1 /* 2 * Copyright (c) 1989, 1993, 1994 3 * The Regents of the University of California. All rights reserved. 4 * 5 * This code is derived from software contributed to Berkeley by 6 * Rick Macklem at The University of Guelph. 7 * 8 * %sccs.include.redist.c% 9 */ 10 11 #ifndef lint 12 static char copyright[] = 13 "@(#) Copyright (c) 1989, 1993, 1994\n\ 14 The Regents of the University of California. All rights reserved.\n"; 15 #endif not lint 16 17 #ifndef lint 18 static char sccsid[] = "@(#)nfsd.c 8.9 (Berkeley) 03/29/95"; 19 #endif not lint 20 21 #include <sys/param.h> 22 #include <sys/syslog.h> 23 #include <sys/ioctl.h> 24 #include <sys/stat.h> 25 #include <sys/wait.h> 26 #include <sys/uio.h> 27 #include <sys/ucred.h> 28 #include <sys/mount.h> 29 #include <sys/socket.h> 30 #include <sys/socketvar.h> 31 32 #include <rpc/rpc.h> 33 #include <rpc/pmap_clnt.h> 34 #include <rpc/pmap_prot.h> 35 36 #ifdef ISO 37 #include <netiso/iso.h> 38 #endif 39 #include <nfs/rpcv2.h> 40 #include <nfs/nfsproto.h> 41 #include <nfs/nfs.h> 42 43 #ifdef NFSKERB 44 #include <kerberosIV/des.h> 45 #include <kerberosIV/krb.h> 46 #endif 47 48 #include <err.h> 49 #include <errno.h> 50 #include <fcntl.h> 51 #include <grp.h> 52 #include <pwd.h> 53 #include <signal.h> 54 #include <stdio.h> 55 #include <stdlib.h> 56 #include <strings.h> 57 #include <unistd.h> 58 59 /* Global defs */ 60 #ifdef DEBUG 61 #define syslog(e, s) fprintf(stderr,(s)) 62 int debug = 1; 63 #else 64 int debug = 0; 65 #endif 66 67 struct nfsd_srvargs nsd; 68 char **Argv = NULL; /* pointer to argument vector */ 69 char *LastArg = NULL; /* end of argv */ 70 71 #ifdef NFSKERB 72 char lnam[ANAME_SZ]; 73 KTEXT_ST kt; 74 AUTH_DAT kauth; 75 char inst[INST_SZ]; 76 struct nfsrpc_fullblock kin, kout; 77 struct nfsrpc_fullverf kverf; 78 NFSKERBKEY_T kivec; 79 struct timeval ktv; 80 NFSKERBKEYSCHED_T kerb_keysched; 81 #endif 82 83 void nonfs __P((int)); 84 void reapchild __P((int)); 85 void setproctitle __P((char *)); 86 void usage __P((void)); 87 88 /* 89 * Nfs server daemon mostly just a user context for nfssvc() 90 * 91 * 1 - do file descriptor and signal cleanup 92 * 2 - fork the nfsd(s) 93 * 3 - create server socket(s) 94 * 4 - register socket with portmap 95 * 96 * For connectionless protocols, just pass the socket into the kernel via. 97 * nfssvc(). 98 * For connection based sockets, loop doing accepts. When you get a new 99 * socket from accept, pass the msgsock into the kernel via. nfssvc(). 