1 /*
2 * Copyright (c) 1989, 1993, 1994
3 * The Regents of the University of California. All rights reserved.
4 *
5 * This code is derived from software contributed to Berkeley by
6 * Rick Macklem at The University of Guelph.
7 *
8 * %sccs.include.redist.c%
9 */
10
11 #ifndef lint
12 static char copyright[] =
13 "@(#) Copyright (c) 1989, 1993, 1994\n\
14 The Regents of the University of California. All rights reserved.\n";
15 #endif not lint
16
17 #ifndef lint
18 static char sccsid[] = "@(#)nfsd.c 8.9 (Berkeley) 03/29/95";
19 #endif not lint
20
21 #include <sys/param.h>
22 #include <sys/syslog.h>
23 #include <sys/ioctl.h>
24 #include <sys/stat.h>
25 #include <sys/wait.h>
26 #include <sys/uio.h>
27 #include <sys/ucred.h>
28 #include <sys/mount.h>
29 #include <sys/socket.h>
30 #include <sys/socketvar.h>
31
32 #include <rpc/rpc.h>
33 #include <rpc/pmap_clnt.h>
34 #include <rpc/pmap_prot.h>
35
36 #ifdef ISO
37 #include <netiso/iso.h>
38 #endif
39 #include <nfs/rpcv2.h>
40 #include <nfs/nfsproto.h>
41 #include <nfs/nfs.h>
42
43 #ifdef NFSKERB
44 #include <kerberosIV/des.h>
45 #include <kerberosIV/krb.h>
46 #endif
47
48 #include <err.h>
49 #include <errno.h>
50 #include <fcntl.h>
51 #include <grp.h>
52 #include <pwd.h>
53 #include <signal.h>
54 #include <stdio.h>
55 #include <stdlib.h>
56 #include <strings.h>
57 #include <unistd.h>
58
59 /* Global defs */
60 #ifdef DEBUG
61 #define syslog(e, s) fprintf(stderr,(s))
62 int debug = 1;
63 #else
64 int debug = 0;
65 #endif
66
67 struct nfsd_srvargs nsd;
68 char **Argv = NULL; /* pointer to argument vector */
69 char *LastArg = NULL; /* end of argv */
70
71 #ifdef NFSKERB
72 char lnam[ANAME_SZ];
73 KTEXT_ST kt;
74 AUTH_DAT kauth;
75 char inst[INST_SZ];
76 struct nfsrpc_fullblock kin, kout;
77 struct nfsrpc_fullverf kverf;
78 NFSKERBKEY_T kivec;
79 struct timeval ktv;
80 NFSKERBKEYSCHED_T kerb_keysched;
81 #endif
82
83 void nonfs __P((int));
84 void reapchild __P((int));
85 void setproctitle __P((char *));
86 void usage __P((void));
87
88 /*
89 * Nfs server daemon mostly just a user context for nfssvc()
90 *
91 * 1 - do file descriptor and signal cleanup
92 * 2 - fork the nfsd(s)
93 * 3 - create server socket(s)
94 * 4 - register socket with portmap
95 *
96 * For connectionless protocols, just pass the socket into the kernel via.
97 * nfssvc().
98 * For connection based sockets, loop doing accepts. When you get a new
99 * socket from accept, pass the msgsock into the kernel via. nfssvc().
