, terminate */ + while ( (jcr = wait_for_next_job(runjob)) ) { + run_job(jcr); /* run job */ + free_jcr(jcr); /* release jcr */ + if (runjob) { /* command line, run a single job? */ + break; /* yes, terminate */ } } @@ -248,16 +255,18 @@ int main (int argc, char *argv[]) /* Cleanup and then exit */ static void terminate_dird(int sig) { - static int already_here = FALSE; + static bool already_here = false; - if (already_here) { /* avoid recursive temination problems */ + if (already_here) { /* avoid recursive temination problems */ exit(1); } - already_here = TRUE; - write_state_file(director->working_directory, "bacula-dir", director->DIRport); - delete_pid_file(director->pid_directory, "bacula-dir", director->DIRport); + already_here = true; + generate_daemon_event(NULL, "Exit"); + write_state_file(director->working_directory, "bacula-dir", get_first_port_host_order(director->DIRaddrs)); + delete_pid_file(director->pid_directory, "bacula-dir", get_first_port_host_order(director->DIRaddrs)); // signal(SIGCHLD, SIG_IGN); /* don't worry about children now */ term_scheduler(); + term_job_server(); if (runjob) { free(runjob); } @@ -265,14 +274,15 @@ static void terminate_dird(int sig) free(configfile); } if (debug_level > 5) { - print_memory_pool_stats(); + print_memory_pool_stats(); } free_config_resources(); term_ua_server(); - term_msg(); /* terminate message handler */ + term_msg(); /* terminate message handler */ stop_watchdog(); - close_memory_pool(); /* release free memory in pool */ - sm_dump(false); + cleanup_crypto(); + close_memory_pool(); /* release free memory in pool */ + sm_dump(false); exit(sig); } @@ -284,7 +294,7 @@ struct RELOAD_TABLE { static const int max_reloads = 10; static RELOAD_TABLE reload_table[max_reloads]; -static void init_reload(void) +static void init_reload(void) { for (int i=0; i < max_reloads; i++) { reload_table[i].job_count = 0; @@ -297,10 +307,10 @@ static void free_saved_resources(int table) int num = r_last - r_first + 1; RES **res_tab = reload_table[table].res_table; if (!res_tab) { - Dmsg1(000, "res_tab for table %d already released.\n", table); + Dmsg1(100, "res_tab for table %d already released.\n", table); return; } - Dmsg1(000, "Freeing resources for table %d\n", table); + Dmsg1(100, "Freeing resources for table %d\n", table); for (int j=0; jreload_id == 0) { - return; /* nothing to do */ - } - int i = jcr->reload_id - 1; - Dmsg3(000, "reload job_end JobId=%d table=%d cnt=%d\n", jcr->JobId, - i, reload_table[i].job_count); - lock_jcr_chain(); + int reload_id = (int)((long int)ctx); + Dmsg3(100, "reload job_end JobId=%d table=%d cnt=%d\n", jcr->JobId, + reload_id, reload_table[reload_id].job_count); + lock_jobs(); LockRes(); - if (--reload_table[i].job_count <= 0) { - free_saved_resources(i); + if (--reload_table[reload_id].job_count <= 0) { + free_saved_resources(reload_id); } UnlockRes(); - unlock_jcr_chain(); + unlock_jobs(); } static int find_free_reload_table_entry() @@ -337,8 +344,8 @@ static int find_free_reload_table_entry() int table = -1; for (int i=0; i < max_reloads; i++) { if (reload_table[i].res_table == NULL) { - table = i; - break; + table = i; + break; } } return table; @@ -346,12 +353,11 @@ static int find_free_reload_table_entry() /* * If we get here, we have received a SIGHUP, which means to - * reread our configuration file. + * reread our configuration file. * * The algorithm used is as follows: we count how many jobs are - * running since the last reload and set those jobs to make a - * callback. Also, we set each job with the current reload table - * id. . The old config is saved