100 * The arguments are: 101 * -c - support iso cltp clients 102 * -r - reregister with portmapper 103 * -t - support tcp nfs clients 104 * -u - support udp nfs clients 105 * followed by "n" which is the number of nfsds' to fork off 106 */ 107 int 108 main(argc, argv, envp) 109 int argc; 110 char *argv[], *envp[]; 111 { 112 extern int optind; 113 struct group *grp; 114 struct nfsd_args nfsdargs; 115 struct passwd *pwd; 116 struct ucred *cr; 117 struct sockaddr_in inetaddr, inetpeer; 118 #ifdef ISO 119 struct sockaddr_iso isoaddr, isopeer; 120 #endif 121 struct timeval ktv; 122 fd_set ready, sockbits; 123 int ch, cltpflag, connect_type_cnt, i, len, maxsock, msgsock; 124 int nfsdcnt, nfssvc_flag, on, reregister, sock, tcpflag, tcpsock; 125 int tp4cnt, tp4flag, tp4sock, tpipcnt, tpipflag, tpipsock, udpflag; 126 char *cp, **cpp; 127 128 /* Save start and extent of argv for setproctitle. */ 129 Argv = argv; 130 if (envp == 0 || *envp == 0) 131 envp = argv; 132 while (*envp) 133 envp++; 134 LastArg = envp[-1] + strlen(envp[-1]); 135 136 #define MAXNFSDCNT 20 137 #define DEFNFSDCNT 4 138 nfsdcnt = DEFNFSDCNT; 139 cltpflag = reregister = tcpflag = tp4cnt = tp4flag = tpipcnt = 0; 140 tpipflag = udpflag = 0; 141 #ifdef ISO 142 #define GETOPT "cn:rtu" 143 #define USAGE "[-crtu] [-n num_servers]" 144 #else 145 #define GETOPT "n:rtu" 146 #define USAGE "[-rtu] [-n num_servers]" 147 #endif 148 while ((ch = getopt(argc, argv, GETOPT)) != EOF) 149 switch (ch) { 150 case 'n': 151 nfsdcnt = atoi(optarg); 152 if (nfsdcnt < 1 || nfsdcnt > MAXNFSDCNT) { 153 warnx("nfsd count %d; reset to %d", DEFNFSDCNT); 154 nfsdcnt = DEFNFSDCNT; 155 } 156 break; 157 case 'r': 158 reregister = 1; 159 break; 160 case 't': 161 tcpflag = 1; 162 break; 163 case 'u': 164 udpflag = 1; 165 break; 166 #ifdef ISO 167 case 'c': 168 cltpflag = 1; 169 break; 170 #ifdef notyet 171 case 'i': 172 tp4cnt = 1; 173 break; 174 case 'p': 175 tpipcnt = 1; 176 break; 177 #endif /* notyet */ 178 #endif /* ISO */ 179 default: 180 case '?': 181 usage(); 182 }; 183 argv += optind; 184 argc -= optind; 185 186 /* 187 * XXX 188 * Backward compatibility, trailing number is the count of daemons. 189 */ 190 if (argc > 1) 191 usage(); 192 if (argc == 1) { 193 nfsdcnt = atoi(argv[0]); 194 if (nfsdcnt < 1 || nfsdcnt > MAXNFSDCNT) { 195 warnx("nfsd count %d; reset to %d", DEFNFSDCNT); 196 nfsdcnt = DEFNFSDCNT; 197 } 198 } 199 200 if (debug == 0) { 201 daemon(0, 0); 202 (void)signal(SIGHUP, SIG_IGN); 203 (void)signal(SIGINT, SIG_IGN); 204 (void)signal(SIGQUIT, SIG_IGN); 205 (void)signal(SIGSYS, nonfs); 206 (void)signal(SIGTERM, SIG_IGN); 207 } 208 (void)signal(SIGCHLD, reapchild); 209 210 if (reregister) { 211 if (udpflag && 212 (!pmap_set(RPCPROG_NFS, 2, IPPROTO_UDP, NFS_PORT) || 213 !pmap_set(RPCPROG_NFS, 3, IPPROTO_UDP, NFS_PORT))) 214 err(1, "can't register with portmap for UDP."); 215 if (tcpflag && 216 (!pmap_set(RPCPROG_NFS, 2, IPPROTO_TCP, NFS_PORT) || 217 !pmap_set(RPCPROG_NFS, 3, IPPROTO_TCP, NFS_PORT))) 218 err(1, "can't register with portmap for TCP."); 