citadel/citserver.c

   1 /*
   2  * $Id$
   3  *
   4  * Main source module for the Citadel server
   5  *
   6  */
   7
   8 #ifdef DLL_EXPORT
   9 #define IN_LIBCIT
  10 #endif
  11
  12 #include "sysdep.h"
  13 #include <stdlib.h>
  14 #include <unistd.h>
  15 #include <stdio.h>
  16 #include <fcntl.h>
  17 #include <signal.h>
  18
  19 #if TIME_WITH_SYS_TIME
  20 # include <sys/time.h>
  21 # include <time.h>
  22 #else
  23 # if HAVE_SYS_TIME_H
  24 #  include <sys/time.h>
  25 # else
  26 #  include <time.h>
  27 # endif
  28 #endif
  29
  30 #include <ctype.h>
  31 #include <string.h>
  32 #include <errno.h>
  33 #include <limits.h>
  34 #include <syslog.h>
  35 /* #include <dlfcn.h> */
  36 #include <netdb.h>
  37 #include <sys/types.h>
  38 #include <sys/socket.h>
  39 #include <netinet/in.h>
  40 #include <arpa/inet.h>
  41 #include "citadel.h"
  42 #include "server.h"
  43 #include "dynloader.h"
  44 #include "sysdep_decls.h"
  45 #include "citserver.h"
  46 #include "config.h"
  47 #include "database.h"
  48 #include "housekeeping.h"
  49 #include "user_ops.h"
  50 #include "logging.h"
  51 #include "msgbase.h"
  52 #include "support.h"
  53 #include "locate_host.h"
  54 #include "room_ops.h"
  55 #include "file_ops.h"
  56 #include "policy.h"
  57 #include "control.h"
  58 #include "tools.h"
  59
  60 #ifndef HAVE_SNPRINTF
  61 #include "snprintf.h"
  62 #endif
  63
  64 struct CitContext *ContextList = NULL;
  65 char *unique_session_numbers;
  66 int ScheduledShutdown = 0;
  67 int do_defrag = 0;
  68 time_t server_startup_time;
  69
  70 /*
  71  * Various things that need to be initialized at startup
  72  */
  73 void master_startup(void) {
  74         struct timeval tv;
  75
  76         time(&server_startup_time);
  77
  78         lprintf(9, "master_startup() started\n");
  79         lprintf(7, "Opening databases\n");
  80         open_databases();
  81
  82         if (do_defrag) {
  83                 defrag_databases();
  84         }
  85
  86         check_ref_counts();
  87
  88         lprintf(7, "Creating base rooms (if necessary)\n");
  89         create_room(BASEROOM,           0, "", 0, 1, 0);
  90         create_room(AIDEROOM,           3, "", 0, 1, 0);
  91         create_room(SYSCONFIGROOM,      3, "", 0, 1, 0);
  92         create_room(config.c_twitroom,  0, "", 0, 1, 0);
  93
  94         lprintf(7, "Seeding the pseudo-random number generator...\n");
  95         gettimeofday(&tv, NULL);
  96         srand(tv.tv_usec);
  97         lprintf(9, "master_startup() finished\n");
  98 }
  99
 100
 101
 102 /*
 103  * Cleanup routine to be called when the server is shutting down.
 104  * WARNING: It's no longer safe to call this function to force a shutdown.
 105  * Instead, set time_to_die = 1.
 106  */
 107 void master_cleanup(void) {
 108         struct CleanupFunctionHook *fcn;
 109
 110         /* Run any cleanup routines registered by loadable modules */
 111         for (fcn = CleanupHookTable; fcn != NULL; fcn = fcn->next) {
 112                 (*fcn->h_function_pointer)();
 113         }
 114
 115         /* Close databases */
 116         lprintf(7, "Closing databases\n");
 117         close_databases();
 118
 119         /* Do system-dependent stuff */
 120         sysdep_master_cleanup();
 121
 122         /* Now go away. */
 123         lprintf(3, "citserver: exiting.\n");
 124         fflush(stdout); fflush(stderr);
 125         exit(0);
 126 }
 127
 128
 129 /*
 130  * Free any per-session data allocated by modules or whatever
 131  */
 132 void deallocate_user_data(struct CitContext *con)
 133 {
 134         struct CtdlSessData *ptr;
 135
 136         begin_critical_section(S_SESSION_TABLE);
 137         while (con->FirstSessData != NULL) {
 138                 lprintf(9, "Deallocating user data symbol %ld\n",
 139                         con->FirstSessData->sym_id);
 140                 if (con->FirstSessData->sym_data != NULL)
 141                         phree(con->FirstSessData->sym_data);
 142                 ptr = con->FirstSessData->next;
 143                 phree(con->FirstSessData);
 144                 con->FirstSessData = ptr;
 145         }
 146         end_critical_section(S_SESSION_TABLE);
 147 }
 148
 149
 150
 151
 152 /*
 153  * Terminate a session and remove its context data structure.
 154  */
 155 void RemoveContext (struct CitContext *con)
 156 {
 157         struct CitContext *ptr = NULL;
 158         struct CitContext *ToFree = NULL;
 159
 160         lprintf(9, "RemoveContext() called\n");
 161         if (con==NULL) {
 162                 lprintf(5, "WARNING: RemoveContext() called with NULL!\n");
 163                 return;
 164         }
 165
 166         /* Remove the context from the global context list.  This needs
 167          * to get done FIRST to avoid concurrency problems.  It is *vitally*
 168          * important to keep num_sessions accurate!!
