text: /**
   * xrdp: A Remote Desktop Protocol server.
   *
   * Copyright (C) Jay Sorg 2004-2015
   *
   * BSD process grouping by:
   * Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland.
   * Copyright (c) 2000-2001 Markus Friedl.
   * Copyright (c) 2011-2015 Koichiro Iwao, Kyushu Institute of Technology.
   *
   * Licensed under the Apache License, Version 2.0 (the "License");
   * you may not use this file except in compliance with the License.
   * You may obtain a copy of the License at
   *
   *     http://www.apache.org/licenses/LICENSE-2.0
   *
   * Unless required by applicable law or agreed to in writing, software
   * distributed under the License is distributed on an "AS IS" BASIS,
   * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
   * See the License for the specific language governing permissions and
   * limitations under the License.
   */
  
  /**
   *
   * @file session.c
   * @brief Session management code
   * @author Jay Sorg, Simone Fedele
   *
   */
  
  #if defined(HAVE_CONFIG_H)
  #include "config_ac.h"
  #endif
  
  #ifdef HAVE_SYS_PRCTL_H
  #include <sys/prctl.h>
  #endif
  
  #include "sesman.h"
  #include "libscp_types.h"
  #include "xauth.h"
  #include "sessionrecord.h"
  #include "xrdp_sockets.h"
  
  #ifndef PR_SET_NO_NEW_PRIVS
  #define PR_SET_NO_NEW_PRIVS 38
  #endif
  
  
  extern unsigned char g_fixedkey[8];
  extern struct config_sesman *g_cfg; /* in sesman.c */
  extern int g_sck; /* in sesman.c */
  struct session_chain *g_sessions;
  int g_session_count;
  
  extern tbus g_term_event; /* in sesman.c */
  
  /**
   * Creates a string consisting of all parameters that is hosted in the param list
   * @param self
   * @param outstr, allocate this buffer before you use this function
   * @param len the allocated len for outstr
   * @return
   */
  char *
  dumpItemsToString(struct list *self, char *outstr, int len)
  {
      int index;
      int totalLen = 0;
  
      g_memset(outstr, 0, len);
      if (self->count == 0)
      {
          g_writeln("List is empty");
      }
  
      for (index = 0; index < self->count; index++)
      {
          /* +1 = one space*/
          totalLen = totalLen + g_strlen((char *)list_get_item(self, index)) + 1;
  
          if (len > totalLen)
          {
              g_strcat(outstr, (char *)list_get_item(self, index));
              g_strcat(outstr, " ");
          }
      }
  
      return outstr ;
  }
  
  int compareIpAddresses(const char *addressOne,const char *addressTwo)
  {
      char * strippedIpOne = get_stripped_ip(addressOne);
      char * strippedIpTwo = get_stripped_ip(addressTwo);
  
      int compareResult = g_strcmp(strippedIpOne,strippedIpTwo);
      g_free(strippedIpOne);
      g_free(strippedIpTwo);
  
      return compareResult;
  }
  
  /******************************************************************************/
  struct session_item *
  session_get_bydata(const char *name, int width, int height, int bpp, int type,
                     const char *client_ip)
  {
      struct session_chain *tmp;
      enum SESMAN_CFG_SESS_POLICY policy = g_cfg->sess.policy;
  
      tmp = g_sessions;
  
      /* convert from SCP_SESSION_TYPE namespace to SESMAN_SESSION_TYPE namespace */
      switch (type)
      {
          case SCP_SESSION_TYPE_XVNC: /* 0 */
              type = SESMAN_SESSION_TYPE_XVNC; /* 2 */
              /* Xvnc cannot resize */
              policy = (enum SESMAN_CFG_SESS_POLICY)
                       (policy | SESMAN_CFG_SESS_POLICY_D);
              break;
          case SCP_SESSION_TYPE_XRDP: /* 1 */
              type = SESMAN_SESSION_TYPE_XRDP; /* 1 */
              break;
          case SCP_SESSION_TYPE_XORG:
              type = SESMAN_SESSION_TYPE_XORG;
              break;
          default:
              return 0;
      }
  