219 exit(0); 220 } 221 openlog("nfsd:", LOG_PID, LOG_DAEMON); 222 223 for (i = 0; i < nfsdcnt; i++) { 224 switch (fork()) { 225 case -1: 226 syslog(LOG_ERR, "fork: %m"); 227 exit (1); 228 case 0: 229 break; 230 default: 231 continue; 232 } 233 234 setproctitle("server"); 235 nfssvc_flag = NFSSVC_NFSD; 236 nsd.nsd_nfsd = NULL; 237 #ifdef NFSKERB 238 if (sizeof (struct nfsrpc_fullverf) != RPCX_FULLVERF || 239 sizeof (struct nfsrpc_fullblock) != RPCX_FULLBLOCK) 240 syslog(LOG_ERR, "Yikes NFSKERB structs not packed!"); 241 nsd.nsd_authstr = (u_char *)&kt; 242 nsd.nsd_authlen = sizeof (kt); 243 nsd.nsd_verfstr = (u_char *)&kverf; 244 nsd.nsd_verflen = sizeof (kverf); 245 #endif 246 while (nfssvc(nfssvc_flag, &nsd) < 0) { 247 if (errno != ENEEDAUTH) { 248 syslog(LOG_ERR, "nfssvc: %m"); 249 exit(1); 250 } 251 nfssvc_flag = NFSSVC_NFSD | NFSSVC_AUTHINFAIL; 252 #ifdef NFSKERB 253 /* 254 * Get the Kerberos ticket out of the authenticator 255 * verify it and convert the principal name to a user 256 * name. The user name is then converted to a set of 257 * user credentials via the password and group file. 258 * Finally, decrypt the timestamp and validate it. 259 * For more info see the IETF Draft "Authentication 260 * in ONC RPC". 261 */ 262 kt.length = ntohl(kt.length); 263 if (gettimeofday(&ktv, (struct timezone *)0) == 0 && 264 kt.length > 0 && kt.length <= 265 (RPCAUTH_MAXSIZ - 3 * NFSX_UNSIGNED)) { 266 kin.w1 = NFS_KERBW1(kt); 267 kt.mbz = 0; 268 (void)strcpy(inst, "*"); 269 if (krb_rd_req(&kt, NFS_KERBSRV, 270 inst, nsd.nsd_haddr, &kauth, "") == RD_AP_OK && 271 krb_kntoln(&kauth, lnam) == KSUCCESS && 272 (pwd = getpwnam(lnam)) != NULL) { 273 cr = &nsd.nsd_cr; 274 cr->cr_uid = pwd->pw_uid; 275 cr->cr_groups[0] = pwd->pw_gid; 276 cr->cr_ngroups = 1; 277 setgrent(); 278 while ((grp = getgrent()) != NULL) { 279 if (grp->gr_gid == cr->cr_groups[0]) 280 continue; 281 for (cpp = grp->gr_mem; 282 *cpp != NULL; ++cpp) 283 if (!strcmp(*cpp, lnam)) 284 break; 285 if (*cpp == NULL) 286 continue; 287 cr->cr_groups[cr->cr_ngroups++] 288 = grp->gr_gid; 289 if (cr->cr_ngroups == NGROUPS) 290 break; 291 } 292 endgrent(); 293 294 /* 295 * Get the timestamp verifier out of the 296 * authenticator and verifier strings. 297 */ 298 kin.t1 = kverf.t1; 299 kin.t2 = kverf.t2; 300 kin.w2 = kverf.w2; 301 bzero((caddr_t)kivec, sizeof (kivec)); 302 bcopy((caddr_t)kauth.session, 303 (caddr_t)nsd.nsd_key,sizeof(kauth.session)); 304 305 /* 306 * Decrypt the timestamp verifier in CBC mode. 307 */ 308 XXX 309 310 /* 311 * Validate the timestamp verifier, to 312 * check that the session key is ok. 313 */ 314 nsd.nsd_timestamp.tv_sec = ntohl(kout.t1); 315 nsd.nsd_timestamp.tv_usec = ntohl(kout.t2); 316 nsd.nsd_ttl = ntohl(kout.w1); 317 if ((nsd.nsd_ttl - 1) == ntohl(kout.w2)) 318 nfssvc_flag = NFSSVC_NFSD | NFSSVC_AUTHIN; 319 } 320 #endif /* NFSKERB */ 321 } 322 exit(0); 323 } 324 325 /* If we are serving udp, set up the socket. */ 326 if (udpflag) { 327 if ((sock = socket(AF_INET, SOCK_DGRAM, 0)) < 0) { 328 syslog(LOG_ERR, "can't create udp socket"); 329 exit(1); 330 } 331 inetaddr.sin_family = AF_INET; 332 inetaddr.sin_addr.s_addr = INADDR_ANY; 333 inetaddr.sin_port = htons(NFS_PORT); 334 inetaddr.sin_len = sizeof(inetaddr); 335 if (bind(sock, 336 (struct sockaddr *)&inetaddr, sizeof(inetaddr)) < 0) { 337 syslog(LOG_ERR, "can't bind udp addr"); 338 exit(1); 339 } 340 if (!pmap_set(RPCPROG_NFS, 2, IPPROTO_UDP, NFS_PORT) || 341 !pmap_set(RPCPROG_NFS, 3, IPPROTO_UDP, NFS_PORT)) { 342 syslog(LOG_ERR, "can't register with udp portmap"); 343 exit(1); 344 } 345 nfsdargs.sock = sock; 346 nfsdargs.name = NULL; 347 nfsdargs.namelen = 0; 348 if (nfssvc(NFSSVC_ADDSOCK, &nfsdargs) < 0) { 349 syslog(LOG_ERR, "can't Add UDP socket"); 350 exit(1); 351 } 352 (void)close(sock); 353 } 354 355 #ifdef ISO 356 /* If we are serving cltp, set up the socket. */ 357 if (cltpflag) { 358 if ((sock = socket(AF_ISO, SOCK_DGRAM, 0)) < 0) { 359 syslog(LOG_ERR, "can't create cltp socket"); 360 exit(1); 361 } 362 memset(&isoaddr, 0, sizeof(isoaddr)); 363 isoaddr.siso_family = AF_ISO; 364 isoaddr.siso_tlen = 2; 365 cp = TSEL(&isoaddr); 366 *cp++ = (NFS_PORT >> 8); 367 *cp = (NFS_PORT & 0xff); 368 isoaddr.siso_len = sizeof(isoaddr); 369 if (bind(sock, 370 (struct sockaddr *)&isoaddr, sizeof(isoaddr)) < 0) { 371 syslog(LOG_ERR, "can't bind cltp addr"); 372 exit(1); 373 } 374 #ifdef notyet 375 /* 376 * XXX 377 * Someday this should probably use "rpcbind", the son of 378 * portmap. 379 */ 380 if (!pmap_set(RPCPROG_NFS, NFS_VER2, IPPROTO_UDP, NFS_PORT)) { 381 syslog(LOG_ERR, "can't register with udp portmap"); 382 exit(1); 383 } 384 #endif /* notyet */ 385 nfsdargs.sock = sock; 386 nfsdargs.name = NULL; 387 nfsdargs.namelen = 0; 388 if (nfssvc(NFSSVC_ADDSOCK, &nfsdargs) < 0) { 389 syslog(LOG_ERR, "can't add UDP socket"); 390 exit(1); 391 } 392 close(sock); 393 } 394 #endif /* ISO */ 395 396 /* Now set up the master server socket waiting for tcp connections. */ 397 on = 1; 398 FD_ZERO(&sockbits); 399 connect_type_cnt = 0; 400 if (tcpflag) { 401 if ((tcpsock = socket(AF_INET, SOCK_STREAM, 0)) < 0) { 402 syslog(LOG_ERR, "can't create tcp socket"); 403 exit(1); 404 } 405 if (setsockopt(tcpsock, 406 SOL_SOCKET, SO_REUSEADDR, (char *)&on, sizeof(on)) < 0) 407 syslog(LOG_ERR, "setsockopt SO_REUSEADDR: %m"); 408 inetaddr.sin_family = AF_INET; 409 inetaddr.sin_addr.s_addr = INADDR_ANY; 410 inetaddr.sin_port = htons(NFS_PORT); 411 inetaddr.sin_len = sizeof(inetaddr); 412 if (bind(tcpsock, 413 (struct