with the reload table + * running and mark the running jobs to make a callback on + * exiting. The old config is saved with the reload table * id in a reload table. The new config file is read. Now, as * each job exits, it calls back to the reload_job_end_cb(), which * decrements the count of open jobs for the given reload table. @@ -368,22 +374,21 @@ extern "C" void reload_config(int sig) { static bool already_here = false; - sigset_t set; + sigset_t set; JCR *jcr; - int njobs = 0; + int njobs = 0; /* number of running jobs */ int table, rtable; + bool ok; if (already_here) { - abort(); /* Oops, recursion -> die */ + abort(); /* Oops, recursion -> die */ } already_here = true; sigemptyset(&set); sigaddset(&set, SIGHUP); sigprocmask(SIG_BLOCK, &set, NULL); -// Jmsg(NULL, M_INFO, 0, "Entering experimental reload config code. Bug reports will not be accepted.\n"); - - lock_jcr_chain(); + lock_jobs(); LockRes(); table = find_free_reload_table_entry(); @@ -392,52 +397,42 @@ void reload_config(int sig) goto bail_out; } - /* - * Hook all active jobs that are not already hooked (i.e. - * reload_id == 0 - */ - foreach_jcr(jcr) { - if (jcr->reload_id == 0 && jcr->JobType != JT_SYSTEM) { - reload_table[table].job_count++; - jcr->reload_id = table + 1; - job_end_push(jcr, reload_job_end_cb); - njobs++; - } - free_locked_jcr(jcr); - } - Dmsg1(000, "Reload_config njobs=%d\n", njobs); + Dmsg1(100, "Reload_config njobs=%d\n", njobs); reload_table[table].res_table = save_config_resources(); - Dmsg1(000, "Saved old config in table %d\n", table); + Dmsg1(100, "Saved old config in table %d\n", table); - Dmsg0(000, "Calling parse config\n"); - parse_config(configfile); + ok = parse_config(configfile, 0); /* no exit on error */ - Dmsg0(000, "Reloaded config file\n"); - if (!check_resources()) { - rtable = find_free_reload_table_entry(); /* save new, bad table */ + Dmsg0(100, "Reloaded config file\n"); + if (!ok || !check_resources()) { + rtable = find_free_reload_table_entry(); /* save new, bad table */ if (rtable < 0) { Jmsg(NULL, M_ERROR, 0, _("Please correct configuration file: %s\n"), configfile); Jmsg(NULL, M_ERROR_TERM, 0, _("Out of reload table entries. Giving up.\n")); } else { Jmsg(NULL, M_ERROR, 0, _("Please correct configuration file: %s\n"), configfile); + Jmsg(NULL, M_ERROR, 0, _("Resetting previous configuration.\n")); } reload_table[rtable].res_table = save_config_resources(); /* Now restore old resoure values */ int num = r_last - r_first + 1; RES **res_tab = reload_table[table].res_table; for (int i=0; ireload_id == table) { - jcr->reload_id = 0; - } - free_locked_jcr(jcr); - } + table = rtable; /* release new, bad, saved table below */ + } else { + /* + * Hook all active jobs so that they release this table + */ + foreach_jcr(jcr) { + if (jcr->JobType != JT_SYSTEM) { + reload_table[table].job_count++; + job_end_push(jcr, reload_job_end_cb, (void *)((long int)table)); + njobs++; + } } - njobs = 0; /* force bad tabel to be released below */ + endeach_jcr(jcr); } /* Reset globals */ @@ -445,7 +440,7 @@ void reload_config(int sig) FDConnectTimeout = director->FDConnectTimeout; SDConnectTimeout = director->SDConnectTimeout; Dmsg0(0, "Director's configuration file reread.