 169          */
 170         lprintf(7, "Removing context for session %d\n", con->cs_pid);
 171         begin_critical_section(S_SESSION_TABLE);
 172         if (ContextList == con) {
 173                 ToFree = ContextList;
 174                 ContextList = ContextList->next;
 175                 --num_sessions;
 176         }
 177         else {
 178                 for (ptr = ContextList; ptr != NULL; ptr = ptr->next) {
 179                         if (ptr->next == con) {
 180                                 ToFree = ptr->next;
 181                                 ptr->next = ptr->next->next;
 182                                 --num_sessions;
 183                         }
 184                 }
 185         }
 186         end_critical_section(S_SESSION_TABLE);
 187
 188         if (ToFree == NULL) {
 189                 lprintf(9, "RemoveContext() found nothing to remove\n");
 190                 return;
 191         }
 192
 193         /* Run any cleanup routines registered by loadable modules.
 194          * Note 1: This must occur *before* deallocate_user_data() because the
 195          *         cleanup functions might touch dynamic session data.
 196          * Note 2: We have to "become_session()" because the cleanup functions
 197          *         might make references to "CC" assuming it's the right one.
 198          */
 199         become_session(con);
 200         PerformSessionHooks(EVT_STOP);
 201         become_session(NULL);
 202
 203         /* Now handle all of the administrivia. */
 204         lprintf(7, "Calling logout(%d)\n", con->cs_pid);
 205         logout(con);
 206
 207         rec_log(CL_TERMINATE, con->curr_user);
 208         unlink(con->temp);
 209         lprintf(3, "[%3d] Session ended.\n", con->cs_pid);
 210
 211         syslog(LOG_NOTICE,"session %d: ended", con->cs_pid);
 212
 213         /* Deallocate any user-data attached to this session */
 214         deallocate_user_data(con);
 215
 216         /* If the client is still connected, blow 'em away. */
 217         lprintf(7, "Closing socket %d\n", con->client_socket);
 218         close(con->client_socket);
 219
 220         /* This is where we used to check for scheduled shutdowns. */
 221
 222         /* Free up the memory used by this context */
 223         phree(con);
 224
 225         lprintf(7, "Done with RemoveContext()\n");
 226 }
 227
 228
 229
 230 /*
 231  * Get a dynamic symbol number for per-session user data.
 232  * This API call should be made only ONCE per symbol per citserver run.
 233  */
 234 int CtdlGetDynamicSymbol()
 235 {
 236         static unsigned int next_symbol = SYM_MAX;
 237         return ++next_symbol;
 238 }
 239
 240
 241
 242 /*
 243  * Return a pointer to some generic per-session user data.
 244  * (This function returns NULL if the requested symbol is not allocated.)
 245  *
 246  * NOTE: we use critical sections for allocating and de-allocating these,
 247  *       but not for locating one.
 248  */
 249 void *CtdlGetUserData(unsigned long requested_sym)
 250 {
 251         struct CtdlSessData *ptr;
 252
 253         for (ptr = CC->FirstSessData; ptr != NULL; ptr = ptr->next)
 254                 if (ptr->sym_id == requested_sym)
 255                         return(ptr->sym_data);
 256
 257         lprintf(2, "ERROR! CtdlGetUserData(%ld) symbol not allocated\n",
 258                 requested_sym);
 259         return NULL;
 260 }
 261
 262
 263 /*
 264  * Allocate some generic per-session user data.
 265  */
 266 void CtdlAllocUserData(unsigned long requested_sym, size_t num_bytes)
 267 {
 268         struct CtdlSessData *ptr;
 269
 270         lprintf(9, "CtdlAllocUserData(%ld) called\n", requested_sym);
 271
 272         /* Fail silently if the symbol is already registered. */
 273         for (ptr = CC->FirstSessData; ptr != NULL; ptr = ptr->next)  {
 274                 if (ptr->sym_id == requested_sym) {
 275                         return;
 276                 }
 277         }
 278
 279         /* Grab us some memory!  Dem's good eatin' !!  */
 280         ptr = mallok(sizeof(struct CtdlSessData));
 281         ptr->sym_id = requested_sym;
 282         ptr->sym_data = mallok(num_bytes);
 283         memset(ptr->sym_data, 0, num_bytes);
 284
 285         begin_critical_section(S_SESSION_TABLE);
 286         ptr->next = CC->FirstSessData;
 287         CC->FirstSessData = ptr;
 288         end_critical_section(S_SESSION_TABLE);
 289
 290         lprintf(9, "CtdlAllocUserData(%ld) finished\n", requested_sym);
 291 }
 292
 293
 294 /*
 295  * Change the size of a buffer allocated with CtdlAllocUserData()
 296  */
 297 void CtdlReallocUserData(unsigned long requested_sym, size_t num_bytes)
 298 {
 299         struct CtdlSessData *ptr;
 300
 301         for (ptr = CC->FirstSessData; ptr != NULL; ptr = ptr->next)  {
 302                 if (ptr->sym_id == requested_sym) {
 303                         ptr->sym_data = reallok(ptr->sym_data, num_bytes);
 304                         return;
 305                 }
 306         }
 307
 308         lprintf(2, "CtdlReallocUserData() ERROR: symbol %ld not found!\n",
 309                 requested_sym);
 310 }
 311
 312
 313
 314
 315
 316
 317 /*
 318  * cmd_info()  -  tell the client about this server
 319  */
 320 void cmd_info(void) {
 321         cprintf("%d Server info:\n", LISTING_FOLLOWS);
 322         cprintf("%d\n", CC->cs_pid);
 323         cprintf("%s\n", config.c_nodename);
 324         cprintf("%s\n", config.c_humannode);
 325         cprintf("%s\n", config.c_fqdn);
 326         cprintf("%s\n", CITADEL);
 327         cprintf("%d\n", REV_LEVEL);
 328         cprintf("%s\n", config.c_bbs_city);
 329         cprintf("%s\n", config.c_sysadm);
 330         cprintf("%d\n", SERVER_TYPE);
 331         cprintf("%s\n", config.c_moreprompt);
 332         cprintf("1\n"); /* 1 = yes, this system supports floors */
 333         cprintf("1\n"); /* 1 = we support the extended paging options */
 334         cprintf("%s\n", CC->cs_nonce);
 335         cprintf("1\n"); /* 1 = yes, this system supports the QNOP command */
 336         cprintf("000\n");
 337 }
 338
 339
 340 /*
 341  * returns an asterisk if there are any express messages waiting,
 342  * space otherwise.