sockaddr *)&inetaddr, sizeof (inetaddr)) < 0) { 414 syslog(LOG_ERR, "can't bind tcp addr"); 415 exit(1); 416 } 417 if (listen(tcpsock, 5) < 0) { 418 syslog(LOG_ERR, "listen failed"); 419 exit(1); 420 } 421 if (!pmap_set(RPCPROG_NFS, 2, IPPROTO_TCP, NFS_PORT) || 422 !pmap_set(RPCPROG_NFS, 3, IPPROTO_TCP, NFS_PORT)) { 423 syslog(LOG_ERR, "can't register tcp with portmap"); 424 exit(1); 425 } 426 FD_SET(tcpsock, &sockbits); 427 maxsock = tcpsock; 428 connect_type_cnt++; 429 } 430 431 #ifdef notyet 432 /* Now set up the master server socket waiting for tp4 connections. */ 433 if (tp4flag) { 434 if ((tp4sock = socket(AF_ISO, SOCK_SEQPACKET, 0)) < 0) { 435 syslog(LOG_ERR, "can't create tp4 socket"); 436 exit(1); 437 } 438 if (setsockopt(tp4sock, 439 SOL_SOCKET, SO_REUSEADDR, (char *)&on, sizeof(on)) < 0) 440 syslog(LOG_ERR, "setsockopt SO_REUSEADDR: %m"); 441 memset(&isoaddr, 0, sizeof(isoaddr)); 442 isoaddr.siso_family = AF_ISO; 443 isoaddr.siso_tlen = 2; 444 cp = TSEL(&isoaddr); 445 *cp++ = (NFS_PORT >> 8); 446 *cp = (NFS_PORT & 0xff); 447 isoaddr.siso_len = sizeof(isoaddr); 448 if (bind(tp4sock, 449 (struct sockaddr *)&isoaddr, sizeof (isoaddr)) < 0) { 450 syslog(LOG_ERR, "can't bind tp4 addr"); 451 exit(1); 452 } 453 if (listen(tp4sock, 5) < 0) { 454 syslog(LOG_ERR, "listen failed"); 455 exit(1); 456 } 457 /* 458 * XXX 459 * Someday this should probably use "rpcbind", the son of 460 * portmap. 461 */ 462 if (!pmap_set(RPCPROG_NFS, NFS_VER2, IPPROTO_TCP, NFS_PORT)) { 463 syslog(LOG_ERR, "can't register tcp with portmap"); 464 exit(1); 465 } 466 FD_SET(tp4sock, &sockbits); 467 maxsock = tp4sock; 468 connect_type_cnt++; 469 } 470 471 /* Now set up the master server socket waiting for tpip connections. */ 472 if (tpipflag) { 473 if ((tpipsock = socket(AF_INET, SOCK_SEQPACKET, 0)) < 0) { 474 syslog(LOG_ERR, "can't create tpip socket"); 475 exit(1); 476 } 477 if (setsockopt(tpipsock, 478 SOL_SOCKET, SO_REUSEADDR, (char *)&on, sizeof(on)) < 0) 479 syslog(LOG_ERR, "setsockopt SO_REUSEADDR: %m"); 480 inetaddr.sin_family = AF_INET; 481 inetaddr.sin_addr.s_addr = INADDR_ANY; 482 inetaddr.sin_port = htons(NFS_PORT); 483 inetaddr.sin_len = sizeof(inetaddr); 484 if (bind(tpipsock, 485 (struct sockaddr *)&inetaddr, sizeof (inetaddr)) < 0) { 486 syslog(LOG_ERR, "can't bind tcp addr"); 487 exit(1); 488 } 489 if (listen(tpipsock, 5) < 0) { 490 syslog(LOG_ERR, "listen failed"); 491 exit(1); 492 } 493 /* 494 * XXX 495 * Someday this should probably use "rpcbind", the son of 496 * portmap. 497 */ 498 if (!pmap_set(RPCPROG_NFS, NFS_VER2, IPPROTO_TCP, NFS_PORT)) { 499 syslog(LOG_ERR, "can't register tcp with portmap"); 500 exit(1); 501 } 502 FD_SET(tpipsock, &sockbits); 503 maxsock = tpipsock; 504 connect_type_cnt++; 505 } 506 #endif /* notyet */ 507 508 if (connect_type_cnt == 0) 509 exit(0); 510 511 setproctitle("master"); 512 513 /* 514 * Loop forever accepting connections and passing the sockets 515 * into the kernel for the mounts. 