git.sur5r.net Git - openldap/blob - servers/slapd/daemon.c

   1 /* $OpenLDAP$ */
   2 /* This work is part of OpenLDAP Software <http://www.openldap.org/>.
   3  *
   4  * Copyright 1998-2017 The OpenLDAP Foundation.
   5  * Portions Copyright 2007 by Howard Chu, Symas Corporation.
   6  * All rights reserved.
   7  *
   8  * Redistribution and use in source and binary forms, with or without
   9  * modification, are permitted only as authorized by the OpenLDAP
  10  * Public License.
  11  *
  12  * A copy of this license is available in the file LICENSE in the
  13  * top-level directory of the distribution or, alternatively, at
  14  * <http://www.OpenLDAP.org/license.html>.
  15  */
  16 /* Portions Copyright (c) 1995 Regents of the University of Michigan.
  17  * All rights reserved.
  18  *
  19  * Redistribution and use in source and binary forms are permitted
  20  * provided that this notice is preserved and that due credit is given
  21  * to the University of Michigan at Ann Arbor. The name of the University
  22  * may not be used to endorse or promote products derived from this
  23  * software without specific prior written permission. This software
  24  * is provided ``as is'' without express or implied warranty.
  25  */
  26
  27 #include "portable.h"
  28
  29 #include <stdio.h>
  30
  31 #include <ac/ctype.h>
  32 #include <ac/errno.h>
  33 #include <ac/socket.h>
  34 #include <ac/string.h>
  35 #include <ac/time.h>
  36 #include <ac/unistd.h>
  37
  38 #include "slap.h"
  39 #include "ldap_pvt_thread.h"
  40 #include "lutil.h"
  41
  42 #include "ldap_rq.h"
  43
  44 #ifdef HAVE_POLL
  45 #include <poll.h>
  46 #endif
  47
  48 #ifdef HAVE_KQUEUE
  49 # include <sys/types.h>
  50 # include <sys/event.h>
  51 # include <sys/time.h>
  52 #elif defined(HAVE_SYS_EPOLL_H) && defined(HAVE_EPOLL)
  53 # include <sys/epoll.h>
  54 #elif defined(SLAP_X_DEVPOLL) && defined(HAVE_SYS_DEVPOLL_H) && defined(HAVE_DEVPOLL)
  55 # include <sys/types.h>
  56 # include <sys/stat.h>
  57 # include <fcntl.h>
  58 # include <sys/devpoll.h>
  59 #endif /* ! kqueue && ! epoll && ! /dev/poll */
  60
  61 #ifdef HAVE_TCPD
  62 int allow_severity = LOG_INFO;
  63 int deny_severity = LOG_NOTICE;
  64 #endif /* TCP Wrappers */
  65
  66 #ifdef LDAP_PF_LOCAL
  67 # include <sys/stat.h>
  68 /* this should go in <ldap.h> as soon as it is accepted */
  69 # define LDAPI_MOD_URLEXT               "x-mod"
  70 #endif /* LDAP_PF_LOCAL */
  71
  72 #ifdef LDAP_PF_INET6
  73 int slap_inet4or6 = AF_UNSPEC;
  74 #else /* ! INETv6 */
  75 int slap_inet4or6 = AF_INET;
  76 #endif /* ! INETv6 */
  77
  78 /* globals */
  79 time_t starttime;
  80 ber_socket_t dtblsize;
  81 slap_ssf_t local_ssf = LDAP_PVT_SASL_LOCAL_SSF;
  82 struct runqueue_s slapd_rq;
  83
  84 #ifndef SLAPD_MAX_DAEMON_THREADS
  85 #define SLAPD_MAX_DAEMON_THREADS        16
  86 #endif
  87 int slapd_daemon_threads = 1;
  88 int slapd_daemon_mask;
  89
  90 #ifdef LDAP_TCP_BUFFER
  91 int slapd_tcp_rmem;
  92 int slapd_tcp_wmem;
  93 #endif /* LDAP_TCP_BUFFER */
  94
  95 Listener **slap_listeners = NULL;
  96 static volatile sig_atomic_t listening = 1; /* 0 when slap_listeners closed */
  97 static ldap_pvt_thread_t *listener_tid;
  98
  99 #ifndef SLAPD_LISTEN_BACKLOG
 100 #define SLAPD_LISTEN_BACKLOG 2048
 101 #endif /* ! SLAPD_LISTEN_BACKLOG */
 102
 103 #define DAEMON_ID(fd)   (fd & slapd_daemon_mask)
 104
 105 static ber_socket_t wake_sds[SLAPD_MAX_DAEMON_THREADS][2];
 106 static int emfile;
 107
 108 static volatile int waking;
 109 #ifdef NO_THREADS
 110 #define WAKE_LISTENER(l,w)      do { \
 111         if ((w) && ++waking < 5) { \
 112                 tcp_write( SLAP_FD2SOCK(wake_sds[l][1]), "0", 1 ); \
 113         } \
 114 } while (0)
 115 #else /* ! NO_THREADS */
 116 #define WAKE_LISTENER(l,w)      do { \
 117         if (w) { \
 118                 tcp_write( SLAP_FD2SOCK(wake_sds[l][1]), "0", 1 ); \
 119         } \
 120 } while (0)
 121 #endif /* ! NO_THREADS */
 122
 123 volatile sig_atomic_t slapd_shutdown = 0;
 124 volatile sig_atomic_t slapd_gentle_shutdown = 0;
 125 volatile sig_atomic_t slapd_abrupt_shutdown = 0;
 126
 127 #ifdef HAVE_WINSOCK
 128 ldap_pvt_thread_mutex_t slapd_ws_mutex;
 129 SOCKET *slapd_ws_sockets;
 130 #define SD_READ 1
 131 #define SD_WRITE        2
 132 #define SD_ACTIVE       4
 133 #define SD_LISTENER     8
 134 #endif
 135
 136 #ifdef HAVE_TCPD
 137 static ldap_pvt_thread_mutex_t  sd_tcpd_mutex;
 138 #endif /* TCP Wrappers */
 139
 140 typedef struct slap_daemon_st {
 141         ldap_pvt_thread_mutex_t sd_mutex;
 142
 143         ber_socket_t            sd_nactives;
 144         int                     sd_nwriters;
 145         int                     sd_nfds;
 146
 147 #if defined(HAVE_KQUEUE)
 148         uint8_t*        sd_fdmodes; /* indexed by fd */
 149         Listener**      sd_l;       /* indexed by fd */
 150         /* Double buffer the kqueue changes to avoid holding the sd_mutex \
 151          * during a kevent() call. \
 152          */
 153         struct kq_change {
 154             struct kevent*  sd_changes;
 155             int             sd_nchanges;
 156             int             sd_maxchanges;
 157         }               sd_kqc[2];
 158         int             sd_changeidx; /* index to current change buffer */
 159         int             sd_kq;
 160 #elif defined(HAVE_EPOLL)
 161
 162         struct epoll_event      *sd_epolls;
 163         int                     *sd_index;
 164         int                     sd_epfd;
 165 #elif defined(SLAP_X_DEVPOLL) && defined(HAVE_DEVPOLL)
 166         /* eXperimental */
 167         struct pollfd           *sd_pollfd;
 168         int                     *sd_index;
 169         Listener                **sd_l;
 170         int                     sd_dpfd;
 171 #else /* ! kqueue && ! epoll && ! /dev/poll */
 172 #ifdef HAVE_WINSOCK
 173         char    *sd_flags;
 174         char    *sd_rflags;
 175 #else /* ! HAVE_WINSOCK */
 176         fd_set                  sd_actives;
 177         fd_set                  sd_readers;
 178         fd_set                  sd_writers;
 179 #endif /* ! HAVE_WINSOCK */
 180 #endif /* ! kqueue && ! epoll && ! /dev/poll */
 181 } slap_daemon_st;
 182
 183 static slap_daemon_st slap_daemon[SLAPD_MAX_DAEMON_THREADS];
 184
 185 /*
 186  * NOTE: naming convention for macros:
 187  *
 188  * - SLAP_SOCK_* and SLAP_EVENT_* for public interface that deals
 189  *   with file descriptors and events respectively
 190  *
 191  * - SLAP_<type>_* for private interface; type by now is one of
 192  *   EPOLL, DEVPOLL, SELECT, KQUEUE
 193  *
 194  * private interface should not be used in the code.
 195  */
 196 #ifdef HAVE_KQUEUE
 197 # define SLAP_EVENT_FNAME                   "kqueue"
 198 # define SLAP_EVENTS_ARE_INDEXED        0
 199 # define SLAP_EVENT_MAX(t)             (2 * dtblsize)  /* each fd can have a read & a write event */
 200
 201 # define SLAP_EVENT_DECL \
 202      static struct kevent* events = NULL
 203
 204 # define SLAP_EVENT_INIT(t) do {\
 205     if (!events) { \
 206         events = ch_malloc(sizeof(*events) * SLAP_EVENT_MAX(t)); \
 207         if (!events) { \
 208             Debug(LDAP_DEBUG_ANY, \
 209                 "daemon: SLAP_EVENT_INIT: ch_malloc of events failed, wanted %d bytes\n", \
 210                 sizeof(*events) * SLAP_EVENT_MAX(t), 0, 0); \
 211                 slapd_shutdown = 2; \
 212         } \
 213     } \
 214 } while (0)
 215
 216 # define SLAP_SOCK_INIT(t) do { \
 217     int kq_i; \
 218     size_t kq_nbytes; \
 219     Debug(LDAP_DEBUG_ANY, "daemon: SLAP_SOCK_INIT: dtblsize=%d\n", dtblsize, 0, 0); \
 220     slap_daemon[t].sd_nfds       = 0; \
 221     slap_daemon[t].sd_changeidx  = 0; \
 222     for (kq_i = 0;  kq_i < 2;  kq_i++) { \
 223         struct kq_change* kqc = &slap_daemon[t].sd_kqc[kq_i]; \
 224         kqc->sd_nchanges   = 0; \
 225         kqc->sd_maxchanges = 256; /* will grow as needed */ \
 226         kq_nbytes = sizeof(*kqc->sd_changes) * kqc->sd_maxchanges; \
 227         kqc->sd_changes = ch_calloc(1, kq_nbytes); \
 228         if (!kqc->sd_changes) { \
 229             Debug(LDAP_DEBUG_ANY, \
 230                   "daemon: SLAP_SOCK_INIT: ch_calloc of slap_daemon.sd_changes[%d] failed, wanted %d bytes, shutting down\n", \
 231                   kq_i, kq_nbytes, 0); \
 232                   slapd_shutdown = 2; \
 233         } \
 234     } \
 235     kq_nbytes = sizeof(*slap_daemon[t].sd_fdmodes) * dtblsize; \
 236     slap_daemon[t].sd_fdmodes = ch_calloc(1, kq_nbytes); \
 237     if (!slap_daemon[t].sd_fdmodes) { \
 238         Debug(LDAP_DEBUG_ANY, \
 239             "daemon: SLAP_SOCK_INIT: ch_calloc of slap_daemon.sd_fdmodes failed, wanted %d bytes, shutting down\n", \
 240             kq_nbytes, 0, 0); \
 241         slapd_shutdown = 2; \
 242     } \
 243     kq_nbytes = sizeof(*slap_daemon[t].sd_l) * dtblsize; \
 244     slap_daemon[t].sd_l = ch_calloc(1, kq_nbytes); \
 245     if (!slap_daemon[t].sd_l) { \
 246         Debug(LDAP_DEBUG_ANY, \
 247             "daemon: SLAP_SOCK_INIT: ch_calloc of slap_daemon.sd_l failed, wanted %d bytes, shutting down\n", \
 248             kq_nbytes, 0, 0); \
 249         slapd_shutdown = 2; \
 250     } \
 251     slap_daemon[t].sd_kq = kqueue(); \
 252     if (slap_daemon[t].sd_kq < 0) { \
 253         Debug(LDAP_DEBUG_ANY, "daemon: SLAP_SOCK_INIT: kqueue() failed, errno=%d, shutting down\n", errno, 0, 0); \
 254         slapd_shutdown = 2; \
 255     } \
 256 } while (0)
 257
 258 # define SLAP_SOCK_DESTROY(t) do { \
 259         int kq_i; \
 260     if (slap_daemon[t].sd_kq > 0) { \
 261         close(slap_daemon[t].sd_kq); \
 262         slap_daemon[t].sd_kq = -1; \
 263     } \
 264     for (kq_i = 0;  kq_i < 2;  kq_i++) { \
 265         if (slap_daemon[t].sd_kqc[kq_i].sd_changes != NULL) { \
 266             ch_free(slap_daemon[t].sd_kqc[kq_i].sd_changes); \
 267             slap_daemon[t].sd_kqc[kq_i].sd_changes = NULL; \
 268         } \
 269         slap_daemon[t].sd_kqc[kq_i].sd_nchanges = 0; \
 270         slap_daemon[t].sd_kqc[kq_i].sd_maxchanges = 0; \
 271     } \
 272     if (slap_daemon[t].sd_l != NULL) { \
 273         ch_free(slap_daemon[t].sd_l); \
 274         slap_daemon[t].sd_l = NULL; \
 275     } \
 276     if (slap_daemon[t].sd_fdmodes != NULL) { \
 277         ch_free(slap_daemon[t].sd_fdmodes); \
 278         slap_daemon[t].sd_fdmodes = NULL; \
 279     } \
 280     slap_daemon[t].sd_nfds = 0; \
 281 } while (0)
 282
 283 # define SLAP_KQUEUE_SOCK_ACTIVE        0x01
 284 # define SLAP_KQUEUE_SOCK_READ_ENABLED  0x02
 285 # define SLAP_KQUEUE_SOCK_WRITE_ENABLED 0x04
 286
 287 # define SLAP_SOCK_IS_ACTIVE(t,s)  (slap_daemon[t].sd_fdmodes[(s)] != 0)
 288 # define SLAP_SOCK_NOT_ACTIVE(t,s) (slap_daemon[t].sd_fdmodes[(s)] == 0)
 289 # define SLAP_SOCK_IS_READ(t,s)    (slap_daemon[t].sd_fdmodes[(s)] & SLAP_KQUEUE_SOCK_READ_ENABLED)
 290 # define SLAP_SOCK_IS_WRITE(t,s)   (slap_daemon[t].sd_fdmodes[(s)] & SLAP_KQUEUE_SOCK_WRITE_ENABLED)
 291
 292 /*
 293  * SLAP_SOCK_SET_* & SLAP_SOCK_CLR_* get called a _lot_.  Since kevent()
 294  * processes changes before it looks for events, batch up the changes which
 295  * will get submitted the next time kevent() is called for events.