 343  */
 344 char CtdlCheckExpress(void) {
 345         if (CC->FirstExpressMessage == NULL) {
 346                 return(' ');
 347         }
 348         else {
 349                 return('*');
 350         }
 351 }
 352
 353 void cmd_time(void)
 354 {
 355    time_t tv;
 356    struct tm *tmp;
 357
 358    tv = time(NULL);
 359    tmp = localtime(&tv);
 360
 361    /* timezone and daylight global variables are not portable. */
 362 #ifdef HAVE_STRUCT_TM_TM_GMTOFF
 363    cprintf("%d %ld|%ld|%d\n", CIT_OK, (long)tv, tmp->tm_gmtoff, tmp->tm_isdst);
 364 #else
 365    cprintf("%d %ld|%ld|%d\n", CIT_OK, (long)tv, timezone, tmp->tm_isdst);
 366 #endif
 367 }
 368
 369 /*
 370  * Check whether two hostnames match.
 371  * "Realname" should be an actual name of a client that is trying to connect;
 372  * "testname" should be the value we are comparing it with. The idea is that we
 373  * want to compare with both the abbreviated and fully-qualified versions of
 374  * "testname;" some people define "localhost" as "localhost.foo.com," etc.
 375  */
 376 static int hostnames_match(const char *realname, const char *testname) {
 377         struct hostent *he;
 378         int retval = 0;
 379
 380         if (!strcasecmp(realname, testname)) {
 381                 return(1);
 382         }
 383
 384 #ifdef HAVE_NONREENTRANT_NETDB
 385         begin_critical_section(S_NETDB);
 386 #endif
 387
 388         if ((he = gethostbyname(testname)) != NULL) {
 389                 if (!strcasecmp(realname, he->h_name)) {
 390                         retval = 1;
 391                 }
 392         }
 393
 394 #ifdef HAVE_NONREENTRANT_NETDB
 395         end_critical_section(S_NETDB);
 396 #endif
 397
 398         return retval;
 399 }
 400
 401 /*
 402  * check a hostname against the public_clients file
 403  */
 404 int is_public_client(char *where)
 405 {
 406         char buf[SIZ];
 407         FILE *fp;
 408
 409         lprintf(9, "Checking whether %s is a public client\n", where);
 410
 411         if (hostnames_match(where, "localhost")) return(1);
 412         if (hostnames_match(where, config.c_fqdn)) return(1);
 413
 414         fp = fopen("public_clients","r");
 415         if (fp == NULL) return(0);
 416
 417         while (fgets(buf, sizeof buf, fp)!=NULL) {
 418                 while (isspace((buf[strlen(buf)-1])))
 419                         buf[strlen(buf)-1] = 0;
 420                 if (hostnames_match(where,buf)) {
 421                         fclose(fp);
 422                         return(1);
 423                 }
 424         }
 425
 426         fclose(fp);
 427         return(0);
 428 }
 429
 430
 431 /*
 432  * the client is identifying itself to the server
 433  */
 434 void cmd_iden(char *argbuf)
 435 {
 436         int dev_code;
 437         int cli_code;
 438         int rev_level;
 439         char desc[SIZ];
 440         char from_host[SIZ];
 441         struct in_addr addr;
 442         int do_lookup = 0;
 443
 444         if (num_parms(argbuf)<4) {
 445                 cprintf("%d usage error\n",ERROR);
 446                 return;
 447         }
 448
 449         dev_code = extract_int(argbuf,0);
 450         cli_code = extract_int(argbuf,1);
 451         rev_level = extract_int(argbuf,2);
 452         extract(desc,argbuf,3);
 453
 454         safestrncpy(from_host, config.c_fqdn, sizeof from_host);
 455         from_host[sizeof from_host - 1] = 0;
 456         if (num_parms(argbuf)>=5) extract(from_host,argbuf,4);
 457
 458         CC->cs_clientdev = dev_code;
 459         CC->cs_clienttyp = cli_code;
 460         CC->cs_clientver = rev_level;
 461         safestrncpy(CC->cs_clientname, desc, sizeof CC->cs_clientname);
 462         CC->cs_clientname[31] = 0;
 463
 464         if (strlen(from_host) > 0) {
 465                 if (CC->is_local_socket) do_lookup = 1;
 466                 else if (is_public_client(CC->cs_host)) do_lookup = 1;
 467         }
 468
 469         if (do_lookup) {
 470                 lprintf(9, "Looking up hostname '%s'\n", from_host);
 471                 if ((addr.s_addr = inet_addr(from_host)) != -1) {
 472                         locate_host(CC->cs_host, sizeof CC->cs_host, &addr);
 473                 }
 474                 else {
 475                         safestrncpy(CC->cs_host, from_host, sizeof CC->cs_host);
 476                         CC->cs_host[sizeof CC->cs_host - 1] = 0;
 477                 }
 478         }
 479
 480         lprintf(7, "client %d/%d/%01d.%02d (%s)\n",
 481                 dev_code,
 482                 cli_code,
