WebCit now detects whether the Citadel server has Sieve support
[citadel.git] / citadel / citserver.c
1 /* 
2  * $Id$
3  *
4  * Main source module for the Citadel server
5  *
6  */
7
8 #include "sysdep.h"
9 #include <stdlib.h>
10 #include <unistd.h>
11 #include <stdio.h>
12 #include <fcntl.h>
13 #include <signal.h>
14 #include <sys/types.h>
15 #include <sys/stat.h>
16
17
18 #if TIME_WITH_SYS_TIME
19 # include <sys/time.h>
20 # include <time.h>
21 #else
22 # if HAVE_SYS_TIME_H
23 #  include <sys/time.h>
24 # else
25 #  include <time.h>
26 # endif
27 #endif
28
29 #if HAVE_BACKTRACE
30 #include <execinfo.h>
31 #endif
32
33 #include <ctype.h>
34 #include <string.h>
35 #include <dirent.h>
36 #include <errno.h>
37 #include <limits.h>
38 #include <netdb.h>
39 #include <sys/types.h>
40 #include <sys/socket.h>
41 #include <netinet/in.h>
42 #include <arpa/inet.h>
43 #include <libcitadel.h>
44 #include "citadel.h"
45 #include "server.h"
46 #include "sysdep_decls.h"
47 #include "threads.h"
48 #include "citserver.h"
49 #include "config.h"
50 #include "database.h"
51 #include "housekeeping.h"
52 #include "user_ops.h"
53 #include "msgbase.h"
54 #include "support.h"
55 #include "locate_host.h"
56 #include "room_ops.h"
57 #include "file_ops.h"
58 #include "policy.h"
59 #include "control.h"
60 #include "euidindex.h"
61
62 #ifndef HAVE_SNPRINTF
63 #include "snprintf.h"
64 #endif
65
66 #include "ctdl_module.h"
67
68
69 struct CitContext *ContextList = NULL;
70 struct CitContext* next_session = NULL;
71 char *unique_session_numbers;
72 int ScheduledShutdown = 0;
73 int do_defrag = 0;
74 time_t server_startup_time;
75 int panic_fd;
76
77 /**
78  * \brief print the actual stack frame.
79  */
80 void cit_backtrace(void)
81 {
82 #ifdef HAVE_BACKTRACE
83         void *stack_frames[50];
84         size_t size, i;
85         char **strings;
86
87
88         size = backtrace(stack_frames, sizeof(stack_frames) / sizeof(void*));
89         strings = backtrace_symbols(stack_frames, size);
90         for (i = 0; i < size; i++) {
91                 if (strings != NULL)
92                         lprintf(1, "%s\n", strings[i]);
93                 else
94                         lprintf(1, "%p\n", stack_frames[i]);
95         }
96         free(strings);
97 #endif
98 }
99
100 /**
101  * \brief print the actual stack frame.
102  */
103 void cit_panic_backtrace(int SigNum)
104 {
105 #ifdef HAVE_BACKTRACE
106         void *stack_frames[10];
107         size_t size, i;
108         char **strings;
109
110         printf("caught signal 11\n");
111         size = backtrace(stack_frames, sizeof(stack_frames) / sizeof(void*));
112         strings = backtrace_symbols(stack_frames, size);
113         for (i = 0; i < size; i++) {
114                 if (strings != NULL)
115                         lprintf(1, "%s\n", strings[i]);
116                 else
117                         lprintf(1, "%p\n", stack_frames[i]);
118         }
119         free(strings);
120 #endif
121         exit(-1);
122 }
123
124 /*
125  * Various things that need to be initialized at startup
126  */
127 void master_startup(void) {
128         struct timeval tv;
129         unsigned int seed;
130         FILE *urandom;
131         struct ctdlroom qrbuf;
132         
133         lprintf(CTDL_DEBUG, "master_startup() started\n");
134         time(&server_startup_time);
135
136         lprintf(CTDL_INFO, "Opening databases\n");
137         open_databases();
138
139         ctdl_thread_internal_init_tsd();
140         
141         CtdlThreadAllocTSD();
142         
143         if (do_defrag) {
144                 defrag_databases();
145         }
146
147         check_ref_counts();
148
149         lprintf(CTDL_INFO, "Creating base rooms (if necessary)\n");
150         create_room(config.c_baseroom,  0, "", 0, 1, 0, VIEW_BBS);
151         create_room(AIDEROOM,           3, "", 0, 1, 0, VIEW_BBS);
152         create_room(SYSCONFIGROOM,      3, "", 0, 1, 0, VIEW_BBS);
153         create_room(config.c_twitroom,  0, "", 0, 1, 0, VIEW_BBS);
154
155         /* The "Local System Configuration" room doesn't need to be visible */
156         if (lgetroom(&qrbuf, SYSCONFIGROOM) == 0) {
157                 qrbuf.QRflags2 |= QR2_SYSTEM;
158                 lputroom(&qrbuf);
159         }
160
161         lprintf(CTDL_INFO, "Seeding the pseudo-random number generator...\n");
162         urandom = fopen("/dev/urandom", "r");
163         if (urandom != NULL) {
164                 fread(&seed, sizeof seed, 1, urandom);
165                 fclose(urandom);
166         }
167         else {
168                 gettimeofday(&tv, NULL);
169                 seed = tv.tv_usec;
170         }
171         srandom(seed);
172
173         lprintf(CTDL_INFO, "Initializing ipgm secret\n");
174         get_config();
175         config.c_ipgm_secret = rand();
176         put_config();
177
178         lprintf(CTDL_DEBUG, "master_startup() finished\n");
179 }
180
181
182 /*
183  * Cleanup routine to be called when the server is shutting down.