 296  */
 297
 298 # define SLAP_KQUEUE_CHANGE(t, s, filter, flag) do { \
 299     /* If maxchanges is reached, have to realloc to make room for more. \
 300      * Ideally we'd call kevent(), but the daemon thread could be sitting \
 301      * in kevent() waiting for events. \
 302      */ \
 303     struct kq_change* kqc = &slap_daemon[t].sd_kqc[slap_daemon[t].sd_changeidx]; \
 304     if (kqc->sd_nchanges == kqc->sd_maxchanges) { \
 305         /* Don't want to do this very often.  Double the size. */ \
 306         size_t kq_nbytes; \
 307         Debug(LDAP_DEBUG_CONNS, \
 308               "daemon: SLAP_KQUEUE_CHANGE: increasing slap_daemon.sd_kqc[%d].maxchanges from %d to %d\n", \
 309               slap_daemon[t].sd_changeidx, kqc->sd_maxchanges, 2*kqc->sd_maxchanges); \
 310         kqc->sd_maxchanges += kqc->sd_maxchanges; \
 311         kq_nbytes = sizeof(*kqc->sd_changes) * kqc->sd_maxchanges; \
 312         kqc->sd_changes = ch_realloc(kqc->sd_changes, kq_nbytes); \
 313         if (!kqc->sd_changes) { \
 314             Debug(LDAP_DEBUG_ANY, \
 315                 "daemon: SLAP_KQUEUE_CHANGE: ch_realloc of slap_daemon.sd_kqc[%d].sd_changes failed, wanted %d bytes, shutting down\n", \
 316                 slap_daemon[t].sd_changeidx, kq_nbytes, 0); \
 317             slapd_shutdown = 2; \
 318             break; /* Don't want to do the EV_SET if sd_changes is NULL */ \
 319         } \
 320     } \
 321     EV_SET(&kqc->sd_changes[kqc->sd_nchanges++], \
 322            (s), (filter), (flag), 0, 0, slap_daemon[t].sd_l[(s)]); \
 323 } while (0)
 324
 325 # define SLAP_KQUEUE_SOCK_SET(t, s, filter, mode) do { \
 326     if ((slap_daemon[t].sd_fdmodes[(s)] & (mode)) != (mode)) { \
 327         slap_daemon[t].sd_fdmodes[(s)] |= (mode); \
 328         SLAP_KQUEUE_CHANGE(t, (s), (filter), EV_ENABLE); \
 329     } \
 330 } while (0)
 331
 332 # define SLAP_KQUEUE_SOCK_CLR(t, s, filter, mode) do { \
 333     if (slap_daemon[t].sd_fdmodes[(s)] & (mode)) { \
 334         slap_daemon[t].sd_fdmodes[(s)] &= ~(mode); \
 335         SLAP_KQUEUE_CHANGE(t, (s), (filter), EV_DISABLE); \
 336     } \
 337 } while (0)
 338
 339 # define SLAP_SOCK_SET_READ(t, s)  SLAP_KQUEUE_SOCK_SET(t, (s), EVFILT_READ,  SLAP_KQUEUE_SOCK_READ_ENABLED)
 340 # define SLAP_SOCK_SET_WRITE(t, s) SLAP_KQUEUE_SOCK_SET(t, (s), EVFILT_WRITE, SLAP_KQUEUE_SOCK_WRITE_ENABLED)
 341 # define SLAP_SOCK_CLR_READ(t, s)  SLAP_KQUEUE_SOCK_CLR(t, (s), EVFILT_READ,  SLAP_KQUEUE_SOCK_READ_ENABLED)
 342 # define SLAP_SOCK_CLR_WRITE(t, s) SLAP_KQUEUE_SOCK_CLR(t, (s), EVFILT_WRITE, SLAP_KQUEUE_SOCK_WRITE_ENABLED)
 343
 344 /* kqueue doesn't need to do anything to clear the event. */
 345 # define SLAP_EVENT_CLR_READ(i)     do {} while (0)
 346 # define SLAP_EVENT_CLR_WRITE(i)    do {} while (0)
 347
 348 # define SLAP_SOCK_ADD(t, s, l) do { \
 349     assert( s < dtblsize ); \
 350     slap_daemon[t].sd_l[(s)] = (l); \
 351     slap_daemon[t].sd_fdmodes[(s)] = SLAP_KQUEUE_SOCK_ACTIVE | SLAP_KQUEUE_SOCK_READ_ENABLED; \
 352     ++slap_daemon[t].sd_nfds; \
 353     SLAP_KQUEUE_CHANGE(t, (s), EVFILT_READ, EV_ADD); \
 354     SLAP_KQUEUE_CHANGE(t, (s), EVFILT_WRITE, EV_ADD | EV_DISABLE); \
 355 } while (0)
 356
 357 # define SLAP_SOCK_DEL(t, s) do { \
 358     SLAP_KQUEUE_CHANGE(t, (s), EVFILT_READ, EV_DELETE); \
 359     SLAP_KQUEUE_CHANGE(t, (s), EVFILT_WRITE, EV_DELETE); \
 360     slap_daemon[t].sd_l[(s)] = NULL; \
 361     slap_daemon[t].sd_fdmodes[(s)] = 0; \
 362     --slap_daemon[t].sd_nfds; \
 363 } while (0)
 364
 365 # define SLAP_EVENT_FD(t, i)          (events[(i)].ident)
 366
 367 # define SLAP_EVENT_IS_READ(t, i) \
 368     (events[(i)].filter == EVFILT_READ && SLAP_SOCK_IS_READ(t, SLAP_EVENT_FD(0, i)))
 369
 370 # define SLAP_EVENT_IS_WRITE(t, i) \
 371     (events[(i)].filter == EVFILT_WRITE && SLAP_SOCK_IS_WRITE(t, SLAP_EVENT_FD(0, i)))
 372
 373 # define SLAP_EVENT_IS_LISTENER(t, i) \
 374     (events[(i)].udata && SLAP_SOCK_IS_READ(t, SLAP_EVENT_FD(t, i)))
 375
 376 # define SLAP_EVENT_LISTENER(t, i)    ((Listener*)(events[(i)].udata))
 377
 378 # define SLAP_EVENT_WAIT(t, tvp, nsp) do { \
 379     struct timespec  kq_ts; \
 380     struct timespec* kq_tsp; \
 381     int kq_idx; \
 382     if (tvp) { \
 383         TIMEVAL_TO_TIMESPEC((tvp), &kq_ts); \
 384         kq_tsp = &kq_ts; \
 385     } else { \
 386         kq_tsp = NULL; \
 387     } \
 388     /* Save the change buffer index for use when the mutex is unlocked, \
 389      * then switch the index so new changes go to the other buffer. \
 390      */ \
 391     ldap_pvt_thread_mutex_lock( &slap_daemon[t].sd_mutex ); \
 392     kq_idx = slap_daemon[t].sd_changeidx; \
 393     slap_daemon[t].sd_changeidx ^= 1; \
 394     ldap_pvt_thread_mutex_unlock( &slap_daemon[t].sd_mutex ); \
 395     *(nsp) = kevent(slap_daemon[t].sd_kq, \
 396                     slap_daemon[t].sd_kqc[kq_idx].sd_nchanges \
 397                         ? slap_daemon[t].sd_kqc[kq_idx].sd_changes : NULL, \
 398                     slap_daemon[t].sd_kqc[kq_idx].sd_nchanges, \
 399                     events, SLAP_EVENT_MAX(t), kq_tsp); \
 400     slap_daemon[t].sd_kqc[kq_idx].sd_nchanges = 0; \
 401 } while(0)
 402
 403 /*-------------------------------------------------------------------------------*/
 404
 405 #elif defined(HAVE_EPOLL)
 406 /***************************************
 407  * Use epoll infrastructure - epoll(4) *
 408  ***************************************/
 409 # define SLAP_EVENT_FNAME               "epoll"
 410 # define SLAP_EVENTS_ARE_INDEXED        0
 411 # define SLAP_EPOLL_SOCK_IX(t,s)                (slap_daemon[t].sd_index[(s)])
 412 # define SLAP_EPOLL_SOCK_EP(t,s)                (slap_daemon[t].sd_epolls[SLAP_EPOLL_SOCK_IX(t,s)])
 413 # define SLAP_EPOLL_SOCK_EV(t,s)                (SLAP_EPOLL_SOCK_EP(t,s).events)
 414 # define SLAP_SOCK_IS_ACTIVE(t,s)               (SLAP_EPOLL_SOCK_IX(t,s) != -1)
 415 # define SLAP_SOCK_NOT_ACTIVE(t,s)      (SLAP_EPOLL_SOCK_IX(t,s) == -1)
 416 # define SLAP_EPOLL_SOCK_IS_SET(t,s, mode)      (SLAP_EPOLL_SOCK_EV(t,s) & (mode))
 417
 418 # define SLAP_SOCK_IS_READ(t,s)         SLAP_EPOLL_SOCK_IS_SET(t,(s), EPOLLIN)
 419 # define SLAP_SOCK_IS_WRITE(t,s)                SLAP_EPOLL_SOCK_IS_SET(t,(s), EPOLLOUT)
 420
 421 # define SLAP_EPOLL_SOCK_SET(t,s, mode) do { \
 422         if ( (SLAP_EPOLL_SOCK_EV(t,s) & (mode)) != (mode) ) {   \
 423                 SLAP_EPOLL_SOCK_EV(t,s) |= (mode); \
 424                 epoll_ctl( slap_daemon[t].sd_epfd, EPOLL_CTL_MOD, (s), \
 425                         &SLAP_EPOLL_SOCK_EP(t,s) ); \
 426         } \
 427 } while (0)
 428
 429 # define SLAP_EPOLL_SOCK_CLR(t,s, mode) do { \
 430         if ( (SLAP_EPOLL_SOCK_EV(t,s) & (mode)) ) { \
 431                 SLAP_EPOLL_SOCK_EV(t,s) &= ~(mode);     \
 432                 epoll_ctl( slap_daemon[t].sd_epfd, EPOLL_CTL_MOD, s, \
 433                         &SLAP_EPOLL_SOCK_EP(t,s) ); \
 434         } \
 435 } while (0)
 436
 437 # define SLAP_SOCK_SET_READ(t,s)                SLAP_EPOLL_SOCK_SET(t,s, EPOLLIN)
 438 # define SLAP_SOCK_SET_WRITE(t,s)               SLAP_EPOLL_SOCK_SET(t,s, EPOLLOUT)
 439
 440 # define SLAP_SOCK_CLR_READ(t,s)                SLAP_EPOLL_SOCK_CLR(t,(s), EPOLLIN)
 441 # define SLAP_SOCK_CLR_WRITE(t,s)               SLAP_EPOLL_SOCK_CLR(t,(s), EPOLLOUT)
 442
 443 #  define SLAP_SOCK_SET_SUSPEND(t,s) \
 444         ( slap_daemon[t].sd_suspend[SLAP_EPOLL_SOCK_IX(t,s)] = 1 )
 445 #  define SLAP_SOCK_CLR_SUSPEND(t,s) \
 446         ( slap_daemon[t].sd_suspend[SLAP_EPOLL_SOCK_IX(t,s)] = 0 )
 447 #  define SLAP_SOCK_IS_SUSPEND(t,s) \
 448         ( slap_daemon[t].sd_suspend[SLAP_EPOLL_SOCK_IX(t,s)] == 1 )
 449
 450 # define SLAP_EPOLL_EVENT_CLR(i, mode)  (revents[(i)].events &= ~(mode))
 451
 452 # define SLAP_EVENT_MAX(t)                      slap_daemon[t].sd_nfds
 453
 454 /* If a Listener address is provided, store that as the epoll data.
 455  * Otherwise, store the address of this socket's slot in the
 456  * index array. If we can't do this add, the system is out of
 457  * resources and we need to shutdown.
 458  */
 459 # define SLAP_SOCK_ADD(t, s, l)         do { \
 460         int rc; \
 461         SLAP_EPOLL_SOCK_IX(t,(s)) = slap_daemon[t].sd_nfds; \
 462         SLAP_EPOLL_SOCK_EP(t,(s)).data.ptr = (l) ? (l) : (void *)(&SLAP_EPOLL_SOCK_IX(t,s)); \
 463         SLAP_EPOLL_SOCK_EV(t,(s)) = EPOLLIN; \
 464         rc = epoll_ctl(slap_daemon[t].sd_epfd, EPOLL_CTL_ADD, \
 465                 (s), &SLAP_EPOLL_SOCK_EP(t,(s))); \
 466         if ( rc == 0 ) { \
 467                 slap_daemon[t].sd_nfds++; \
 468         } else { \
 469                 Debug( LDAP_DEBUG_ANY, \
 470                         "daemon: epoll_ctl(ADD,fd=%d) failed, errno=%d, shutting down\n", \
 471                         s, errno, 0 ); \
 472                 slapd_shutdown = 2; \
 473         } \
 474 } while (0)
 475
 476 # define SLAP_EPOLL_EV_LISTENER(t,ptr) \
 477         (((int *)(ptr) >= slap_daemon[t].sd_index && \
 478         (int *)(ptr) <= &slap_daemon[t].sd_index[dtblsize]) ? 0 : 1 )
 479
 480 # define SLAP_EPOLL_EV_PTRFD(t,ptr)             (SLAP_EPOLL_EV_LISTENER(t,ptr) ? \
 481         ((Listener *)ptr)->sl_sd : \
 482         (ber_socket_t) ((int *)(ptr) - slap_daemon[t].sd_index))
 483
 484 # define SLAP_SOCK_DEL(t,s)             do { \
 485         int fd, rc, index = SLAP_EPOLL_SOCK_IX(t,(s)); \
 486         if ( index < 0 ) break; \
 487         rc = epoll_ctl(slap_daemon[t].sd_epfd, EPOLL_CTL_DEL, \
 488                 (s), &SLAP_EPOLL_SOCK_EP(t,(s))); \
 489         slap_daemon[t].sd_epolls[index] = \
 490                 slap_daemon[t].sd_epolls[slap_daemon[t].sd_nfds-1]; \
 491         fd = SLAP_EPOLL_EV_PTRFD(t,slap_daemon[t].sd_epolls[index].data.ptr); \
 492         slap_daemon[t].sd_index[fd] = index; \
 493         slap_daemon[t].sd_index[(s)] = -1; \
 494         slap_daemon[t].sd_nfds--; \
 495 } while (0)
 496
 497 # define SLAP_EVENT_CLR_READ(i)         SLAP_EPOLL_EVENT_CLR((i), EPOLLIN)
 498 # define SLAP_EVENT_CLR_WRITE(i)        SLAP_EPOLL_EVENT_CLR((i), EPOLLOUT)
 499
 500 # define SLAP_EPOLL_EVENT_CHK(i, mode)  (revents[(i)].events & mode)
 501
 502 # define SLAP_EVENT_IS_READ(i)          SLAP_EPOLL_EVENT_CHK((i), EPOLLIN)
 503 # define SLAP_EVENT_IS_WRITE(i)         SLAP_EPOLL_EVENT_CHK((i), EPOLLOUT)
 504 # define SLAP_EVENT_IS_LISTENER(t,i)    SLAP_EPOLL_EV_LISTENER(t,revents[(i)].data.ptr)
 505 # define SLAP_EVENT_LISTENER(t,i)               ((Listener *)(revents[(i)].data.ptr))
 506
 507 # define SLAP_EVENT_FD(t,i)             SLAP_EPOLL_EV_PTRFD(t,revents[(i)].data.ptr)
 508
 509 # define SLAP_SOCK_INIT(t)              do { \
 510         int j; \
 511         slap_daemon[t].sd_epolls = ch_calloc(1, \
 512                 ( sizeof(struct epoll_event) * 2 \
 513                         + sizeof(int) ) * dtblsize * 2); \
 514         slap_daemon[t].sd_index = (int *)&slap_daemon[t].sd_epolls[ 2 * dtblsize ]; \
 515         slap_daemon[t].sd_epfd = epoll_create( dtblsize / slapd_daemon_threads ); \
 516         for ( j = 0; j < dtblsize; j++ ) slap_daemon[t].sd_index[j] = -1; \
 517 } while (0)
 518
 519 # define SLAP_SOCK_DESTROY(t)           do { \
 520         if ( slap_daemon[t].sd_epolls != NULL ) { \
 521                 ch_free( slap_daemon[t].sd_epolls ); \
 522                 slap_daemon[t].sd_epolls = NULL; \
 523                 slap_daemon[t].sd_index = NULL; \
 524                 close( slap_daemon[t].sd_epfd ); \
 525         } \
 526 } while ( 0 )
 527
 528 # define SLAP_EVENT_DECL                struct epoll_event *revents
 529
 530 # define SLAP_EVENT_INIT(t)             do { \
 531         revents = slap_daemon[t].sd_epolls + dtblsize; \
 532 } while (0)
 533
 534 # define SLAP_EVENT_WAIT(t, tvp, nsp)   do { \
 535         *(nsp) = epoll_wait( slap_daemon[t].sd_epfd, revents, \
 536                 dtblsize, (tvp) ? (tvp)->tv_sec * 1000 : -1 ); \
 537 } while (0)
 538
 539 #elif defined(SLAP_X_DEVPOLL) && defined(HAVE_DEVPOLL)
 540
 541 /*************************************************************
 542  * Use Solaris' (>= 2.7) /dev/poll infrastructure - poll(7d) *
 543  *************************************************************/
 544 # define SLAP_EVENT_FNAME               "/dev/poll"
 545 # define SLAP_EVENTS_ARE_INDEXED        0
 546 /*
 547  * - sd_index   is used much like with epoll()
 548  * - sd_l       is maintained as an array containing the address
 549  *              of the listener; the index is the fd itself
 550  * - sd_pollfd  is used to keep track of what data has been
 551  *              registered in /dev/poll
 552  */
 553 # define SLAP_DEVPOLL_SOCK_IX(t,s)      (slap_daemon[t].sd_index[(s)])
 554 # define SLAP_DEVPOLL_SOCK_LX(t,s)      (slap_daemon[t].sd_l[(s)])
 555 # define SLAP_DEVPOLL_SOCK_EP(t,s)      (slap_daemon[t].sd_pollfd[SLAP_DEVPOLL_SOCK_IX(t,(s))])
 556 # define SLAP_DEVPOLL_SOCK_FD(t,s)      (SLAP_DEVPOLL_SOCK_EP(t,(s)).fd)
 557 # define SLAP_DEVPOLL_SOCK_EV(t,s)      (SLAP_DEVPOLL_SOCK_EP(t,(s)).events)
 558 # define SLAP_SOCK_IS_ACTIVE(t,s)               (SLAP_DEVPOLL_SOCK_IX(t,(s)) != -1)
 559 # define SLAP_SOCK_NOT_ACTIVE(t,s)      (SLAP_DEVPOLL_SOCK_IX(t,(s)) == -1)
 560 # define SLAP_SOCK_IS_SET(t,s, mode)    (SLAP_DEVPOLL_SOCK_EV(t,(s)) & (mode))
 561
 562 # define SLAP_SOCK_IS_READ(t,s)         SLAP_SOCK_IS_SET(t,(s), POLLIN)
 563 # define SLAP_SOCK_IS_WRITE(t,s)                SLAP_SOCK_IS_SET(t,(s), POLLOUT)
 564
 565 /* as far as I understand, any time we need to communicate with the kernel
 566  * about the number and/or properties of a file descriptor we need it to
 567  * wait for, we have to rewrite the whole set */
 568 # define SLAP_DEVPOLL_WRITE_POLLFD(t,s, pfd, n, what, shdn)     do { \
 569         int rc; \
 570         size_t size = (n) * sizeof( struct pollfd ); \
 571         /* FIXME: use pwrite? */ \
 572         rc = write( slap_daemon[t].sd_dpfd, (pfd), size ); \
 573         if ( rc != size ) { \
 574                 Debug( LDAP_DEBUG_ANY, "daemon: " SLAP_EVENT_FNAME ": " \
 575                         "%s fd=%d failed errno=%d\n", \
 576                         (what), (s), errno ); \
 577                 if ( (shdn) ) { \
 578                         slapd_shutdown = 2; \
 579                 } \
 580         } \
 581 } while (0)
 582
 583 # define SLAP_DEVPOLL_SOCK_SET(t,s, mode)       do { \
 584         Debug( LDAP_DEBUG_CONNS, "SLAP_SOCK_SET_%s(%d)=%d\n", \
 585                 (mode) == POLLIN ? "READ" : "WRITE", (s), \
 586                 ( (SLAP_DEVPOLL_SOCK_EV(t,(s)) & (mode)) != (mode) ) ); \
 587         if ( (SLAP_DEVPOLL_SOCK_EV(t,(s)) & (mode)) != (mode) ) { \
 588                 struct pollfd pfd; \
 589                 SLAP_DEVPOLL_SOCK_EV(t,(s)) |= (mode); \
 590                 pfd.fd = SLAP_DEVPOLL_SOCK_FD(t,(s)); \
 591                 pfd.events = /* (mode) */ SLAP_DEVPOLL_SOCK_EV(t,(s)); \
 592                 SLAP_DEVPOLL_WRITE_POLLFD(t,(s), &pfd, 1, "SET", 0); \
 593         } \
 594 } while (0)
 595
 596 # define SLAP_DEVPOLL_SOCK_CLR(t,s, mode)               do { \
 597         Debug( LDAP_DEBUG_CONNS, "SLAP_SOCK_CLR_%s(%d)=%d\n", \
 598                 (mode) == POLLIN ? "READ" : "WRITE", (s), \
 599                 ( (SLAP_DEVPOLL_SOCK_EV(t,(s)) & (mode)) == (mode) ) ); \
 600         if ((SLAP_DEVPOLL_SOCK_EV(t,(s)) & (mode)) == (mode) ) { \
 601                 struct pollfd pfd[2]; \
 602                 SLAP_DEVPOLL_SOCK_EV(t,(s)) &= ~(mode); \
 603                 pfd[0].fd = SLAP_DEVPOLL_SOCK_FD(t,(s)); \
 604                 pfd[0].events = POLLREMOVE; \
 605                 pfd[1] = SLAP_DEVPOLL_SOCK_EP(t,(s)); \
 606                 SLAP_DEVPOLL_WRITE_POLLFD(t,(s), &pfd[0], 2, "CLR", 0); \
 607         } \
 608 } while (0)
 609
 610 # define SLAP_SOCK_SET_READ(t,s)                SLAP_DEVPOLL_SOCK_SET(t,s, POLLIN)
 611 # define SLAP_SOCK_SET_WRITE(t,s)               SLAP_DEVPOLL_SOCK_SET(t,s, POLLOUT)
 612
 613 # define SLAP_SOCK_CLR_READ(t,s)                SLAP_DEVPOLL_SOCK_CLR(t,(s), POLLIN)
 614 # define SLAP_SOCK_CLR_WRITE(t,s)               SLAP_DEVPOLL_SOCK_CLR(t,(s), POLLOUT)
 615
 616 #  define SLAP_SOCK_SET_SUSPEND(t,s) \
 617         ( slap_daemon[t].sd_suspend[SLAP_DEVPOLL_SOCK_IX(t,(s))] = 1 )
 618 #  define SLAP_SOCK_CLR_SUSPEND(t,s) \
 619         ( slap_daemon[t].sd_suspend[SLAP_DEVPOLL_SOCK_IX(t,(s))] = 0 )
 620 #  define SLAP_SOCK_IS_SUSPEND(t,s) \
 621         ( slap_daemon[t].sd_suspend[SLAP_DEVPOLL_SOCK_IX(t,(s))] == 1 )
 622
 623 # define SLAP_DEVPOLL_EVENT_CLR(i, mode)        (revents[(i)].events &= ~(mode))
 624
 625 # define SLAP_EVENT_MAX(t)                      slap_daemon[t].sd_nfds
 626
 627 /* If a Listener address is provided, store that in the sd_l array.
 628  * If we can't do this add, the system is out of resources and we
 629  * need to shutdown.