 483                 (rev_level / 100),
 484                 (rev_level % 100),
 485                 desc);
 486
 487         syslog(LOG_NOTICE,"session %d: client %d/%d/%01d.%02d (%s) from %s\n",
 488                 CC->cs_pid,
 489                 dev_code,
 490                 cli_code,
 491                 (rev_level / 100),
 492                 (rev_level % 100),
 493                 desc,
 494                 CC->cs_host);
 495         cprintf("%d Ok\n",CIT_OK);
 496 }
 497
 498
 499 /*
 500  * display system messages or help
 501  */
 502 void cmd_mesg(char *mname)
 503 {
 504         FILE *mfp;
 505         char targ[SIZ];
 506         char buf[SIZ];
 507         char buf2[SIZ];
 508         char *dirs[2];
 509
 510         extract(buf,mname,0);
 511
 512         dirs[0]=mallok(64);
 513         dirs[1]=mallok(64);
 514         strcpy(dirs[0],"messages");
 515         strcpy(dirs[1],"help");
 516         snprintf(buf2, sizeof buf2, "%s.%d.%d", buf, CC->cs_clientdev, CC->cs_clienttyp);
 517         mesg_locate(targ,sizeof targ,buf2,2,(const char **)dirs);
 518         if (strlen(targ) == 0) {
 519                 snprintf(buf2, sizeof buf2, "%s.%d", buf, CC->cs_clientdev);
 520                 mesg_locate(targ,sizeof targ,buf2,2,(const char **)dirs);
 521                 if (strlen(targ) == 0) {
 522                         mesg_locate(targ,sizeof targ,buf,2,(const char **)dirs);
 523                 }
 524         }
 525         phree(dirs[0]);
 526         phree(dirs[1]);
 527
 528         if (strlen(targ)==0) {
 529                 cprintf("%d '%s' not found.\n",ERROR,mname);
 530                 return;
 531         }
 532
 533         mfp = fopen(targ,"r");
 534         if (mfp==NULL) {
 535                 cprintf("%d Cannot open '%s': %s\n",
 536                         ERROR,targ,strerror(errno));
 537                 return;
 538         }
 539         cprintf("%d %s\n",LISTING_FOLLOWS,buf);
 540
 541         while (fgets(buf, (SIZ-1), mfp)!=NULL) {
 542                 buf[strlen(buf)-1] = 0;
 543                 do_help_subst(buf);
 544                 cprintf("%s\n",buf);
 545         }
 546
 547         fclose(mfp);
 548         cprintf("000\n");
 549 }
 550
 551
 552 /*
 553  * enter system messages or help
 554  */
 555 void cmd_emsg(char *mname)
 556 {
 557         FILE *mfp;
 558         char targ[SIZ];
 559         char buf[SIZ];
 560         char *dirs[2];
 561         int a;
 562
 563         if (CtdlAccessCheck(ac_aide)) return;
 564
 565         extract(buf,mname,0);
 566         for (a=0; a<strlen(buf); ++a) {         /* security measure */
 567                 if (buf[a] == '/') buf[a] = '.';
 568         }
 569
 570         dirs[0]=mallok(64);
 571         dirs[1]=mallok(64);
 572         strcpy(dirs[0],"messages");
 573         strcpy(dirs[1],"help");
 574         mesg_locate(targ,sizeof targ,buf,2,(const char**)dirs);
 575         phree(dirs[0]);
 576         phree(dirs[1]);
 577
 578         if (strlen(targ)==0) {
 579                 snprintf(targ, sizeof targ, "./help/%s", buf);
 580         }
 581
 582         mfp = fopen(targ,"w");
 583         if (mfp==NULL) {
 584                 cprintf("%d Cannot open '%s': %s\n",
 585                         ERROR,targ,strerror(errno));
 586                 return;
 587         }
 588         cprintf("%d %s\n", SEND_LISTING, targ);
 589
 590         while (client_gets(buf), strcmp(buf, "000")) {
 591                 fprintf(mfp, "%s\n", buf);
 592         }
 593
 594         fclose(mfp);
 595 }
 596
 597
 598 /* Don't show the names of private rooms unless the viewing
 599  * user also knows the rooms.
 600  */
 601 void GenerateRoomDisplay(char *real_room,
 602                         struct CitContext *viewed,
 603                         struct CitContext *viewer) {
 604
 605         strcpy(real_room, viewed->quickroom.QRname);
 606         if (viewed->quickroom.QRflags & QR_MAILBOX) {
 607                 strcpy(real_room, &real_room[11]);
 608         }
 609         if (viewed->quickroom.QRflags & QR_PRIVATE) {
 610                 if ( (CtdlRoomAccess(&viewed->quickroom, &viewer->usersupp)
 611                    & UA_KNOWN) == 0) {
 612                         strcpy(real_room, "<private room>");
 613                 }
 614         }
 615
 616         if (viewed->cs_flags & CS_CHAT) {
 617                 while (strlen(real_room) < 14)
 618                         strcat(real_room, " ");
 619
 620                 strcpy(&real_room[14], "<chat>");
 621         }
 622
 623 }
 624
 625 /*
 626  * Convenience function.