184  */
185 void master_cleanup(int exitcode) {
186         struct CleanupFunctionHook *fcn;
187         static int already_cleaning_up = 0;
188
189         if (already_cleaning_up) while(1) sleep(1);
190         already_cleaning_up = 1;
191
192         /* Run any cleanup routines registered by loadable modules */
193         for (fcn = CleanupHookTable; fcn != NULL; fcn = fcn->next) {
194                 (*fcn->h_function_pointer)();
195         }
196
197         /* Close the AdjRefCount queue file */
198         AdjRefCount(-1, 0);
199
200         /* Do system-dependent stuff */
201         sysdep_master_cleanup();
202         
203         /* Close databases */
204         lprintf(CTDL_INFO, "Closing databases\n");
205         close_databases();
206
207 #ifdef DEBUG_MEMORY_LEAKS
208         dump_heap();
209 #endif
210
211         /* If the operator requested a halt but not an exit, halt here. */
212         if (shutdown_and_halt) {
213                 lprintf(CTDL_NOTICE, "citserver: Halting server without exiting.\n");
214                 fflush(stdout); fflush(stderr);
215                 while(1) {
216                         sleep(32767);
217                 }
218         }
219         
220         release_control();
221
222         /* Now go away. */
223         lprintf(CTDL_NOTICE, "citserver: Exiting with status %d\n", exitcode);
224         fflush(stdout); fflush(stderr);
225         
226         if (restart_server != 0)
227                 exit(1);
228         exit(exitcode);
229 }
230
231
232
233 /*
234  * Terminate a session.
235  */
236 void RemoveContext (struct CitContext *con)
237 {
238         if (con==NULL) {
239                 lprintf(CTDL_ERR,
240                         "WARNING: RemoveContext() called with NULL!\n");
241                 return;
242         }
243         lprintf(CTDL_DEBUG, "RemoveContext() session %d\n", con->cs_pid);
244
245         /* Run any cleanup routines registered by loadable modules.
246          * Note: We have to "become_session()" because the cleanup functions
247          *       might make references to "CC" assuming it's the right one.
248          */
249         become_session(con);
250         PerformSessionHooks(EVT_STOP);
251         become_session(NULL);
252
253         /* Now handle all of the administrivia. */
254         lprintf(CTDL_DEBUG, "Calling logout(%d)\n", con->cs_pid);
255         logout(con);
256
257         lprintf(CTDL_NOTICE, "[%3d] Session ended.\n", con->cs_pid);
258
259         /* If the client is still connected, blow 'em away. */
260         lprintf(CTDL_DEBUG, "Closing socket %d\n", con->client_socket);
261         close(con->client_socket);
262
263         lprintf(CTDL_DEBUG, "Done with RemoveContext()\n");
264 }
265
266
267
268
269
270 /*
271  * cmd_info()  -  tell the client about this server
272  */
273 void cmd_info(void) {
274         cprintf("%d Server info:\n", LISTING_FOLLOWS);
275         cprintf("%d\n", CC->cs_pid);
276         cprintf("%s\n", config.c_nodename);
277         cprintf("%s\n", config.c_humannode);
278         cprintf("%s\n", config.c_fqdn);
279         cprintf("%s\n", CITADEL);
280         cprintf("%d\n", REV_LEVEL);
281         cprintf("%s\n", config.c_site_location);
282         cprintf("%s\n", config.c_sysadm);
283         cprintf("%d\n", SERVER_TYPE);
284         cprintf("%s\n", config.c_moreprompt);
285         cprintf("1\n"); /* 1 = yes, this system supports floors */
286         cprintf("1\n"); /* 1 = we support the extended paging options */
287         cprintf("%s\n", CC->cs_nonce);
288         cprintf("1\n"); /* 1 = yes, this system supports the QNOP command */
289
290 #ifdef HAVE_LDAP
291         cprintf("1\n"); /* 1 = yes, this server is LDAP-enabled */
292 #else
293         cprintf("0\n"); /* 1 = no, this server is not LDAP-enabled */
294 #endif
295
296         if (config.c_auth_mode == AUTHMODE_NATIVE) {
297                 cprintf("%d\n", config.c_disable_newu);
298         }
299         else {
300                 cprintf("1\n"); /* "create new user" does not work with non-native auth modes */
301         }
302
303         cprintf("%s\n", config.c_default_cal_zone);
304
305         /* Output load averages */
306         cprintf("%f\n", CtdlThreadLoadAvg);
307         cprintf("%f\n", CtdlThreadWorkerAvg);
308         cprintf("%d\n", CtdlThreadGetCount());
309
310         /* Does this server support Sieve mail filtering? */
311 #ifdef HAVE_LIBSIEVE
312         cprintf("1\n");         /* yes */
313 #else
314         cprintf("0\n");         /* no */
315 #endif
316         
317         cprintf("000\n");
318 }
319
320
321 /*
322  * returns an asterisk if there are any instant messages waiting,
323  * space otherwise.
324  */
325 char CtdlCheckExpress(void) {
326         if (CC->FirstExpressMessage == NULL) {
327                 return(' ');
328         }
329         else {
330                 return('*');
331         }
332 }
333
334 void cmd_time(void)
335 {
336    time_t tv;
337    struct tm tmp;
338    
339    tv = time(NULL);
340    localtime_r(&tv, &tmp);
341    
342    /* timezone and daylight global variables are not portable. */
343 #ifdef HAVE_STRUCT_TM_TM_GMTOFF
344    cprintf("%d %ld|%ld|%d\n", CIT_OK, (long)tv, tmp.tm_gmtoff, tmp.tm_isdst);
345 #else
346    cprintf("%d %ld|%ld|%d\n", CIT_OK, (long)tv, timezone, tmp.tm_isdst);
347 #endif
348 }
349
350
351 /*
352  * Check originating host against the public_clients file.  This determines
353  * whether the client is allowed to change the hostname for this session
354  * (for example, to show the location of the user rather than the location
355  * of the client).
356  */
357 int is_public_client(void)
358 {
359         char buf[1024];
360         char addrbuf[1024];
361         FILE *fp;
362         int i;
363         struct stat statbuf;
364         static time_t pc_timestamp = 0;
365         static char public_clients[SIZ];
366         static char public_clients_file[SIZ];
367
368         snprintf(public_clients_file, 
369                          sizeof public_clients_file,
370                          "%s/public_clients",
371                          ctdl_etc_dir);
372
373         /*
374          * Check the time stamp on the public_clients file.  If it's been
375          * updated since the last time we were here (or if this is the first
376          * time we've been through the loop), read its contents and learn
377          * the IP addresses of the listed hosts.