 630  */
 631 # define SLAP_SOCK_ADD(t, s, l)         do { \
 632         Debug( LDAP_DEBUG_CONNS, "SLAP_SOCK_ADD(%d, %p)\n", (s), (l), 0 ); \
 633         SLAP_DEVPOLL_SOCK_IX(t,(s)) = slap_daemon[t].sd_nfds; \
 634         SLAP_DEVPOLL_SOCK_LX(t,(s)) = (l); \
 635         SLAP_DEVPOLL_SOCK_FD(t,(s)) = (s); \
 636         SLAP_DEVPOLL_SOCK_EV(t,(s)) = POLLIN; \
 637         SLAP_DEVPOLL_WRITE_POLLFD(t,(s), &SLAP_DEVPOLL_SOCK_EP(t, (s)), 1, "ADD", 1); \
 638         slap_daemon[t].sd_nfds++; \
 639 } while (0)
 640
 641 # define SLAP_DEVPOLL_EV_LISTENER(ptr)  ((ptr) != NULL)
 642
 643 # define SLAP_SOCK_DEL(t,s)             do { \
 644         int fd, index = SLAP_DEVPOLL_SOCK_IX(t,(s)); \
 645         Debug( LDAP_DEBUG_CONNS, "SLAP_SOCK_DEL(%d)\n", (s), 0, 0 ); \
 646         if ( index < 0 ) break; \
 647         if ( index < slap_daemon[t].sd_nfds - 1 ) { \
 648                 struct pollfd pfd = slap_daemon[t].sd_pollfd[index]; \
 649                 fd = slap_daemon[t].sd_pollfd[slap_daemon[t].sd_nfds - 1].fd; \
 650                 slap_daemon[t].sd_pollfd[index] = slap_daemon[t].sd_pollfd[slap_daemon[t].sd_nfds - 1]; \
 651                 slap_daemon[t].sd_pollfd[slap_daemon[t].sd_nfds - 1] = pfd; \
 652                 slap_daemon[t].sd_index[fd] = index; \
 653         } \
 654         slap_daemon[t].sd_index[(s)] = -1; \
 655         slap_daemon[t].sd_pollfd[slap_daemon[t].sd_nfds - 1].events = POLLREMOVE; \
 656         SLAP_DEVPOLL_WRITE_POLLFD(t,(s), &slap_daemon[t].sd_pollfd[slap_daemon[t].sd_nfds - 1], 1, "DEL", 0); \
 657         slap_daemon[t].sd_pollfd[slap_daemon[t].sd_nfds - 1].events = 0; \
 658         slap_daemon[t].sd_nfds--; \
 659 } while (0)
 660
 661 # define SLAP_EVENT_CLR_READ(i)         SLAP_DEVPOLL_EVENT_CLR((i), POLLIN)
 662 # define SLAP_EVENT_CLR_WRITE(i)        SLAP_DEVPOLL_EVENT_CLR((i), POLLOUT)
 663
 664 # define SLAP_DEVPOLL_EVENT_CHK(i, mode)        (revents[(i)].events & (mode))
 665
 666 # define SLAP_EVENT_FD(t,i)             (revents[(i)].fd)
 667
 668 # define SLAP_EVENT_IS_READ(i)          SLAP_DEVPOLL_EVENT_CHK((i), POLLIN)
 669 # define SLAP_EVENT_IS_WRITE(i)         SLAP_DEVPOLL_EVENT_CHK((i), POLLOUT)
 670 # define SLAP_EVENT_IS_LISTENER(t,i)    SLAP_DEVPOLL_EV_LISTENER(SLAP_DEVPOLL_SOCK_LX(t, SLAP_EVENT_FD(t,(i))))
 671 # define SLAP_EVENT_LISTENER(t,i)               SLAP_DEVPOLL_SOCK_LX(t, SLAP_EVENT_FD(t,(i)))
 672
 673 # define SLAP_SOCK_DESTROY(t)           do { \
 674         if ( slap_daemon[t].sd_pollfd != NULL ) { \
 675                 ch_free( slap_daemon[t].sd_pollfd ); \
 676                 slap_daemon[t].sd_pollfd = NULL; \
 677                 slap_daemon[t].sd_index = NULL; \
 678                 slap_daemon[t].sd_l = NULL; \
 679                 close( slap_daemon[t].sd_dpfd ); \
 680         } \
 681 } while ( 0 )
 682
 683 # define SLAP_SOCK_INIT(t)              do { \
 684         slap_daemon[t].sd_pollfd = ch_calloc( 1, \
 685                 ( sizeof(struct pollfd) * 2 \
 686                         + sizeof( int ) \
 687                         + sizeof( Listener * ) ) * dtblsize ); \
 688         slap_daemon[t].sd_index = (int *)&slap_daemon[t].sd_pollfd[ 2 * dtblsize ]; \
 689         slap_daemon[t].sd_l = (Listener **)&slap_daemon[t].sd_index[ dtblsize ]; \
 690         slap_daemon[t].sd_dpfd = open( SLAP_EVENT_FNAME, O_RDWR ); \
 691         if ( slap_daemon[t].sd_dpfd == -1 ) { \
 692                 Debug( LDAP_DEBUG_ANY, "daemon: " SLAP_EVENT_FNAME ": " \
 693                         "open(\"" SLAP_EVENT_FNAME "\") failed errno=%d\n", \
 694                         errno, 0, 0 ); \
 695                 SLAP_SOCK_DESTROY(t); \
 696                 return -1; \
 697         } \
 698         for ( i = 0; i < dtblsize; i++ ) { \
 699                 slap_daemon[t].sd_pollfd[i].fd = -1; \
 700                 slap_daemon[t].sd_index[i] = -1; \
 701         } \
 702 } while (0)
 703
 704 # define SLAP_EVENT_DECL                struct pollfd *revents
 705
 706 # define SLAP_EVENT_INIT(t)             do { \
 707         revents = &slap_daemon[t].sd_pollfd[ dtblsize ]; \
 708 } while (0)
 709
 710 # define SLAP_EVENT_WAIT(t, tvp, nsp)   do { \
 711         struct dvpoll           sd_dvpoll; \
 712         sd_dvpoll.dp_timeout = (tvp) ? (tvp)->tv_sec * 1000 : -1; \
 713         sd_dvpoll.dp_nfds = dtblsize; \
 714         sd_dvpoll.dp_fds = revents; \
 715         *(nsp) = ioctl( slap_daemon[t].sd_dpfd, DP_POLL, &sd_dvpoll ); \
 716 } while (0)
 717
 718 #else /* ! kqueue && ! epoll && ! /dev/poll */
 719 # ifdef HAVE_WINSOCK
 720 # define SLAP_EVENT_FNAME               "WSselect"
 721 /* Winsock provides a "select" function but its fd_sets are
 722  * actually arrays of sockets. Since these sockets are handles
 723  * and not a contiguous range of small integers, we manage our
 724  * own "fd" table of socket handles and use their indices as
 725  * descriptors.
 726  *
 727  * All of our listener/connection structures use fds; the actual
 728  * I/O functions use sockets. The SLAP_FD2SOCK macro in proto-slap.h
 729  * handles the mapping.
 730  *
 731  * Despite the mapping overhead, this is about 45% more efficient
 732  * than just using Winsock's select and FD_ISSET directly.
 733  *
 734  * Unfortunately Winsock's select implementation doesn't scale well
 735  * as the number of connections increases. This probably needs to be
 736  * rewritten to use the Winsock overlapped/asynchronous I/O functions.
 737  */
 738 # define SLAP_EVENTS_ARE_INDEXED        1
 739 # define SLAP_EVENT_DECL                fd_set readfds, writefds; char *rflags
 740 # define SLAP_EVENT_INIT(t)     do { \
 741         int i; \
 742         FD_ZERO( &readfds ); \
 743         FD_ZERO( &writefds ); \
 744         rflags = slap_daemon[t].sd_rflags; \
 745         memset( rflags, 0, slap_daemon[t].sd_nfds ); \
 746         for ( i=0; i<slap_daemon[t].sd_nfds; i++ ) { \
 747                 if ( slap_daemon[t].sd_flags[i] & SD_READ ) \
 748                         FD_SET( slapd_ws_sockets[i], &readfds );\
 749                 if ( slap_daemon[t].sd_flags[i] & SD_WRITE ) \
 750                         FD_SET( slapd_ws_sockets[i], &writefds ); \
 751         } } while ( 0 )
 752
 753 # define SLAP_EVENT_MAX(t)              slap_daemon[t].sd_nfds
 754
 755 # define SLAP_EVENT_WAIT(t, tvp, nsp)   do { \
 756         int i; \
 757         *(nsp) = select( SLAP_EVENT_MAX(t), &readfds, \
 758                 nwriters > 0 ? &writefds : NULL, NULL, (tvp) ); \
 759         for ( i=0; i<readfds.fd_count; i++) { \
 760                 int fd = slapd_sock2fd(readfds.fd_array[i]); \
 761                 if ( fd >= 0 ) { \
 762                         slap_daemon[t].sd_rflags[fd] = SD_READ; \
 763                         if ( fd >= *(nsp)) *(nsp) = fd+1; \
 764                 } \
 765         } \
 766         for ( i=0; i<writefds.fd_count; i++) { \
 767                 int fd = slapd_sock2fd(writefds.fd_array[i]); \
 768                 if ( fd >= 0 ) { \
 769                         slap_daemon[t].sd_rflags[fd] = SD_WRITE; \
 770                         if ( fd >= *(nsp)) *(nsp) = fd+1; \
 771                 } \
 772         } \
 773 } while (0)
 774
 775 # define SLAP_EVENT_IS_READ(fd)         (rflags[fd] & SD_READ)
 776 # define SLAP_EVENT_IS_WRITE(fd)        (rflags[fd] & SD_WRITE)
 777
 778 # define SLAP_EVENT_CLR_READ(fd)        rflags[fd] &= ~SD_READ
 779 # define SLAP_EVENT_CLR_WRITE(fd)       rflags[fd] &= ~SD_WRITE
 780
 781 # define SLAP_SOCK_INIT(t)              do { \
 782         if (!t) { \
 783         ldap_pvt_thread_mutex_init( &slapd_ws_mutex ); \
 784         slapd_ws_sockets = ch_malloc( dtblsize * ( sizeof(SOCKET) + 2)); \
 785         memset( slapd_ws_sockets, -1, dtblsize * sizeof(SOCKET) ); \
 786         } \
 787         slap_daemon[t].sd_flags = (char *)(slapd_ws_sockets + dtblsize); \
 788         slap_daemon[t].sd_rflags = slap_daemon[t].sd_flags + dtblsize; \
 789         memset( slap_daemon[t].sd_flags, 0, dtblsize ); \
 790         slapd_ws_sockets[t*2] = wake_sds[t][0]; \
 791         slapd_ws_sockets[t*2+1] = wake_sds[t][1]; \
 792         wake_sds[t][0] = t*2; \
 793         wake_sds[t][1] = t*2+1; \
 794         slap_daemon[t].sd_nfds = t*2 + 2; \
 795         } while ( 0 )
 796
 797 # define SLAP_SOCK_DESTROY(t)   do { \
 798         ch_free( slapd_ws_sockets ); slapd_ws_sockets = NULL; \
 799         slap_daemon[t].sd_flags = NULL; \
 800         slap_daemon[t].sd_rflags = NULL; \
 801         ldap_pvt_thread_mutex_destroy( &slapd_ws_mutex ); \
 802         } while ( 0 )
 803
 804 # define SLAP_SOCK_IS_ACTIVE(t,fd) ( slap_daemon[t].sd_flags[fd] & SD_ACTIVE )
 805 # define SLAP_SOCK_IS_READ(t,fd) ( slap_daemon[t].sd_flags[fd] & SD_READ )
 806 # define SLAP_SOCK_IS_WRITE(t,fd) ( slap_daemon[t].sd_flags[fd] & SD_WRITE )
 807 # define SLAP_SOCK_NOT_ACTIVE(t,fd)     (!slap_daemon[t].sd_flags[fd])
 808
 809 # define SLAP_SOCK_SET_READ(t,fd)               ( slap_daemon[t].sd_flags[fd] |= SD_READ )
 810 # define SLAP_SOCK_SET_WRITE(t,fd)              ( slap_daemon[t].sd_flags[fd] |= SD_WRITE )
 811
 812 # define SLAP_SELECT_ADDTEST(t,s)       do { \
 813         if ((s) >= slap_daemon[t].sd_nfds) slap_daemon[t].sd_nfds = (s)+1; \
 814 } while (0)
 815
 816 # define SLAP_SOCK_CLR_READ(t,fd)               ( slap_daemon[t].sd_flags[fd] &= ~SD_READ )
 817 # define SLAP_SOCK_CLR_WRITE(t,fd)              ( slap_daemon[t].sd_flags[fd] &= ~SD_WRITE )
 818
 819 # define SLAP_SOCK_ADD(t,s, l)  do { \
 820         SLAP_SELECT_ADDTEST(t,(s)); \
 821         slap_daemon[t].sd_flags[s] = SD_ACTIVE|SD_READ; \
 822 } while ( 0 )
 823
 824 # define SLAP_SOCK_DEL(t,s) do { \
 825         slap_daemon[t].sd_flags[s] = 0; \
 826         slapd_sockdel( s ); \
 827 } while ( 0 )
 828
 829 # else /* !HAVE_WINSOCK */
 830
 831 /**************************************
 832  * Use select system call - select(2) *
 833  **************************************/
 834 # define SLAP_EVENT_FNAME               "select"
 835 /* select */
 836 # define SLAP_EVENTS_ARE_INDEXED        1
 837 # define SLAP_EVENT_DECL                fd_set readfds, writefds
 838
 839 # define SLAP_EVENT_INIT(t)             do { \
 840         AC_MEMCPY( &readfds, &slap_daemon[t].sd_readers, sizeof(fd_set) );      \
 841         if ( nwriters ) { \
 842                 AC_MEMCPY( &writefds, &slap_daemon[t].sd_writers, sizeof(fd_set) ); \
 843         } else { \
 844                 FD_ZERO( &writefds ); \
 845         } \
 846 } while (0)
 847
 848 # ifdef FD_SETSIZE
 849 #  define SLAP_SELECT_CHK_SETSIZE       do { \
 850         if (dtblsize > FD_SETSIZE) dtblsize = FD_SETSIZE; \
 851 } while (0)
 852 # else /* ! FD_SETSIZE */
 853 #  define SLAP_SELECT_CHK_SETSIZE       do { ; } while (0)
 854 # endif /* ! FD_SETSIZE */
 855
 856 # define SLAP_SOCK_INIT(t)                      do { \
 857         SLAP_SELECT_CHK_SETSIZE; \
 858         FD_ZERO(&slap_daemon[t].sd_actives); \
 859         FD_ZERO(&slap_daemon[t].sd_readers); \
 860         FD_ZERO(&slap_daemon[t].sd_writers); \
 861 } while (0)
 862
 863 # define SLAP_SOCK_DESTROY(t)
 864
 865 # define SLAP_SOCK_IS_ACTIVE(t,fd)      FD_ISSET((fd), &slap_daemon[t].sd_actives)
 866 # define SLAP_SOCK_IS_READ(t,fd)                FD_ISSET((fd), &slap_daemon[t].sd_readers)
 867 # define SLAP_SOCK_IS_WRITE(t,fd)               FD_ISSET((fd), &slap_daemon[t].sd_writers)
 868
 869 # define SLAP_SOCK_NOT_ACTIVE(t,fd)     (!SLAP_SOCK_IS_ACTIVE(t,fd) && \
 870          !SLAP_SOCK_IS_READ(t,fd) && !SLAP_SOCK_IS_WRITE(t,fd))
 871
 872 # define SLAP_SOCK_SET_READ(t,fd)       FD_SET((fd), &slap_daemon[t].sd_readers)
 873 # define SLAP_SOCK_SET_WRITE(t,fd)      FD_SET((fd), &slap_daemon[t].sd_writers)
 874
 875 # define SLAP_EVENT_MAX(t)              slap_daemon[t].sd_nfds
 876 # define SLAP_SELECT_ADDTEST(t,s)       do { \
 877         if ((s) >= slap_daemon[t].sd_nfds) slap_daemon[t].sd_nfds = (s)+1; \
 878 } while (0)
 879
 880 # define SLAP_SOCK_CLR_READ(t,fd)               FD_CLR((fd), &slap_daemon[t].sd_readers)
 881 # define SLAP_SOCK_CLR_WRITE(t,fd)      FD_CLR((fd), &slap_daemon[t].sd_writers)
 882
 883 # define SLAP_SOCK_ADD(t,s, l)          do { \
 884         SLAP_SELECT_ADDTEST(t,(s)); \
 885         FD_SET((s), &slap_daemon[t].sd_actives); \
 886         FD_SET((s), &slap_daemon[t].sd_readers); \
 887 } while (0)
 888
 889 # define SLAP_SOCK_DEL(t,s)             do { \
 890         FD_CLR((s), &slap_daemon[t].sd_actives); \
 891         FD_CLR((s), &slap_daemon[t].sd_readers); \
 892         FD_CLR((s), &slap_daemon[t].sd_writers); \
 893 } while (0)
 894
 895 # define SLAP_EVENT_IS_READ(fd)         FD_ISSET((fd), &readfds)
 896 # define SLAP_EVENT_IS_WRITE(fd)        FD_ISSET((fd), &writefds)
 897
 898 # define SLAP_EVENT_CLR_READ(fd)        FD_CLR((fd), &readfds)
 899 # define SLAP_EVENT_CLR_WRITE(fd)       FD_CLR((fd), &writefds)
 900
 901 # define SLAP_EVENT_WAIT(t, tvp, nsp)   do { \
 902         *(nsp) = select( SLAP_EVENT_MAX(t), &readfds, \
 903                 nwriters > 0 ? &writefds : NULL, NULL, (tvp) ); \
 904 } while (0)
 905 # endif /* !HAVE_WINSOCK */
 906 #endif /* ! kqueue && ! epoll && ! /dev/poll */
 907
 908 #ifdef HAVE_SLP
 909 /*
 910  * SLP related functions
 911  */
 912 #include <slp.h>
 913
 914 #define LDAP_SRVTYPE_PREFIX "service:ldap://"
 915 #define LDAPS_SRVTYPE_PREFIX "service:ldaps://"
 916 static char** slapd_srvurls = NULL;
 917 static SLPHandle slapd_hslp = 0;
 918 int slapd_register_slp = 0;
 919 const char *slapd_slp_attrs = NULL;
 920
 921 static SLPError slapd_slp_cookie;
 922
 923 static void
 924 slapd_slp_init( const char* urls )
 925 {
 926         int i;
 927         SLPError err;
 928
 929         slapd_srvurls = ldap_str2charray( urls, " " );
 930
 931         if ( slapd_srvurls == NULL ) return;
 932
 933         /* find and expand INADDR_ANY URLs */
 934         for ( i = 0; slapd_srvurls[i] != NULL; i++ ) {
 935                 if ( strcmp( slapd_srvurls[i], "ldap:///" ) == 0 ) {
 936                         slapd_srvurls[i] = (char *) ch_realloc( slapd_srvurls[i],
 937                                 global_host_bv.bv_len +
 938                                 sizeof( LDAP_SRVTYPE_PREFIX ) );
 939                         strcpy( lutil_strcopy(slapd_srvurls[i],
 940                                 LDAP_SRVTYPE_PREFIX ), global_host_bv.bv_val );
 941                 } else if ( strcmp( slapd_srvurls[i], "ldaps:///" ) == 0 ) {
 942                         slapd_srvurls[i] = (char *) ch_realloc( slapd_srvurls[i],
 943                                 global_host_bv.bv_len +
 944                                 sizeof( LDAPS_SRVTYPE_PREFIX ) );
 945                         strcpy( lutil_strcopy(slapd_srvurls[i],
 946                                 LDAPS_SRVTYPE_PREFIX ), global_host_bv.bv_val );
 947                 }
 948         }
 949
 950         /* open the SLP handle */
 951         err = SLPOpen( "en", 0, &slapd_hslp );
 952
 953         if ( err != SLP_OK ) {
 954                 Debug( LDAP_DEBUG_CONNS, "daemon: SLPOpen() failed with %ld\n",
 955                         (long)err, 0, 0 );
 956         }
 957 }
 958
 959 static void
 960 slapd_slp_deinit( void )
 961 {
 962         if ( slapd_srvurls == NULL ) return;
 963
 964         ldap_charray_free( slapd_srvurls );
 965         slapd_srvurls = NULL;
 966
 967         /* close the SLP handle */
 968         SLPClose( slapd_hslp );
 969 }
 970
 971 static void
 972 slapd_slp_regreport(
 973         SLPHandle       hslp,
 974         SLPError        errcode,
 975         void            *cookie )
 976 {
 977         /* return the error code in the cookie */
 978         *(SLPError*)cookie = errcode;
 979 }
 980
 981 static void
 982 slapd_slp_reg()
 983 {
 984         int i;
 985         SLPError err;
 986
 987         if ( slapd_srvurls == NULL ) return;
 988
 989         for ( i = 0; slapd_srvurls[i] != NULL; i++ ) {
 990                 if ( strncmp( slapd_srvurls[i], LDAP_SRVTYPE_PREFIX,
 991                                 sizeof( LDAP_SRVTYPE_PREFIX ) - 1 ) == 0 ||
 992                         strncmp( slapd_srvurls[i], LDAPS_SRVTYPE_PREFIX,
 993                                 sizeof( LDAPS_SRVTYPE_PREFIX ) - 1 ) == 0 )
 994                 {
 995                         err = SLPReg( slapd_hslp,
 996                                 slapd_srvurls[i],
 997                                 SLP_LIFETIME_MAXIMUM,
 998                                 "ldap",
 999                                 (slapd_slp_attrs) ? slapd_slp_attrs : "",
1000                                 SLP_TRUE,
1001                                 slapd_slp_regreport,
1002                                 &slapd_slp_cookie );
1003
1004                         if ( err != SLP_OK || slapd_slp_cookie != SLP_OK ) {
1005                                 Debug( LDAP_DEBUG_CONNS,
1006                                         "daemon: SLPReg(%s) failed with %ld, cookie = %ld\n",
1007                                         slapd_srvurls[i], (long)err, (long)slapd_slp_cookie );
1008                         }
1009                 }
1010         }
1011 }
1012
1013 static void
1014 slapd_slp_dereg( void )
1015 {
1016         int i;
1017         SLPError err;
1018
1019         if ( slapd_srvurls == NULL ) return;
1020
1021         for ( i = 0; slapd_srvurls[i] != NULL; i++ ) {
1022                 err = SLPDereg( slapd_hslp,
1023                         slapd_srvurls[i],
1024                         slapd_slp_regreport,
1025                         &slapd_slp_cookie );
1026
1027                 if ( err != SLP_OK || slapd_slp_cookie != SLP_OK ) {
1028                         Debug( LDAP_DEBUG_CONNS,
1029                                 "daemon: SLPDereg(%s) failed with %ld, cookie = %ld\n",
1030                                 slapd_srvurls[i], (long)err, (long)slapd_slp_cookie );
1031                 }
1032         }
1033 }
1034 #endif /* HAVE_SLP */
1035
1036 #ifdef HAVE_WINSOCK
1037 /* Manage the descriptor to socket table */
1038 ber_socket_t
1039 slapd_socknew( ber_socket_t s )
1040 {
1041         ber_socket_t i;
1042         ldap_pvt_thread_mutex_lock( &slapd_ws_mutex );
1043         for ( i = 0; i < dtblsize && slapd_ws_sockets[i] != INVALID_SOCKET; i++ );
1044         if ( i == dtblsize ) {
1045                 WSASetLastError( WSAEMFILE );
1046         } else {
1047                 slapd_ws_sockets[i] = s;
1048         }
1049         ldap_pvt_thread_mutex_unlock( &slapd_ws_mutex );
1050         return i;
1051 }
1052
1053 void
1054 slapd_sockdel( ber_socket_t s )
1055 {
1056         ldap_pvt_thread_mutex_lock( &slapd_ws_mutex );
1057         slapd_ws_sockets[s] = INVALID_SOCKET;
1058         ldap_pvt_thread_mutex_unlock( &slapd_ws_mutex );
1059 }
1060
1061 ber_socket_t
1062 slapd_sock2fd( ber_socket_t s )
1063 {
1064         ber_socket_t i;
1065         for ( i=0; i<dtblsize && slapd_ws_sockets[i] != s; i++);
1066         if ( i == dtblsize )
1067                 i = -1;
1068         return i;
1069 }
1070 #endif
1071
1072 /*
1073  * Add a descriptor to daemon control
1074  *
1075  * If isactive, the descriptor is a live server session and is subject
1076  * to idletimeout control. Otherwise, the descriptor is a passive
1077  * listener or an outbound client session, and not subject to
1078  * idletimeout. The underlying event handler may record the Listener
1079  * argument to differentiate Listener's from real sessions.