 627  */
 628 int CtdlAccessCheck(int required_level) {
 629
 630         if (CC->internal_pgm) return(0);
 631         if (required_level >= ac_internal) {
 632                 cprintf("%d This is not a user-level command.\n",
 633                         ERROR+HIGHER_ACCESS_REQUIRED);
 634                 return(-1);
 635         }
 636
 637         if (CC->usersupp.axlevel >= 6) return(0);
 638         if (required_level >= ac_aide) {
 639                 cprintf("%d This command requires Aide access.\n",
 640                         ERROR+HIGHER_ACCESS_REQUIRED);
 641                 return(-1);
 642         }
 643
 644         if (is_room_aide()) return(0);
 645         if (required_level >= ac_room_aide) {
 646                 cprintf("%d This command requires Aide or Room Aide access.\n",
 647                         ERROR + HIGHER_ACCESS_REQUIRED);
 648                 return(-1);
 649         }
 650
 651         if (CC->logged_in) return(0);
 652         if (required_level >= ac_logged_in) {
 653                 cprintf("%d Not logged in.\n", ERROR+NOT_LOGGED_IN);
 654                 return(-1);
 655         }
 656
 657         /* shhh ... succeed quietly */
 658         return(0);
 659 }
 660
 661
 662
 663 /*
 664  * Terminate another running session
 665  */
 666 void cmd_term(char *cmdbuf)
 667 {
 668         int session_num;
 669         struct CitContext *ccptr;
 670         int found_it = 0;
 671         int allowed = 0;
 672
 673         session_num = extract_int(cmdbuf, 0);
 674         if (session_num == CC->cs_pid) {
 675                 cprintf("%d You can't kill your own session.\n", ERROR);
 676                 return;
 677         }
 678
 679         lprintf(9, "Locating session to kill\n");
 680         begin_critical_section(S_SESSION_TABLE);
 681         for (ccptr = ContextList; ccptr != NULL; ccptr = ccptr->next) {
 682                 if (session_num == ccptr->cs_pid) {
 683                         found_it = 1;
 684                         if ((ccptr->usersupp.usernum == CC->usersupp.usernum)
 685                            || (CC->usersupp.axlevel >= 6)) {
 686                                 allowed = 1;
 687                                 ccptr->kill_me = 1;
 688                         }
 689                         else {
 690                                 allowed = 0;
 691                         }
 692                 }
 693         }
 694         end_critical_section(S_SESSION_TABLE);
 695
 696         if (found_it) {
 697                 if (allowed) {
 698                         cprintf("%d Session terminated.\n", CIT_OK);
 699                 }
 700                 else {
 701                         cprintf("%d You are not allowed to do that.\n",
 702                                 ERROR + HIGHER_ACCESS_REQUIRED);
 703                 }
 704         }
 705         else {
 706                 cprintf("%d No such session.\n", ERROR);
 707         }
 708 }
 709
 710
 711
 712
 713
 714 /*
 715  * get the paginator prompt
 716  */
 717 void cmd_more(void) {
 718         cprintf("%d %s\n", CIT_OK, config.c_moreprompt);
 719 }
 720
 721 /*
 722  * echo
 723  */
 724 void cmd_echo(char *etext)
 725 {
 726         cprintf("%d %s\n", CIT_OK, etext);
 727 }
 728
 729
 730
 731 /*
 732  * identify as internal program
 733  */
 734 void cmd_ipgm(char *argbuf)
 735 {
 736         int secret;
 737
 738         secret = extract_int(argbuf, 0);
 739         if (secret == config.c_ipgm_secret) {
 740                 CC->internal_pgm = 1;
 741                 strcpy(CC->curr_user, "<internal program>");
 742                 CC->cs_flags = CC->cs_flags|CS_STEALTH;
 743                 cprintf("%d Authenticated as an internal program.\n",CIT_OK);
 744         }
 745         else {
 746                 cprintf("%d Authentication failed.\n",ERROR);
 747                 lprintf(3, "Warning: ipgm authentication failed.\n");
 748         }
 749 }
 750
 751
 752 /*
 753  * Shut down the server
 754  */
 755 void cmd_down(void) {
 756
 757         if (CtdlAccessCheck(ac_aide)) return;
 758
 759         cprintf("%d Shutting down server.  Goodbye.\n", CIT_OK);
 760         time_to_die = 1;
 761 }
 762
 763 /*
 764  * Schedule or cancel a server shutdown
 765  */
 766 void cmd_scdn(char *argbuf)
 767 {
 768         int new_state;
 769
 770         if (CtdlAccessCheck(ac_aide)) return;
 771
 772         new_state = extract_int(argbuf, 0);
 773         if ((new_state == 0) || (new_state == 1)) {
 774                 ScheduledShutdown = new_state;
 775         }
 776         cprintf("%d %d\n", CIT_OK, ScheduledShutdown);
 777 }
 778
 779
 780 /*
 781  * Set or unset asynchronous protocol mode
 782  */
 783 void cmd_asyn(char *argbuf)
 784 {
 785         int new_state;
 786
 787         new_state = extract_int(argbuf, 0);
 788         if ((new_state == 0) || (new_state == 1)) {
 789                 CC->is_async = new_state;
 790         }
 791         cprintf("%d %d\n", CIT_OK, CC->is_async);
 792 }
 793
 794
 795 /*
 796  * Generate a "nonce" for APOP-style authentication.
 797  *
 798  * RFC 1725 et al specify a PID to be placed in front of the nonce.
 799  * Quoth BTX: That would be stupid.
 800  */
 801 void generate_nonce(struct CitContext *con) {
 802         struct timeval tv;
 803
 804         memset(con->cs_nonce, NONCE_SIZE, 0);
 805         gettimeofday(&tv, NULL);
 806         memset(con->cs_nonce, NONCE_SIZE, 0);
 807         snprintf(con->cs_nonce, NONCE_SIZE, "<%d%ld@%s>",
 808                 rand(), (long)tv.tv_usec, config.c_fqdn);
 809 }
 810
 811
 812
 813
 814 /*
 815  * Back-end function for starting a session
 816  */
 817 void begin_session(struct CitContext *con)
 818 {
 819         int len;
 820         struct sockaddr_in sin;
 821
 822         /*
 823          * Initialize some variables specific to our context.
