xref: /original-bsd/sbin/nfsd/nfsd.c (revision fac0c393)
1 /*
2  * Copyright (c) 1989, 1993, 1994
3  *	The Regents of the University of California.  All rights reserved.
4  *
5  * This code is derived from software contributed to Berkeley by
6  * Rick Macklem at The University of Guelph.
7  *
8  * %sccs.include.redist.c%
9  */
10 
11 #ifndef lint
12 static char copyright[] =
13 "@(#) Copyright (c) 1989, 1993, 1994\n\
14 	The Regents of the University of California.  All rights reserved.\n";
15 #endif not lint
16 
17 #ifndef lint
18 static char sccsid[] = "@(#)nfsd.c	8.8 (Berkeley) 02/14/95";
19 #endif not lint
20 
21 #include <sys/param.h>
22 #include <sys/syslog.h>
23 #include <sys/ioctl.h>
24 #include <sys/stat.h>
25 #include <sys/wait.h>
26 #include <sys/uio.h>
27 #include <sys/ucred.h>
28 #include <sys/mount.h>
29 #include <sys/socket.h>
30 #include <sys/socketvar.h>
31 
32 #include <rpc/rpc.h>
33 #include <rpc/pmap_clnt.h>
34 #include <rpc/pmap_prot.h>
35 
36 #ifdef ISO
37 #include <netiso/iso.h>
38 #endif
39 #include <nfs/rpcv2.h>
40 #include <nfs/nfsv2.h>
41 #include <nfs/nfs.h>
42 
43 #ifdef KERBEROS
44 #include <kerberosIV/des.h>
45 #include <kerberosIV/krb.h>
46 #endif
47 
48 #include <err.h>
49 #include <errno.h>
50 #include <fcntl.h>
51 #include <grp.h>
52 #include <pwd.h>
53 #include <signal.h>
54 #include <stdio.h>
55 #include <stdlib.h>
56 #include <strings.h>
57 #include <unistd.h>
58 
59 /* Global defs */
60 #ifdef DEBUG
61 #define	syslog(e, s)	fprintf(stderr,(s))
62 int	debug = 1;
63 #else
64 int	debug = 0;
65 #endif
66 
67 struct	nfsd_srvargs nsd;
68 char	**Argv = NULL;		/* pointer to argument vector */
69 char	*LastArg = NULL;	/* end of argv */
70 
71 #ifdef KERBEROS
72 char		lnam[ANAME_SZ];
73 KTEXT_ST	kt;
74 AUTH_DAT	auth;
75 char		inst[INST_SZ];
76 #endif
77 
78 void	nonfs __P((int));
79 void	reapchild __P((int));
80 void	setproctitle __P((char *));
81 void	usage __P((void));
82 
83 /*
84  * Nfs server daemon mostly just a user context for nfssvc()
85  *
86  * 1 - do file descriptor and signal cleanup
87  * 2 - fork the nfsd(s)
88  * 3 - create server socket(s)
89  * 4 - register socket with portmap
90  *
91  * For connectionless protocols, just pass the socket into the kernel via.
92  * nfssvc().
93  * For connection based sockets, loop doing accepts. When you get a new
94  * socket from accept, pass the msgsock into the kernel via. nfssvc().
95  * The arguments are:
96  *	-c - support iso cltp clients
97  *	-r - reregister with portmapper
98  *	-t - support tcp nfs clients
99  *	-u - support udp nfs clients
100  * followed by "n" which is the number of nfsds' to fork off
101  */
102 int
103 main(argc, argv, envp)
104 	int argc;
105 	char *argv[], *envp[];
106 {
107 	extern int optind;
108 	struct group *grp;
109 	struct nfsd_args nfsdargs;
110 	struct passwd *pwd;
111 	struct ucred *cr;
112 	struct sockaddr_in inetaddr, inetpeer;
113 #ifdef ISO