1080  */
1081 static void
1082 slapd_add( ber_socket_t s, int isactive, Listener *sl, int id )
1083 {
1084         if (id < 0)
1085                 id = DAEMON_ID(s);
1086         ldap_pvt_thread_mutex_lock( &slap_daemon[id].sd_mutex );
1087
1088         assert( SLAP_SOCK_NOT_ACTIVE(id, s) );
1089
1090         if ( isactive ) slap_daemon[id].sd_nactives++;
1091
1092         SLAP_SOCK_ADD(id, s, sl);
1093
1094         Debug( LDAP_DEBUG_CONNS, "daemon: added %ldr%s listener=%p\n",
1095                 (long) s, isactive ? " (active)" : "", (void *)sl );
1096
1097         ldap_pvt_thread_mutex_unlock( &slap_daemon[id].sd_mutex );
1098
1099         WAKE_LISTENER(id,1);
1100 }
1101
1102 /*
1103  * Remove the descriptor from daemon control
1104  */
1105 void
1106 slapd_remove(
1107         ber_socket_t s,
1108         Sockbuf *sb,
1109         int wasactive,
1110         int wake,
1111         int locked )
1112 {
1113         int waswriter;
1114         int wasreader;
1115         int id = DAEMON_ID(s);
1116
1117         if ( !locked )
1118                 ldap_pvt_thread_mutex_lock( &slap_daemon[id].sd_mutex );
1119
1120         assert( SLAP_SOCK_IS_ACTIVE( id, s ));
1121
1122         if ( wasactive ) slap_daemon[id].sd_nactives--;
1123
1124         waswriter = SLAP_SOCK_IS_WRITE(id, s);
1125         wasreader = SLAP_SOCK_IS_READ(id, s);
1126
1127         Debug( LDAP_DEBUG_CONNS, "daemon: removing %ld%s%s\n",
1128                 (long) s,
1129                 wasreader ? "r" : "",
1130                 waswriter ? "w" : "" );
1131
1132         if ( waswriter ) slap_daemon[id].sd_nwriters--;
1133
1134         SLAP_SOCK_DEL(id, s);
1135
1136         if ( sb )
1137                 ber_sockbuf_free(sb);
1138
1139         /* If we ran out of file descriptors, we dropped a listener from
1140          * the select() loop. Now that we're removing a session from our
1141          * control, we can try to resume a dropped listener to use.
1142          */
1143         if ( emfile && listening ) {
1144                 int i;
1145                 for ( i = 0; slap_listeners[i] != NULL; i++ ) {
1146                         Listener *lr = slap_listeners[i];
1147
1148                         if ( lr->sl_sd == AC_SOCKET_INVALID ) continue;
1149                         if ( lr->sl_sd == s ) continue;
1150                         if ( lr->sl_mute ) {
1151                                 lr->sl_mute = 0;
1152                                 emfile--;
1153                                 if ( DAEMON_ID(lr->sl_sd) != id )
1154                                         WAKE_LISTENER(DAEMON_ID(lr->sl_sd), wake);
1155                                 break;
1156                         }
1157                 }
1158                 /* Walked the entire list without enabling anything; emfile
1159                  * counter is stale. Reset it.
1160                  */
1161                 if ( slap_listeners[i] == NULL ) emfile = 0;
1162         }
1163         ldap_pvt_thread_mutex_unlock( &slap_daemon[id].sd_mutex );
1164         WAKE_LISTENER(id, wake || slapd_gentle_shutdown == 2);
1165 }
1166
1167 void
1168 slapd_clr_write( ber_socket_t s, int wake )
1169 {
1170         int id = DAEMON_ID(s);
1171         ldap_pvt_thread_mutex_lock( &slap_daemon[id].sd_mutex );
1172
1173         if ( SLAP_SOCK_IS_WRITE( id, s )) {
1174                 assert( SLAP_SOCK_IS_ACTIVE( id, s ));
1175
1176                 SLAP_SOCK_CLR_WRITE( id, s );
1177                 slap_daemon[id].sd_nwriters--;
1178         }
1179
1180         ldap_pvt_thread_mutex_unlock( &slap_daemon[id].sd_mutex );
1181         WAKE_LISTENER(id,wake);
1182 }
1183
1184 void
1185 slapd_set_write( ber_socket_t s, int wake )
1186 {
1187         int id = DAEMON_ID(s);
1188         ldap_pvt_thread_mutex_lock( &slap_daemon[id].sd_mutex );
1189
1190         assert( SLAP_SOCK_IS_ACTIVE( id, s ));
1191
1192         if ( !SLAP_SOCK_IS_WRITE( id, s )) {
1193                 SLAP_SOCK_SET_WRITE( id, s );
1194                 slap_daemon[id].sd_nwriters++;
1195         }
1196
1197         ldap_pvt_thread_mutex_unlock( &slap_daemon[id].sd_mutex );
1198         WAKE_LISTENER(id,wake);
1199 }
1200
1201 int
1202 slapd_clr_read( ber_socket_t s, int wake )
1203 {
1204         int rc = 1;
1205         int id = DAEMON_ID(s);
1206         ldap_pvt_thread_mutex_lock( &slap_daemon[id].sd_mutex );
1207
1208         if ( SLAP_SOCK_IS_ACTIVE( id, s )) {
1209                 SLAP_SOCK_CLR_READ( id, s );
1210                 rc = 0;
1211         }
1212         ldap_pvt_thread_mutex_unlock( &slap_daemon[id].sd_mutex );
1213         if ( !rc )
1214                 WAKE_LISTENER(id,wake);
1215         return rc;
1216 }
1217
1218 void
1219 slapd_set_read( ber_socket_t s, int wake )
1220 {
1221         int do_wake = 1;
1222         int id = DAEMON_ID(s);
1223         ldap_pvt_thread_mutex_lock( &slap_daemon[id].sd_mutex );
1224
1225         if( SLAP_SOCK_IS_ACTIVE( id, s ) && !SLAP_SOCK_IS_READ( id, s )) {
1226                 SLAP_SOCK_SET_READ( id, s );
1227         } else {
1228                 do_wake = 0;
1229         }
1230         ldap_pvt_thread_mutex_unlock( &slap_daemon[id].sd_mutex );
1231         if ( do_wake )
1232                 WAKE_LISTENER(id,wake);
1233 }
1234
1235 static void
1236 slapd_close( ber_socket_t s )
1237 {
1238         Debug( LDAP_DEBUG_CONNS, "daemon: closing %ld\n",
1239                 (long) s, 0, 0 );
1240         tcp_close( SLAP_FD2SOCK(s) );
1241 #ifdef HAVE_WINSOCK
1242         slapd_sockdel( s );
1243 #endif
1244 }
1245
1246 void
1247 slapd_shutsock( ber_socket_t s )
1248 {
1249         Debug( LDAP_DEBUG_CONNS, "daemon: shutdown socket %ld\n",
1250                 (long) s, 0, 0 );
1251         shutdown( SLAP_FD2SOCK(s), 2 );
1252 }
1253
1254 static void
1255 slap_free_listener_addresses( struct sockaddr **sal )
1256 {
1257         struct sockaddr **sap;
1258         if (sal == NULL) return;
1259         for (sap = sal; *sap != NULL; sap++) ch_free(*sap);
1260         ch_free(sal);
1261 }
1262
1263 #if defined(LDAP_PF_LOCAL) || defined(SLAP_X_LISTENER_MOD)
1264 static int
1265 get_url_perms(
1266         char    **exts,
1267         mode_t  *perms,
1268         int     *crit )
1269 {
1270         int     i;
1271
1272         assert( exts != NULL );
1273         assert( perms != NULL );
1274         assert( crit != NULL );
1275
1276         *crit = 0;
1277         for ( i = 0; exts[ i ]; i++ ) {
1278                 char    *type = exts[ i ];
1279                 int     c = 0;
1280
1281                 if ( type[ 0 ] == '!' ) {
1282                         c = 1;
1283                         type++;
1284                 }
1285
1286                 if ( strncasecmp( type, LDAPI_MOD_URLEXT "=",
1287                         sizeof(LDAPI_MOD_URLEXT "=") - 1 ) == 0 )
1288                 {
1289                         char *value = type + ( sizeof(LDAPI_MOD_URLEXT "=") - 1 );
1290                         mode_t p = 0;
1291                         int j;
1292
1293                         switch (strlen(value)) {
1294                         case 4:
1295                                 /* skip leading '0' */
1296                                 if ( value[ 0 ] != '0' ) return LDAP_OTHER;
1297                                 value++;
1298
1299                         case 3:
1300                                 for ( j = 0; j < 3; j++) {
1301                                         int     v;
1302
1303                                         v = value[ j ] - '0';
1304
1305                                         if ( v < 0 || v > 7 ) return LDAP_OTHER;
1306
1307                                         p |= v << 3*(2-j);
1308                                 }
1309                                 break;
1310
1311                         case 10:
1312                                 for ( j = 1; j < 10; j++ ) {
1313                                         static mode_t   m[] = { 0,
1314                                                 S_IRUSR, S_IWUSR, S_IXUSR,
1315                                                 S_IRGRP, S_IWGRP, S_IXGRP,
1316                                                 S_IROTH, S_IWOTH, S_IXOTH
1317                                         };
1318                                         static const char       c[] = "-rwxrwxrwx";
1319
1320                                         if ( value[ j ] == c[ j ] ) {
1321                                                 p |= m[ j ];
1322
1323                                         } else if ( value[ j ] != '-' ) {
1324                                                 return LDAP_OTHER;
1325                                         }
1326                                 }
1327                                 break;
1328
1329                         default:
1330                                 return LDAP_OTHER;
1331                         }
1332
1333                         *crit = c;
1334                         *perms = p;
1335
1336                         return LDAP_SUCCESS;
1337                 }
1338         }
1339
1340         return LDAP_OTHER;
1341 }
1342 #endif /* LDAP_PF_LOCAL || SLAP_X_LISTENER_MOD */
1343
1344 /* port = 0 indicates AF_LOCAL */
1345 static int
1346 slap_get_listener_addresses(
1347         const char *host,
1348         unsigned short port,
1349         struct sockaddr ***sal )
1350 {
1351         struct sockaddr **sap;
1352
1353 #ifdef LDAP_PF_LOCAL
1354         if ( port == 0 ) {
1355                 *sal = ch_malloc(2 * sizeof(void *));
1356                 if (*sal == NULL) return -1;
1357
1358                 sap = *sal;
1359                 *sap = ch_malloc(sizeof(struct sockaddr_un));
1360                 if (*sap == NULL) goto errexit;
1361                 sap[1] = NULL;
1362
1363                 if ( strlen(host) >
1364                         (sizeof(((struct sockaddr_un *)*sap)->sun_path) - 1) )
1365                 {
1366                         Debug( LDAP_DEBUG_ANY,
1367                                 "daemon: domain socket path (%s) too long in URL",
1368                                 host, 0, 0);
1369                         goto errexit;
1370                 }
1371
1372                 (void)memset( (void *)*sap, '\0', sizeof(struct sockaddr_un) );
1373                 (*sap)->sa_family = AF_LOCAL;
1374                 strcpy( ((struct sockaddr_un *)*sap)->sun_path, host );
1375         } else
1376 #endif /* LDAP_PF_LOCAL */
1377         {
1378 #ifdef HAVE_GETADDRINFO
1379                 struct addrinfo hints, *res, *sai;
1380                 int n, err;
1381                 char serv[7];
1382
1383                 memset( &hints, '\0', sizeof(hints) );
1384                 hints.ai_flags = AI_PASSIVE;
1385                 hints.ai_socktype = SOCK_STREAM;
1386                 hints.ai_family = slap_inet4or6;
1387                 snprintf(serv, sizeof serv, "%d", port);
1388
1389                 if ( (err = getaddrinfo(host, serv, &hints, &res)) ) {
1390                         Debug( LDAP_DEBUG_ANY, "daemon: getaddrinfo() failed: %s\n",
1391                                 AC_GAI_STRERROR(err), 0, 0);
1392                         return -1;
1393                 }
1394
1395                 sai = res;
1396                 for (n=2; (sai = sai->ai_next) != NULL; n++) {
1397                         /* EMPTY */ ;
1398                 }
1399                 *sal = ch_calloc(n, sizeof(void *));
1400                 if (*sal == NULL) return -1;
1401
1402                 sap = *sal;
1403                 *sap = NULL;
1404
1405                 for ( sai=res; sai; sai=sai->ai_next ) {
1406                         if( sai->ai_addr == NULL ) {
1407                                 Debug( LDAP_DEBUG_ANY, "slap_get_listener_addresses: "
1408                                         "getaddrinfo ai_addr is NULL?\n", 0, 0, 0 );
1409                                 freeaddrinfo(res);
1410                                 goto errexit;
1411                         }
1412
1413                         switch (sai->ai_family) {
1414 #  ifdef LDAP_PF_INET6
1415                         case AF_INET6:
1416                                 *sap = ch_malloc(sizeof(struct sockaddr_in6));
1417                                 if (*sap == NULL) {
1418                                         freeaddrinfo(res);
1419                                         goto errexit;
1420                                 }
1421                                 *(struct sockaddr_in6 *)*sap =
1422                                         *((struct sockaddr_in6 *)sai->ai_addr);
1423                                 break;
1424 #  endif /* LDAP_PF_INET6 */
1425                         case AF_INET:
1426                                 *sap = ch_malloc(sizeof(struct sockaddr_in));
1427                                 if (*sap == NULL) {
1428                                         freeaddrinfo(res);
1429                                         goto errexit;
1430                                 }
1431                                 *(struct sockaddr_in *)*sap =
1432                                         *((struct sockaddr_in *)sai->ai_addr);
1433                                 break;
1434                         default:
1435                                 *sap = NULL;
1436                                 break;
1437                         }
1438
1439                         if (*sap != NULL) {
1440                                 (*sap)->sa_family = sai->ai_family;
1441                                 sap++;
1442                                 *sap = NULL;
1443                         }
1444                 }
1445
1446                 freeaddrinfo(res);
1447
1448 #else /* ! HAVE_GETADDRINFO */
1449                 int i, n = 1;
1450                 struct in_addr in;
1451                 struct hostent *he = NULL;
1452
1453                 if ( host == NULL ) {
1454                         in.s_addr = htonl(INADDR_ANY);
1455
1456                 } else if ( !inet_aton( host, &in ) ) {
1457                         he = gethostbyname( host );
1458                         if( he == NULL ) {
1459                                 Debug( LDAP_DEBUG_ANY,
1460                                         "daemon: invalid host %s", host, 0, 0);
1461                                 return -1;
1462                         }
1463                         for (n = 0; he->h_addr_list[n]; n++) /* empty */;
1464                 }
1465
1466                 *sal = ch_malloc((n+1) * sizeof(void *));
1467                 if (*sal == NULL) return -1;
1468
1469                 sap = *sal;
1470                 for ( i = 0; i<n; i++ ) {
1471                         sap[i] = ch_malloc(sizeof(struct sockaddr_in));
1472                         if (*sap == NULL) goto errexit;
1473
1474                         (void)memset( (void *)sap[i], '\0', sizeof(struct sockaddr_in) );
1475                         sap[i]->sa_family = AF_INET;
1476                         ((struct sockaddr_in *)sap[i])->sin_port = htons(port);
1477                         AC_MEMCPY( &((struct sockaddr_in *)sap[i])->sin_addr,
1478                                 he ? (struct in_addr *)he->h_addr_list[i] : &in,
1479                                 sizeof(struct in_addr) );
1480                 }
1481                 sap[i] = NULL;
1482 #endif /* ! HAVE_GETADDRINFO */
1483         }
1484
1485         return 0;
1486
1487 errexit:
1488         slap_free_listener_addresses(*sal);
1489         return -1;
1490 }
1491
1492 static int
1493 slap_open_listener(
1494         const char* url,
1495         int *listeners,
1496         int *cur )
1497 {
1498         int     num, tmp, rc;
1499         Listener l;
1500         Listener *li;
1501         LDAPURLDesc *lud;
1502         unsigned short port;
1503         int err, addrlen = 0;
1504         struct sockaddr **sal = NULL, **psal;
1505         int socktype = SOCK_STREAM;     /* default to COTS */
1506         ber_socket_t s;
1507
1508 #if defined(LDAP_PF_LOCAL) || defined(SLAP_X_LISTENER_MOD)
1509         /*
1510          * use safe defaults
1511          */
1512         int     crit = 1;
1513 #endif /* LDAP_PF_LOCAL || SLAP_X_LISTENER_MOD */
1514
1515         rc = ldap_url_parse( url, &lud );
1516
1517         if( rc != LDAP_URL_SUCCESS ) {
1518                 Debug( LDAP_DEBUG_ANY,
1519                         "daemon: listen URL \"%s\" parse error=%d\n",
1520                         url, rc, 0 );
1521                 return rc;
1522         }
1523
1524         l.sl_url.bv_val = NULL;
1525         l.sl_mute = 0;
1526         l.sl_busy = 0;
1527
1528 #ifndef HAVE_TLS
1529         if( ldap_pvt_url_scheme2tls( lud->lud_scheme ) ) {
1530                 Debug( LDAP_DEBUG_ANY, "daemon: TLS not supported (%s)\n",
1531                         url, 0, 0 );
1532                 ldap_free_urldesc( lud );
1533                 return -1;
1534         }
1535
1536         if(! lud->lud_port ) lud->lud_port = LDAP_PORT;
1537
1538 #else /* HAVE_TLS */
1539         l.sl_is_tls = ldap_pvt_url_scheme2tls( lud->lud_scheme );
1540
1541         if(! lud->lud_port ) {
1542                 lud->lud_port = l.sl_is_tls ? LDAPS_PORT : LDAP_PORT;
1543         }
1544 #endif /* HAVE_TLS */
1545
1546 #ifdef LDAP_TCP_BUFFER
1547         l.sl_tcp_rmem = 0;
1548         l.sl_tcp_wmem = 0;
1549 #endif /* LDAP_TCP_BUFFER */
1550
1551         port = (unsigned short) lud->lud_port;
1552
1553         tmp = ldap_pvt_url_scheme2proto(lud->lud_scheme);
1554         if ( tmp == LDAP_PROTO_IPC ) {
1555 #ifdef LDAP_PF_LOCAL
1556                 if ( lud->lud_host == NULL || lud->lud_host[0] == '\0' ) {
1557                         err = slap_get_listener_addresses(LDAPI_SOCK, 0, &sal);
1558                 } else {
1559                         err = slap_get_listener_addresses(lud->lud_host, 0, &sal);
1560                 }
1561 #else /* ! LDAP_PF_LOCAL */
1562
1563                 Debug( LDAP_DEBUG_ANY, "daemon: URL scheme not supported: %s",
1564                         url, 0, 0);
1565                 ldap_free_urldesc( lud );
1566                 return -1;
1567 #endif /* ! LDAP_PF_LOCAL */
1568         } else {
1569                 if( lud->lud_host == NULL || lud->lud_host[0] == '\0'
1570                         || strcmp(lud->lud_host, "*") == 0 )
1571                 {
1572                         err = slap_get_listener_addresses(NULL, port, &sal);
1573                 } else {
1574                         err = slap_get_listener_addresses(lud->lud_host, port, &sal);
1575                 }
1576         }
1577
1578 #ifdef LDAP_CONNECTIONLESS
1579         l.sl_is_udp = ( tmp == LDAP_PROTO_UDP );
1580 #endif /* LDAP_CONNECTIONLESS */
1581
1582 #if defined(LDAP_PF_LOCAL) || defined(SLAP_X_LISTENER_MOD)
1583         if ( lud->lud_exts ) {
1584                 err = get_url_perms( lud->lud_exts, &l.sl_perms, &crit );
1585         } else {
1586                 l.sl_perms = S_IRWXU | S_IRWXO;
1587         }
1588 #endif /* LDAP_PF_LOCAL || SLAP_X_LISTENER_MOD */
1589
1590         ldap_free_urldesc( lud );
1591         if ( err ) {
1592                 slap_free_listener_addresses(sal);
1593                 return -1;
1594         }
1595
1596         /* If we got more than one address returned, we need to make space
1597          * for it in the slap_listeners array.