100 * The arguments are:
101 * -c - support iso cltp clients
102 * -r - reregister with portmapper
103 * -t - support tcp nfs clients
104 * -u - support udp nfs clients
105 * followed by "n" which is the number of nfsds' to fork off
106 */
107 int
main(argc,argv,envp)108 main(argc, argv, envp)
109 int argc;
110 char *argv[], *envp[];
111 {
112 extern int optind;
113 struct group *grp;
114 struct nfsd_args nfsdargs;
115 struct passwd *pwd;
116 struct ucred *cr;
117 struct sockaddr_in inetaddr, inetpeer;
118 #ifdef ISO
119 struct sockaddr_iso isoaddr, isopeer;
120 #endif
121 struct timeval ktv;
122 fd_set ready, sockbits;
123 int ch, cltpflag, connect_type_cnt, i, len, maxsock, msgsock;
124 int nfsdcnt, nfssvc_flag, on, reregister, sock, tcpflag, tcpsock;
125 int tp4cnt, tp4flag, tp4sock, tpipcnt, tpipflag, tpipsock, udpflag;
126 char *cp, **cpp;
127
128 /* Save start and extent of argv for setproctitle. */
129 Argv = argv;
130 if (envp == 0 || *envp == 0)
131 envp = argv;
132 while (*envp)
133 envp++;
134 LastArg = envp[-1] + strlen(envp[-1]);
135
136 #define MAXNFSDCNT 20
137 #define DEFNFSDCNT 4
138 nfsdcnt = DEFNFSDCNT;
139 cltpflag = reregister = tcpflag = tp4cnt = tp4flag = tpipcnt = 0;
140 tpipflag = udpflag = 0;
141 #ifdef ISO
142 #define GETOPT "cn:rtu"
143 #define USAGE "[-crtu] [-n num_servers]"
144 #else
145 #define GETOPT "n:rtu"
146 #define USAGE "[-rtu] [-n num_servers]"
147 #endif
148 while ((ch = getopt(argc, argv, GETOPT)) != EOF)
149 switch (ch) {
150 case 'n':
151 nfsdcnt = atoi(optarg);
152 if (nfsdcnt < 1 || nfsdcnt > MAXNFSDCNT) {
153 warnx("nfsd count %d; reset to %d", DEFNFSDCNT);
154 nfsdcnt = DEFNFSDCNT;
155 }
156 break;
157 case 'r':
158 reregister = 1;
159 break;
160 case 't':
161 tcpflag = 1;
162 break;
163 case 'u':
164 udpflag = 1;
165 break;
166 #ifdef ISO
167 case 'c':
168 cltpflag = 1;
169 break;
170 #ifdef notyet
171 case 'i':
172 tp4cnt = 1;
173 break;
174 case 'p':
175 tpipcnt = 1;
176 break;
177 #endif /* notyet */
178 #endif /* ISO */
179 default:
180 case '?':
181 usage();
182 };
183 argv += optind;
184 argc -= optind;
185
186 /*
187 * XXX
188 * Backward compatibility, trailing number is the count of daemons.
189 */
190 if (argc > 1)
191 usage();
192 if (argc == 1) {
193 nfsdcnt = atoi(argv[0]);
194 if (nfsdcnt < 1 || nfsdcnt > MAXNFSDCNT) {
195 warnx("nfsd count %d; reset to %d", DEFNFSDCNT);
196 nfsdcnt = DEFNFSDCNT;
197 }
198 }
199
200 if (debug == 0) {
201 daemon(0, 0);
202 (void)signal(SIGHUP, SIG_IGN);
203 (void)signal(SIGINT, SIG_IGN);
204 (void)signal(SIGQUIT, SIG_IGN);
205 (void)signal(SIGSYS, nonfs);
206 (void)signal(SIGTERM, SIG_IGN);
207 }
208 (void)signal(SIGCHLD, reapchild);
209
210 if (reregister) {
211 if (udpflag &&
212 (!pmap_set(RPCPROG_NFS, 2, IPPROTO_UDP, NFS_PORT) ||
213 !pmap_set(RPCPROG_NFS, 3, IPPROTO_UDP, NFS_PORT)))