114 	struct sockaddr_iso isoaddr, isopeer;
115 #endif
116 	fd_set ready, sockbits;
117 	int ch, cltpflag, connect_type_cnt, i, len, maxsock, msgsock;
118 	int nfsdcnt, nfssvc_flag, on, reregister, sock, tcpflag, tcpsock;
119 	int tp4cnt, tp4flag, tp4sock, tpipcnt, tpipflag, tpipsock, udpflag;
120 	char *cp, **cpp;
121 
122 	/* Save start and extent of argv for setproctitle. */
123 	Argv = argv;
124 	if (envp == 0 || *envp == 0)
125 		envp = argv;
126 	while (*envp)
127 		envp++;
128 	LastArg = envp[-1] + strlen(envp[-1]);
129 
130 #define	MAXNFSDCNT	20
131 #define	DEFNFSDCNT	 4
132 	nfsdcnt = DEFNFSDCNT;
133 	cltpflag = reregister = tcpflag = tp4cnt = tp4flag = tpipcnt = 0;
134 	tpipflag = udpflag = 0;
135 #ifdef ISO
136 #define	GETOPT	"cn:rtu"
137 #define	USAGE	"[-crtu] [-n num_servers]"
138 #else
139 #define	GETOPT	"n:rtu"
140 #define	USAGE	"[-rtu] [-n num_servers]"
141 #endif
142 	while ((ch = getopt(argc, argv, GETOPT)) != EOF)
143 		switch (ch) {
144 		case 'n':
145 			nfsdcnt = atoi(optarg);
146 			if (nfsdcnt < 1 || nfsdcnt > MAXNFSDCNT) {
147 				warnx("nfsd count %d; reset to %d", DEFNFSDCNT);
148 				nfsdcnt = DEFNFSDCNT;
149 			}
150 			break;
151 		case 'r':
152 			reregister = 1;
153 			break;
154 		case 't':
155 			tcpflag = 1;
156 			break;
157 		case 'u':
158 			udpflag = 1;
159 			break;
160 #ifdef ISO
161 		case 'c':
162 			cltpflag = 1;
163 			break;
164 #ifdef notyet
165 		case 'i':
166 			tp4cnt = 1;
167 			break;
168 		case 'p':
169 			tpipcnt = 1;
170 			break;
171 #endif /* notyet */
172 #endif /* ISO */
173 		default:
174 		case '?':
175 			usage();
176 		};
177 	argv += optind;
178 	argc -= optind;
179 
180 	/*
181 	 * XXX
182 	 * Backward compatibility, trailing number is the count of daemons.
183 	 */
184 	if (argc > 1)
185 		usage();
186 	if (argc == 1) {
187 		nfsdcnt = atoi(argv[0]);
188 		if (nfsdcnt < 1 || nfsdcnt > MAXNFSDCNT) {
189 			warnx("nfsd count %d; reset to %d", DEFNFSDCNT);
190 			nfsdcnt = DEFNFSDCNT;
191 		}
192 	}
193 
194 	if (debug == 0) {
195 		daemon(0, 0);
196 		(void)signal(SIGHUP, SIG_IGN);
197 		(void)signal(SIGINT, SIG_IGN);
198 		(void)signal(SIGQUIT, SIG_IGN);
199 		(void)signal(SIGSYS, nonfs);
200 		(void)signal(SIGTERM, SIG_IGN);
201 	}
202 	(void)signal(SIGCHLD, reapchild);
203 
204 	if (reregister) {
205 		if (udpflag &&
206 		    !pmap_set(RPCPROG_NFS, NFS_VER2, IPPROTO_UDP, NFS_PORT))
207 			err(1, "can't register with portmap for UDP.");
208 		if (tcpflag &&
209 		    !pmap_set(RPCPROG_NFS, NFS_VER2, IPPROTO_TCP, NFS_PORT))
210 			err(1, "can't register with portmap for TCP.");
211 		exit(0);
212 	}
213 	openlog("nfsd:", LOG_PID, LOG_DAEMON);
214 
215 	for (i = 0; i < nfsdcnt; i++) {
216 		switch (fork()) {
217 		case -1:
218 			syslog(LOG_ERR, "fork: %m");
219 			exit (1);
220 		case 0:
221 			break;
222 		default:
223 			continue;
224 		}
225 
226 		setproctitle("nfsd-srv");
227 		nfssvc_flag = NFSSVC_NFSD;
228 		nsd.nsd_nfsd = NULL;