378          */
379         if (stat(public_clients_file, &statbuf) != 0) {
380                 /* No public_clients file exists, so bail out */
381                 lprintf(CTDL_WARNING, "Warning: '%s' does not exist\n", 
382                                 public_clients_file);
383                 return(0);
384         }
385
386         if (statbuf.st_mtime > pc_timestamp) {
387                 begin_critical_section(S_PUBLIC_CLIENTS);
388                 lprintf(CTDL_INFO, "Loading %s\n", public_clients_file);
389
390                 safestrncpy(public_clients, "127.0.0.1", sizeof public_clients);
391                 if (hostname_to_dotted_quad(addrbuf, config.c_fqdn) == 0) {
392                         strcat(public_clients, "|");
393                         strcat(public_clients, addrbuf);
394                 }
395
396                 fp = fopen(public_clients_file, "r");
397                 if (fp != NULL) while (fgets(buf, sizeof buf, fp)!=NULL) {
398                         char *ptr;
399                         ptr = buf;
400                         while (!IsEmptyStr(ptr)) {
401                                 if (*ptr == '#') {
402                                         *ptr = 0;
403                                         break;
404                                 }
405                                 else ptr++;
406                         }
407                         ptr--;
408                         while (ptr>buf && isspace(*ptr)) {
409                                 *(ptr--) = 0;
410                         }
411                         if (hostname_to_dotted_quad(addrbuf, buf) == 0) {
412                                 if ((strlen(public_clients) +
413                                    strlen(addrbuf) + 2)
414                                    < sizeof(public_clients)) {
415                                         strcat(public_clients, "|");
416                                         strcat(public_clients, addrbuf);
417                                 }
418                         }
419                 }
420                 fclose(fp);
421                 pc_timestamp = time(NULL);
422                 end_critical_section(S_PUBLIC_CLIENTS);
423         }
424
425         lprintf(CTDL_DEBUG, "Checking whether %s is a local or public client\n",
426                 CC->cs_addr);
427         for (i=0; i<num_parms(public_clients); ++i) {
428                 extract_token(addrbuf, public_clients, i, '|', sizeof addrbuf);
429                 if (!strcasecmp(CC->cs_addr, addrbuf)) {
430                         lprintf(CTDL_DEBUG, "... yes it is.\n");
431                         return(1);
432                 }
433         }
434
435         /* No hits.  This is not a public client. */
436         lprintf(CTDL_DEBUG, "... no it isn't.\n");
437         return(0);
438 }
439
440
441 /*
442  * the client is identifying itself to the server
443  */
444 void cmd_iden(char *argbuf)
445 {
446         int dev_code;
447         int cli_code;
448         int rev_level;
449         char desc[128];
450         char from_host[128];
451         struct in_addr addr;
452         int do_lookup = 0;
453
454         if (num_parms(argbuf)<4) {
455                 cprintf("%d usage error\n", ERROR + ILLEGAL_VALUE);
456                 return;
457         }
458
459         dev_code = extract_int(argbuf,0);
460         cli_code = extract_int(argbuf,1);
461         rev_level = extract_int(argbuf,2);
462         extract_token(desc, argbuf, 3, '|', sizeof desc);
463
464         safestrncpy(from_host, config.c_fqdn, sizeof from_host);
465         from_host[sizeof from_host - 1] = 0;
466         if (num_parms(argbuf)>=5) extract_token(from_host, argbuf, 4, '|', sizeof from_host);
467
468         CC->cs_clientdev = dev_code;
469         CC->cs_clienttyp = cli_code;
470         CC->cs_clientver = rev_level;
471         safestrncpy(CC->cs_clientname, desc, sizeof CC->cs_clientname);
472         CC->cs_clientname[31] = 0;
473
474         if (!IsEmptyStr(from_host)) {
475                 if (CC->is_local_socket) do_lookup = 1;
476                 else if (is_public_client()) do_lookup = 1;
477         }
478
479         if (do_lookup) {
480                 lprintf(CTDL_DEBUG, "Looking up hostname '%s'\n", from_host);
481                 if ((addr.s_addr = inet_addr(from_host)) != -1) {
482                         locate_host(CC->cs_host, sizeof CC->cs_host,
483                                 CC->cs_addr, sizeof CC->cs_addr,
484                                 &addr);
485                 }
486                 else {
487                         safestrncpy(CC->cs_host, from_host, sizeof CC->cs_host);
488                         CC->cs_host[sizeof CC->cs_host - 1] = 0;
489                 }
490         }
491
492         lprintf(CTDL_NOTICE, "Client %d/%d/%01d.%02d (%s) from %s\n",
493                 dev_code,
494                 cli_code,
495                 (rev_level / 100),
496                 (rev_level % 100),
497                 desc,
498                 CC->cs_host);
499         cprintf("%d Ok\n",CIT_OK);
500 }
501
502
503 /*
504  * display system messages or help
505  */
506 void cmd_mesg(char *mname)
507 {
508         FILE *mfp;
509         char targ[256];
510         char buf[256];
511         char buf2[256];
512         char *dirs[2];
513         DIR *dp;
514         struct dirent *d;
515
516         extract_token(buf, mname, 0, '|', sizeof buf);
517
518         dirs[0] = strdup(ctdl_message_dir);
519         dirs[1] = strdup(ctdl_hlp_dir);
520
521         snprintf(buf2, sizeof buf2, "%s.%d.%d",
522                 buf, CC->cs_clientdev, CC->cs_clienttyp);
523
524         /* If the client requested "?" then produce a listing */
525         if (!strcmp(buf, "?")) {
526                 cprintf("%d %s\n", LISTING_FOLLOWS, buf);
527                 dp = opendir(dirs[1]);
528                 if (dp != NULL) {
529                         while (d = readdir(dp), d != NULL) {
530                                 if (d->d_name[0] != '.') {
531                                         cprintf(" %s\n", d->d_name);
532                                 }
533                         }
534                         closedir(dp);
535                 }
536                 cprintf("000\n");
537                 free(dirs[0]);
538                 free(dirs[1]);
539                 return;
540         }
541
542         /* Otherwise, look for the requested file by name. */
543         else {
544                 mesg_locate(targ, sizeof targ, buf2, 2, (const char **)dirs);
545                 if (IsEmptyStr(targ)) {
546                         snprintf(buf2, sizeof buf2, "%s.%d",
547                                                         buf, CC->cs_clientdev);
548                         mesg_locate(targ, sizeof targ, buf2, 2,
549                                                         (const char **)dirs);
550                         if (IsEmptyStr(targ)) {
551                                 mesg_locate(targ, sizeof targ, buf, 2,