516 */ 517 for (;;) { 518 ready = sockbits; 519 if (connect_type_cnt > 1) { 520 if (select(maxsock + 1, 521 &ready, NULL, NULL, NULL) < 1) { 522 syslog(LOG_ERR, "select failed: %m"); 523 exit(1); 524 } 525 } 526 if (tcpflag && FD_ISSET(tcpsock, &ready)) { 527 len = sizeof(inetpeer); 528 if ((msgsock = accept(tcpsock, 529 (struct sockaddr *)&inetpeer, &len)) < 0) { 530 syslog(LOG_ERR, "accept failed: %m"); 531 exit(1); 532 } 533 memset(inetpeer.sin_zero, 0, sizeof(inetpeer.sin_zero)); 534 if (setsockopt(msgsock, SOL_SOCKET, 535 SO_KEEPALIVE, (char *)&on, sizeof(on)) < 0) 536 syslog(LOG_ERR, 537 "setsockopt SO_KEEPALIVE: %m"); 538 nfsdargs.sock = msgsock; 539 nfsdargs.name = (caddr_t)&inetpeer; 540 nfsdargs.namelen = sizeof(inetpeer); 541 nfssvc(NFSSVC_ADDSOCK, &nfsdargs); 542 (void)close(msgsock); 543 } 544 #ifdef notyet 545 if (tp4flag && FD_ISSET(tp4sock, &ready)) { 546 len = sizeof(isopeer); 547 if ((msgsock = accept(tp4sock, 548 (struct sockaddr *)&isopeer, &len)) < 0) { 549 syslog(LOG_ERR, "accept failed: %m"); 550 exit(1); 551 } 552 if (setsockopt(msgsock, SOL_SOCKET, 553 SO_KEEPALIVE, (char *)&on, sizeof(on)) < 0) 554 syslog(LOG_ERR, 555 "setsockopt SO_KEEPALIVE: %m"); 556 nfsdargs.sock = msgsock; 557 nfsdargs.name = (caddr_t)&isopeer; 558 nfsdargs.namelen = len; 559 nfssvc(NFSSVC_ADDSOCK, &nfsdargs); 560 (void)close(msgsock); 561 } 562 if (tpipflag && FD_ISSET(tpipsock, &ready)) { 563 len = sizeof(inetpeer); 564 if ((msgsock = accept(tpipsock, 565 (struct sockaddr *)&inetpeer, &len)) < 0) { 566 syslog(LOG_ERR, "Accept failed: %m"); 567 exit(1); 568 } 569 if (setsockopt(msgsock, SOL_SOCKET, 570 SO_KEEPALIVE, (char *)&on, sizeof(on)) < 0) 571 syslog(LOG_ERR, "setsockopt SO_KEEPALIVE: %m"); 572 nfsdargs.sock = msgsock; 573 nfsdargs.name = (caddr_t)&inetpeer; 574 nfsdargs.namelen = len; 575 nfssvc(NFSSVC_ADDSOCK, &nfsdargs); 576 (void)close(msgsock); 577 } 578 #endif /* notyet */ 579 } 580 } 581 582 void 583 usage() 584 { 585 (void)fprintf(stderr, "usage: nfsd %s\n", USAGE); 586 exit(1); 587 } 588 589 void 590 nonfs(signo) 591 int signo; 592 { 593 syslog(LOG_ERR, "missing system call: NFS not available."); 594 } 595 596 void 597 reapchild(signo) 598 int signo; 599 { 600 601 while (wait3(NULL, WNOHANG, NULL) > 0); 602 } 603 604 void 605 setproctitle(a) 606 char *a; 607 { 608 register char *cp; 609 char buf[80]; 610 611 cp = Argv[0]; 612 (void)snprintf(buf, sizeof(buf), "nfsd-%s", a); 613 (void)strncpy(cp, buf, LastArg - cp); 614 cp += strlen(cp); 615 while (cp < LastArg) 616 *cp++ = '\0'; 617 } 618