\n"); - + /* Now release saved resources, if no jobs using the resources */ if (njobs == 0) { free_saved_resources(table); @@ -453,7 +448,7 @@ void reload_config(int sig) bail_out: UnlockRes(); - unlock_jcr_chain(); + unlock_jobs(); sigprocmask(SIG_UNBLOCK, &set, NULL); signal(SIGHUP, reload_config); already_here = false; @@ -476,23 +471,70 @@ static int check_resources() job = (JOB *)GetNextRes(R_JOB, NULL); director = (DIRRES *)GetNextRes(R_DIRECTOR, NULL); if (!director) { - Jmsg(NULL, M_FATAL, 0, _("No Director resource defined in %s\n\ -Without that I don't know who I am :-(\n"), configfile); + Jmsg(NULL, M_FATAL, 0, _("No Director resource defined in %s\n" +"Without that I don't know who I am :-(\n"), configfile); OK = false; } else { set_working_directory(director->working_directory); if (!director->messages) { /* If message resource not specified */ - director->messages = (MSGS *)GetNextRes(R_MSGS, NULL); - if (!director->messages) { + director->messages = (MSGS *)GetNextRes(R_MSGS, NULL); + if (!director->messages) { Jmsg(NULL, M_FATAL, 0, _("No Messages resource defined in %s\n"), configfile); - OK = false; - } + OK = false; + } } if (GetNextRes(R_DIRECTOR, (RES *)director) != NULL) { Jmsg(NULL, M_FATAL, 0, _("Only one Director resource permitted in %s\n"), - configfile); - OK = false; - } + configfile); + OK = false; + } + /* tls_require implies tls_enable */ + if (director->tls_require) { + if (have_tls) { + director->tls_enable = true; + } else { + Jmsg(NULL, M_FATAL, 0, _("TLS required but not configured in Bacula.\n")); + OK = false; + } + } + + if (!director->tls_certfile && director->tls_enable) { + Jmsg(NULL, M_FATAL, 0, _("\"TLS Certificate\" file not defined for Director \"%s\" in %s.\n"), + director->hdr.name, configfile); + OK = false; + } + + if (!director->tls_keyfile && director->tls_enable) { + Jmsg(NULL, M_FATAL, 0, _("\"TLS Key\" file not defined for Director \"%s\" in %s.\n"), + director->hdr.name, configfile); + OK = false; + } + + if ((!director->tls_ca_certfile && !director->tls_ca_certdir) && director->tls_enable && director->tls_verify_peer) { + Jmsg(NULL, M_FATAL, 0, _("Neither \"TLS CA Certificate\" or \"TLS CA" + " Certificate Dir\" are defined for Director \"%s\" in %s." + " At least one CA certificate store is required" + " when using \"TLS Verify Peer\".\n"), + director->hdr.name, configfile); + OK = false; + } + + /* If everything is well, attempt to initialize our per-resource TLS context */ + if (OK && (director->tls_enable || director->tls_require)) { + /* Initialize TLS context: + * Args: CA certfile, CA certdir, Certfile, Keyfile, + * Keyfile PEM Callback, Keyfile CB Userdata, DHfile, Verify Peer */ + director->tls_ctx = new_tls_context(director->tls_ca_certfile, + director->tls_ca_certdir, director->tls_certfile, + director->tls_keyfile, NULL, NULL, director->tls_dhfile, + director->tls_verify_peer); + + if (!director->tls_ctx) { + Jmsg(NULL, M_FATAL, 0, _("Failed to initialize TLS context for Director \"%s\" in %s.\n"), + director->hdr.name, configfile); + OK = false; + } + } } if (!job) { @@ -503,153 +545,321 @@ Without that I don't know who I am :-(\n"), configfile); int i; if (job->jobdefs) { - /* Transfer default items from JobDefs Resource */ - for (i=0; job_items[i].name; i++) { - char **def_svalue, **svalue; /* string value */ - int *def_ivalue, *ivalue; /* integer value */ - int64_t *def_lvalue, *lvalue; /* 64 bit values */ - uint32_t offset; - - Dmsg4(400, "Job \"%s\", field \"%s\" bit=%d def=%d\n", - job->hdr.name, job_items[i].name, - bit_is_set(i, job->hdr.item_present), - bit_is_set(i, job->jobdefs->hdr.item_present)); - - if (!bit_is_set(i, job->hdr.item_present) && - bit_is_set(i, job->jobdefs->hdr.item_present)) { + /* Handle Storage alists specifically */ + JOB *jobdefs = job->jobdefs; + if (jobdefs->storage && !job->storage) { + STORE *st; + job->storage = New(alist(10, not_owned_by_alist)); + foreach_alist(st, jobdefs->storage) { + job->storage->append(st); + } + } + + /* Transfer