229 #ifdef KERBEROS
230 		nsd.nsd_authstr = (char *)kt.dat;
231 #endif
232 		while (nfssvc(nfssvc_flag, &nsd) < 0) {
233 			if (errno != ENEEDAUTH) {
234 				syslog(LOG_ERR, "nfssvc: %m");
235 				exit(1);
236 			}
237 			nfssvc_flag = NFSSVC_NFSD | NFSSVC_AUTHINFAIL;
238 #ifdef KERBEROS
239 			kt.length = nsd.nsd_authlen;
240 			kt.mbz = 0;
241 			(void)strcpy(inst, "*");
242 			if (krb_rd_req(&kt, "rcmd",
243 			    inst, nsd.nsd_haddr, &auth, "") == RD_AP_OK &&
244 			    krb_kntoln(&auth, lnam) == KSUCCESS &&
245 			    (pwd = getpwnam(lnam)) != NULL) {
246 				cr = &nsd.nsd_cr;
247 				cr->cr_uid = pwd->pw_uid;
248 				cr->cr_groups[0] = pwd->pw_gid;
249 				cr->cr_ngroups = 1;
250 				setgrent();
251 				while ((grp = getgrent()) != NULL) {
252 					if (grp->gr_gid == cr->cr_groups[0])
253 						continue;
254 					for (cpp = grp->gr_mem;
255 					    *cpp != NULL; ++cpp)
256 						if (!strcmp(*cpp, lnam))
257 							break;
258 					if (*cpp == NULL)
259 						continue;
260 					cr->cr_groups[cr->cr_ngroups++]
261 					    = grp->gr_gid;
262 					if (cr->cr_ngroups == NGROUPS)
263 						break;
264 				}
265 				endgrent();
266 				nfssvc_flag = NFSSVC_NFSD | NFSSVC_AUTHIN;
267 			}
268 #endif /* KERBEROS */
269 		}
270 		exit(0);
271 	}
272 
273 	/* If we are serving udp, set up the socket. */
274 	if (udpflag) {
275 		if ((sock = socket(AF_INET, SOCK_DGRAM, 0)) < 0) {
276 			syslog(LOG_ERR, "can't create udp socket");
277 			exit(1);
278 		}
279 		inetaddr.sin_family = AF_INET;
280 		inetaddr.sin_addr.s_addr = INADDR_ANY;
281 		inetaddr.sin_port = htons(NFS_PORT);
282 		inetaddr.sin_len = sizeof(inetaddr);
283 		if (bind(sock,
284 		    (struct sockaddr *)&inetaddr, sizeof(inetaddr)) < 0) {
285 			syslog(LOG_ERR, "can't bind udp addr");
286 			exit(1);
287 		}
288 		if (!pmap_set(RPCPROG_NFS, NFS_VER2, IPPROTO_UDP, NFS_PORT)) {
289 			syslog(LOG_ERR, "can't register with udp portmap");
290 			exit(1);
291 		}
292 		nfsdargs.sock = sock;
293 		nfsdargs.name = NULL;
294 		nfsdargs.namelen = 0;
295 		if (nfssvc(NFSSVC_ADDSOCK, &nfsdargs) < 0) {
296 			syslog(LOG_ERR, "can't Add UDP socket");
297 			exit(1);
298 		}
299 		(void)close(sock);
300 	}
301 
302 #ifdef ISO
303 	/* If we are serving cltp, set up the socket. */
304 	if (cltpflag) {
305 		if ((sock = socket(AF_ISO, SOCK_DGRAM, 0)) < 0) {
306 			syslog(LOG_ERR, "can't create cltp socket");
307 			exit(1);
308 		}
309 		memset(&isoaddr, 0, sizeof(isoaddr));
310 		isoaddr.siso_family = AF_ISO;
311 		isoaddr.siso_tlen = 2;
312 		cp = TSEL(&isoaddr);
313 		*cp++ = (NFS_PORT >> 8);
314 		*cp = (NFS_PORT & 0xff);
315 		isoaddr.siso_len = sizeof(isoaddr);
316 		if (bind(sock,
317 		    (struct sockaddr *)&isoaddr, sizeof(isoaddr)) < 0) {
318 			syslog(LOG_ERR, "can't bind cltp addr");
319 			exit(1);
320 		}
321 #ifdef notyet
322 		/*
323 		 * XXX
324 		 * Someday this should probably use "rpcbind", the son of
325 		 * portmap.