 824          */
 825         con->logged_in = 0;
 826         con->internal_pgm = 0;
 827         con->download_fp = NULL;
 828         con->upload_fp = NULL;
 829         con->FirstExpressMessage = NULL;
 830         time(&con->lastcmd);
 831         time(&con->lastidle);
 832         strcpy(con->lastcmdname, "    ");
 833         strcpy(con->cs_clientname, "(unknown)");
 834         strcpy(con->curr_user, NLI);
 835         strcpy(con->net_node,"");
 836         strcpy(con->fake_username, "");
 837         strcpy(con->fake_postname, "");
 838         strcpy(con->fake_hostname, "");
 839         strcpy(con->fake_roomname, "");
 840         generate_nonce(con);
 841         snprintf(con->temp, sizeof con->temp, tmpnam(NULL));
 842         safestrncpy(con->cs_host, config.c_fqdn, sizeof con->cs_host);
 843         con->cs_host[sizeof con->cs_host - 1] = 0;
 844         len = sizeof sin;
 845         if (!CC->is_local_socket) {
 846                 if (!getpeername(con->client_socket,
 847                    (struct sockaddr *) &sin, &len))
 848                         locate_host(con->cs_host, sizeof con->cs_host, &sin.sin_addr);
 849         }
 850         else {
 851                 strcpy(con->cs_host, "");
 852         }
 853         con->cs_flags = 0;
 854         con->upload_type = UPL_FILE;
 855         con->dl_is_net = 0;
 856         con->FirstSessData = NULL;
 857
 858         con->nologin = 0;
 859         if ((config.c_maxsessions > 0)&&(num_sessions > config.c_maxsessions))
 860                 con->nologin = 1;
 861
 862         lprintf(3, "Session started.\n");
 863
 864         /* Run any session startup routines registered by loadable modules */
 865         PerformSessionHooks(EVT_START);
 866
 867         rec_log(CL_CONNECT, "");
 868 }
 869
 870
 871 void citproto_begin_session() {
 872         if (CC->nologin==1) {
 873                 cprintf("%d %s: Too many users are already online "
 874                         "(maximum is %d)\n",
 875                         ERROR+MAX_SESSIONS_EXCEEDED,
 876                         config.c_nodename, config.c_maxsessions);
 877         }
 878         else {
 879                 cprintf("%d %s Citadel/UX server ready.\n",
 880                         CIT_OK, config.c_nodename);
 881         }
 882 }
 883
 884
 885
 886
 887 /*
 888  * This loop recognizes all server commands.
 889  */
 890 void do_command_loop(void) {
 891         char cmdbuf[SIZ];
 892
 893         time(&CC->lastcmd);
 894         memset(cmdbuf, 0, sizeof cmdbuf); /* Clear it, just in case */
 895         if (client_gets(cmdbuf) < 1) {
 896                 lprintf(3, "Client socket is broken.  Ending session.\n");
 897                 CC->kill_me = 1;
 898                 return;
 899         }
 900         lprintf(5, "Citadel: %s\n", cmdbuf);
 901
 902         /*
 903          * Let other clients see the last command we executed, and
 904          * update the idle time, but not NOOP, QNOP, PEXP, or GEXP.
 905          */
 906         if ( (strncasecmp(cmdbuf, "NOOP", 4))
 907            && (strncasecmp(cmdbuf, "QNOP", 4))
 908            && (strncasecmp(cmdbuf, "PEXP", 4))
 909            && (strncasecmp(cmdbuf, "GEXP", 4)) ) {
 910                 strcpy(CC->lastcmdname, "    ");
 911                 safestrncpy(CC->lastcmdname, cmdbuf,
 912                         sizeof(CC->lastcmdname) );
 913                 time(&CC->lastidle);
 914         }
 915
 916         if ((strncasecmp(cmdbuf, "ENT0", 4))
 917            && (strncasecmp(cmdbuf, "MESG", 4))
 918            && (strncasecmp(cmdbuf, "MSGS", 4)))
 919         {
 920            CC->cs_flags &= ~CS_POSTING;
 921         }
 922
 923         if (!strncasecmp(cmdbuf,"NOOP",4)) {
 924                 cprintf("%d%cok\n",CIT_OK,CtdlCheckExpress());
 925         }
 926
 927         else if (!strncasecmp(cmdbuf,"QNOP",4)) {
 928                 /* do nothing, this command returns no response */
 929         }
 930
 931         else if (!strncasecmp(cmdbuf,"QUIT",4)) {
 932                 cprintf("%d Goodbye.\n",CIT_OK);
 933                 CC->kill_me = 1;
 934         }
 935
 936         else if (!strncasecmp(cmdbuf,"ASYN",4)) {
 937                 cmd_asyn(&cmdbuf[5]);
 938         }
 939
 940         else if (!strncasecmp(cmdbuf,"LOUT",4)) {
 941                 if (CC->logged_in) logout(CC);
 942                 cprintf("%d logged out.\n",CIT_OK);
 943         }
 944
 945         else if (!strncasecmp(cmdbuf,"USER",4)) {
 946                 cmd_user(&cmdbuf[5]);
 947         }
 948
 949         else if (!strncasecmp(cmdbuf,"PASS",4)) {
 950                 cmd_pass(&cmdbuf[5]);
 951         }
 952