default items from JobDefs Resource */ + for (i=0; job_items[i].name; i++) { + char **def_svalue, **svalue; /* string value */ + int *def_ivalue, *ivalue; /* integer value */ + int64_t *def_lvalue, *lvalue; /* 64 bit values */ + uint32_t offset; + + Dmsg4(1400, "Job \"%s\", field \"%s\" bit=%d def=%d\n", + job->hdr.name, job_items[i].name, + bit_is_set(i, job->hdr.item_present), + bit_is_set(i, job->jobdefs->hdr.item_present)); + + if (!bit_is_set(i, job->hdr.item_present) && + bit_is_set(i, job->jobdefs->hdr.item_present)) { Dmsg2(400, "Job \"%s\", field \"%s\": getting default.\n", - job->hdr.name, job_items[i].name); - offset = (char *)(job_items[i].value) - (char *)&res_all; - /* - * Handle strings and directory strings - */ - if (job_items[i].handler == store_str || - job_items[i].handler == store_dir) { - def_svalue = (char **)((char *)(job->jobdefs) + offset); - Dmsg5(400, "Job \"%s\", field \"%s\" def_svalue=%s item %d offset=%u\n", - job->hdr.name, job_items[i].name, *def_svalue, i, offset); - svalue = (char **)((char *)job + offset); - if (*svalue) { - Dmsg1(000, "Hey something is wrong. p=0x%lu\n", *svalue); - } - *svalue = bstrdup(*def_svalue); - set_bit(i, job->hdr.item_present); - } else if (job_items[i].handler == store_res) { - def_svalue = (char **)((char *)(job->jobdefs) + offset); - Dmsg4(400, "Job \"%s\", field \"%s\" item %d offset=%u\n", - job->hdr.name, job_items[i].name, i, offset); - svalue = (char **)((char *)job + offset); - if (*svalue) { - Dmsg1(000, "Hey something is wrong. p=0x%lu\n", *svalue); - } - *svalue = *def_svalue; - set_bit(i, job->hdr.item_present); - /* - * Handle integer fields - * Note, our store_yesno does not handle bitmaped fields - */ - } else if (job_items[i].handler == store_yesno || - job_items[i].handler == store_pint || - job_items[i].handler == store_jobtype || - job_items[i].handler == store_level || - job_items[i].handler == store_pint || - job_items[i].handler == store_replace) { - def_ivalue = (int *)((char *)(job->jobdefs) + offset); - Dmsg5(400, "Job \"%s\", field \"%s\" def_ivalue=%d item %d offset=%u\n", - job->hdr.name, job_items[i].name, *def_ivalue, i, offset); - ivalue = (int *)((char *)job + offset); - *ivalue = *def_ivalue; - set_bit(i, job->hdr.item_present); - /* - * Handle 64 bit integer fields - */ - } else if (job_items[i].handler == store_time || - job_items[i].handler == store_size || - job_items[i].handler == store_int64) { - def_lvalue = (int64_t *)((char *)(job->jobdefs) + offset); - Dmsg5(400, "Job \"%s\", field \"%s\" def_lvalue=%" lld " item %d offset=%u\n", - job->hdr.name, job_items[i].name, *def_lvalue, i, offset); - lvalue = (int64_t *)((char *)job + offset); - *lvalue = *def_lvalue; - set_bit(i, job->hdr.item_present); - } - } - } + job->hdr.name, job_items[i].name); + offset = (char *)(job_items[i].value) - (char *)&res_all; + /* + * Handle strings and directory strings + */ + if (job_items[i].handler == store_str || + job_items[i].handler == store_dir) { + def_svalue = (char **)((char *)(job->jobdefs) + offset); + Dmsg5(400, "Job \"%s\", field \"%s\" def_svalue=%s item %d offset=%u\n", + job->hdr.name, job_items[i].name, *def_svalue, i, offset); + svalue = (char **)((char *)job + offset); + if (*svalue) { + Pmsg1(000, _("Hey something is wrong. p=0x%lu\n"), *svalue); + } + *svalue = bstrdup(*def_svalue); + set_bit(i, job->hdr.item_present); + /* + * Handle resources + */ + } else if (job_items[i].handler == store_res) { + def_svalue = (char **)((char *)(job->jobdefs) + offset); + Dmsg4(400, "Job \"%s\", field \"%s\" item %d