326 		 */
327 		if (!pmap_set(RPCPROG_NFS, NFS_VER2, IPPROTO_UDP, NFS_PORT)) {
328 			syslog(LOG_ERR, "can't register with udp portmap");
329 			exit(1);
330 		}
331 #endif /* notyet */
332 		nfsdargs.sock = sock;
333 		nfsdargs.name = NULL;
334 		nfsdargs.namelen = 0;
335 		if (nfssvc(NFSSVC_ADDSOCK, &nfsdargs) < 0) {
336 			syslog(LOG_ERR, "can't add UDP socket");
337 			exit(1);
338 		}
339 		close(sock);
340 	}
341 #endif /* ISO */
342 
343 	/* Now set up the master server socket waiting for tcp connections. */
344 	on = 1;
345 	FD_ZERO(&sockbits);
346 	connect_type_cnt = 0;
347 	if (tcpflag) {
348 		if ((tcpsock = socket(AF_INET, SOCK_STREAM, 0)) < 0) {
349 			syslog(LOG_ERR, "can't create tcp socket");
350 			exit(1);
351 		}
352 		if (setsockopt(tcpsock,
353 		    SOL_SOCKET, SO_REUSEADDR, (char *)&on, sizeof(on)) < 0)
354 			syslog(LOG_ERR, "setsockopt SO_REUSEADDR: %m");
355 		inetaddr.sin_family = AF_INET;
356 		inetaddr.sin_addr.s_addr = INADDR_ANY;
357 		inetaddr.sin_port = htons(NFS_PORT);
358 		inetaddr.sin_len = sizeof(inetaddr);
359 		if (bind(tcpsock,
360 		    (struct sockaddr *)&inetaddr, sizeof (inetaddr)) < 0) {
361 			syslog(LOG_ERR, "can't bind tcp addr");
362 			exit(1);
363 		}
364 		if (listen(tcpsock, 5) < 0) {
365 			syslog(LOG_ERR, "listen failed");
366 			exit(1);
367 		}
368 		if (!pmap_set(RPCPROG_NFS, NFS_VER2, IPPROTO_TCP, NFS_PORT)) {
369 			syslog(LOG_ERR, "can't register tcp with portmap");
370 			exit(1);
371 		}
372 		FD_SET(tcpsock, &sockbits);
373 		maxsock = tcpsock;
374 		connect_type_cnt++;
375 	}
376 
377 #ifdef notyet
378 	/* Now set up the master server socket waiting for tp4 connections. */
379 	if (tp4flag) {
380 		if ((tp4sock = socket(AF_ISO, SOCK_SEQPACKET, 0)) < 0) {
381 			syslog(LOG_ERR, "can't create tp4 socket");
382 			exit(1);
383 		}
384 		if (setsockopt(tp4sock,
385 		    SOL_SOCKET, SO_REUSEADDR, (char *)&on, sizeof(on)) < 0)
386 			syslog(LOG_ERR, "setsockopt SO_REUSEADDR: %m");
387 		memset(&isoaddr, 0, sizeof(isoaddr));
388 		isoaddr.siso_family = AF_ISO;
389 		isoaddr.siso_tlen = 2;
390 		cp = TSEL(&isoaddr);
391 		*cp++ = (NFS_PORT >> 8);
392 		*cp = (NFS_PORT & 0xff);
393 		isoaddr.siso_len = sizeof(isoaddr);
394 		if (bind(tp4sock,
395 		    (struct sockaddr *)&isoaddr, sizeof (isoaddr)) < 0) {
396 			syslog(LOG_ERR, "can't bind tp4 addr");
397 			exit(1);
398 		}
399 		if (listen(tp4sock, 5) < 0) {
400 			syslog(LOG_ERR, "listen failed");
401 			exit(1);
402 		}
403 		/*
404 		 * XXX
405 		 * Someday this should probably use "rpcbind", the son of
406 		 * portmap.
407 		 */
408 		if (!pmap_set(RPCPROG_NFS, NFS_VER2, IPPROTO_TCP, NFS_PORT)) {
409 			syslog(LOG_ERR, "can't register tcp with portmap");
410 			exit(1);
411 		}
412 		FD_SET(tp4sock, &sockbits);
413 		maxsock = tp4sock;
414 		connect_type_cnt++;
415 	}
416 
417 	/* Now set up the master server socket waiting for tpip connections. */
418 	if (tpipflag) {
419 		if ((tpipsock = socket(AF_INET, SOCK_SEQPACKET, 0)) < 0) {
420 			syslog(LOG_ERR, "can't create tpip socket");
421 			exit(1);
422 		}
423 		if (setsockopt(tpipsock,
424 		    SOL_SOCKET, SO_REUSEADDR, (char *)&on, sizeof(on)) < 0)
425 			syslog(LOG_ERR, "setsockopt SO_REUSEADDR: %m");
426 		inetaddr.sin_family = AF_INET;
427 		inetaddr.sin_addr.s_addr = INADDR_ANY;
428 		inetaddr.sin_port = htons(NFS_PORT);
429 		inetaddr.sin_len = sizeof(inetaddr);
430 		if (bind(tpipsock,
431 		    (struct sockaddr *)&inetaddr, sizeof (inetaddr)) < 0) {
432 			syslog(LOG_ERR, "can't bind tcp addr");
433 			exit(1);
434 		}
435 		if (listen(tpipsock, 5) < 0) {
436 			syslog(LOG_ERR, "listen failed");
437 			exit(1);
438 		}
439 		/*
440 		 * XXX
441 		 * Someday this should probably use "rpcbind", the son of
442 		 * portmap.