1598          */
1599         for ( num=0; sal[num]; num++ ) /* empty */;
1600         if ( num > 1 ) {
1601                 *listeners += num-1;
1602                 slap_listeners = ch_realloc( slap_listeners,
1603                         (*listeners + 1) * sizeof(Listener *) );
1604         }
1605
1606         psal = sal;
1607         while ( *sal != NULL ) {
1608                 char *af;
1609                 switch( (*sal)->sa_family ) {
1610                 case AF_INET:
1611                         af = "IPv4";
1612                         break;
1613 #ifdef LDAP_PF_INET6
1614                 case AF_INET6:
1615                         af = "IPv6";
1616                         break;
1617 #endif /* LDAP_PF_INET6 */
1618 #ifdef LDAP_PF_LOCAL
1619                 case AF_LOCAL:
1620                         af = "Local";
1621                         break;
1622 #endif /* LDAP_PF_LOCAL */
1623                 default:
1624                         sal++;
1625                         continue;
1626                 }
1627
1628 #ifdef LDAP_CONNECTIONLESS
1629                 if( l.sl_is_udp ) socktype = SOCK_DGRAM;
1630 #endif /* LDAP_CONNECTIONLESS */
1631
1632                 s = socket( (*sal)->sa_family, socktype, 0);
1633                 if ( s == AC_SOCKET_INVALID ) {
1634                         int err = sock_errno();
1635                         Debug( LDAP_DEBUG_ANY,
1636                                 "daemon: %s socket() failed errno=%d (%s)\n",
1637                                 af, err, sock_errstr(err) );
1638                         sal++;
1639                         continue;
1640                 }
1641                 l.sl_sd = SLAP_SOCKNEW( s );
1642
1643                 if ( l.sl_sd >= dtblsize ) {
1644                         Debug( LDAP_DEBUG_ANY,
1645                                 "daemon: listener descriptor %ld is too great %ld\n",
1646                                 (long) l.sl_sd, (long) dtblsize, 0 );
1647                         tcp_close( s );
1648                         sal++;
1649                         continue;
1650                 }
1651
1652 #ifdef LDAP_PF_LOCAL
1653                 if ( (*sal)->sa_family == AF_LOCAL ) {
1654                         unlink( ((struct sockaddr_un *)*sal)->sun_path );
1655                 } else
1656 #endif /* LDAP_PF_LOCAL */
1657                 {
1658 #ifdef SO_REUSEADDR
1659                         /* enable address reuse */
1660                         tmp = 1;
1661                         rc = setsockopt( s, SOL_SOCKET, SO_REUSEADDR,
1662                                 (char *) &tmp, sizeof(tmp) );
1663                         if ( rc == AC_SOCKET_ERROR ) {
1664                                 int err = sock_errno();
1665                                 Debug( LDAP_DEBUG_ANY, "slapd(%ld): "
1666                                         "setsockopt(SO_REUSEADDR) failed errno=%d (%s)\n",
1667                                         (long) l.sl_sd, err, sock_errstr(err) );
1668                         }
1669 #endif /* SO_REUSEADDR */
1670                 }
1671
1672                 switch( (*sal)->sa_family ) {
1673                 case AF_INET:
1674                         addrlen = sizeof(struct sockaddr_in);
1675                         break;
1676 #ifdef LDAP_PF_INET6
1677                 case AF_INET6:
1678 #ifdef IPV6_V6ONLY
1679                         /* Try to use IPv6 sockets for IPv6 only */
1680                         tmp = 1;
1681                         rc = setsockopt( s , IPPROTO_IPV6, IPV6_V6ONLY,
1682                                 (char *) &tmp, sizeof(tmp) );
1683                         if ( rc == AC_SOCKET_ERROR ) {
1684                                 int err = sock_errno();
1685                                 Debug( LDAP_DEBUG_ANY, "slapd(%ld): "
1686                                         "setsockopt(IPV6_V6ONLY) failed errno=%d (%s)\n",
1687                                         (long) l.sl_sd, err, sock_errstr(err) );
1688                         }
1689 #endif /* IPV6_V6ONLY */
1690                         addrlen = sizeof(struct sockaddr_in6);
1691                         break;
1692 #endif /* LDAP_PF_INET6 */
1693
1694 #ifdef LDAP_PF_LOCAL
1695                 case AF_LOCAL:
1696 #ifdef LOCAL_CREDS
1697                         {
1698                                 int one = 1;
1699                                 setsockopt( s, 0, LOCAL_CREDS, &one, sizeof( one ) );
1700                         }
1701 #endif /* LOCAL_CREDS */
1702
1703                         addrlen = sizeof( struct sockaddr_un );
1704                         break;
1705 #endif /* LDAP_PF_LOCAL */
1706                 }
1707
1708 #ifdef LDAP_PF_LOCAL
1709                 /* create socket with all permissions set for those systems
1710                  * that honor permissions on sockets (e.g. Linux); typically,
1711                  * only write is required.  To exploit filesystem permissions,
1712                  * place the socket in a directory and use directory's
1713                  * permissions.  Need write perms to the directory to
1714                  * create/unlink the socket; likely need exec perms to access
1715                  * the socket (ITS#4709) */
1716                 {
1717                         mode_t old_umask = 0;
1718
1719                         if ( (*sal)->sa_family == AF_LOCAL ) {
1720                                 old_umask = umask( 0 );
1721                         }
1722 #endif /* LDAP_PF_LOCAL */
1723                         rc = bind( s, *sal, addrlen );
1724 #ifdef LDAP_PF_LOCAL
1725                         if ( old_umask != 0 ) {
1726                                 umask( old_umask );
1727                         }
1728                 }
1729 #endif /* LDAP_PF_LOCAL */
1730                 if ( rc ) {
1731                         err = sock_errno();
1732                         Debug( LDAP_DEBUG_ANY,
1733                                 "daemon: bind(%ld) failed errno=%d (%s)\n",
1734                                 (long)l.sl_sd, err, sock_errstr( err ) );
1735                         tcp_close( s );
1736                         sal++;
1737                         continue;
1738                 }
1739
1740                 switch ( (*sal)->sa_family ) {
1741 #ifdef LDAP_PF_LOCAL
1742                 case AF_LOCAL: {
1743                         char *path = ((struct sockaddr_un *)*sal)->sun_path;
1744                         l.sl_name.bv_len = strlen(path) + STRLENOF("PATH=");
1745                         l.sl_name.bv_val = ber_memalloc( l.sl_name.bv_len + 1 );
1746                         snprintf( l.sl_name.bv_val, l.sl_name.bv_len + 1,
1747                                 "PATH=%s", path );
1748                 } break;
1749 #endif /* LDAP_PF_LOCAL */
1750
1751                 case AF_INET: {
1752                         char addr[INET_ADDRSTRLEN];
1753                         const char *s;
1754 #if defined( HAVE_GETADDRINFO ) && defined( HAVE_INET_NTOP )
1755                         s = inet_ntop( AF_INET, &((struct sockaddr_in *)*sal)->sin_addr,
1756                                 addr, sizeof(addr) );
1757 #else /* ! HAVE_GETADDRINFO || ! HAVE_INET_NTOP */
1758                         s = inet_ntoa( ((struct sockaddr_in *) *sal)->sin_addr );
1759 #endif /* ! HAVE_GETADDRINFO || ! HAVE_INET_NTOP */
1760                         if (!s) s = SLAP_STRING_UNKNOWN;
1761                         port = ntohs( ((struct sockaddr_in *)*sal) ->sin_port );
1762                         l.sl_name.bv_val =
1763                                 ber_memalloc( sizeof("IP=255.255.255.255:65535") );
1764                         snprintf( l.sl_name.bv_val, sizeof("IP=255.255.255.255:65535"),
1765                                 "IP=%s:%d", s, port );
1766                         l.sl_name.bv_len = strlen( l.sl_name.bv_val );
1767                 } break;
1768
1769 #ifdef LDAP_PF_INET6
1770                 case AF_INET6: {
1771                         char addr[INET6_ADDRSTRLEN];
1772                         const char *s;
1773                         s = inet_ntop( AF_INET6, &((struct sockaddr_in6 *)*sal)->sin6_addr,
1774                                 addr, sizeof addr);
1775                         if (!s) s = SLAP_STRING_UNKNOWN;
1776                         port = ntohs( ((struct sockaddr_in6 *)*sal)->sin6_port );
1777                         l.sl_name.bv_len = strlen(s) + sizeof("IP=[]:65535");
1778                         l.sl_name.bv_val = ber_memalloc( l.sl_name.bv_len );
1779                         snprintf( l.sl_name.bv_val, l.sl_name.bv_len, "IP=[%s]:%d",
1780                                 s, port );
1781                         l.sl_name.bv_len = strlen( l.sl_name.bv_val );
1782                 } break;
1783 #endif /* LDAP_PF_INET6 */
1784
1785                 default:
1786                         Debug( LDAP_DEBUG_ANY, "daemon: unsupported address family (%d)\n",
1787                                 (int) (*sal)->sa_family, 0, 0 );
1788                         break;
1789                 }
1790
1791                 AC_MEMCPY(&l.sl_sa, *sal, addrlen);
1792                 ber_str2bv( url, 0, 1, &l.sl_url);
1793                 li = ch_malloc( sizeof( Listener ) );
1794                 *li = l;
1795                 slap_listeners[*cur] = li;
1796                 (*cur)++;
1797                 sal++;
1798         }
1799
1800         slap_free_listener_addresses(psal);
1801
1802         if ( l.sl_url.bv_val == NULL ) {
1803                 Debug( LDAP_DEBUG_TRACE,
1804                         "slap_open_listener: failed on %s\n", url, 0, 0 );
1805                 return -1;
1806         }
1807
1808         Debug( LDAP_DEBUG_TRACE, "daemon: listener initialized %s\n",
1809                 l.sl_url.bv_val, 0, 0 );
1810         return 0;
1811 }
1812
1813 static int sockinit(void);
1814 static int sockdestroy(void);
1815
1816 static int daemon_inited = 0;
1817
1818 int
1819 slapd_daemon_init( const char *urls )
1820 {
1821         int i, j, n, rc;
1822         char **u;
1823
1824         Debug( LDAP_DEBUG_ARGS, "daemon_init: %s\n",
1825                 urls ? urls : "<null>", 0, 0 );
1826
1827         for ( i=0; i<SLAPD_MAX_DAEMON_THREADS; i++ ) {
1828                 wake_sds[i][0] = AC_SOCKET_INVALID;
1829                 wake_sds[i][1] = AC_SOCKET_INVALID;
1830         }
1831
1832         ldap_pvt_thread_mutex_init( &slap_daemon[0].sd_mutex );
1833 #ifdef HAVE_TCPD
1834         ldap_pvt_thread_mutex_init( &sd_tcpd_mutex );
1835 #endif /* TCP Wrappers */
1836
1837         daemon_inited = 1;
1838
1839         if( (rc = sockinit()) != 0 ) return rc;
1840
1841 #ifdef HAVE_SYSCONF
1842         dtblsize = sysconf( _SC_OPEN_MAX );
1843 #elif defined(HAVE_GETDTABLESIZE)
1844         dtblsize = getdtablesize();
1845 #else /* ! HAVE_SYSCONF && ! HAVE_GETDTABLESIZE */
1846         dtblsize = FD_SETSIZE;
1847 #endif /* ! HAVE_SYSCONF && ! HAVE_GETDTABLESIZE */
1848
1849         /* open a pipe (or something equivalent connected to itself).
1850          * we write a byte on this fd whenever we catch a signal. The main
1851          * loop will be select'ing on this socket, and will wake up when
1852          * this byte arrives.