offset=%u\n", + job->hdr.name, job_items[i].name, i, offset); + svalue = (char **)((char *)job + offset); + if (*svalue) { + Pmsg1(000, _("Hey something is wrong. p=0x%lu\n"), *svalue); + } + *svalue = *def_svalue; + set_bit(i, job->hdr.item_present); + /* + * Handle alist resources + */ + } else if (job_items[i].handler == store_alist_res) { + if (bit_is_set(i, job->jobdefs->hdr.item_present)) { + set_bit(i, job->hdr.item_present); + } + /* + * Handle integer fields + * Note, our store_yesno does not handle bitmaped fields + */ + } else if (job_items[i].handler == store_yesno || + job_items[i].handler == store_pint || + job_items[i].handler == store_jobtype || + job_items[i].handler == store_level || + job_items[i].handler == store_pint || + job_items[i].handler == store_replace) { + def_ivalue = (int *)((char *)(job->jobdefs) + offset); + Dmsg5(400, "Job \"%s\", field \"%s\" def_ivalue=%d item %d offset=%u\n", + job->hdr.name, job_items[i].name, *def_ivalue, i, offset); + ivalue = (int *)((char *)job + offset); + *ivalue = *def_ivalue; + set_bit(i, job->hdr.item_present); + /* + * Handle 64 bit integer fields + */ + } else if (job_items[i].handler == store_time || + job_items[i].handler == store_size || + job_items[i].handler == store_int64) { + def_lvalue = (int64_t *)((char *)(job->jobdefs) + offset); + Dmsg5(400, "Job \"%s\", field \"%s\" def_lvalue=%" lld " item %d offset=%u\n", + job->hdr.name, job_items[i].name, *def_lvalue, i, offset); + lvalue = (int64_t *)((char *)job + offset); + *lvalue = *def_lvalue; + set_bit(i, job->hdr.item_present); + } + } + } } - /* + /* * Ensure that all required items are present */ for (i=0; job_items[i].name; i++) { - if (job_items[i].flags & ITEM_REQUIRED) { - if (!bit_is_set(i, job->hdr.item_present)) { - Jmsg(NULL, M_FATAL, 0, "Field \"%s\" in Job \"%s\" resource is required, but not found.\n", - job_items[i].name, job->hdr.name); - OK = false; - } - } - /* If this triggers, take a look at lib/parse_conf.h */ - if (i >= MAX_RES_ITEMS) { - Emsg0(M_ERROR_TERM, 0, "Too many items in Job resource\n"); - } + if (job_items[i].flags & ITEM_REQUIRED) { + if (!bit_is_set(i, job->hdr.item_present)) { + Jmsg(NULL, M_FATAL, 0, _("\"%s\" directive in Job \"%s\" resource is required, but not found.\n"), + job_items[i].name, job->hdr.name); + OK = false; + } + } + /* If this triggers, take a look at lib/parse_conf.h */ + if (i >= MAX_RES_ITEMS) { + Emsg0(M_ERROR_TERM, 0, _("Too many items in Job resource\n")); + } + } + } /* End loop over Job res */ + + /* Loop over databases */ + CAT *catalog; + foreach_res(catalog, R_CATALOG) { + B_DB *db; + /* + * Make sure we can open catalog, otherwise print a warning + * message because the server is probably not running. + */ + db = db_init_database(NULL, catalog->db_name, catalog->db_user, + catalog->db_password, catalog->db_address, + catalog->db_port, catalog->db_socket, + catalog->mult_db_connections); + if (!db || !db_open_database(NULL, db)) { + Jmsg(NULL, M_FATAL, 0, _("Could not open database \"%s\".\n"), + catalog->db_name); + if (db) { + Jmsg(NULL, M_FATAL, 0, _("%s"), db_strerror(db)); + } + OK = false; + continue; + } + + /* Loop over all pools, defining/updating them in each database */ + POOL *pool; + foreach_res(pool, R_POOL) { + create_pool(NULL, db, pool, POOL_OP_UPDATE); /* update request */ + } + + STORE *store; + foreach_res(store, R_STORAGE) { + STORAGE_DBR sr; + MEDIATYPE_DBR mr; + if (store->media_type) { + bstrncpy(mr.MediaType, store->media_type, sizeof(mr.MediaType)); + mr.ReadOnly = 0; + db_create_mediatype_record(NULL, db, &mr); + } else { + mr.MediaTypeId = 0; + } + bstrncpy(sr.Name, store->name(), sizeof(sr.Name)); + sr.AutoChanger = store->autochanger; + db_create_storage_record(NULL, db, &sr); + store->StorageId = sr.StorageId; /* set storage Id */ + if (!sr.created) { /* if not created, update it */ + db_update_storage_record(NULL, db, &sr); + } + + /* tls_require implies tls_enable */ + if (store->tls_require) { + if (have_tls) { + store->tls_enable = true; + } else { + Jmsg(NULL, M_FATAL, 0, _("TLS required but not configured in Bacula.