  #if 0
      log_message(LOG_LEVEL_INFO,
              "session_get_bydata: search policy %d U %s W %d H %d bpp %d T %d IP %s",
              policy, name, width, height, bpp, type, client_ip);
  #endif
  
      while (tmp != 0)
      {
  #if 0
          log_message(LOG_LEVEL_INFO,
              "session_get_bydata: try %p U %s W %d H %d bpp %d T %d IP %s",
              tmp->item,
              tmp->item->name,
              tmp->item->width, tmp->item->height,
              tmp->item->bpp, tmp->item->type,
              tmp->item->client_ip);
  #endif
  
          if (g_strncmp(name, tmp->item->name, 255) == 0 &&
              (!(policy & SESMAN_CFG_SESS_POLICY_D) ||
               (tmp->item->width == width && tmp->item->height == height)) &&
              (!(policy & SESMAN_CFG_SESS_POLICY_I) ||
               (g_strncmp_d(client_ip, tmp->item->client_ip, ':', 255) == 0)) &&
              (!(policy & SESMAN_CFG_SESS_POLICY_C) ||
               (g_strncmp(client_ip, tmp->item->client_ip, 255) == 0)) &&
              tmp->item->bpp == bpp &&
              tmp->item->type == type)
          {
              return tmp->item;
          }
  
          tmp = tmp->next;
      }
  
      return 0;
  }
  
  /******************************************************************************/
  /**
   *
   * @brief checks if there's a server running on a display
   * @param display the display to check
   * @return 0 if there isn't a display running, nonzero otherwise
   *
   */
  static int
  x_server_running_check_ports(int display)
  {
      char text[256];
      int x_running;
      int sck;
  
      g_sprintf(text, "/tmp/.X11-unix/X%d", display);
      x_running = g_file_exist(text);
  
      if (!x_running)
      {
          g_sprintf(text, "/tmp/.X%d-lock", display);
          x_running = g_file_exist(text);
      }
  
      if (!x_running) /* check 59xx */
      {
          if ((sck = g_tcp_socket()) != -1)
          {
              g_sprintf(text, "59%2.2d", display);
              x_running = g_tcp_bind(sck, text);
              g_tcp_close(sck);
          }
      }
  
      if (!x_running) /* check 60xx */
      {
          if ((sck = g_tcp_socket()) != -1)
          {
              g_sprintf(text, "60%2.2d", display);
              x_running = g_tcp_bind(sck, text);
              g_tcp_close(sck);
          }
      }
  
      if (!x_running) /* check 62xx */
      {
          if ((sck = g_tcp_socket()) != -1)
          {
              g_sprintf(text, "62%2.2d", display);
              x_running = g_tcp_bind(sck, text);
              g_tcp_close(sck);
          }
      }
  
      if (!x_running)
      {
          g_sprintf(text, XRDP_CHANSRV_STR, display);
          x_running = g_file_exist(text);
      }
  
      if (!x_running)
      {
          g_sprintf(text, CHANSRV_PORT_OUT_STR, display);
          x_running = g_file_exist(text);
      }
  
      if (!x_running)
      {
          g_sprintf(text, CHANSRV_PORT_IN_STR, display);
          x_running = g_file_exist(text);
      }
  
      if (!x_running)
      {
          g_sprintf(text, CHANSRV_API_STR, display);
          x_running = g_file_exist(text);
      }
  
      if (!x_running)
      {
          g_sprintf(text, XRDP_X11RDP_STR, display);
          x_running = g_file_exist(text);
      }
  
      return x_running;
  }
  
  /******************************************************************************/
  /**
   *
   * @brief checks if there's a server running on a display
   * @param display the display to check
   * @return 0 if there isn't a display running, nonzero otherwise
   *
   */
  static int
  x_server_running(int display)
  {
      char text[256];
      int x_running;
  
      g_sprintf(text, "/tmp/.X11-unix/X%d", display);
      x_running = g_file_exist(text);
  
      if (!x_running)
      {
          g_sprintf(text, "/tmp/.X%d-lock", display);
          x_running = g_file_exist(text);
      }
  
      return x_running;
  }
  
  /******************************************************************************/
  /* called with the main thread
     returns boolean */
  static int
  session_is_display_in_chain(int display)
  {
      struct session_chain *chain;
      struct session_item *item;
  
      chain = g_sessions;
  
      while (chain != 0)
      {
          item = chain->item;
  
          if (item->display == display)
          {
              return 1;
          }
  
          chain = chain->next;
      }
  
      return 0;
  }
  
  /******************************************************************************/
  /* called with the main thread */
  static int
  session_get_avail_display_from_chain(void)
  {
      int display;
  
      display = g_cfg->sess.x11_display_offset;
  
      while ((display - g_cfg->sess.x11_display_offset) <= g_cfg->sess.max_sessions)
      {
          if (!session_is_display_in_chain(display))
          {
              if (!x_server_running_check_ports(display))
              {
                  return display;
              }
          }
  
          display++;
      }
  
      log_message(LOG_LEVEL_ERROR, "X server -- no display in range is available");
      return 0;
  }
  