214 err(1, "can't register with portmap for UDP.");
215 if (tcpflag &&
216 (!pmap_set(RPCPROG_NFS, 2, IPPROTO_TCP, NFS_PORT) ||
217 !pmap_set(RPCPROG_NFS, 3, IPPROTO_TCP, NFS_PORT)))
218 err(1, "can't register with portmap for TCP.");
219 exit(0);
220 }
221 openlog("nfsd:", LOG_PID, LOG_DAEMON);
222
223 for (i = 0; i < nfsdcnt; i++) {
224 switch (fork()) {
225 case -1:
226 syslog(LOG_ERR, "fork: %m");
227 exit (1);
228 case 0:
229 break;
230 default:
231 continue;
232 }
233
234 setproctitle("server");
235 nfssvc_flag = NFSSVC_NFSD;
236 nsd.nsd_nfsd = NULL;
237 #ifdef NFSKERB
238 if (sizeof (struct nfsrpc_fullverf) != RPCX_FULLVERF ||
239 sizeof (struct nfsrpc_fullblock) != RPCX_FULLBLOCK)
240 syslog(LOG_ERR, "Yikes NFSKERB structs not packed!");
241 nsd.nsd_authstr = (u_char *)&kt;
242 nsd.nsd_authlen = sizeof (kt);
243 nsd.nsd_verfstr = (u_char *)&kverf;
244 nsd.nsd_verflen = sizeof (kverf);
245 #endif
246 while (nfssvc(nfssvc_flag, &nsd) < 0) {
247 if (errno != ENEEDAUTH) {
248 syslog(LOG_ERR, "nfssvc: %m");
249 exit(1);
250 }
251 nfssvc_flag = NFSSVC_NFSD | NFSSVC_AUTHINFAIL;
252 #ifdef NFSKERB
253 /*
254 * Get the Kerberos ticket out of the authenticator
255 * verify it and convert the principal name to a user
256 * name. The user name is then converted to a set of
257 * user credentials via the password and group file.
258 * Finally, decrypt the timestamp and validate it.
259 * For more info see the IETF Draft "Authentication
260 * in ONC RPC".
261 */
262 kt.length = ntohl(kt.length);
263 if (gettimeofday(&ktv, (struct timezone *)0) == 0 &&
264 kt.length > 0 && kt.length <=
265 (RPCAUTH_MAXSIZ - 3 * NFSX_UNSIGNED)) {
266 kin.w1 = NFS_KERBW1(kt);
267 kt.mbz = 0;
268 (void)strcpy(inst, "*");
269 if (krb_rd_req(&kt, NFS_KERBSRV,
270 inst, nsd.nsd_haddr, &kauth, "") == RD_AP_OK &&
271 krb_kntoln(&kauth, lnam) == KSUCCESS &&
272 (pwd = getpwnam(lnam)) != NULL) {
273 cr = &nsd.nsd_cr;
274 cr->cr_uid = pwd->pw_uid;
275 cr->cr_groups[0] = pwd->pw_gid;
276 cr->cr_ngroups = 1;
277 setgrent();
278 while ((grp = getgrent()) != NULL) {
279 if (grp->gr_gid == cr->cr_groups[0])
280 continue;
281 for (cpp = grp->gr_mem;
282 *cpp != NULL; ++cpp)
283 if (!strcmp(*cpp, lnam))
284 break;
285 if (*cpp == NULL)
286 continue;
287 cr->cr_groups[cr->cr_ngroups++]
288 = grp->gr_gid;
289 if (cr->cr_ngroups == NGROUPS)
290 break;
291 }
292 endgrent();
293
294 /*
295 * Get the timestamp verifier out of the
296 * authenticator and verifier strings.
297 */
298 kin.t1 = kverf.t1;
299 kin.t2 = kverf.t2;
300 kin.w2 = kverf.w2;
301 bzero((caddr_t)kivec, sizeof (kivec));
302 bcopy((caddr_t)kauth.session,
303 (caddr_t)nsd.nsd_key,sizeof(kauth.session));
304
305 /*
306 * Decrypt the timestamp verifier in CBC mode.
307 */
308 XXX
309
310 /*
311 * Validate the timestamp verifier, to
312 * check that the session key is ok.