 953         else if (!strncasecmp(cmdbuf,"NEWU",4)) {
 954                 cmd_newu(&cmdbuf[5]);
 955         }
 956
 957         else if (!strncasecmp(cmdbuf,"CREU",4)) {
 958                 cmd_creu(&cmdbuf[5]);
 959         }
 960
 961         else if (!strncasecmp(cmdbuf,"SETP",4)) {
 962                 cmd_setp(&cmdbuf[5]);
 963         }
 964
 965         else if (!strncasecmp(cmdbuf,"LRMS",4)) {
 966                 cmd_lrms(&cmdbuf[5]);
 967         }
 968
 969         else if (!strncasecmp(cmdbuf,"LKRA",4)) {
 970                 cmd_lkra(&cmdbuf[5]);
 971         }
 972
 973         else if (!strncasecmp(cmdbuf,"LKRN",4)) {
 974                 cmd_lkrn(&cmdbuf[5]);
 975         }
 976
 977         else if (!strncasecmp(cmdbuf,"LKRO",4)) {
 978                 cmd_lkro(&cmdbuf[5]);
 979         }
 980
 981         else if (!strncasecmp(cmdbuf,"LZRM",4)) {
 982                 cmd_lzrm(&cmdbuf[5]);
 983         }
 984
 985         else if (!strncasecmp(cmdbuf,"LPRM",4)) {
 986                 cmd_lprm(&cmdbuf[5]);
 987         }
 988
 989         else if (!strncasecmp(cmdbuf,"GETU",4)) {
 990                 cmd_getu();
 991         }
 992
 993         else if (!strncasecmp(cmdbuf,"SETU",4)) {
 994                 cmd_setu(&cmdbuf[5]);
 995         }
 996
 997         else if (!strncasecmp(cmdbuf,"GOTO",4)) {
 998                 cmd_goto(&cmdbuf[5]);
 999         }
1000
1001         else if (!strncasecmp(cmdbuf,"MSGS",4)) {
1002                 cmd_msgs(&cmdbuf[5]);
1003         }
1004
1005         else if (!strncasecmp(cmdbuf,"WHOK",4)) {
1006                 cmd_whok();
1007         }
1008
1009         else if (!strncasecmp(cmdbuf,"RDIR",4)) {
1010                 cmd_rdir();
1011         }
1012
1013         else if (!strncasecmp(cmdbuf,"MSG0",4)) {
1014                 cmd_msg0(&cmdbuf[5]);
1015         }
1016
1017         else if (!strncasecmp(cmdbuf,"MSG2",4)) {
1018                 cmd_msg2(&cmdbuf[5]);
1019         }
1020
1021         else if (!strncasecmp(cmdbuf,"MSG3",4)) {
1022                 cmd_msg3(&cmdbuf[5]);
1023         }
1024
1025         else if (!strncasecmp(cmdbuf,"MSG4",4)) {
1026                 cmd_msg4(&cmdbuf[5]);
1027         }
1028
1029         else if (!strncasecmp(cmdbuf,"MSGP",4)) {
1030                 cmd_msgp(&cmdbuf[5]);
1031         }
1032
1033         else if (!strncasecmp(cmdbuf,"OPNA",4)) {
1034                 cmd_opna(&cmdbuf[5]);
1035         }
1036
1037         else if (!strncasecmp(cmdbuf,"INFO",4)) {
1038                 cmd_info();
1039         }
1040
1041         else if (!strncasecmp(cmdbuf,"SLRP",4)) {
1042                 cmd_slrp(&cmdbuf[5]);
1043         }
1044
1045         else if (!strncasecmp(cmdbuf,"INVT",4)) {
1046                 cmd_invt_kick(&cmdbuf[5],1);
1047         }
1048
1049         else if (!strncasecmp(cmdbuf,"KICK",4)) {
1050                 cmd_invt_kick(&cmdbuf[5],0);
1051         }
1052
1053         else if (!strncasecmp(cmdbuf,"GETR",4)) {
1054                 cmd_getr();
1055         }
1056
1057         else if (!strncasecmp(cmdbuf,"SETR",4)) {
1058                 cmd_setr(&cmdbuf[5]);
1059         }
1060
1061         else if (!strncasecmp(cmdbuf,"GETA",4)) {
1062                 cmd_geta();
1063         }
1064
1065         else if (!strncasecmp(cmdbuf,"SETA",4)) {
1066                 cmd_seta(&cmdbuf[5]);
1067         }
1068
1069         else if (!strncasecmp(cmdbuf,"ENT0",4)) {
1070                 cmd_ent0(&cmdbuf[5]);
1071         }
1072
1073         else if (!strncasecmp(cmdbuf,"RINF",4)) {
1074                 cmd_rinf();
1075         }
1076
1077         else if (!strncasecmp(cmdbuf,"DELE",4)) {
1078                 cmd_dele(&cmdbuf[5]);
1079         }
1080
1081         else if (!strncasecmp(cmdbuf,"KILL",4)) {
1082                 cmd_kill(&cmdbuf[5]);
1083         }
1084
1085         else if (!strncasecmp(cmdbuf,"CRE8",4)) {
1086                 cmd_cre8(&cmdbuf[5]);
1087         }
1088
1089         else if (!strncasecmp(cmdbuf,"MOVE",4)) {
1090                 cmd_move(&cmdbuf[5]);
1091         }
1092
1093         else if (!strncasecmp(cmdbuf,"FORG",4)) {
1094                 cmd_forg();
1095         }
1096
1097         else if (!strncasecmp(cmdbuf,"MESG",4)) {
1098                 cmd_mesg(&cmdbuf[5]);
1099         }
1100
1101         else if (!strncasecmp(cmdbuf,"EMSG",4)) {
1102                 cmd_emsg(&cmdbuf[5]);
1103         }
1104
1105         else if (!strncasecmp(cmdbuf,"GNUR",4)) {
1106                 cmd_gnur();
1107         }
1108
1109         else if (!strncasecmp(cmdbuf,"VALI",4)) {
1110                 cmd_vali(&cmdbuf[5]);
1111         }
1112
1113         else if (!strncasecmp(cmdbuf,"EINF",4)) {