  /******************************************************************************/
  static int
  wait_for_xserver(int display)
  {
      int i;
  
      /* give X a bit to start */
      /* wait up to 10 secs for x server to start */
      i = 0;
  
      while (!x_server_running(display))
      {
          i++;
  
          if (i > 40)
          {
              log_message(LOG_LEVEL_ERROR,
                          "X server for display %d startup timeout",
                          display);
              break;
          }
  
          g_sleep(250);
      }
  
      return 0;
  }
  
  /******************************************************************************/
  static int
  session_start_chansrv(char *username, int display)
  {
      struct list *chansrv_params;
      char exe_path[262];
      int chansrv_pid;
  
      chansrv_pid = g_fork();
      if (chansrv_pid == 0)
      {
          chansrv_params = list_create();
          chansrv_params->auto_free = 1;
  
          /* building parameters */
          g_snprintf(exe_path, sizeof(exe_path), "%s/xrdp-chansrv",
                     XRDP_SBIN_PATH);
  
          list_add_item(chansrv_params, (intptr_t) g_strdup(exe_path));
          list_add_item(chansrv_params, 0); /* mandatory */
  
          env_set_user(username, 0, display,
                       g_cfg->env_names,
                       g_cfg->env_values);
  
          if (g_cfg->sec.restrict_outbound_clipboard == 1)
          {
              g_setenv("CHANSRV_RESTRICT_OUTBOUND_CLIPBOARD", "1", 1);
          }
  
          /* executing chansrv */
          g_execvp(exe_path, (char **) (chansrv_params->items));
          /* should not get here */
          log_message(LOG_LEVEL_ALWAYS, "error starting chansrv "
                      "- user %s - pid %d", username, g_getpid());
          list_delete(chansrv_params);
          g_exit(1);
      }
      return chansrv_pid;
  }
  
  /******************************************************************************/
  /* called with the main thread */
  static int
  session_start_fork(tbus data, tui8 type, struct SCP_CONNECTION *c,
                     struct SCP_SESSION *s)
  {
      int display = 0;
      int pid = 0;
      int i = 0;
      char geometry[32];
      char depth[32];
      char screen[32]; /* display number */
      char text[256];
      char execvpparams[2048];
      char *xserver; /* absolute/relative path to Xorg/X11rdp/Xvnc */
      char *passwd_file;
      char **pp1 = (char **)NULL;
      struct session_chain *temp = (struct session_chain *)NULL;
      struct list *xserver_params = (struct list *)NULL;
      struct tm stime;
      time_t ltime;
      char authfile[256]; /* The filename for storing xauth informations */
      int chansrv_pid;
      int display_pid;
      int window_manager_pid;
  
      /* initialize (zero out) local variables: */
      g_memset(&ltime, 0, sizeof(time_t));
      g_memset(&stime, 0, sizeof(struct tm));
      g_memset(geometry, 0, sizeof(char) * 32);
      g_memset(depth, 0, sizeof(char) * 32);
      g_memset(screen, 0, sizeof(char) * 32);
      g_memset(text, 0, sizeof(char) * 256);
  
      passwd_file = 0;
  
      /* check to limit concurrent sessions */
      if (g_session_count >= g_cfg->sess.max_sessions)
      {
          log_message(LOG_LEVEL_INFO, "max concurrent session limit "
                      "exceeded. login for user %s denied", s->username);
          return 0;
      }
  
      temp = (struct session_chain *)g_malloc(sizeof(struct session_chain), 0);
  
      if (temp == 0)
      {
          log_message(LOG_LEVEL_ERROR, "cannot create new chain "
                      "element - user %s", s->username);
          return 0;
      }
  
      temp->item = (struct session_item *)g_malloc(sizeof(struct session_item), 0);
  
      if (temp->item == 0)
      {
          g_free(temp);
          log_message(LOG_LEVEL_ERROR, "cannot create new session "
                      "item - user %s", s->username);
          return 0;
      }
  
      display = session_get_avail_display_from_chain();
  
      if (display == 0)
      {
          g_free(temp->item);
          g_free(temp);
          return 0;
      }
  
      pid = g_fork(); /* parent is fork from tcp accept,
                         child forks X and wm, then becomes scp */
  