\n")); + OK = false; + } + } + + if ((!store->tls_ca_certfile && !store->tls_ca_certdir) && store->tls_enable) { + Jmsg(NULL, M_FATAL, 0, _("Neither \"TLS CA Certificate\"" + " or \"TLS CA Certificate Dir\" are defined for Storage \"%s\" in %s.\n"), + store->hdr.name, configfile); + OK = false; + } + + /* If everything is well, attempt to initialize our per-resource TLS context */ + if (OK && (store->tls_enable || store->tls_require)) { + /* Initialize TLS context: + * Args: CA certfile, CA certdir, Certfile, Keyfile, + * Keyfile PEM Callback, Keyfile CB Userdata, DHfile, Verify Peer */ + store->tls_ctx = new_tls_context(store->tls_ca_certfile, + store->tls_ca_certdir, store->tls_certfile, + store->tls_keyfile, NULL, NULL, NULL, true); + + if (!store->tls_ctx) { + Jmsg(NULL, M_FATAL, 0, _("Failed to initialize TLS context for Storage \"%s\" in %s.\n"), + store->hdr.name, configfile); + OK = false; + } + } + } + + /* Loop over all counters, defining them in each database */ + /* Set default value in all counters */ + COUNTER *counter; + foreach_res(counter, R_COUNTER) { + /* Write to catalog? */ + if (!counter->created && counter->Catalog == catalog) { + COUNTER_DBR cr; + bstrncpy(cr.Counter, counter->hdr.name, sizeof(cr.Counter)); + cr.MinValue = counter->MinValue; + cr.MaxValue = counter->MaxValue; + cr.CurrentValue = counter->MinValue; + if (counter->WrapCounter) { + bstrncpy(cr.WrapCounter, counter->WrapCounter->hdr.name, sizeof(cr.WrapCounter)); + } else { + cr.WrapCounter[0] = 0; /* empty string */ + } + if (db_create_counter_record(NULL, db, &cr)) { + counter->CurrentValue = cr.CurrentValue; + counter->created = true; + Dmsg2(100, "Create counter %s val=%d\n", counter->hdr.name, counter->CurrentValue); + } + } + if (!counter->created) { + counter->CurrentValue = counter->MinValue; /* default value */ + } } - if (job->client && job->client->catalog) { - CAT *catalog = job->client->catalog; - B_DB *db; - - /* - * Make sure we can open catalog, otherwise print a warning - * message because the server is probably not running. - */ - db = db_init_database(NULL, catalog->db_name, catalog->db_user, - catalog->db_password, catalog->db_address, - catalog->db_port, catalog->db_socket); - if (!db || !db_open_database(NULL, db)) { - Jmsg(NULL, M_FATAL, 0, _("Could not open database \"%s\".\n"), - catalog->db_name); - if (db) { - Jmsg(NULL, M_FATAL, 0, _("%s"), db_strerror(db)); - } - OK = false; - } else { - /* If a pool is defined for this job, create the pool DB - * record if it is not already created. - */ - if (job->pool) { - create_pool(NULL, db, job->pool, POOL_OP_UPDATE); /* update request */ - } - /* Set default value in all counters */ - COUNTER *counter; - foreach_res(counter, R_COUNTER) { - /* Write to catalog? */ - if (!counter->created && counter->Catalog == catalog) { - COUNTER_DBR cr; - bstrncpy(cr.Counter, counter->hdr.name, sizeof(cr.Counter)); - cr.MinValue = counter->MinValue; - cr.MaxValue = counter->MaxValue; - cr.CurrentValue = counter->MinValue; - if (counter->WrapCounter) { - bstrncpy(cr.WrapCounter, counter->WrapCounter->hdr.name, sizeof(cr.WrapCounter)); - } else { - cr.WrapCounter[0] = 0; /* empty string */ - } - if (db_create_counter_record(NULL, db, &cr)) { - counter->CurrentValue = cr.CurrentValue; - counter->created = true; - Dmsg2(100, "Create counter %s val=%d\n", counter->hdr.name, counter->CurrentValue); - } - } - if (!counter->created) { - counter->CurrentValue = counter->MinValue; /* default value */ - } - } - } - db_close_database(NULL, db); + db_close_database(NULL, db); + } + + /* Loop over Consoles */ + CONRES *cons; + foreach_res(cons, R_CONSOLE) { + /* tls_require implies tls_enable */ + if (cons->tls_require) { + if (have_tls) { + cons->tls_enable = true; + } else { + Jmsg(NULL, M_FATAL, 0, _("TLS required but not configured in Bacula.\n")); + OK = false; + continue; + } + } + + if (!cons->tls_certfile && cons->tls_enable) { + Jmsg(NULL, M_FATAL, 0, _("\"TLS Certificate\" file not defined for Console \"%s\" in %s.\n"), + cons->hdr.name, configfile); + OK = false; + } + + if (!cons->tls_keyfile && cons->tls_enable) { + Jmsg(NULL, M_FATAL, 0, _("\"TLS Key\" file not defined for Console \"%s\" in %s.\n"), + cons->hdr.name, configfile); + OK = false; + } + + if ((!cons->tls_ca_certfile && !cons->tls_ca_certdir) && cons->tls_enable && cons->tls_verify_peer) { + Jmsg(NULL, M_FATAL, 0, _("Neither \"TLS CA Certificate\" or \"TLS CA" + " Certificate Dir\" are defined for Console \"%s\" in %s." + " At least one CA certificate store is required" + " when using \"TLS Verify Peer\".\n"), + cons->hdr.name, configfile); + OK = false; + } + /* If everything is well, attempt to initialize our per-resource TLS context */ + if (OK && (cons->tls_enable || cons->tls_require)) { + /* Initialize TLS context: + * Args: CA certfile, CA certdir, Certfile, Keyfile, + * Keyfile PEM Callback, Keyfile CB Userdata, DHfile, Verify Peer */ + cons->tls_ctx = new_tls_context(cons->tls_ca_certfile, + cons->tls_ca_certdir, cons->tls_certfile, + cons->tls_keyfile, NULL, NULL, cons->tls_dhfile, cons->tls_verify_peer); + + if (!cons->tls_ctx) { + Jmsg(NULL, M_FATAL, 0, _("Failed to initialize TLS context for File daemon \"%s\" in %s.\n"), + cons->hdr.name, configfile); + OK = false; + } + } + + } + + /* Loop over Clients */ + CLIENT *client; + foreach_res(client, R_CLIENT) { + /* tls_require implies tls_enable */ + if (client->tls_require) { + if (have_tls) { + client->tls_enable = true; + } else { + Jmsg(NULL, M_FATAL, 0, _("TLS required but not configured in Bacula.\n")); + OK = false; + continue; + } + } + + if ((!client->tls_ca_certfile && !client->tls_ca_certdir) && client->tls_enable) { + Jmsg(NULL, M_FATAL, 0, _("Neither \"TLS CA Certificate\"" + " or \"TLS CA Certificate Dir\" are defined for File daemon \"%s\" in %s.\n"), + client->hdr.name, configfile); + OK = false; + } + + /* If everything is well, attempt to initialize our per-resource TLS context */ + if (OK && (client->tls_enable || client->tls_require)) { + /* Initialize TLS context: + * Args: CA certfile, CA certdir, Certfile, Keyfile, + * Keyfile PEM Callback, Keyfile CB Userdata, DHfile, Verify Peer */ + client->tls_ctx = new_tls_context(client->tls_ca_certfile, + client->tls_ca_certdir, client->tls_certfile, + client->tls_keyfile, NULL, NULL, NULL, + true); + + if (!client->tls_ctx) { + Jmsg(NULL, M_FATAL, 0, _("Failed to initialize TLS context for File daemon \"%s\" in %s.\n"), + client->hdr.name, configfile); + OK = false; + } } } UnlockRes(); if (OK) { - close_msg(NULL); /* close temp message handler */ + close_msg(NULL); /* close temp message handler */ init_msg(NULL, director->messages); /* open daemon message handler */ } return OK;