1114                 cmd_einf(&cmdbuf[5]);
1115         }
1116
1117         else if (!strncasecmp(cmdbuf,"LIST",4)) {
1118                 cmd_list();
1119         }
1120
1121         else if (!strncasecmp(cmdbuf,"CHEK",4)) {
1122                 cmd_chek();
1123         }
1124
1125         else if (!strncasecmp(cmdbuf,"DELF",4)) {
1126                 cmd_delf(&cmdbuf[5]);
1127         }
1128
1129         else if (!strncasecmp(cmdbuf,"MOVF",4)) {
1130                 cmd_movf(&cmdbuf[5]);
1131         }
1132
1133         else if (!strncasecmp(cmdbuf,"NETF",4)) {
1134                 cmd_netf(&cmdbuf[5]);
1135         }
1136
1137         else if (!strncasecmp(cmdbuf,"OPEN",4)) {
1138                 cmd_open(&cmdbuf[5]);
1139         }
1140
1141         else if (!strncasecmp(cmdbuf,"CLOS",4)) {
1142                 cmd_clos();
1143         }
1144
1145         else if (!strncasecmp(cmdbuf,"UOPN",4)) {
1146                 cmd_uopn(&cmdbuf[5]);
1147         }
1148
1149         else if (!strncasecmp(cmdbuf,"UCLS",4)) {
1150                 cmd_ucls(&cmdbuf[5]);
1151         }
1152
1153         else if (!strncasecmp(cmdbuf,"READ",4)) {
1154                 cmd_read(&cmdbuf[5]);
1155         }
1156
1157         else if (!strncasecmp(cmdbuf,"WRIT",4)) {
1158                 cmd_writ(&cmdbuf[5]);
1159         }
1160
1161         else if (!strncasecmp(cmdbuf,"QUSR",4)) {
1162                 cmd_qusr(&cmdbuf[5]);
1163         }
1164
1165         else if (!strncasecmp(cmdbuf,"ECHO",4)) {
1166                 cmd_echo(&cmdbuf[5]);
1167         }
1168
1169         else if (!strncasecmp(cmdbuf,"OIMG",4)) {
1170                 cmd_oimg(&cmdbuf[5]);
1171         }
1172
1173         else if (!strncasecmp(cmdbuf,"MORE",4)) {
1174                 cmd_more();
1175         }
1176
1177         else if (!strncasecmp(cmdbuf,"NDOP",4)) {
1178                 cmd_ndop(&cmdbuf[5]);
1179         }
1180
1181         else if (!strncasecmp(cmdbuf,"NUOP",4)) {
1182                 cmd_nuop(&cmdbuf[5]);
1183         }
1184
1185         else if (!strncasecmp(cmdbuf,"LFLR",4)) {
1186                 cmd_lflr();
1187         }
1188
1189         else if (!strncasecmp(cmdbuf,"CFLR",4)) {
1190                 cmd_cflr(&cmdbuf[5]);
1191         }
1192
1193         else if (!strncasecmp(cmdbuf,"KFLR",4)) {
1194                 cmd_kflr(&cmdbuf[5]);
1195         }
1196
1197         else if (!strncasecmp(cmdbuf,"EFLR",4)) {
1198                 cmd_eflr(&cmdbuf[5]);
1199         }
1200
1201         else if (!strncasecmp(cmdbuf,"IDEN",4)) {
1202                 cmd_iden(&cmdbuf[5]);
1203         }
1204
1205         else if (!strncasecmp(cmdbuf,"IPGM",4)) {
1206                 cmd_ipgm(&cmdbuf[5]);
1207         }
1208
1209         else if (!strncasecmp(cmdbuf,"TERM",4)) {
1210                 cmd_term(&cmdbuf[5]);
1211         }
1212
1213         else if (!strncasecmp(cmdbuf,"DOWN",4)) {
1214                 cmd_down();
1215         }
1216
1217         else if (!strncasecmp(cmdbuf,"SCDN",4)) {
1218                 cmd_scdn(&cmdbuf[5]);
1219         }
1220
1221         else if (!strncasecmp(cmdbuf, "UIMG", 4)) {
1222                 cmd_uimg(&cmdbuf[5]);
1223         }
1224
1225         else if (!strncasecmp(cmdbuf, "TIME", 4)) {
1226                 cmd_time();
1227         }
1228
1229         else if (!strncasecmp(cmdbuf, "AGUP", 4)) {
1230                 cmd_agup(&cmdbuf[5]);
1231         }
1232
1233         else if (!strncasecmp(cmdbuf, "ASUP", 4)) {
1234                 cmd_asup(&cmdbuf[5]);
1235         }
1236
1237         else if (!strncasecmp(cmdbuf, "GPEX", 4)) {
1238                 cmd_gpex(&cmdbuf[5]);
1239         }
1240
1241         else if (!strncasecmp(cmdbuf, "SPEX", 4)) {
1242                 cmd_spex(&cmdbuf[5]);
1243         }
1244
1245         else if (!strncasecmp(cmdbuf, "CONF", 4)) {
1246                 cmd_conf(&cmdbuf[5]);
1247         }
1248
1249         else if (!strncasecmp(cmdbuf, "SEEN", 4)) {
1250                 cmd_seen(&cmdbuf[5]);
1251         }
1252
1253         else if (!strncasecmp(cmdbuf, "GTSN", 4)) {
1254                 cmd_gtsn(&cmdbuf[5]);
1255         }
1256
1257         else if (!strncasecmp(cmdbuf, "VIEW", 4)) {
1258                 cmd_view(&cmdbuf[5]);
1259         }
1260
1261 #ifdef DEBUG_MEMORY_LEAKS
1262         else if (!strncasecmp(cmdbuf, "LEAK", 4)) {
1263                 dump_tracked();
1264         }
1265 #endif
1266
1267         else if (!DLoader_Exec_Cmd(cmdbuf)) {
1268                 cprintf("%d Unrecognized or unsupported command.\n", ERROR);
1269                }
1270
1271         /* Run any after-each-command outines registered by modules */
1272         PerformSessionHooks(EVT_CMD);
1273 }