313 */
314 nsd.nsd_timestamp.tv_sec = ntohl(kout.t1);
315 nsd.nsd_timestamp.tv_usec = ntohl(kout.t2);
316 nsd.nsd_ttl = ntohl(kout.w1);
317 if ((nsd.nsd_ttl - 1) == ntohl(kout.w2))
318 nfssvc_flag = NFSSVC_NFSD | NFSSVC_AUTHIN;
319 }
320 #endif /* NFSKERB */
321 }
322 exit(0);
323 }
324
325 /* If we are serving udp, set up the socket. */
326 if (udpflag) {
327 if ((sock = socket(AF_INET, SOCK_DGRAM, 0)) < 0) {
328 syslog(LOG_ERR, "can't create udp socket");
329 exit(1);
330 }
331 inetaddr.sin_family = AF_INET;
332 inetaddr.sin_addr.s_addr = INADDR_ANY;
333 inetaddr.sin_port = htons(NFS_PORT);
334 inetaddr.sin_len = sizeof(inetaddr);
335 if (bind(sock,
336 (struct sockaddr *)&inetaddr, sizeof(inetaddr)) < 0) {
337 syslog(LOG_ERR, "can't bind udp addr");
338 exit(1);
339 }
340 if (!pmap_set(RPCPROG_NFS, 2, IPPROTO_UDP, NFS_PORT) ||
341 !pmap_set(RPCPROG_NFS, 3, IPPROTO_UDP, NFS_PORT)) {
342 syslog(LOG_ERR, "can't register with udp portmap");
343 exit(1);
344 }
345 nfsdargs.sock = sock;
346 nfsdargs.name = NULL;
347 nfsdargs.namelen = 0;
348 if (nfssvc(NFSSVC_ADDSOCK, &nfsdargs) < 0) {
349 syslog(LOG_ERR, "can't Add UDP socket");
350 exit(1);
351 }
352 (void)close(sock);
353 }
354
355 #ifdef ISO
356 /* If we are serving cltp, set up the socket. */
357 if (cltpflag) {
358 if ((sock = socket(AF_ISO, SOCK_DGRAM, 0)) < 0) {
359 syslog(LOG_ERR, "can't create cltp socket");
360 exit(1);
361 }
362 memset(&isoaddr, 0, sizeof(isoaddr));
363 isoaddr.siso_family = AF_ISO;
364 isoaddr.siso_tlen = 2;
365 cp = TSEL(&isoaddr);
366 *cp++ = (NFS_PORT >> 8);
367 *cp = (NFS_PORT & 0xff);
368 isoaddr.siso_len = sizeof(isoaddr);
369 if (bind(sock,
370 (struct sockaddr *)&isoaddr, sizeof(isoaddr)) < 0) {
371 syslog(LOG_ERR, "can't bind cltp addr");
372 exit(1);
373 }
374 #ifdef notyet
375 /*
376 * XXX
377 * Someday this should probably use "rpcbind", the son of
378 * portmap.
379 */
380 if (!pmap_set(RPCPROG_NFS, NFS_VER2, IPPROTO_UDP, NFS_PORT)) {
381 syslog(LOG_ERR, "can't register with udp portmap");
382 exit(1);
383 }
384 #endif /* notyet */
385 nfsdargs.sock = sock;
386 nfsdargs.name = NULL;
387 nfsdargs.namelen = 0;
388 if (nfssvc(NFSSVC_ADDSOCK, &nfsdargs) < 0) {
389 syslog(LOG_ERR, "can't add UDP socket");
390 exit(1);
391 }
392 close(sock);
393 }
394 #endif /* ISO */
395
396 /* Now set up the master server socket waiting for tcp connections. */
397 on = 1;
398 FD_ZERO(&sockbits);
399 connect_type_cnt = 0;
400 if (tcpflag) {
401 if ((tcpsock = socket(AF_INET, SOCK_STREAM, 0)) < 0) {
402 syslog(LOG_ERR, "can't create tcp socket");
403 exit(1);
404 }
405 if (setsockopt(tcpsock,
406 SOL_SOCKET, SO_REUSEADDR, (char *)&on, sizeof(on)) < 0)
407 syslog(LOG_ERR, "setsockopt SO_REUSEADDR: %m");
408 inetaddr.sin_family = AF_INET;
409 inetaddr.sin_addr.s_addr = INADDR_ANY;
410 inetaddr.sin_port = htons(NFS_PORT);
411 inetaddr.sin_len = sizeof(inetaddr);
412 if (bind(tcpsock,
413 (struct sockaddr *)&inetaddr, sizeof (inetaddr)) < 0) {