552                                                         (const char **)dirs);
553                         }       
554                 }
555         }
556
557         free(dirs[0]);
558         free(dirs[1]);
559
560         if (IsEmptyStr(targ)) {
561                 cprintf("%d '%s' not found.  (Searching in %s and %s)\n",
562                         ERROR + FILE_NOT_FOUND,
563                         mname,
564                         ctdl_message_dir,
565                         ctdl_hlp_dir
566                 );
567                 return;
568         }
569
570         mfp = fopen(targ, "r");
571         if (mfp==NULL) {
572                 cprintf("%d Cannot open '%s': %s\n",
573                         ERROR + INTERNAL_ERROR, targ, strerror(errno));
574                 return;
575         }
576         cprintf("%d %s\n", LISTING_FOLLOWS,buf);
577
578         while (fgets(buf, (sizeof buf - 1), mfp) != NULL) {
579                 buf[strlen(buf)-1] = 0;
580                 do_help_subst(buf);
581                 cprintf("%s\n",buf);
582         }
583
584         fclose(mfp);
585         cprintf("000\n");
586 }
587
588
589 /*
590  * enter system messages or help
591  */
592 void cmd_emsg(char *mname)
593 {
594         FILE *mfp;
595         char targ[256];
596         char buf[256];
597         char *dirs[2];
598         int a;
599
600         unbuffer_output();
601
602         if (CtdlAccessCheck(ac_aide)) return;
603
604         extract_token(buf, mname, 0, '|', sizeof buf);
605         for (a=0; !IsEmptyStr(&buf[a]); ++a) {          /* security measure */
606                 if (buf[a] == '/') buf[a] = '.';
607         }
608
609         dirs[0] = strdup(ctdl_message_dir);
610         dirs[1] = strdup(ctdl_hlp_dir);
611
612         mesg_locate(targ, sizeof targ, buf, 2, (const char**)dirs);
613         free(dirs[0]);
614         free(dirs[1]);
615
616         if (IsEmptyStr(targ)) {
617                 snprintf(targ, sizeof targ, 
618                                  "%s/%s",
619                                  ctdl_hlp_dir, buf);
620         }
621
622         mfp = fopen(targ,"w");
623         if (mfp==NULL) {
624                 cprintf("%d Cannot open '%s': %s\n",
625                         ERROR + INTERNAL_ERROR, targ, strerror(errno));
626                 return;
627         }
628         cprintf("%d %s\n", SEND_LISTING, targ);
629
630         while (client_getln(buf, sizeof buf), strcmp(buf, "000")) {
631                 fprintf(mfp, "%s\n", buf);
632         }
633
634         fclose(mfp);
635 }
636
637
638 /* Don't show the names of private rooms unless the viewing
639  * user also knows the rooms.
640  */
641 void GenerateRoomDisplay(char *real_room,
642                         struct CitContext *viewed,
643                         struct CitContext *viewer) {
644
645         int ra;
646
647         strcpy(real_room, viewed->room.QRname);
648         if (viewed->room.QRflags & QR_MAILBOX) {
649                 strcpy(real_room, &real_room[11]);
650         }
651         if (viewed->room.QRflags & QR_PRIVATE) {
652                 CtdlRoomAccess(&viewed->room, &viewer->user, &ra, NULL);
653                 if ( (ra & UA_KNOWN) == 0) {
654                         strcpy(real_room, "<private room>");
655                 }
656         }
657
658         if (viewed->cs_flags & CS_CHAT) {
659                 while (strlen(real_room) < 14)
660                         strcat(real_room, " ");
661
662                 strcpy(&real_room[14], "<chat>");
663         }
664
665 }
666
667 /*
668  * Convenience function.
669  */
670 int CtdlAccessCheck(int required_level) {
671
672         if (CC->internal_pgm) return(0);
673         if (required_level >= ac_internal) {
674                 cprintf("%d This is not a user-level command.\n",
675                         ERROR + HIGHER_ACCESS_REQUIRED);
676                 return(-1);
677         }
678
679         if ((required_level >= ac_logged_in) && (CC->logged_in == 0)) {
680                 cprintf("%d Not logged in.\n", ERROR + NOT_LOGGED_IN);
681                 return(-1);
682         }
683
684         if (CC->user.axlevel >= 6) return(0);
685         if (required_level >= ac_aide) {
686                 cprintf("%d This command requires Aide access.\n",
687                         ERROR + HIGHER_ACCESS_REQUIRED);
688                 return(-1);
689         }
690
691         if (is_room_aide()) return(0);
692         if (required_level >= ac_room_aide) {
693                 cprintf("%d This command requires Aide or Room Aide access.\n",
694                         ERROR + HIGHER_ACCESS_REQUIRED);
695                 return(-1);
696         }
697
698         /* shhh ... succeed quietly */
699         return(0);
700 }
701
702
703
704 /*
705  * Terminate another running session
706  */
707 void cmd_term(char *cmdbuf)
708 {
709         int session_num;
710         struct CitContext *ccptr;
711         int found_it = 0;
712         int allowed = 0;
713
714         session_num = extract_int(cmdbuf, 0);
715         if (session_num == CC->cs_pid) {
716                 cprintf("%d You can't kill your own session.\n", ERROR + ILLEGAL_VALUE);
717                 return;
718         }
719
720         lprintf(CTDL_DEBUG, "Locating session to kill\n");
721         begin_critical_section(S_SESSION_TABLE);
722         for (ccptr = ContextList; ccptr != NULL; ccptr = ccptr->next) {
723                 if (session_num == ccptr->cs_pid) {
724                         found_it = 1;
725                         if ((ccptr->user.usernum == CC->user.usernum)
726                            || (CC->user.axlevel >= 6)) {
727                                 allowed = 1;
728                                 ccptr->kill_me = 1;
729                         }
730                         else {
731                                 allowed = 0;
732                         }
733                 }
734         }
735         end_critical_section(S_SESSION_TABLE);
736
737         if (found_it) {
738                 if (allowed) {
739                         cprintf("%d Session terminated.\n", CIT_OK);
740                 }
741                 else {
742                         cprintf("%d You are not allowed to do that.\n",
743                                 ERROR + HIGHER_ACCESS_REQUIRED);
744                 }
745         }
746         else {
747                 cprintf("%d No such session.\n", ERROR + ILLEGAL_VALUE);
748         }
749 }
750
751
752
753
754
755 /* 
756  * get the paginator prompt
757  */
758 void cmd_more(void) {
759         cprintf("%d %s\n", CIT_OK, config.c_moreprompt);
760 }
761
762 /*
763  * echo 
764  */
765 void cmd_echo(char *etext)
766 {
767         cprintf("%d %s\n", CIT_OK, etext);
768 }
769
770
771
772 /* 
773  * identify as internal program
774  */
775 void cmd_ipgm(char *argbuf)
776 {
777         int secret;
778
779         secret = extract_int(argbuf, 0);
780
781         /* For security reasons, we do NOT allow this command to run
782          * over the network.  Local sockets only.