      if (pid == -1)
      {
      }
      else if (pid == 0)
      {
          log_message(LOG_LEVEL_INFO, "calling auth_start_session from pid %d",
                      g_getpid());
          auth_start_session(data, display);
          g_delete_wait_obj(g_term_event);
          g_tcp_close(g_sck);
          g_tcp_close(c->in_sck);
          g_sprintf(geometry, "%dx%d", s->width, s->height);
          g_sprintf(depth, "%d", s->bpp);
          g_sprintf(screen, ":%d", display);
  #if defined(__FreeBSD__) || defined(__FreeBSD_kernel__)
          /*
           * FreeBSD bug
           * ports/157282: effective login name is not set by xrdp-sesman
           * http://www.freebsd.org/cgi/query-pr.cgi?pr=157282
           *
           * from:
           *  $OpenBSD: session.c,v 1.252 2010/03/07 11:57:13 dtucker Exp $
           *  with some ideas about BSD process grouping to xrdp
           */
          pid_t bsdsespid = g_fork();
  
          if (bsdsespid == -1)
          {
          }
          else if (bsdsespid == 0) /* BSD session leader */
          {
              /**
               * Create a new session and process group since the 4.4BSD
               * setlogin() affects the entire process group
               */
              if (g_setsid() < 0)
              {
                  log_message(LOG_LEVEL_ERROR,
                              "setsid failed - pid %d", g_getpid());
              }
  
              if (g_setlogin(s->username) < 0)
              {
                  log_message(LOG_LEVEL_ERROR,
                              "setlogin failed for user %s - pid %d", s->username,
                              g_getpid());
              }
          }
  
          g_waitpid(bsdsespid);
  
          if (bsdsespid > 0)
          {
              g_exit(0);
              /*
               * intermediate sesman should exit here after WM exits.
               * do not execure the following codes.
               */
          }
  #endif
  
         
          utmp_login(g_getpid(), display, s->username, s->client_ip);
  
          window_manager_pid = g_fork(); /* parent becomes X,
                               child forks wm, and waits, todo */
          if (window_manager_pid == -1)
          {
          }
          else if (window_manager_pid == 0)
          {
              wait_for_xserver(display);
              env_set_user(s->username,
                           0,
                           display,
                           g_cfg->env_names,
                           g_cfg->env_values);
              if (x_server_running(display))
              {
                  auth_set_env(data);
                  if (s->directory != 0)
                  {
                      if (s->directory[0] != 0)
                      {
                          g_set_current_dir(s->directory);
                      }
                  }
                  if (s->program != 0)
                  {
                      if (s->program[0] != 0)
                      {
                          g_execlp3(s->program, s->program, 0);
                          log_message(LOG_LEVEL_ALWAYS,
                                      "error starting program %s for user %s - pid %d",
                                      s->program, s->username, g_getpid());
                      }
                  }
                  /* try to execute user window manager if enabled */
                  if (g_cfg->enable_user_wm)
                  {
                      g_sprintf(text, "%s/%s", g_getenv("HOME"), g_cfg->user_wm);
                      if (g_file_exist(text))
                      {
                          g_execlp3(text, g_cfg->user_wm, 0);
                          log_message(LOG_LEVEL_ALWAYS, "error starting user "
                                      "wm for user %s - pid %d", s->username, g_getpid());
                          /* logging parameters */
                          log_message(LOG_LEVEL_DEBUG, "errno: %d, "
                                      "description: %s", g_get_errno(), g_get_strerror());
                          log_message(LOG_LEVEL_DEBUG, "execlp3 parameter "
                                      "list:");
                          log_message(LOG_LEVEL_DEBUG, "        argv[0] = %s",
                                      text);
                          log_message(LOG_LEVEL_DEBUG, "        argv[1] = %s",
                                      g_cfg->user_wm);
                      }
                  }
                  /* if we're here something happened to g_execlp3
                     so we try running the default window manager */
                  g_execlp3(g_cfg->default_wm, g_cfg->default_wm, 0);
  
                  log_message(LOG_LEVEL_ALWAYS, "error starting default "
                               "wm for user %s - pid %d", s->username, g_getpid());
                  /* logging parameters */
                  log_message(LOG_LEVEL_DEBUG, "errno: %d, description: "
                              "%s", g_get_errno(), g_get_strerror());
                  log_message(LOG_LEVEL_DEBUG, "execlp3 parameter list:");
                  log_message(LOG_LEVEL_DEBUG, "        argv[0] = %s",
                              g_cfg->default_wm);
                  log_message(LOG_LEVEL_DEBUG, "        argv[1] = %s",
                              g_cfg->default_wm);
  