414 syslog(LOG_ERR, "can't bind tcp addr");
415 exit(1);
416 }
417 if (listen(tcpsock, 5) < 0) {
418 syslog(LOG_ERR, "listen failed");
419 exit(1);
420 }
421 if (!pmap_set(RPCPROG_NFS, 2, IPPROTO_TCP, NFS_PORT) ||
422 !pmap_set(RPCPROG_NFS, 3, IPPROTO_TCP, NFS_PORT)) {
423 syslog(LOG_ERR, "can't register tcp with portmap");
424 exit(1);
425 }
426 FD_SET(tcpsock, &sockbits);
427 maxsock = tcpsock;
428 connect_type_cnt++;
429 }
430
431 #ifdef notyet
432 /* Now set up the master server socket waiting for tp4 connections. */
433 if (tp4flag) {
434 if ((tp4sock = socket(AF_ISO, SOCK_SEQPACKET, 0)) < 0) {
435 syslog(LOG_ERR, "can't create tp4 socket");
436 exit(1);
437 }
438 if (setsockopt(tp4sock,
439 SOL_SOCKET, SO_REUSEADDR, (char *)&on, sizeof(on)) < 0)
440 syslog(LOG_ERR, "setsockopt SO_REUSEADDR: %m");
441 memset(&isoaddr, 0, sizeof(isoaddr));
442 isoaddr.siso_family = AF_ISO;
443 isoaddr.siso_tlen = 2;
444 cp = TSEL(&isoaddr);
445 *cp++ = (NFS_PORT >> 8);
446 *cp = (NFS_PORT & 0xff);
447 isoaddr.siso_len = sizeof(isoaddr);
448 if (bind(tp4sock,
449 (struct sockaddr *)&isoaddr, sizeof (isoaddr)) < 0) {
450 syslog(LOG_ERR, "can't bind tp4 addr");
451 exit(1);
452 }
453 if (listen(tp4sock, 5) < 0) {
454 syslog(LOG_ERR, "listen failed");
455 exit(1);
456 }
457 /*
458 * XXX
459 * Someday this should probably use "rpcbind", the son of
460 * portmap.
461 */
462 if (!pmap_set(RPCPROG_NFS, NFS_VER2, IPPROTO_TCP, NFS_PORT)) {
463 syslog(LOG_ERR, "can't register tcp with portmap");
464 exit(1);
465 }
466 FD_SET(tp4sock, &sockbits);
467 maxsock = tp4sock;
468 connect_type_cnt++;
469 }
470
471 /* Now set up the master server socket waiting for tpip connections. */
472 if (tpipflag) {
473 if ((tpipsock = socket(AF_INET, SOCK_SEQPACKET, 0)) < 0) {
474 syslog(LOG_ERR, "can't create tpip socket");
475 exit(1);
476 }
477 if (setsockopt(tpipsock,
478 SOL_SOCKET, SO_REUSEADDR, (char *)&on, sizeof(on)) < 0)
479 syslog(LOG_ERR, "setsockopt SO_REUSEADDR: %m");
480 inetaddr.sin_family = AF_INET;
481 inetaddr.sin_addr.s_addr = INADDR_ANY;
482 inetaddr.sin_port = htons(NFS_PORT);
483 inetaddr.sin_len = sizeof(inetaddr);
484 if (bind(tpipsock,
485 (struct sockaddr *)&inetaddr, sizeof (inetaddr)) < 0) {
486 syslog(LOG_ERR, "can't bind tcp addr");
487 exit(1);
488 }
489 if (listen(tpipsock, 5) < 0) {
490 syslog(LOG_ERR, "listen failed");
491 exit(1);
492 }
493 /*
494 * XXX
495 * Someday this should probably use "rpcbind", the son of
496 * portmap.
497 */
498 if (!pmap_set(RPCPROG_NFS, NFS_VER2, IPPROTO_TCP, NFS_PORT)) {
499 syslog(LOG_ERR, "can't register tcp with portmap");
500 exit(1);
501 }
502 FD_SET(tpipsock, &sockbits);
503 maxsock = tpipsock;
504 connect_type_cnt++;
505 }
506 #endif /* notyet */
507
508 if (connect_type_cnt == 0)
509 exit(0);
510
511 setproctitle("master");
512
513 /*
514 * Loop forever accepting connections and passing the sockets
515 * into the kernel for the mounts.