1853          */
1854         if( (rc = lutil_pair( wake_sds[0] )) < 0 ) {
1855                 Debug( LDAP_DEBUG_ANY,
1856                         "daemon: lutil_pair() failed rc=%d\n", rc, 0, 0 );
1857                 return rc;
1858         }
1859         ber_pvt_socket_set_nonblock( wake_sds[0][1], 1 );
1860
1861         SLAP_SOCK_INIT(0);
1862
1863         if( urls == NULL ) urls = "ldap:///";
1864
1865         u = ldap_str2charray( urls, " " );
1866
1867         if( u == NULL || u[0] == NULL ) {
1868                 Debug( LDAP_DEBUG_ANY, "daemon_init: no urls (%s) provided.\n",
1869                         urls, 0, 0 );
1870                 if ( u )
1871                         ldap_charray_free( u );
1872                 return -1;
1873         }
1874
1875         for( i=0; u[i] != NULL; i++ ) {
1876                 Debug( LDAP_DEBUG_TRACE, "daemon_init: listen on %s\n",
1877                         u[i], 0, 0 );
1878         }
1879
1880         if( i == 0 ) {
1881                 Debug( LDAP_DEBUG_ANY, "daemon_init: no listeners to open (%s)\n",
1882                         urls, 0, 0 );
1883                 ldap_charray_free( u );
1884                 return -1;
1885         }
1886
1887         Debug( LDAP_DEBUG_TRACE, "daemon_init: %d listeners to open...\n",
1888                 i, 0, 0 );
1889         slap_listeners = ch_malloc( (i+1)*sizeof(Listener *) );
1890
1891         for(n = 0, j = 0; u[n]; n++ ) {
1892                 if ( slap_open_listener( u[n], &i, &j ) ) {
1893                         ldap_charray_free( u );
1894                         return -1;
1895                 }
1896         }
1897         slap_listeners[j] = NULL;
1898
1899         Debug( LDAP_DEBUG_TRACE, "daemon_init: %d listeners opened\n",
1900                 i, 0, 0 );
1901
1902
1903 #ifdef HAVE_SLP
1904         if( slapd_register_slp ) {
1905                 slapd_slp_init( urls );
1906                 slapd_slp_reg();
1907         }
1908 #endif /* HAVE_SLP */
1909
1910         ldap_charray_free( u );
1911
1912         return !i;
1913 }
1914
1915
1916 int
1917 slapd_daemon_destroy( void )
1918 {
1919         connections_destroy();
1920         if ( daemon_inited ) {
1921                 int i;
1922
1923                 for ( i=0; i<slapd_daemon_threads; i++ ) {
1924 #ifdef HAVE_WINSOCK
1925                         if ( wake_sds[i][1] != INVALID_SOCKET &&
1926                                 SLAP_FD2SOCK( wake_sds[i][1] ) != SLAP_FD2SOCK( wake_sds[i][0] ))
1927 #endif /* HAVE_WINSOCK */
1928                                 tcp_close( SLAP_FD2SOCK(wake_sds[i][1]) );
1929 #ifdef HAVE_WINSOCK
1930                         if ( wake_sds[i][0] != INVALID_SOCKET )
1931 #endif /* HAVE_WINSOCK */
1932                                 tcp_close( SLAP_FD2SOCK(wake_sds[i][0]) );
1933                         ldap_pvt_thread_mutex_destroy( &slap_daemon[i].sd_mutex );
1934                         SLAP_SOCK_DESTROY(i);
1935                 }
1936                 daemon_inited = 0;
1937 #ifdef HAVE_TCPD
1938                 ldap_pvt_thread_mutex_destroy( &sd_tcpd_mutex );
1939 #endif /* TCP Wrappers */
1940         }
1941         sockdestroy();
1942
1943 #ifdef HAVE_SLP
1944         if( slapd_register_slp ) {
1945                 slapd_slp_dereg();
1946                 slapd_slp_deinit();
1947         }
1948 #endif /* HAVE_SLP */
1949
1950         return 0;
1951 }
1952
1953
1954 static void
1955 close_listeners(
1956         int remove )
1957 {
1958         int l;
1959
1960         if ( !listening )
1961                 return;
1962         listening = 0;
1963
1964         for ( l = 0; slap_listeners[l] != NULL; l++ ) {
1965                 Listener *lr = slap_listeners[l];
1966
1967                 if ( lr->sl_sd != AC_SOCKET_INVALID ) {
1968                         int s = lr->sl_sd;
1969                         lr->sl_sd = AC_SOCKET_INVALID;
1970                         if ( remove ) slapd_remove( s, NULL, 0, 0, 0 );
1971
1972 #ifdef LDAP_PF_LOCAL
1973                         if ( lr->sl_sa.sa_addr.sa_family == AF_LOCAL ) {
1974                                 unlink( lr->sl_sa.sa_un_addr.sun_path );
1975                         }
1976 #endif /* LDAP_PF_LOCAL */
1977
1978                         slapd_close( s );
1979                 }
1980         }
1981 }
1982
1983 static void
1984 destroy_listeners( void )
1985 {
1986         Listener *lr, **ll = slap_listeners;
1987
1988         if ( ll == NULL )
1989                 return;
1990
1991         while ( (lr = *ll++) != NULL ) {
1992                 if ( lr->sl_url.bv_val ) {
1993                         ber_memfree( lr->sl_url.bv_val );
1994                 }
1995
1996                 if ( lr->sl_name.bv_val ) {
1997                         ber_memfree( lr->sl_name.bv_val );
1998                 }
1999
2000                 free( lr );
2001         }
2002
2003         free( slap_listeners );
2004         slap_listeners = NULL;
2005 }
2006
2007 static int
2008 slap_listener(
2009         Listener *sl )
2010 {
2011         Sockaddr                from;
2012
2013         ber_socket_t s, sfd;
2014         ber_socklen_t len = sizeof(from);
2015         Connection *c;
2016         slap_ssf_t ssf = 0;
2017         struct berval authid = BER_BVNULL;
2018 #ifdef SLAPD_RLOOKUPS
2019         char hbuf[NI_MAXHOST];
2020 #endif /* SLAPD_RLOOKUPS */
2021
2022         char    *dnsname = NULL;
2023         const char *peeraddr = NULL;
2024         /* we assume INET6_ADDRSTRLEN > INET_ADDRSTRLEN */
2025         char addr[INET6_ADDRSTRLEN];
2026 #ifdef LDAP_PF_LOCAL
2027         char peername[MAXPATHLEN + sizeof("PATH=")];
2028 #ifdef LDAP_PF_LOCAL_SENDMSG
2029         char peerbuf[8];
2030         struct berval peerbv = BER_BVNULL;
2031 #endif
2032 #elif defined(LDAP_PF_INET6)
2033         char peername[sizeof("IP=[ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff]:65535")];
2034 #else /* ! LDAP_PF_LOCAL && ! LDAP_PF_INET6 */
2035         char peername[sizeof("IP=255.255.255.255:65336")];
2036 #endif /* LDAP_PF_LOCAL */
2037         int cflag;
2038         int tid;
2039
2040         Debug( LDAP_DEBUG_TRACE,
2041                 ">>> slap_listener(%s)\n",
2042                 sl->sl_url.bv_val, 0, 0 );
2043
2044         peername[0] = '\0';
2045
2046 #ifdef LDAP_CONNECTIONLESS
2047         if ( sl->sl_is_udp ) return 1;
2048 #endif /* LDAP_CONNECTIONLESS */
2049
2050 #  ifdef LDAP_PF_LOCAL
2051         /* FIXME: apparently accept doesn't fill
2052          * the sun_path sun_path member */
2053         from.sa_un_addr.sun_path[0] = '\0';
2054 #  endif /* LDAP_PF_LOCAL */
2055
2056         s = accept( SLAP_FD2SOCK( sl->sl_sd ), (struct sockaddr *) &from, &len );
2057
2058         /* Resume the listener FD to allow concurrent-processing of
2059          * additional incoming connections.
2060          */
2061         sl->sl_busy = 0;
2062         WAKE_LISTENER(DAEMON_ID(sl->sl_sd),1);
2063
2064         if ( s == AC_SOCKET_INVALID ) {
2065                 int err = sock_errno();
2066
2067                 if(
2068 #ifdef EMFILE
2069                     err == EMFILE ||
2070 #endif /* EMFILE */
2071 #ifdef ENFILE
2072                     err == ENFILE ||
2073 #endif /* ENFILE */
2074                     0 )
2075                 {
2076                         ldap_pvt_thread_mutex_lock( &slap_daemon[0].sd_mutex );
2077                         emfile++;
2078                         /* Stop listening until an existing session closes */
2079                         sl->sl_mute = 1;
2080                         ldap_pvt_thread_mutex_unlock( &slap_daemon[0].sd_mutex );
2081                 }
2082
2083                 Debug( LDAP_DEBUG_ANY,
2084                         "daemon: accept(%ld) failed errno=%d (%s)\n",
2085                         (long) sl->sl_sd, err, sock_errstr(err) );
2086                 ldap_pvt_thread_yield();
2087                 return 0;
2088         }
2089         sfd = SLAP_SOCKNEW( s );
2090
2091         /* make sure descriptor number isn't too great */
2092         if ( sfd >= dtblsize ) {
2093                 Debug( LDAP_DEBUG_ANY,
2094                         "daemon: %ld beyond descriptor table size %ld\n",
2095                         (long) sfd, (long) dtblsize, 0 );
2096
2097                 tcp_close(s);
2098                 ldap_pvt_thread_yield();
2099                 return 0;
2100         }
2101         tid = DAEMON_ID(sfd);
2102
2103 #ifdef LDAP_DEBUG
2104         ldap_pvt_thread_mutex_lock( &slap_daemon[tid].sd_mutex );
2105         /* newly accepted stream should not be in any of the FD SETS */
2106         assert( SLAP_SOCK_NOT_ACTIVE( tid, sfd ));
2107         ldap_pvt_thread_mutex_unlock( &slap_daemon[tid].sd_mutex );
2108 #endif /* LDAP_DEBUG */
2109
2110 #if defined( SO_KEEPALIVE ) || defined( TCP_NODELAY )
2111 #ifdef LDAP_PF_LOCAL
2112         /* for IPv4 and IPv6 sockets only */
2113         if ( from.sa_addr.sa_family != AF_LOCAL )
2114 #endif /* LDAP_PF_LOCAL */
2115         {
2116                 int rc;
2117                 int tmp;
2118 #ifdef SO_KEEPALIVE
2119                 /* enable keep alives */
2120                 tmp = 1;
2121                 rc = setsockopt( s, SOL_SOCKET, SO_KEEPALIVE,
2122                         (char *) &tmp, sizeof(tmp) );
2123                 if ( rc == AC_SOCKET_ERROR ) {
2124                         int err = sock_errno();
2125                         Debug( LDAP_DEBUG_ANY,
2126                                 "slapd(%ld): setsockopt(SO_KEEPALIVE) failed "
2127                                 "errno=%d (%s)\n", (long) sfd, err, sock_errstr(err) );
2128                 }
2129 #endif /* SO_KEEPALIVE */
2130 #ifdef TCP_NODELAY
2131                 /* enable no delay */
2132                 tmp = 1;
2133                 rc = setsockopt( s, IPPROTO_TCP, TCP_NODELAY,
2134                         (char *)&tmp, sizeof(tmp) );
2135                 if ( rc == AC_SOCKET_ERROR ) {
2136                         int err = sock_errno();
2137                         Debug( LDAP_DEBUG_ANY,
2138                                 "slapd(%ld): setsockopt(TCP_NODELAY) failed "
2139                                 "errno=%d (%s)\n", (long) sfd, err, sock_errstr(err) );
2140                 }
2141 #endif /* TCP_NODELAY */
2142         }
2143 #endif /* SO_KEEPALIVE || TCP_NODELAY */
2144
2145         Debug( LDAP_DEBUG_CONNS,
2146                 "daemon: listen=%ld, new connection on %ld\n",
2147                 (long) sl->sl_sd, (long) sfd, 0 );
2148
2149         cflag = 0;
2150         switch ( from.sa_addr.sa_family ) {
2151 #  ifdef LDAP_PF_LOCAL
2152         case AF_LOCAL:
2153                 cflag |= CONN_IS_IPC;
2154
2155                 /* FIXME: apparently accept doesn't fill
2156                  * the sun_path sun_path member */
2157                 if ( from.sa_un_addr.sun_path[0] == '\0' ) {
2158                         AC_MEMCPY( from.sa_un_addr.sun_path,
2159                                         sl->sl_sa.sa_un_addr.sun_path,
2160                                         sizeof( from.sa_un_addr.sun_path ) );
2161                 }
2162
2163                 sprintf( peername, "PATH=%s", from.sa_un_addr.sun_path );
2164                 ssf = local_ssf;
2165                 {
2166                         uid_t uid;
2167                         gid_t gid;
2168
2169 #ifdef LDAP_PF_LOCAL_SENDMSG
2170                         peerbv.bv_val = peerbuf;
2171                         peerbv.bv_len = sizeof( peerbuf );
2172 #endif
2173                         if( LUTIL_GETPEEREID( s, &uid, &gid, &peerbv ) == 0 ) {
2174                                 authid.bv_val = ch_malloc(
2175                                         STRLENOF( "gidNumber=4294967295+uidNumber=4294967295,"
2176                                         "cn=peercred,cn=external,cn=auth" ) + 1 );
2177                                 authid.bv_len = sprintf( authid.bv_val,
2178                                         "gidNumber=%d+uidNumber=%d,"
2179                                         "cn=peercred,cn=external,cn=auth",
2180                                         (int) gid, (int) uid );
2181                                 assert( authid.bv_len <=
2182                                         STRLENOF( "gidNumber=4294967295+uidNumber=4294967295,"
2183                                         "cn=peercred,cn=external,cn=auth" ) );
2184                         }
2185                 }
2186                 dnsname = "local";
2187                 break;
2188 #endif /* LDAP_PF_LOCAL */
2189
2190 #  ifdef LDAP_PF_INET6
2191         case AF_INET6:
2192         if ( IN6_IS_ADDR_V4MAPPED(&from.sa_in6_addr.sin6_addr) ) {
2193 #if defined( HAVE_GETADDRINFO ) && defined( HAVE_INET_NTOP )
2194                 peeraddr = inet_ntop( AF_INET,
2195                            ((struct in_addr *)&from.sa_in6_addr.sin6_addr.s6_addr[12]),
2196                            addr, sizeof(addr) );
2197 #else /* ! HAVE_GETADDRINFO || ! HAVE_INET_NTOP */
2198                 peeraddr = inet_ntoa( *((struct in_addr *)
2199                                         &from.sa_in6_addr.sin6_addr.s6_addr[12]) );
2200 #endif /* ! HAVE_GETADDRINFO || ! HAVE_INET_NTOP */
2201                 if ( !peeraddr ) peeraddr = SLAP_STRING_UNKNOWN;
2202                 sprintf( peername, "IP=%s:%d", peeraddr,
2203                          (unsigned) ntohs( from.sa_in6_addr.sin6_port ) );
2204         } else {
2205                 peeraddr = inet_ntop( AF_INET6,
2206                                       &from.sa_in6_addr.sin6_addr,
2207                                       addr, sizeof addr );
2208                 if ( !peeraddr ) peeraddr = SLAP_STRING_UNKNOWN;
2209                 sprintf( peername, "IP=[%s]:%d", peeraddr,
2210                          (unsigned) ntohs( from.sa_in6_addr.sin6_port ) );
2211         }
2212         break;
2213 #  endif /* LDAP_PF_INET6 */
2214
2215         case AF_INET: {
2216 #if defined( HAVE_GETADDRINFO ) && defined( HAVE_INET_NTOP )
2217                 peeraddr = inet_ntop( AF_INET, &from.sa_in_addr.sin_addr,
2218                            addr, sizeof(addr) );
2219 #else /* ! HAVE_GETADDRINFO || ! HAVE_INET_NTOP */
2220                 peeraddr = inet_ntoa( from.sa_in_addr.sin_addr );
2221 #endif /* ! HAVE_GETADDRINFO || ! HAVE_INET_NTOP */
2222                 if ( !peeraddr ) peeraddr = SLAP_STRING_UNKNOWN;
2223                 sprintf( peername, "IP=%s:%d", peeraddr,
2224                         (unsigned) ntohs( from.sa_in_addr.sin_port ) );
2225                 } break;
2226
2227         default:
2228                 slapd_close(sfd);
2229                 return 0;
2230         }
2231
2232         if ( ( from.sa_addr.sa_family == AF_INET )
2233 #ifdef LDAP_PF_INET6
2234                 || ( from.sa_addr.sa_family == AF_INET6 )
2235 #endif /* LDAP_PF_INET6 */
2236                 )
2237         {
2238                 dnsname = NULL;
2239 #ifdef SLAPD_RLOOKUPS
2240                 if ( use_reverse_lookup ) {
2241                         char *herr;
2242                         if (ldap_pvt_get_hname( (const struct sockaddr *)&from, len, hbuf,
2243                                 sizeof(hbuf), &herr ) == 0) {
2244                                 ldap_pvt_str2lower( hbuf );
2245                                 dnsname = hbuf;
2246                         }
2247                 }
2248 #endif /* SLAPD_RLOOKUPS */
2249
2250 #ifdef HAVE_TCPD
2251                 {
2252                         int rc;
2253                         ldap_pvt_thread_mutex_lock( &sd_tcpd_mutex );
2254                         rc = hosts_ctl("slapd",
2255                                 dnsname != NULL ? dnsname : SLAP_STRING_UNKNOWN,
2256                                 peeraddr,
2257                                 SLAP_STRING_UNKNOWN );
2258                         ldap_pvt_thread_mutex_unlock( &sd_tcpd_mutex );
2259                         if ( !rc ) {
2260                                 /* DENY ACCESS */
2261                                 Statslog( LDAP_DEBUG_STATS,
2262                                         "fd=%ld DENIED from %s (%s)\n",
2263                                         (long) sfd,
2264                                         dnsname != NULL ? dnsname : SLAP_STRING_UNKNOWN,
2265                                         peeraddr, 0, 0 );
2266                                 slapd_close(sfd);
2267                                 return 0;
2268                         }
2269                 }
2270 #endif /* HAVE_TCPD */
2271         }
2272
2273 #ifdef HAVE_TLS
2274         if ( sl->sl_is_tls ) cflag |= CONN_IS_TLS;
2275 #endif
2276         c = connection_init(sfd, sl,
2277                 dnsname != NULL ? dnsname : SLAP_STRING_UNKNOWN,
2278                 peername, cflag, ssf,
2279                 authid.bv_val ? &authid : NULL
2280                 LDAP_PF_LOCAL_SENDMSG_ARG(&peerbv));
2281
2282         if( authid.bv_val ) ch_free(authid.bv_val);
2283
2284         if( !c ) {
2285                 Debug( LDAP_DEBUG_ANY,
2286                         "daemon: connection_init(%ld, %s, %s) failed.\n",
2287                         (long) sfd, peername, sl->sl_name.bv_val );
2288                 slapd_close(sfd);
2289         }
2290
2291         return 0;
2292 }
2293
2294 static void*
2295 slap_listener_thread(
2296         void* ctx,
2297         void* ptr )
2298 {
2299         int             rc;
2300         Listener        *sl = (Listener *)ptr;
2301
2302         rc = slap_listener( sl );
2303
2304         if( rc != LDAP_SUCCESS ) {
2305                 Debug( LDAP_DEBUG_ANY,
2306                         "slap_listener_thread(%s): failed err=%d",
2307                         sl->sl_url.bv_val, rc, 0 );
2308         }
2309
2310         return (void*)NULL;
2311 }
2312
2313 static int
2314 slap_listener_activate(
2315         Listener* sl )
2316 {
2317         int rc;
2318
2319         Debug( LDAP_DEBUG_TRACE, "slap_listener_activate(%d): %s\n",
2320                 sl->sl_sd, sl->sl_busy ? "busy" : "", 0 );
2321
2322         sl->sl_busy = 1;
2323
2324         rc = ldap_pvt_thread_pool_submit( &connection_pool,
2325                 slap_listener_thread, (void *) sl );
2326
2327         if( rc != 0 ) {
2328                 Debug( LDAP_DEBUG_ANY,
2329                         "slap_listener_activate(%d): submit failed (%d)\n",
2330                         sl->sl_sd, rc, 0 );
2331         }
2332         return rc;
2333 }
2334
2335 static void *
2336 slapd_daemon_task(
2337         void *ptr )
2338 {
2339         int l;
2340         time_t last_idle_check = 0;
2341         int ebadf = 0;
2342         int tid = (ldap_pvt_thread_t *) ptr - listener_tid;
2343
2344 #define SLAPD_IDLE_CHECK_LIMIT 4
2345
2346         slapd_add( wake_sds[tid][0], 0, NULL, tid );
2347         if ( tid )
2348                 goto loop;
2349
2350         /* Init stuff done only by thread 0 */
2351
2352         last_idle_check = slap_get_time();
2353
2354         for ( l = 0; slap_listeners[l] != NULL; l++ ) {
2355                 if ( slap_listeners[l]->sl_sd == AC_SOCKET_INVALID ) continue;
2356
2357 #ifdef LDAP_CONNECTIONLESS
2358                 /* Since this is connectionless, the data port is the
2359                  * listening port. The listen() and accept() calls
2360                  * are unnecessary.