                  /* still a problem starting window manager just start xterm */
                  g_execlp3("xterm", "xterm", 0);
  
                  /* should not get here */
                  log_message(LOG_LEVEL_ALWAYS, "error starting xterm "
                              "for user %s - pid %d", s->username, g_getpid());
                  /* logging parameters */
                  log_message(LOG_LEVEL_DEBUG, "errno: %d, description: "
                              "%s", g_get_errno(), g_get_strerror());
              }
              else
              {
                  log_message(LOG_LEVEL_ERROR, "another Xserver might "
                              "already be active on display %d - see log", display);
              }
  
              log_message(LOG_LEVEL_DEBUG, "aborting connection...");
              g_exit(0);
          }
          else
          {
              display_pid = g_fork(); /* parent becomes scp,
                                  child becomes X */
              if (display_pid == -1)
              {
              }
              else if (display_pid == 0) /* child */
              {
                  if (type == SESMAN_SESSION_TYPE_XVNC)
                  {
                      env_set_user(s->username,
                                   &passwd_file,
                                   display,
                                   g_cfg->env_names,
                                   g_cfg->env_values);
                  }
                  else
                  {
                      env_set_user(s->username,
                                   0,
                                   display,
                                   g_cfg->env_names,
                                   g_cfg->env_values);
                  }
  
  
                  g_snprintf(text, 255, "%d", g_cfg->sess.max_idle_time);
                  g_setenv("XRDP_SESMAN_MAX_IDLE_TIME", text, 1);
                  g_snprintf(text, 255, "%d", g_cfg->sess.max_disc_time);
                  g_setenv("XRDP_SESMAN_MAX_DISC_TIME", text, 1);
                  g_snprintf(text, 255, "%d", g_cfg->sess.kill_disconnected);
                  g_setenv("XRDP_SESMAN_KILL_DISCONNECTED", text, 1);
                  g_setenv("XRDP_SOCKET_PATH", XRDP_SOCKET_PATH, 1);
  
                  /* prepare the Xauthority stuff */
                  if (g_getenv("XAUTHORITY") != NULL)
                  {
                      g_snprintf(authfile, 255, "%s", g_getenv("XAUTHORITY"));
                  }
                  else
                  {
                      g_snprintf(authfile, 255, "%s", ".Xauthority");
                  }
  
                  /* Add the entry in XAUTHORITY file or exit if error */
                  if (add_xauth_cookie(display, authfile) != 0)
                  {
                      g_exit(1);
                  }
  
                  if (type == SESMAN_SESSION_TYPE_XORG)
                  {
  #ifdef HAVE_SYS_PRCTL_H
                      /*
                       * Make sure Xorg doesn't run setuid root. Root access is not
                       * needed. Xorg can fail when run as root and the user has no
                       * console permissions.
                       * PR_SET_NO_NEW_PRIVS requires Linux kernel 3.5 and newer.
                       */
                      if (prctl(PR_SET_NO_NEW_PRIVS, 1, 0, 0, 0) < 0)
                      {
                          log_message(LOG_LEVEL_WARNING,
                                      "Failed to disable setuid on X server: %s",
                                      g_get_strerror());
                      }
  #endif
  
                      xserver_params = list_create();
                      xserver_params->auto_free = 1;
  
                      /* get path of Xorg from config */
                      xserver = g_strdup((const char *)list_get_item(g_cfg->xorg_params, 0));
  
                      /* these are the must have parameters */
                      list_add_item(xserver_params, (tintptr) g_strdup(xserver));
                      list_add_item(xserver_params, (tintptr) g_strdup(screen));
                      list_add_item(xserver_params, (tintptr) g_strdup("-auth"));
                      list_add_item(xserver_params, (tintptr) g_strdup(authfile));
  
                      /* additional parameters from sesman.ini file */
                      list_append_list_strdup(g_cfg->xorg_params, xserver_params, 1);
  
                      /* make sure it ends with a zero */
                      list_add_item(xserver_params, 0);
  
                      pp1 = (char **) xserver_params->items;
  
                      log_message(LOG_LEVEL_INFO, "%s", dumpItemsToString(xserver_params, execvpparams, 2048));
  