783          */
784         if (!CC->is_local_socket) {
785                 sleep(5);
786                 cprintf("%d Authentication failed.\n",
787                         ERROR + PASSWORD_REQUIRED);
788         }
789         else if (secret == config.c_ipgm_secret) {
790                 CC->internal_pgm = 1;
791                 strcpy(CC->curr_user, "<internal program>");
792                 CC->cs_flags = CC->cs_flags|CS_STEALTH;
793                 cprintf("%d Authenticated as an internal program.\n", CIT_OK);
794         }
795         else {
796                 sleep(5);
797                 cprintf("%d Authentication failed.\n",
798                         ERROR + PASSWORD_REQUIRED);
799                 lprintf(CTDL_ERR, "Warning: ipgm authentication failed.\n");
800                 CC->kill_me = 1;
801         }
802
803         /* Now change the ipgm secret for the next round.
804          * (Disabled because it breaks concurrent scripts.  The fact that
805          * we no longer accept IPGM over the network should be sufficient
806          * to prevent brute-force attacks.  If you don't agree, uncomment
807          * this block.)
808         get_config();
809         config.c_ipgm_secret = rand();
810         put_config();
811         */
812 }
813
814
815 /*
816  * Shut down the server
817  */
818 void cmd_down(char *argbuf) {
819         char *Reply ="%d Shutting down server.  Goodbye.\n";
820
821         if (CtdlAccessCheck(ac_aide)) return;
822
823         if (!IsEmptyStr(argbuf))
824         {
825                 int state = CIT_OK;
826                 restart_server = extract_int(argbuf, 0);
827                 
828                 if (restart_server > 0)
829                         Reply = "%d Restarting server.  See you soon.\n";
830                 if ((restart_server > 0) && !running_as_daemon)
831                 {
832                         lprintf(CTDL_ERR, "The user requested restart, but not running as deamon! Geronimooooooo!\n");
833                         Reply = "%d Warning, not running in deamon mode. maybe we will come up again, but don't lean on it.\n";
834                         state = ERROR;
835                 }
836                 cprintf(Reply, state);
837         }
838         else
839         {
840                 cprintf(Reply, CIT_OK + SERVER_SHUTTING_DOWN);
841         }
842         CtdlThreadStopAll();
843 }
844
845 /*
846  * Halt the server without exiting the server process.
847  */
848 void cmd_halt(void) {
849
850         if (CtdlAccessCheck(ac_aide)) return;
851
852         cprintf("%d Halting server.  Goodbye.\n", CIT_OK);
853         CtdlThreadStopAll();
854         shutdown_and_halt = 1;
855 }
856
857 /*
858  * Schedule or cancel a server shutdown
859  */
860 void cmd_scdn(char *argbuf)
861 {
862         int new_state;
863         int state = CIT_OK;
864         char *Reply = "%d %d\n";
865
866         if (CtdlAccessCheck(ac_aide)) return;
867
868         new_state = extract_int(argbuf, 0);
869         if ((new_state == 2) || (new_state == 3))
870         {
871                 restart_server = 1;
872                 if (!running_as_daemon)
873                 {
874                         lprintf(CTDL_ERR, "The user requested restart, but not running as deamon! Geronimooooooo!\n");
875                         Reply = "%d %d Warning, not running in deamon mode. maybe we will come up again, but don't lean on it.\n";
876                         state = ERROR;
877                 }
878
879                 restart_server = extract_int(argbuf, 0);
880                 new_state -= 2;
881         }
882         if ((new_state == 0) || (new_state == 1)) {
883                 ScheduledShutdown = new_state;
884         }
885         cprintf(Reply, state, ScheduledShutdown);
886 }
887
888
889 /*
890  * Set or unset asynchronous protocol mode
891  */
892 void cmd_asyn(char *argbuf)
893 {
894         int new_state;
895
896         new_state = extract_int(argbuf, 0);
897         if ((new_state == 0) || (new_state == 1)) {
898                 CC->is_async = new_state;
899         }
900         cprintf("%d %d\n", CIT_OK, CC->is_async);
901 }
902
903
904 /*
905  * Generate a "nonce" for APOP-style authentication.
906  *
907  * RFC 1725 et al specify a PID to be placed in front of the nonce.
908  * Quoth BTX: That would be stupid.
909  */
910 void generate_nonce(struct CitContext *con) {
911         struct timeval tv;
912
913         memset(con->cs_nonce, NONCE_SIZE, 0);
914         gettimeofday(&tv, NULL);
915         memset(con->cs_nonce, NONCE_SIZE, 0);
916         snprintf(con->cs_nonce, NONCE_SIZE, "<%d%ld@%s>",
917                 rand(), (long)tv.tv_usec, config.c_fqdn);
918 }
919
920
921
922
923 /*
924  * Back-end function for starting a session
925  */
926 void begin_session(struct CitContext *con)
927 {
928         socklen_t len;
929         struct sockaddr_in sin;
930
931         /* 
932          * Initialize some variables specific to our context.