516 */
517 for (;;) {
518 ready = sockbits;
519 if (connect_type_cnt > 1) {
520 if (select(maxsock + 1,
521 &ready, NULL, NULL, NULL) < 1) {
522 syslog(LOG_ERR, "select failed: %m");
523 exit(1);
524 }
525 }
526 if (tcpflag && FD_ISSET(tcpsock, &ready)) {
527 len = sizeof(inetpeer);
528 if ((msgsock = accept(tcpsock,
529 (struct sockaddr *)&inetpeer, &len)) < 0) {
530 syslog(LOG_ERR, "accept failed: %m");
531 exit(1);
532 }
533 memset(inetpeer.sin_zero, 0, sizeof(inetpeer.sin_zero));
534 if (setsockopt(msgsock, SOL_SOCKET,
535 SO_KEEPALIVE, (char *)&on, sizeof(on)) < 0)
536 syslog(LOG_ERR,
537 "setsockopt SO_KEEPALIVE: %m");
538 nfsdargs.sock = msgsock;
539 nfsdargs.name = (caddr_t)&inetpeer;
540 nfsdargs.namelen = sizeof(inetpeer);
541 nfssvc(NFSSVC_ADDSOCK, &nfsdargs);
542 (void)close(msgsock);
543 }
544 #ifdef notyet
545 if (tp4flag && FD_ISSET(tp4sock, &ready)) {
546 len = sizeof(isopeer);
547 if ((msgsock = accept(tp4sock,
548 (struct sockaddr *)&isopeer, &len)) < 0) {
549 syslog(LOG_ERR, "accept failed: %m");
550 exit(1);
551 }
552 if (setsockopt(msgsock, SOL_SOCKET,
553 SO_KEEPALIVE, (char *)&on, sizeof(on)) < 0)
554 syslog(LOG_ERR,
555 "setsockopt SO_KEEPALIVE: %m");
556 nfsdargs.sock = msgsock;
557 nfsdargs.name = (caddr_t)&isopeer;
558 nfsdargs.namelen = len;
559 nfssvc(NFSSVC_ADDSOCK, &nfsdargs);
560 (void)close(msgsock);
561 }
562 if (tpipflag && FD_ISSET(tpipsock, &ready)) {
563 len = sizeof(inetpeer);
564 if ((msgsock = accept(tpipsock,
565 (struct sockaddr *)&inetpeer, &len)) < 0) {
566 syslog(LOG_ERR, "Accept failed: %m");
567 exit(1);
568 }
569 if (setsockopt(msgsock, SOL_SOCKET,
570 SO_KEEPALIVE, (char *)&on, sizeof(on)) < 0)
571 syslog(LOG_ERR, "setsockopt SO_KEEPALIVE: %m");
572 nfsdargs.sock = msgsock;
573 nfsdargs.name = (caddr_t)&inetpeer;
574 nfsdargs.namelen = len;
575 nfssvc(NFSSVC_ADDSOCK, &nfsdargs);
576 (void)close(msgsock);
577 }
578 #endif /* notyet */
579 }
580 }
581
582 void
583 usage()
584 {
585 (void)fprintf(stderr, "usage: nfsd %s\n", USAGE);
586 exit(1);
587 }
588
589 void
590 nonfs(signo)
591 int signo;
592 {
593 syslog(LOG_ERR, "missing system call: NFS not available.");
594 }
595
596 void
597 reapchild(signo)
598 int signo;
599 {
600
601 while (wait3(NULL, WNOHANG, NULL) > 0);
602 }
603
604 void
605 setproctitle(a)
606 char *a;
607 {
608 register char *cp;
609 char buf[80];
610
611 cp = Argv[0];
612 (void)snprintf(buf, sizeof(buf), "nfsd-%s", a);
613 (void)strncpy(cp, buf, LastArg - cp);
614 cp += strlen(cp);
615 while (cp < LastArg)
616 *cp++ = '\0';
617 }
618