443 		 */
444 		if (!pmap_set(RPCPROG_NFS, NFS_VER2, IPPROTO_TCP, NFS_PORT)) {
445 			syslog(LOG_ERR, "can't register tcp with portmap");
446 			exit(1);
447 		}
448 		FD_SET(tpipsock, &sockbits);
449 		maxsock = tpipsock;
450 		connect_type_cnt++;
451 	}
452 #endif /* notyet */
453 
454 	if (connect_type_cnt == 0)
455 		exit(0);
456 
457 	setproctitle("nfsd-master");
458 
459 	/*
460 	 * Loop forever accepting connections and passing the sockets
461 	 * into the kernel for the mounts.
462 	 */
463 	for (;;) {
464 		ready = sockbits;
465 		if (connect_type_cnt > 1) {
466 			if (select(maxsock + 1,
467 			    &ready, NULL, NULL, NULL) < 1) {
468 				syslog(LOG_ERR, "select failed: %m");
469 				exit(1);
470 			}
471 		}
472 		if (tcpflag && FD_ISSET(tcpsock, &ready)) {
473 			len = sizeof(inetpeer);
474 			if ((msgsock = accept(tcpsock,
475 			    (struct sockaddr *)&inetpeer, &len)) < 0) {
476 				syslog(LOG_ERR, "accept failed: %m");
477 				exit(1);
478 			}
479 			memset(inetpeer.sin_zero, 0, sizeof(inetpeer.sin_zero));
480 			if (setsockopt(msgsock, SOL_SOCKET,
481 			    SO_KEEPALIVE, (char *)&on, sizeof(on)) < 0)
482 				syslog(LOG_ERR,
483 				    "setsockopt SO_KEEPALIVE: %m");
484 			nfsdargs.sock = msgsock;
485 			nfsdargs.name = (caddr_t)&inetpeer;
486 			nfsdargs.namelen = sizeof(inetpeer);
487 			nfssvc(NFSSVC_ADDSOCK, &nfsdargs);
488 			(void)close(msgsock);
489 		}
490 #ifdef notyet
491 		if (tp4flag && FD_ISSET(tp4sock, &ready)) {
492 			len = sizeof(isopeer);
493 			if ((msgsock = accept(tp4sock,
494 			    (struct sockaddr *)&isopeer, &len)) < 0) {
495 				syslog(LOG_ERR, "accept failed: %m");
496 				exit(1);
497 			}
498 			if (setsockopt(msgsock, SOL_SOCKET,
499 			    SO_KEEPALIVE, (char *)&on, sizeof(on)) < 0)
500 				syslog(LOG_ERR,
501 				    "setsockopt SO_KEEPALIVE: %m");
502 			nfsdargs.sock = msgsock;
503 			nfsdargs.name = (caddr_t)&isopeer;
504 			nfsdargs.namelen = len;
505 			nfssvc(NFSSVC_ADDSOCK, &nfsdargs);
506 			(void)close(msgsock);
507 		}
508 		if (tpipflag && FD_ISSET(tpipsock, &ready)) {
509 			len = sizeof(inetpeer);
510 			if ((msgsock = accept(tpipsock,
511 			    (struct sockaddr *)&inetpeer, &len)) < 0) {
512 				syslog(LOG_ERR, "Accept failed: %m");
513 				exit(1);
514 			}
515 			if (setsockopt(msgsock, SOL_SOCKET,
516 			    SO_KEEPALIVE, (char *)&on, sizeof(on)) < 0)
517 				syslog(LOG_ERR, "setsockopt SO_KEEPALIVE: %m");
518 			nfsdargs.sock = msgsock;
519 			nfsdargs.name = (caddr_t)&inetpeer;
520 			nfsdargs.namelen = len;
521 			nfssvc(NFSSVC_ADDSOCK, &nfsdargs);
522 			(void)close(msgsock);
523 		}
524 #endif /* notyet */
525 	}
526 }
527 
528 void
529 usage()
530 {
531 	(void)fprintf(stderr, "nfsd %s\n", USAGE);
532 	exit(1);
533 }
534 
535 void
536 nonfs(signo)
537 	int signo;
538 {
539 	syslog(LOG_ERR, "missing system call: NFS not available.");
540 }
541 
542 void
543 reapchild(signo)
544 	int signo;
545 {
546 
547 	while (wait3(NULL, WNOHANG, NULL));
548 }
549 
550 void
551 setproctitle(a)
552 	char *a;
553 {
554 	register char *cp;
555 	char buf[80];
556 
557 	cp = Argv[0];
558 	(void)snprintf(buf, sizeof(buf), "%s", a);
559 	(void)strncpy(cp, buf, LastArg - cp);
560 	cp += strlen(cp);
561 	while (cp < LastArg)
562 		*cp++ = '\0';
563 }
564