933          */
934         con->logged_in = 0;
935         con->internal_pgm = 0;
936         con->download_fp = NULL;
937         con->upload_fp = NULL;
938         con->FirstExpressMessage = NULL;
939         time(&con->lastcmd);
940         time(&con->lastidle);
941         strcpy(con->lastcmdname, "    ");
942         strcpy(con->cs_clientname, "(unknown)");
943         strcpy(con->curr_user, NLI);
944         *con->net_node = '\0';
945         *con->fake_username = '\0';
946         *con->fake_hostname = '\0';
947         *con->fake_roomname = '\0';
948         generate_nonce(con);
949         safestrncpy(con->cs_host, config.c_fqdn, sizeof con->cs_host);
950         safestrncpy(con->cs_addr, "", sizeof con->cs_addr);
951         con->cs_host[sizeof con->cs_host - 1] = 0;
952         len = sizeof sin;
953         if (!CC->is_local_socket) {
954                 if (!getpeername(con->client_socket, (struct sockaddr *) &sin, &len)) {
955                         locate_host(con->cs_host, sizeof con->cs_host,
956                                 con->cs_addr, sizeof con->cs_addr,
957                                 &sin.sin_addr
958                         );
959                 }
960         }
961         else {
962                 strcpy(con->cs_host, "");
963         }
964         con->cs_flags = 0;
965         con->upload_type = UPL_FILE;
966         con->dl_is_net = 0;
967
968         con->nologin = 0;
969         if ((config.c_maxsessions > 0)&&(num_sessions > config.c_maxsessions)) {
970                 con->nologin = 1;
971         }
972
973         lprintf(CTDL_NOTICE, "Session started.\n");
974
975         /* Run any session startup routines registered by loadable modules */
976         PerformSessionHooks(EVT_START);
977 }
978
979
980 void citproto_begin_session() {
981         if (CC->nologin==1) {
982                 cprintf("%d %s: Too many users are already online (maximum is %d)\n",
983                         ERROR + MAX_SESSIONS_EXCEEDED,
984                         config.c_nodename, config.c_maxsessions
985                 );
986                 CC->kill_me = 1;
987         }
988         else {
989                 cprintf("%d %s Citadel server ready.\n",
990                         CIT_OK, config.c_nodename);
991         }
992 }
993
994
995
996
997 /*
998  * This loop recognizes all server commands.
999  */
1000 void do_command_loop(void) {
1001         char cmdbuf[SIZ];
1002         const char *old_name = NULL;
1003         
1004         old_name = CtdlThreadName("do_command_loop");
1005         
1006         time(&CC->lastcmd);
1007         memset(cmdbuf, 0, sizeof cmdbuf); /* Clear it, just in case */
1008         if (client_getln(cmdbuf, sizeof cmdbuf) < 1) {
1009                 lprintf(CTDL_ERR, "Client disconnected: ending session.\n");
1010                 CC->kill_me = 1;
1011                 CtdlThreadName(old_name);
1012                 return;
1013         }
1014
1015         /* Log the server command, but don't show passwords... */
1016         if ( (strncasecmp(cmdbuf, "PASS", 4))
1017            && (strncasecmp(cmdbuf, "SETP", 4)) ) {
1018                 lprintf(CTDL_INFO, "%s\n", cmdbuf);
1019         }
1020         else {
1021                 lprintf(CTDL_INFO, "<password command sent>\n");
1022         }
1023
1024         buffer_output();
1025
1026         /*
1027          * Let other clients see the last command we executed, and
1028          * update the idle time, but not NOOP, QNOP, PEXP, GEXP, RWHO, or TIME.
1029          */
1030         if ( (strncasecmp(cmdbuf, "NOOP", 4))
1031            && (strncasecmp(cmdbuf, "QNOP", 4))
1032            && (strncasecmp(cmdbuf, "PEXP", 4))
1033            && (strncasecmp(cmdbuf, "GEXP", 4))
1034            && (strncasecmp(cmdbuf, "RWHO", 4))
1035            && (strncasecmp(cmdbuf, "TIME", 4)) ) {
1036                 strcpy(CC->lastcmdname, "    ");
1037                 safestrncpy(CC->lastcmdname, cmdbuf, sizeof(CC->lastcmdname));
1038                 time(&CC->lastidle);
1039         }
1040         
1041         CtdlThreadName(cmdbuf);
1042                 
1043         if ((strncasecmp(cmdbuf, "ENT0", 4))
1044            && (strncasecmp(cmdbuf, "MESG", 4))
1045            && (strncasecmp(cmdbuf, "MSGS", 4)))
1046         {
1047            CC->cs_flags &= ~CS_POSTING;
1048         }
1049                    
1050         if (!strncasecmp(cmdbuf, "NOOP", 4)) {
1051                 cprintf("%d%cok\n", CIT_OK, CtdlCheckExpress() );
1052         }
1053         
1054         else if (!strncasecmp(cmdbuf, "QNOP", 4)) {
1055                 /* do nothing, this command returns no response */
1056         }
1057
1058         else if (!strncasecmp(cmdbuf,"QUIT",4)) {
1059                 cprintf("%d Goodbye.\n", CIT_OK);
1060                 CC->kill_me = 1;
1061         }
1062
1063         else if (!strncasecmp(cmdbuf,"ASYN",4)) {
1064                 cmd_asyn(&cmdbuf[5]);
1065         }
1066
1067         else if (!strncasecmp(cmdbuf,"LOUT",4)) {
1068                 if (CC->logged_in) logout(CC);
1069                 cprintf("%d logged out.\n", CIT_OK);
1070         }