2361                  */
2362                 if ( slap_listeners[l]->sl_is_udp )
2363                         continue;
2364 #endif /* LDAP_CONNECTIONLESS */
2365
2366                 /* FIXME: TCP-only! */
2367 #ifdef LDAP_TCP_BUFFER
2368                 if ( 1 ) {
2369                         int origsize, size, realsize, rc;
2370                         socklen_t optlen;
2371                         char buf[ SLAP_TEXT_BUFLEN ];
2372
2373                         size = 0;
2374                         if ( slap_listeners[l]->sl_tcp_rmem > 0 ) {
2375                                 size = slap_listeners[l]->sl_tcp_rmem;
2376                         } else if ( slapd_tcp_rmem > 0 ) {
2377                                 size = slapd_tcp_rmem;
2378                         }
2379
2380                         if ( size > 0 ) {
2381                                 optlen = sizeof( origsize );
2382                                 rc = getsockopt( SLAP_FD2SOCK( slap_listeners[l]->sl_sd ),
2383                                         SOL_SOCKET,
2384                                         SO_RCVBUF,
2385                                         (void *)&origsize,
2386                                         &optlen );
2387
2388                                 if ( rc ) {
2389                                         int err = sock_errno();
2390                                         Debug( LDAP_DEBUG_ANY,
2391                                                 "slapd_daemon_task: getsockopt(SO_RCVBUF) failed errno=%d (%s)\n",
2392                                                 err, sock_errstr(err), 0 );
2393                                 }
2394
2395                                 optlen = sizeof( size );
2396                                 rc = setsockopt( SLAP_FD2SOCK( slap_listeners[l]->sl_sd ),
2397                                         SOL_SOCKET,
2398                                         SO_RCVBUF,
2399                                         (const void *)&size,
2400                                         optlen );
2401
2402                                 if ( rc ) {
2403                                         int err = sock_errno();
2404                                         Debug( LDAP_DEBUG_ANY,
2405                                                 "slapd_daemon_task: setsockopt(SO_RCVBUF) failed errno=%d (%s)\n",
2406                                                 err, sock_errstr(err), 0 );
2407                                 }
2408
2409                                 optlen = sizeof( realsize );
2410                                 rc = getsockopt( SLAP_FD2SOCK( slap_listeners[l]->sl_sd ),
2411                                         SOL_SOCKET,
2412                                         SO_RCVBUF,
2413                                         (void *)&realsize,
2414                                         &optlen );
2415
2416                                 if ( rc ) {
2417                                         int err = sock_errno();
2418                                         Debug( LDAP_DEBUG_ANY,
2419                                                 "slapd_daemon_task: getsockopt(SO_RCVBUF) failed errno=%d (%s)\n",
2420                                                 err, sock_errstr(err), 0 );
2421                                 }
2422
2423                                 snprintf( buf, sizeof( buf ),
2424                                         "url=%s (#%d) RCVBUF original size=%d requested size=%d real size=%d",
2425                                         slap_listeners[l]->sl_url.bv_val, l, origsize, size, realsize );
2426                                 Debug( LDAP_DEBUG_ANY,
2427                                         "slapd_daemon_task: %s\n",
2428                                         buf, 0, 0 );
2429                         }
2430
2431                         size = 0;
2432                         if ( slap_listeners[l]->sl_tcp_wmem > 0 ) {
2433                                 size = slap_listeners[l]->sl_tcp_wmem;
2434                         } else if ( slapd_tcp_wmem > 0 ) {
2435                                 size = slapd_tcp_wmem;
2436                         }
2437
2438                         if ( size > 0 ) {
2439                                 optlen = sizeof( origsize );
2440                                 rc = getsockopt( SLAP_FD2SOCK( slap_listeners[l]->sl_sd ),
2441                                         SOL_SOCKET,
2442                                         SO_SNDBUF,
2443                                         (void *)&origsize,
2444                                         &optlen );
2445
2446                                 if ( rc ) {
2447                                         int err = sock_errno();
2448                                         Debug( LDAP_DEBUG_ANY,
2449                                                 "slapd_daemon_task: getsockopt(SO_SNDBUF) failed errno=%d (%s)\n",
2450                                                 err, sock_errstr(err), 0 );
2451                                 }
2452
2453                                 optlen = sizeof( size );
2454                                 rc = setsockopt( SLAP_FD2SOCK( slap_listeners[l]->sl_sd ),
2455                                         SOL_SOCKET,
2456                                         SO_SNDBUF,
2457                                         (const void *)&size,
2458                                         optlen );
2459
2460                                 if ( rc ) {
2461                                         int err = sock_errno();
2462                                         Debug( LDAP_DEBUG_ANY,
2463                                                 "slapd_daemon_task: setsockopt(SO_SNDBUF) failed errno=%d (%s)",
2464                                                 err, sock_errstr(err), 0 );
2465                                 }
2466
2467                                 optlen = sizeof( realsize );
2468                                 rc = getsockopt( SLAP_FD2SOCK( slap_listeners[l]->sl_sd ),
2469                                         SOL_SOCKET,
2470                                         SO_SNDBUF,
2471                                         (void *)&realsize,
2472                                         &optlen );
2473
2474                                 if ( rc ) {
2475                                         int err = sock_errno();
2476                                         Debug( LDAP_DEBUG_ANY,
2477                                                 "slapd_daemon_task: getsockopt(SO_SNDBUF) failed errno=%d (%s)\n",
2478                                                 err, sock_errstr(err), 0 );
2479                                 }
2480
2481                                 snprintf( buf, sizeof( buf ),
2482                                         "url=%s (#%d) SNDBUF original size=%d requested size=%d real size=%d",
2483                                         slap_listeners[l]->sl_url.bv_val, l, origsize, size, realsize );
2484                                 Debug( LDAP_DEBUG_ANY,
2485                                         "slapd_daemon_task: %s\n",
2486                                         buf, 0, 0 );
2487                         }
2488                 }
2489 #endif /* LDAP_TCP_BUFFER */
2490
2491                 if ( listen( SLAP_FD2SOCK( slap_listeners[l]->sl_sd ), SLAPD_LISTEN_BACKLOG ) == -1 ) {
2492                         int err = sock_errno();
2493
2494 #ifdef LDAP_PF_INET6
2495                         /* If error is EADDRINUSE, we are trying to listen to INADDR_ANY and
2496                          * we are already listening to in6addr_any, then we want to ignore
2497                          * this and continue.
2498                          */
2499                         if ( err == EADDRINUSE ) {
2500                                 int i;
2501                                 struct sockaddr_in sa = slap_listeners[l]->sl_sa.sa_in_addr;
2502                                 struct sockaddr_in6 sa6;
2503
2504                                 if ( sa.sin_family == AF_INET &&
2505                                      sa.sin_addr.s_addr == htonl(INADDR_ANY) ) {
2506                                         for ( i = 0 ; i < l; i++ ) {
2507                                                 sa6 = slap_listeners[i]->sl_sa.sa_in6_addr;
2508                                                 if ( sa6.sin6_family == AF_INET6 &&
2509                                                      !memcmp( &sa6.sin6_addr, &in6addr_any,
2510                                                                 sizeof(struct in6_addr) ) )
2511                                                 {
2512                                                         break;
2513                                                 }
2514                                         }
2515
2516                                         if ( i < l ) {
2517                                                 /* We are already listening to in6addr_any */
2518                                                 Debug( LDAP_DEBUG_CONNS,
2519                                                         "daemon: Attempt to listen to 0.0.0.0 failed, "
2520                                                         "already listening on ::, assuming IPv4 included\n",
2521                                                         0, 0, 0 );
2522                                                 slapd_close( slap_listeners[l]->sl_sd );
2523                                                 slap_listeners[l]->sl_sd = AC_SOCKET_INVALID;
2524                                                 continue;
2525                                         }
2526                                 }
2527                         }
2528 #endif /* LDAP_PF_INET6 */
2529                         Debug( LDAP_DEBUG_ANY,
2530                                 "daemon: listen(%s, 5) failed errno=%d (%s)\n",
2531                                         slap_listeners[l]->sl_url.bv_val, err,
2532                                         sock_errstr(err) );
2533                         return (void*)-1;
2534                 }
2535
2536                 /* make the listening socket non-blocking */
2537                 if ( ber_pvt_socket_set_nonblock( SLAP_FD2SOCK( slap_listeners[l]->sl_sd ), 1 ) < 0 ) {
2538                         Debug( LDAP_DEBUG_ANY, "slapd_daemon_task: "
2539                                 "set nonblocking on a listening socket failed\n",
2540                                 0, 0, 0 );
2541                         slapd_shutdown = 2;
2542                         return (void*)-1;
2543                 }
2544
2545                 slapd_add( slap_listeners[l]->sl_sd, 0, slap_listeners[l], -1 );
2546         }
2547
2548 #ifdef HAVE_NT_SERVICE_MANAGER
2549         if ( started_event != NULL ) {
2550                 ldap_pvt_thread_cond_signal( &started_event );
2551         }
2552 #endif /* HAVE_NT_SERVICE_MANAGER */
2553
2554 loop:
2555
2556         /* initialization complete. Here comes the loop. */
2557
2558         while ( !slapd_shutdown ) {
2559                 ber_socket_t            i;
2560                 int                     ns, nwriters;
2561                 int                     at;
2562                 ber_socket_t            nfds;
2563 #if SLAP_EVENTS_ARE_INDEXED
2564                 ber_socket_t            nrfds, nwfds;
2565 #endif /* SLAP_EVENTS_ARE_INDEXED */
2566 #define SLAPD_EBADF_LIMIT 16
2567
2568                 time_t                  now;
2569
2570                 SLAP_EVENT_DECL;
2571
2572                 struct timeval          tv;
2573                 struct timeval          *tvp;
2574
2575                 struct timeval          cat;
2576                 time_t                  tdelta = 1;
2577                 struct re_s*            rtask;
2578
2579                 now = slap_get_time();
2580
2581                 if ( !tid && ( global_idletimeout > 0 )) {
2582                         int check = 0;
2583                         /* Set the select timeout.
2584                          * Don't just truncate, preserve the fractions of
2585                          * seconds to prevent sleeping for zero time.
2586                          */
2587                         {
2588                                 tv.tv_sec = global_idletimeout / SLAPD_IDLE_CHECK_LIMIT;
2589                                 tv.tv_usec = global_idletimeout - \
2590                                         ( tv.tv_sec * SLAPD_IDLE_CHECK_LIMIT );
2591                                 tv.tv_usec *= 1000000 / SLAPD_IDLE_CHECK_LIMIT;
2592                                 if ( difftime( last_idle_check +
2593                                         global_idletimeout/SLAPD_IDLE_CHECK_LIMIT, now ) < 0 )
2594                                         check = 1;
2595                         }
2596                         if ( check ) {
2597                                 connections_timeout_idle( now );
2598                                 last_idle_check = now;
2599                         }
2600                 } else {
2601                         tv.tv_sec = 0;
2602                         tv.tv_usec = 0;
2603                 }
2604
2605 #ifdef SIGHUP
2606                 if ( slapd_gentle_shutdown ) {
2607                         ber_socket_t active;
2608
2609                         if ( !tid && slapd_gentle_shutdown == 1 ) {
2610                                 BackendDB *be;
2611                                 Debug( LDAP_DEBUG_ANY, "slapd gentle shutdown\n", 0, 0, 0 );
2612                                 close_listeners( 1 );
2613                                 frontendDB->be_restrictops |= SLAP_RESTRICT_OP_WRITES;
2614                                 LDAP_STAILQ_FOREACH(be, &backendDB, be_next) {
2615                                         be->be_restrictops |= SLAP_RESTRICT_OP_WRITES;
2616                                 }
2617                                 slapd_gentle_shutdown = 2;
2618                         }
2619
2620                         ldap_pvt_thread_mutex_lock( &slap_daemon[tid].sd_mutex );
2621                         active = slap_daemon[tid].sd_nactives;
2622                         ldap_pvt_thread_mutex_unlock( &slap_daemon[tid].sd_mutex );
2623
2624                         if ( active == 0 ) {
2625                                 if ( !tid ) {
2626                                         for ( l=1; l<slapd_daemon_threads; l++ ) {
2627                                                 ldap_pvt_thread_mutex_lock( &slap_daemon[l].sd_mutex );
2628                                                 active += slap_daemon[l].sd_nactives;
2629                                                 ldap_pvt_thread_mutex_unlock( &slap_daemon[l].sd_mutex );
2630                                         }
2631                                         if ( !active )
2632                                                 slapd_shutdown = 1;
2633                                 }
2634                                 if ( !active )
2635                                         break;
2636                         }
2637                 }
2638 #endif /* SIGHUP */
2639                 at = 0;
2640
2641                 ldap_pvt_thread_mutex_lock( &slap_daemon[tid].sd_mutex );
2642
2643                 nwriters = slap_daemon[tid].sd_nwriters;
2644
2645                 if ( listening )
2646                 for ( l = 0; slap_listeners[l] != NULL; l++ ) {
2647                         Listener *lr = slap_listeners[l];
2648
2649                         if ( lr->sl_sd == AC_SOCKET_INVALID ) continue;
2650                         if ( DAEMON_ID( lr->sl_sd ) != tid ) continue;
2651                         if ( !SLAP_SOCK_IS_ACTIVE( tid, lr->sl_sd )) continue;
2652
2653                         if ( lr->sl_mute || lr->sl_busy )
2654                         {
2655                                 SLAP_SOCK_CLR_READ( tid, lr->sl_sd );
2656                         } else {
2657                                 SLAP_SOCK_SET_READ( tid, lr->sl_sd );
2658                         }
2659                 }
2660
2661                 SLAP_EVENT_INIT(tid);
2662
2663                 nfds = SLAP_EVENT_MAX(tid);
2664
2665                 if (( global_idletimeout ) && slap_daemon[tid].sd_nactives ) at = 1;
2666
2667                 ldap_pvt_thread_mutex_unlock( &slap_daemon[tid].sd_mutex );
2668
2669                 if ( at
2670 #if defined(HAVE_YIELDING_SELECT) || defined(NO_THREADS)
2671                         &&  ( tv.tv_sec || tv.tv_usec )
2672 #endif /* HAVE_YIELDING_SELECT || NO_THREADS */
2673                         )
2674                 {
2675                         tvp = &tv;
2676                 } else {
2677                         tvp = NULL;
2678                 }
2679
2680                 /* Only thread 0 handles runqueue */
2681                 if ( !tid ) {
2682                         ldap_pvt_thread_mutex_lock( &slapd_rq.rq_mutex );
2683                         rtask = ldap_pvt_runqueue_next_sched( &slapd_rq, &cat );
2684                         while ( rtask && cat.tv_sec && cat.tv_sec <= now ) {
2685                                 if ( ldap_pvt_runqueue_isrunning( &slapd_rq, rtask )) {
2686                                         ldap_pvt_runqueue_resched( &slapd_rq, rtask, 0 );
2687                                 } else {
2688                                         ldap_pvt_runqueue_runtask( &slapd_rq, rtask );
2689                                         ldap_pvt_runqueue_resched( &slapd_rq, rtask, 0 );
2690                                         ldap_pvt_thread_mutex_unlock( &slapd_rq.rq_mutex );
2691                                         ldap_pvt_thread_pool_submit2( &connection_pool,
2692                                                 rtask->routine, (void *) rtask, &rtask->pool_cookie );
2693                                         ldap_pvt_thread_mutex_lock( &slapd_rq.rq_mutex );
2694                                 }
2695                                 rtask = ldap_pvt_runqueue_next_sched( &slapd_rq, &cat );
2696                         }
2697                         ldap_pvt_thread_mutex_unlock( &slapd_rq.rq_mutex );
2698
2699                         if ( rtask && cat.tv_sec ) {
2700                                 /* NOTE: diff __should__ always be >= 0,
2701                                  * AFAI understand; however (ITS#4872),
2702                                  * time_t might be unsigned in some systems,
2703                                  * while difftime() returns a double */
2704                                 double diff = difftime( cat.tv_sec, now );
2705                                 if ( diff <= 0 ) {
2706                                         diff = tdelta;
2707                                 }
2708                                 if ( tvp == NULL || diff < tv.tv_sec ) {
2709                                         tv.tv_sec = diff;
2710                                         tv.tv_usec = 0;
2711                                         tvp = &tv;
2712                                 }
2713                         }
2714                 }
2715
2716                 for ( l = 0; slap_listeners[l] != NULL; l++ ) {
2717                         Listener *lr = slap_listeners[l];
2718
2719                         if ( lr->sl_sd == AC_SOCKET_INVALID ) {
2720                                 continue;
2721                         }
2722
2723                         if ( lr->sl_mute ) {
2724                                 Debug( LDAP_DEBUG_CONNS,
2725                                         "daemon: " SLAP_EVENT_FNAME ": "
2726                                         "listen=%d muted\n",
2727                                         lr->sl_sd, 0, 0 );
2728                                 continue;
2729                         }
2730
2731                         if ( lr->sl_busy ) {
2732                                 Debug( LDAP_DEBUG_CONNS,
2733                                         "daemon: " SLAP_EVENT_FNAME ": "
2734                                         "listen=%d busy\n",
2735                                         lr->sl_sd, 0, 0 );
2736                                 continue;
2737                         }
2738
2739                         Debug( LDAP_DEBUG_CONNS,
2740                                 "daemon: " SLAP_EVENT_FNAME ": "
2741                                 "listen=%d active_threads=%d tvp=%s\n",
2742                                 lr->sl_sd, at, tvp == NULL ? "NULL" : "zero" );
2743                 }
2744
2745                 SLAP_EVENT_WAIT( tid, tvp, &ns );
2746                 switch ( ns ) {
2747                 case -1: {      /* failure - try again */
2748                                 int err = sock_errno();
2749
2750                                 if ( err != EINTR ) {
2751                                         ebadf++;
2752
2753                                         /* Don't log unless we got it twice in a row */
2754                                         if ( !( ebadf & 1 ) ) {
2755                                                 Debug( LDAP_DEBUG_ANY,
2756                                                         "daemon: "
2757                                                         SLAP_EVENT_FNAME
2758                                                         " failed count %d "
2759                                                         "err (%d): %s\n",
2760                                                         ebadf, err,
2761                                                         sock_errstr( err ) );
2762                                         }
2763                                         if ( ebadf >= SLAPD_EBADF_LIMIT ) {
2764                                                 slapd_shutdown = 2;
2765                                         }
2766                                 }
2767                         }
2768                         continue;
2769
2770                 case 0:         /* timeout - let threads run */
2771                         ebadf = 0;
2772 #ifndef HAVE_YIELDING_SELECT
2773                         Debug( LDAP_DEBUG_CONNS, "daemon: " SLAP_EVENT_FNAME
2774                                 "timeout - yielding\n",
2775                                 0, 0, 0 );
2776
2777                         ldap_pvt_thread_yield();
2778 #endif /* ! HAVE_YIELDING_SELECT */
2779                         continue;
2780
2781                 default:        /* something happened - deal with it */
2782                         if ( slapd_shutdown ) continue;
2783
2784                         ebadf = 0;
2785                         Debug( LDAP_DEBUG_CONNS,
2786                                 "daemon: activity on %d descriptor%s\n",
2787                                 ns, ns != 1 ? "s" : "", 0 );
2788                         /* FALL THRU */
2789                 }
2790
2791 #if SLAP_EVENTS_ARE_INDEXED
2792                 if ( SLAP_EVENT_IS_READ( wake_sds[tid][0] ) ) {
2793                         char c[BUFSIZ];
2794                         SLAP_EVENT_CLR_READ( wake_sds[tid][0] );
2795                         waking = 0;
2796                         tcp_read( SLAP_FD2SOCK(wake_sds[tid][0]), c, sizeof(c) );
2797                         Debug( LDAP_DEBUG_CONNS, "daemon: waked\n", 0, 0, 0 );
2798                         continue;
2799                 }
2800
2801                 /* The event slot equals the descriptor number - this is
2802                  * true for Unix select and poll. We treat Windows select
2803                  * like this too, even though it's a kludge.