1071
1072         else if (!strncasecmp(cmdbuf,"USER",4)) {
1073                 cmd_user(&cmdbuf[5]);
1074         }
1075
1076         else if (!strncasecmp(cmdbuf,"PASS",4)) {
1077                 cmd_pass(&cmdbuf[5]);
1078         }
1079
1080         else if (!strncasecmp(cmdbuf,"NEWU",4)) {
1081                 cmd_newu(&cmdbuf[5]);
1082         }
1083
1084         else if (!strncasecmp(cmdbuf,"CREU",4)) {
1085                 cmd_creu(&cmdbuf[5]);
1086         }
1087
1088         else if (!strncasecmp(cmdbuf,"SETP",4)) {
1089                 cmd_setp(&cmdbuf[5]);
1090         }
1091
1092         else if (!strncasecmp(cmdbuf,"LRMS",4)) {
1093                 cmd_lrms(&cmdbuf[5]);
1094         }
1095
1096         else if (!strncasecmp(cmdbuf,"LKRA",4)) {
1097                 cmd_lkra(&cmdbuf[5]);
1098         }
1099
1100         else if (!strncasecmp(cmdbuf,"LKRN",4)) {
1101                 cmd_lkrn(&cmdbuf[5]);
1102         }
1103
1104         else if (!strncasecmp(cmdbuf,"LKRO",4)) {
1105                 cmd_lkro(&cmdbuf[5]);
1106         }
1107
1108         else if (!strncasecmp(cmdbuf,"LZRM",4)) {
1109                 cmd_lzrm(&cmdbuf[5]);
1110         }
1111
1112         else if (!strncasecmp(cmdbuf,"LPRM",4)) {
1113                 cmd_lprm(&cmdbuf[5]);
1114         }
1115
1116         else if (!strncasecmp(cmdbuf,"GETU",4)) {
1117                 cmd_getu();
1118         }
1119
1120         else if (!strncasecmp(cmdbuf,"SETU",4)) {
1121                 cmd_setu(&cmdbuf[5]);
1122         }
1123
1124         else if (!strncasecmp(cmdbuf,"GOTO",4)) {
1125                 cmd_goto(&cmdbuf[5]);
1126         }
1127
1128         else if (!strncasecmp(cmdbuf,"MSGS",4)) {
1129                 cmd_msgs(&cmdbuf[5]);
1130         }
1131
1132         else if (!strncasecmp(cmdbuf,"WHOK",4)) {
1133                 cmd_whok();
1134         }
1135
1136         else if (!strncasecmp(cmdbuf,"RDIR",4)) {
1137                 cmd_rdir();
1138         }
1139
1140         else if (!strncasecmp(cmdbuf,"EUID",4)) {
1141                 cmd_euid(&cmdbuf[5]);
1142         }
1143
1144         else if (!strncasecmp(cmdbuf,"MSG0",4)) {
1145                 cmd_msg0(&cmdbuf[5]);
1146         }
1147
1148         else if (!strncasecmp(cmdbuf,"MSG2",4)) {
1149                 cmd_msg2(&cmdbuf[5]);
1150         }
1151
1152         else if (!strncasecmp(cmdbuf,"MSG3",4)) {
1153                 cmd_msg3(&cmdbuf[5]);
1154         }
1155
1156         else if (!strncasecmp(cmdbuf,"MSG4",4)) {
1157                 cmd_msg4(&cmdbuf[5]);
1158         }
1159
1160         else if (!strncasecmp(cmdbuf,"MSGP",4)) {
1161                 cmd_msgp(&cmdbuf[5]);
1162         }
1163
1164         else if (!strncasecmp(cmdbuf,"OPNA",4)) {
1165                 cmd_opna(&cmdbuf[5]);
1166         }
1167
1168         else if (!strncasecmp(cmdbuf,"DLAT",4)) {
1169                 cmd_dlat(&cmdbuf[5]);
1170         }
1171
1172         else if (!strncasecmp(cmdbuf,"INFO",4)) {
1173                 cmd_info();
1174         }
1175
1176         else if (!strncasecmp(cmdbuf,"SLRP",4)) {
1177                 cmd_slrp(&cmdbuf[5]);
1178         }
1179
1180         else if (!strncasecmp(cmdbuf,"INVT",4)) {
1181                 cmd_invt_kick(&cmdbuf[5],1);
1182         }
1183
1184         else if (!strncasecmp(cmdbuf,"KICK",4)) {
1185                 cmd_invt_kick(&cmdbuf[5],0);
1186         }
1187
1188         else if (!strncasecmp(cmdbuf,"GETR",4)) {
1189                 cmd_getr();
1190         }
1191
1192         else if (!strncasecmp(cmdbuf,"SETR",4)) {
1193                 cmd_setr(&cmdbuf[5]);
1194         }
1195
1196         else if (!strncasecmp(cmdbuf,"GETA",4)) {
1197                 cmd_geta();
1198         }
1199
1200         else if (!strncasecmp(cmdbuf,"SETA",4)) {
1201                 cmd_seta(&cmdbuf[5]);
1202         }
1203
1204         else if (!strncasecmp(cmdbuf,"ENT0",4)) {
1205                 cmd_ent0(&cmdbuf[5]);
1206         }
1207
1208         else if (!strncasecmp(cmdbuf,"RINF",4)) {
1209                 cmd_rinf();
1210         }
1211
1212         else if (!strncasecmp(cmdbuf,"DELE",4)) {
1213                 cmd_dele(&cmdbuf[5]);
1214         }
1215
1216         else if (!strncasecmp(cmdbuf,"KILL",4)) {
1217                 cmd_kill(&cmdbuf[5]);
1218         }
1219
1220         else if (!strncasecmp(cmdbuf,"CRE8",4)) {
1221                 cmd_cre8(&cmdbuf[5]);
1222         }
1223
1224         else if (!strncasecmp(cmdbuf,"MOVE",4)) {
1225                 cmd_move(&cmdbuf[5]);
1226         }
1227
1228         else if (!strncasecmp(cmdbuf,"FORG",4)) {
1229                 cmd_forg();
1230         }
1231
1232         else if (!strncasecmp(cmdbuf,"MESG",4)) {
1233                 cmd_mesg(&cmdbuf[5]);
1234         }
1235
1236         else if (!strncasecmp(cmdbuf,"EMSG",4)) {
1237                 cmd_emsg(&cmdbuf[5]);
1238         }
1239
1240         else if (!strncasecmp(cmdbuf,"GNUR",4)) {
1241                 cmd_gnur();
1242         }
1243
1244         else if (!strncasecmp(cmdbuf,"VALI",4)) {
1245                 cmd_vali(&cmdbuf[5]);
1246         }
1247