2804                  */
2805                 if ( listening )
2806                 for ( l = 0; slap_listeners[l] != NULL; l++ ) {
2807                         int rc;
2808
2809                         if ( ns <= 0 ) break;
2810                         if ( slap_listeners[l]->sl_sd == AC_SOCKET_INVALID ) continue;
2811 #ifdef LDAP_CONNECTIONLESS
2812                         if ( slap_listeners[l]->sl_is_udp ) continue;
2813 #endif /* LDAP_CONNECTIONLESS */
2814                         if ( !SLAP_EVENT_IS_READ( slap_listeners[l]->sl_sd ) ) continue;
2815
2816                         /* clear events */
2817                         SLAP_EVENT_CLR_READ( slap_listeners[l]->sl_sd );
2818                         SLAP_EVENT_CLR_WRITE( slap_listeners[l]->sl_sd );
2819                         ns--;
2820
2821                         rc = slap_listener_activate( slap_listeners[l] );
2822                 }
2823
2824                 /* bypass the following tests if no descriptors left */
2825                 if ( ns <= 0 ) {
2826 #ifndef HAVE_YIELDING_SELECT
2827                         ldap_pvt_thread_yield();
2828 #endif /* HAVE_YIELDING_SELECT */
2829                         continue;
2830                 }
2831
2832                 Debug( LDAP_DEBUG_CONNS, "daemon: activity on:", 0, 0, 0 );
2833                 nrfds = 0;
2834                 nwfds = 0;
2835                 for ( i = 0; i < nfds; i++ ) {
2836                         int     r, w;
2837
2838                         r = SLAP_EVENT_IS_READ( i );
2839                         /* writefds was not initialized if nwriters was zero */
2840                         w = nwriters ? SLAP_EVENT_IS_WRITE( i ) : 0;
2841                         if ( r || w ) {
2842                                 Debug( LDAP_DEBUG_CONNS, " %d%s%s", i,
2843                                     r ? "r" : "", w ? "w" : "" );
2844                                 if ( r ) {
2845                                         nrfds++;
2846                                         ns--;
2847                                 }
2848                                 if ( w ) {
2849                                         nwfds++;
2850                                         ns--;
2851                                 }
2852                         }
2853                         if ( ns <= 0 ) break;
2854                 }
2855                 Debug( LDAP_DEBUG_CONNS, "\n", 0, 0, 0 );
2856
2857                 /* loop through the writers */
2858                 for ( i = 0; nwfds > 0; i++ ) {
2859                         ber_socket_t wd;
2860                         if ( ! SLAP_EVENT_IS_WRITE( i ) ) continue;
2861                         wd = i;
2862
2863                         SLAP_EVENT_CLR_WRITE( wd );
2864                         nwfds--;
2865
2866                         Debug( LDAP_DEBUG_CONNS,
2867                                 "daemon: write active on %d\n",
2868                                 wd, 0, 0 );
2869
2870                         /*
2871                          * NOTE: it is possible that the connection was closed
2872                          * and that the stream is now inactive.
2873                          * connection_write() must validate the stream is still
2874                          * active.
2875                          *
2876                          * ITS#4338: if the stream is invalid, there is no need to
2877                          * close it here. It has already been closed in connection.c.
2878                          */
2879                         if ( connection_write( wd ) < 0 ) {
2880                                 if ( SLAP_EVENT_IS_READ( wd ) ) {
2881                                         SLAP_EVENT_CLR_READ( (unsigned) wd );
2882                                         nrfds--;
2883                                 }
2884                         }
2885                 }
2886
2887                 for ( i = 0; nrfds > 0; i++ ) {
2888                         ber_socket_t rd;
2889                         if ( ! SLAP_EVENT_IS_READ( i ) ) continue;
2890                         rd = i;
2891                         SLAP_EVENT_CLR_READ( rd );
2892                         nrfds--;
2893
2894                         Debug ( LDAP_DEBUG_CONNS,
2895                                 "daemon: read activity on %d\n", rd, 0, 0 );
2896                         /*
2897                          * NOTE: it is possible that the connection was closed
2898                          * and that the stream is now inactive.
2899                          * connection_read() must valid the stream is still
2900                          * active.
2901                          */
2902
2903                         connection_read_activate( rd );
2904                 }
2905 #else   /* !SLAP_EVENTS_ARE_INDEXED */
2906         /* FIXME */
2907         /* The events are returned in an arbitrary list. This is true
2908          * for /dev/poll, epoll and kqueue. In order to prioritize things
2909          * so that we can handle wake_sds first, listeners second, and then
2910          * all other connections last (as we do for select), we would need
2911          * to use multiple event handles and cascade them.
2912          *
2913          * That seems like a bit of hassle. So the wake_sds check has been
2914          * skipped. For epoll and kqueue we can associate arbitrary data with
2915          * an event, so we could use pointers to the listener structure
2916          * instead of just the file descriptor. For /dev/poll we have to
2917          * search the listeners array for a matching descriptor.
2918          *
2919          * We now handle wake events when we see them; they are not given
2920          * higher priority.
2921          */
2922 #ifdef LDAP_DEBUG
2923                 Debug( LDAP_DEBUG_CONNS, "daemon: activity on:", 0, 0, 0 );
2924
2925                 for ( i = 0; i < ns; i++ ) {
2926                         int     r, w, fd;
2927
2928                         /* Don't log listener events */
2929                         if ( SLAP_EVENT_IS_LISTENER( tid, i )
2930 #ifdef LDAP_CONNECTIONLESS
2931                                 && !( (SLAP_EVENT_LISTENER( tid, i ))->sl_is_udp )
2932 #endif /* LDAP_CONNECTIONLESS */
2933                                 )
2934                         {
2935                                 continue;
2936                         }
2937
2938                         fd = SLAP_EVENT_FD( tid, i );
2939                         /* Don't log internal wake events */
2940                         if ( fd == wake_sds[tid][0] ) continue;
2941
2942 #ifdef HAVE_KQUEUE
2943                         r = SLAP_EVENT_IS_READ( tid, i );
2944                         w = SLAP_EVENT_IS_WRITE( tid, i );
2945 #else
2946                         r = SLAP_EVENT_IS_READ( i );
2947                         w = SLAP_EVENT_IS_WRITE( i );
2948 #endif /* HAVE_KQUEUE */
2949                         if ( r || w ) {
2950                                 Debug( LDAP_DEBUG_CONNS, " %d%s%s", fd,
2951                                     r ? "r" : "", w ? "w" : "" );
2952                         }
2953                 }
2954                 Debug( LDAP_DEBUG_CONNS, "\n", 0, 0, 0 );
2955 #endif /* LDAP_DEBUG */
2956
2957                 for ( i = 0; i < ns; i++ ) {
2958                         int rc = 1, fd, w = 0, r = 0;
2959
2960                         if ( SLAP_EVENT_IS_LISTENER( tid, i ) ) {
2961                                 rc = slap_listener_activate( SLAP_EVENT_LISTENER( tid, i ) );
2962                         }
2963
2964                         /* If we found a regular listener, rc is now zero, and we
2965                          * can skip the data portion. But if it was a UDP listener
2966                          * then rc is still 1, and we want to handle the data.
2967                          */
2968                         if ( rc ) {
2969                                 fd = SLAP_EVENT_FD( tid, i );
2970
2971                                 /* Handle wake events */
2972                                 if ( fd == wake_sds[tid][0] ) {
2973                                         char c[BUFSIZ];
2974                                         waking = 0;
2975                                         tcp_read( SLAP_FD2SOCK(wake_sds[tid][0]), c, sizeof(c) );
2976                                         continue;
2977                                 }
2978
2979 #ifdef HAVE_KQUEUE
2980                                 if ( SLAP_EVENT_IS_WRITE( tid, i ) ) {
2981 #else
2982                                 if ( SLAP_EVENT_IS_WRITE( i ) ) {
2983 #endif  /* HAVE_KQUEUE */
2984                                         Debug( LDAP_DEBUG_CONNS,
2985                                                 "daemon: write active on %d\n",
2986                                                 fd, 0, 0 );
2987
2988                                         SLAP_EVENT_CLR_WRITE( i );
2989                                         w = 1;
2990
2991                                         /*
2992                                          * NOTE: it is possible that the connection was closed
2993                                          * and that the stream is now inactive.
2994                                          * connection_write() must valid the stream is still
2995                                          * active.
2996                                          */
2997                                         if ( connection_write( fd ) < 0 ) {
2998                                                 continue;
2999                                         }
3000                                 }
3001                                 /* If event is a read */
3002 #ifdef HAVE_KQUEUE
3003                                 if ( SLAP_EVENT_IS_READ( tid, i )) {
3004 #else
3005                                 if ( SLAP_EVENT_IS_READ( i )) {
3006 #endif /* HAVE_KQUEUE */
3007                                         r = 1;
3008                                         Debug( LDAP_DEBUG_CONNS,
3009                                                 "daemon: read active on %d\n",
3010                                                 fd, 0, 0 );
3011
3012                                         SLAP_EVENT_CLR_READ( i );
3013                                         connection_read_activate( fd );
3014                                 } else if ( !w ) {
3015 #ifdef HAVE_EPOLL
3016                                         /* Don't keep reporting the hangup
3017                                          */
3018                                         if ( SLAP_SOCK_IS_ACTIVE( tid, fd )) {
3019                                                 SLAP_EPOLL_SOCK_SET( tid, fd, EPOLLET );
3020                                         }
3021 #endif
3022                                 }
3023                         }
3024                 }
3025 #endif  /* SLAP_EVENTS_ARE_INDEXED */
3026
3027 #ifndef HAVE_YIELDING_SELECT
3028                 ldap_pvt_thread_yield();
3029 #endif /* ! HAVE_YIELDING_SELECT */
3030         }
3031
3032         /* Only thread 0 handles shutdown */
3033         if ( tid )
3034                 return NULL;
3035
3036         if ( slapd_shutdown == 1 ) {
3037                 Debug( LDAP_DEBUG_ANY,
3038                         "daemon: shutdown requested and initiated.\n",
3039                         0, 0, 0 );
3040
3041         } else if ( slapd_shutdown == 2 ) {
3042 #ifdef HAVE_NT_SERVICE_MANAGER
3043                         Debug( LDAP_DEBUG_ANY,
3044                                "daemon: shutdown initiated by Service Manager.\n",
3045                                0, 0, 0);
3046 #else /* !HAVE_NT_SERVICE_MANAGER */
3047                         Debug( LDAP_DEBUG_ANY,
3048                                "daemon: abnormal condition, shutdown initiated.\n",
3049                                0, 0, 0 );
3050 #endif /* !HAVE_NT_SERVICE_MANAGER */
3051         } else {
3052                 Debug( LDAP_DEBUG_ANY,
3053                        "daemon: no active streams, shutdown initiated.\n",
3054                        0, 0, 0 );
3055         }
3056
3057         close_listeners( 1 );
3058
3059         if ( !slapd_gentle_shutdown ) {
3060                 slapd_abrupt_shutdown = 1;
3061                 connections_shutdown();
3062         }
3063
3064 #ifdef HAVE_KQUEUE
3065      close( slap_daemon[tid].sd_kq );
3066 #endif
3067
3068         if ( LogTest( LDAP_DEBUG_ANY )) {
3069                 int t = ldap_pvt_thread_pool_backload( &connection_pool );
3070                 Debug( LDAP_DEBUG_ANY,
3071                         "slapd shutdown: waiting for %d operations/tasks to finish\n",
3072                         t, 0, 0 );
3073         }
3074         ldap_pvt_thread_pool_destroy( &connection_pool, 1 );
3075
3076         return NULL;
3077 }
3078
3079
3080 #ifdef LDAP_CONNECTIONLESS
3081 static int
3082 connectionless_init( void )
3083 {
3084         int l;
3085
3086         for ( l = 0; slap_listeners[l] != NULL; l++ ) {
3087                 Listener *lr = slap_listeners[l];
3088                 Connection *c;
3089
3090                 if ( !lr->sl_is_udp ) {
3091                         continue;
3092                 }
3093
3094                 c = connection_init( lr->sl_sd, lr, "", "",
3095                         CONN_IS_UDP, (slap_ssf_t) 0, NULL
3096                         LDAP_PF_LOCAL_SENDMSG_ARG(NULL));
3097
3098                 if ( !c ) {
3099                         Debug( LDAP_DEBUG_TRACE,
3100                                 "connectionless_init: failed on %s (%d)\n",
3101                                 lr->sl_url.bv_val, lr->sl_sd, 0 );
3102                         return -1;
3103                 }
3104                 lr->sl_is_udp++;
3105         }
3106
3107         return 0;
3108 }
3109 #endif /* LDAP_CONNECTIONLESS */
3110
3111 int
3112 slapd_daemon( void )
3113 {
3114         int i, rc;
3115
3116 #ifdef LDAP_CONNECTIONLESS
3117         connectionless_init();
3118 #endif /* LDAP_CONNECTIONLESS */
3119
3120         if ( slapd_daemon_threads > SLAPD_MAX_DAEMON_THREADS )
3121                 slapd_daemon_threads = SLAPD_MAX_DAEMON_THREADS;
3122
3123         listener_tid = ch_malloc(slapd_daemon_threads * sizeof(ldap_pvt_thread_t));
3124
3125         /* daemon_init only inits element 0 */
3126         for ( i=1; i<slapd_daemon_threads; i++ )
3127         {
3128                 ldap_pvt_thread_mutex_init( &slap_daemon[i].sd_mutex );
3129
3130                 if( (rc = lutil_pair( wake_sds[i] )) < 0 ) {
3131                         Debug( LDAP_DEBUG_ANY,
3132                                 "daemon: lutil_pair() failed rc=%d\n", rc, 0, 0 );
3133                         return rc;
3134                 }
3135                 ber_pvt_socket_set_nonblock( wake_sds[i][1], 1 );
3136
3137                 SLAP_SOCK_INIT(i);
3138         }
3139
3140         for ( i=0; i<slapd_daemon_threads; i++ )
3141         {
3142                 /* listener as a separate THREAD */
3143                 rc = ldap_pvt_thread_create( &listener_tid[i],
3144                         0, slapd_daemon_task, &listener_tid[i] );
3145
3146                 if ( rc != 0 ) {
3147                         Debug( LDAP_DEBUG_ANY,
3148                         "listener ldap_pvt_thread_create failed (%d)\n", rc, 0, 0 );
3149                         return rc;
3150                 }
3151         }
3152
3153         /* wait for the listener threads to complete */
3154         for ( i=0; i<slapd_daemon_threads; i++ )
3155                 ldap_pvt_thread_join( listener_tid[i], (void *)NULL );
3156
3157         destroy_listeners();
3158         ch_free( listener_tid );
3159         listener_tid = NULL;
3160
3161         return 0;
3162 }
3163
3164 static int
3165 sockinit( void )
3166 {
3167 #if defined( HAVE_WINSOCK2 )
3168         WORD wVersionRequested;
3169         WSADATA wsaData;
3170         int err;
3171
3172         wVersionRequested = MAKEWORD( 2, 0 );
3173
3174         err = WSAStartup( wVersionRequested, &wsaData );
3175         if ( err != 0 ) {
3176                 /* Tell the user that we couldn't find a usable */
3177                 /* WinSock DLL.                                  */
3178                 return -1;
3179         }
3180
3181         /* Confirm that the WinSock DLL supports 2.0.*/
3182         /* Note that if the DLL supports versions greater    */
3183         /* than 2.0 in addition to 2.0, it will still return */
3184         /* 2.0 in wVersion since that is the version we      */
3185         /* requested.                                        */
3186
3187         if ( LOBYTE( wsaData.wVersion ) != 2 ||
3188                 HIBYTE( wsaData.wVersion ) != 0 )
3189         {
3190             /* Tell the user that we couldn't find a usable */
3191             /* WinSock DLL.                                  */
3192             WSACleanup();
3193             return -1;
3194         }
3195
3196         /* The WinSock DLL is acceptable. Proceed. */
3197 #elif defined( HAVE_WINSOCK )
3198         WSADATA wsaData;
3199         if ( WSAStartup( 0x0101, &wsaData ) != 0 ) return -1;
3200 #endif /* ! HAVE_WINSOCK2 && ! HAVE_WINSOCK */
3201
3202         return 0;
3203 }
3204
3205 static int
3206 sockdestroy( void )
3207 {
3208 #if defined( HAVE_WINSOCK2 ) || defined( HAVE_WINSOCK )
3209         WSACleanup();
3210 #endif /* HAVE_WINSOCK2 || HAVE_WINSOCK */
3211
3212         return 0;
3213 }
3214
3215 RETSIGTYPE
3216 slap_sig_shutdown( int sig )
3217 {
3218         int save_errno = errno;
3219         int i;
3220
3221 #if 0
3222         Debug(LDAP_DEBUG_TRACE, "slap_sig_shutdown: signal %d\n", sig, 0, 0);
3223 #endif
3224
3225         /*
3226          * If the NT Service Manager is controlling the server, we don't
3227          * want SIGBREAK to kill the server. For some strange reason,
3228          * SIGBREAK is generated when a user logs out.
3229          */
3230
3231 #if defined(HAVE_NT_SERVICE_MANAGER) && defined(SIGBREAK)
3232         if (is_NT_Service && sig == SIGBREAK) {
3233                 /* empty */;
3234         } else
3235 #endif /* HAVE_NT_SERVICE_MANAGER && SIGBREAK */
3236 #ifdef SIGHUP
3237         if (sig == SIGHUP && global_gentlehup && slapd_gentle_shutdown == 0) {
3238                 slapd_gentle_shutdown = 1;
3239         } else
3240 #endif /* SIGHUP */
3241         {
3242                 slapd_shutdown = 1;
3243         }
3244
3245         for (i=0; i<slapd_daemon_threads; i++) {
3246                 WAKE_LISTENER(i,1);
3247         }
3248
3249         /* reinstall self */
3250         (void) SIGNAL_REINSTALL( sig, slap_sig_shutdown );
3251
3252         errno = save_errno;
3253 }
3254
3255 RETSIGTYPE
3256 slap_sig_wake( int sig )
3257 {
3258         int save_errno = errno;
3259
3260         WAKE_LISTENER(0,1);
3261
3262         /* reinstall self */
3263         (void) SIGNAL_REINSTALL( sig, slap_sig_wake );
3264
3265         errno = save_errno;
3266 }
3267
3268
3269 void
3270 slapd_add_internal( ber_socket_t s, int isactive )
3271 {
3272         slapd_add( s, isactive, NULL, -1 );
3273 }
3274
3275 Listener **
3276 slapd_get_listeners( void )
3277 {
3278         /* Could return array with no listeners if !listening, but current
3279          * callers mostly look at the URLs.  E.g. syncrepl uses this to
3280          * identify the server, which means it wants the startup arguments.
3281          */
3282         return slap_listeners;
3283 }
3284
3285 /* Reject all incoming requests */
3286 void
3287 slap_suspend_listeners( void )
3288 {
3289         int i;
3290         for (i=0; slap_listeners[i]; i++) {
3291                 slap_listeners[i]->sl_mute = 1;
3292                 listen( slap_listeners[i]->sl_sd, 0 );
3293         }
3294 }
3295
3296 /* Resume after a suspend */
3297 void
3298 slap_resume_listeners( void )
3299 {
3300         int i;
3301         for (i=0; slap_listeners[i]; i++) {
3302                 slap_listeners[i]->sl_mute = 0;
3303                 listen( slap_listeners[i]->sl_sd, SLAPD_LISTEN_BACKLOG );
3304         }
3305 }
3306
3307 void
3308 slap_wake_listener()
3309 {
3310         WAKE_LISTENER(0,1);
3311 }
3312
3313 /* return 0 on timeout, 1 on writer ready
3314  * -1 on general error
3315  */
3316 int
3317 slapd_wait_writer( ber_socket_t sd )
3318 {
3319 #ifdef HAVE_WINSOCK
3320         fd_set writefds;
3321         struct timeval tv, *tvp;
3322
3323         FD_ZERO( &writefds );
3324         FD_SET( slapd_ws_sockets[sd], &writefds );
3325         if ( global_writetimeout ) {
3326                 tv.tv_sec = global_writetimeout;
3327                 tv.tv_usec = 0;
3328                 tvp = &tv;
3329         } else {
3330                 tvp = NULL;
3331         }
3332         return select( 0, NULL, &writefds, NULL, tvp );
3333 #else
3334         struct pollfd fds;
3335         int timeout = global_writetimeout ? global_writetimeout * 1000 : -1;
3336
3337         fds.fd = sd;
3338         fds.events = POLLOUT;
3339
3340         return poll( &fds, 1, timeout );
3341 #endif
3342 }