1248         else if (!strncasecmp(cmdbuf,"EINF",4)) {
1249                 cmd_einf(&cmdbuf[5]);
1250         }
1251
1252         else if (!strncasecmp(cmdbuf,"LIST",4)) {
1253                 cmd_list(&cmdbuf[5]);
1254         }
1255
1256         else if (!strncasecmp(cmdbuf,"CHEK",4)) {
1257                 cmd_chek();
1258         }
1259
1260         else if (!strncasecmp(cmdbuf,"DELF",4)) {
1261                 cmd_delf(&cmdbuf[5]);
1262         }
1263
1264         else if (!strncasecmp(cmdbuf,"MOVF",4)) {
1265                 cmd_movf(&cmdbuf[5]);
1266         }
1267
1268         else if (!strncasecmp(cmdbuf,"NETF",4)) {
1269                 cmd_netf(&cmdbuf[5]);
1270         }
1271
1272         else if (!strncasecmp(cmdbuf,"OPEN",4)) {
1273                 cmd_open(&cmdbuf[5]);
1274         }
1275
1276         else if (!strncasecmp(cmdbuf,"CLOS",4)) {
1277                 cmd_clos();
1278         }
1279
1280         else if (!strncasecmp(cmdbuf,"UOPN",4)) {
1281                 cmd_uopn(&cmdbuf[5]);
1282         }
1283
1284         else if (!strncasecmp(cmdbuf,"UCLS",4)) {
1285                 cmd_ucls(&cmdbuf[5]);
1286         }
1287
1288         else if (!strncasecmp(cmdbuf,"READ",4)) {
1289                 cmd_read(&cmdbuf[5]);
1290         }
1291
1292         else if (!strncasecmp(cmdbuf,"WRIT",4)) {
1293                 cmd_writ(&cmdbuf[5]);
1294         }
1295
1296         else if (!strncasecmp(cmdbuf,"QUSR",4)) {
1297                 cmd_qusr(&cmdbuf[5]);
1298         }
1299
1300         else if (!strncasecmp(cmdbuf,"ECHO",4)) {
1301                 cmd_echo(&cmdbuf[5]);
1302         }
1303
1304         else if (!strncasecmp(cmdbuf,"OIMG",4)) {
1305                 cmd_oimg(&cmdbuf[5]);
1306         }
1307
1308         else if (!strncasecmp(cmdbuf,"MORE",4)) {
1309                 cmd_more();
1310         }
1311
1312         else if (!strncasecmp(cmdbuf,"NDOP",4)) {
1313                 cmd_ndop(&cmdbuf[5]);
1314         }
1315
1316         else if (!strncasecmp(cmdbuf,"NUOP",4)) {
1317                 cmd_nuop(&cmdbuf[5]);
1318         }
1319
1320         else if (!strncasecmp(cmdbuf,"LFLR",4)) {
1321                 cmd_lflr();
1322         }
1323
1324         else if (!strncasecmp(cmdbuf,"CFLR",4)) {
1325                 cmd_cflr(&cmdbuf[5]);
1326         }
1327
1328         else if (!strncasecmp(cmdbuf,"KFLR",4)) {
1329                 cmd_kflr(&cmdbuf[5]);
1330         }
1331
1332         else if (!strncasecmp(cmdbuf,"EFLR",4)) {
1333                 cmd_eflr(&cmdbuf[5]);
1334         }
1335
1336         else if (!strncasecmp(cmdbuf,"IDEN",4)) {
1337                 cmd_iden(&cmdbuf[5]);
1338         }
1339
1340         else if (!strncasecmp(cmdbuf,"IPGM",4)) {
1341                 cmd_ipgm(&cmdbuf[5]);
1342         }
1343
1344         else if (!strncasecmp(cmdbuf,"TERM",4)) {
1345                 cmd_term(&cmdbuf[5]);
1346         }
1347
1348         else if (!strncasecmp(cmdbuf,"DOWN",4)) {
1349                 cmd_down(&cmdbuf[5]);
1350         }
1351
1352         else if (!strncasecmp(cmdbuf,"HALT",4)) {
1353                 cmd_halt();
1354         }
1355
1356         else if (!strncasecmp(cmdbuf,"SCDN",4)) {
1357                 cmd_scdn(&cmdbuf[5]);
1358         }
1359
1360         else if (!strncasecmp(cmdbuf, "UIMG", 4)) {
1361                 cmd_uimg(&cmdbuf[5]);
1362         }
1363
1364         else if (!strncasecmp(cmdbuf, "TIME", 4)) {
1365                 cmd_time();
1366         }
1367
1368         else if (!strncasecmp(cmdbuf, "AGUP", 4)) {
1369                 cmd_agup(&cmdbuf[5]);
1370         }
1371
1372         else if (!strncasecmp(cmdbuf, "ASUP", 4)) {
1373                 cmd_asup(&cmdbuf[5]);
1374         }
1375
1376         else if (!strncasecmp(cmdbuf, "GPEX", 4)) {
1377                 cmd_gpex(&cmdbuf[5]);
1378         }
1379
1380         else if (!strncasecmp(cmdbuf, "SPEX", 4)) {
1381                 cmd_spex(&cmdbuf[5]);
1382         }
1383
1384         else if (!strncasecmp(cmdbuf, "CONF", 4)) {
1385                 cmd_conf(&cmdbuf[5]);
1386         }
1387
1388         else if (!strncasecmp(cmdbuf, "SEEN", 4)) {
1389                 cmd_seen(&cmdbuf[5]);
1390         }
1391
1392         else if (!strncasecmp(cmdbuf, "GTSN", 4)) {
1393                 cmd_gtsn(&cmdbuf[5]);
1394         }
1395
1396         else if (!strncasecmp(cmdbuf, "VIEW", 4)) {
1397                 cmd_view(&cmdbuf[5]);
1398         }
1399
1400         else if (!strncasecmp(cmdbuf, "ISME", 4)) {
1401                 cmd_isme(&cmdbuf[5]);
1402         }
1403
1404         else if (!DLoader_Exec_Cmd(cmdbuf)) {
1405                 cprintf("%d Unrecognized or unsupported command.\n",
1406                         ERROR + CMD_NOT_SUPPORTED);
1407                }
1408
1409         unbuffer_output();
1410
1411         /* Run any after-each-command routines registered by modules */
1412         PerformSessionHooks(EVT_CMD);
1413         CtdlThreadName(old_name);
1414 }
1415
1416
1417 /*
1418  * This loop performs all asynchronous functions.
1419  */
1420 void do_async_loop(void) {
1421         PerformSessionHooks(EVT_ASYNC);
1422 }