                      /* some args are passed via env vars */
                      g_sprintf(geometry, "%d", s->width);
                      g_setenv("XRDP_START_WIDTH", geometry, 1);
  
                      g_sprintf(geometry, "%d", s->height);
                      g_setenv("XRDP_START_HEIGHT", geometry, 1);
  
                      /* fire up Xorg */
                      g_execvp(xserver, pp1);
                  }
                  else if (type == SESMAN_SESSION_TYPE_XVNC)
                  {
                      char guid_str[64];
                      g_bytes_to_hexstr(s->guid, 16, guid_str, 64);
                      env_check_password_file(passwd_file, guid_str);
                      xserver_params = list_create();
                      xserver_params->auto_free = 1;
  
                      /* get path of Xvnc from config */
                      xserver = g_strdup((const char *)list_get_item(g_cfg->vnc_params, 0));
  
                      /* these are the must have parameters */
                      list_add_item(xserver_params, (tintptr)g_strdup(xserver));
                      list_add_item(xserver_params, (tintptr)g_strdup(screen));
                      list_add_item(xserver_params, (tintptr)g_strdup("-auth"));
                      list_add_item(xserver_params, (tintptr)g_strdup(authfile));
                      list_add_item(xserver_params, (tintptr)g_strdup("-geometry"));
                      list_add_item(xserver_params, (tintptr)g_strdup(geometry));
                      list_add_item(xserver_params, (tintptr)g_strdup("-depth"));
                      list_add_item(xserver_params, (tintptr)g_strdup(depth));
                      list_add_item(xserver_params, (tintptr)g_strdup("-rfbauth"));
                      list_add_item(xserver_params, (tintptr)g_strdup(passwd_file));
  
                      g_free(passwd_file);
  
                      /* additional parameters from sesman.ini file */
                      //config_read_xserver_params(SESMAN_SESSION_TYPE_XVNC,
                      //                           xserver_params);
                      list_append_list_strdup(g_cfg->vnc_params, xserver_params, 1);
  
                      /* make sure it ends with a zero */
                      list_add_item(xserver_params, 0);
                      pp1 = (char **)xserver_params->items;
                      log_message(LOG_LEVEL_INFO, "%s", dumpItemsToString(xserver_params, execvpparams, 2048));
                      g_execvp(xserver, pp1);
                  }
                  else if (type == SESMAN_SESSION_TYPE_XRDP)
                  {
                      xserver_params = list_create();
                      xserver_params->auto_free = 1;
  
                      /* get path of X11rdp from config */
                      xserver = g_strdup((const char *)list_get_item(g_cfg->rdp_params, 0));
  
                      /* these are the must have parameters */
                      list_add_item(xserver_params, (tintptr)g_strdup(xserver));
                      list_add_item(xserver_params, (tintptr)g_strdup(screen));
                      list_add_item(xserver_params, (tintptr)g_strdup("-auth"));
                      list_add_item(xserver_params, (tintptr)g_strdup(authfile));
                      list_add_item(xserver_params, (tintptr)g_strdup("-geometry"));
                      list_add_item(xserver_params, (tintptr)g_strdup(geometry));
                      list_add_item(xserver_params, (tintptr)g_strdup("-depth"));
                      list_add_item(xserver_params, (tintptr)g_strdup(depth));
  
                      /* additional parameters from sesman.ini file */
                      //config_read_xserver_params(SESMAN_SESSION_TYPE_XRDP,
                      //                           xserver_params);
                      list_append_list_strdup(g_cfg->rdp_params, xserver_params, 1);
  
                      /* make sure it ends with a zero */
                      list_add_item(xserver_params, 0);
                      pp1 = (char **)xserver_params->items;
                      log_message(LOG_LEVEL_INFO, "%s", dumpItemsToString(xserver_params, execvpparams, 2048));
                      g_execvp(xserver, pp1);
                  }
                  else
                  {
                      log_message(LOG_LEVEL_ALWAYS, "bad session type - "
                                  "user %s - pid %d", s->username, g_getpid());
                      g_exit(1);
                  }
  
                  /* should not get here */
                  log_message(LOG_LEVEL_ALWAYS, "error starting X server "
                              "- user %s - pid %d", s->username, g_getpid());
  
                  /* logging parameters */
                  log_message(LOG_LEVEL_DEBUG, "errno: %d, description: "
                              "%s", g_get_errno(), g_get_strerror());
                  log_message(LOG_LEVEL_DEBUG, "execve parameter list size: "
                              "%d", (xserver_params)->count);
  
                  for (i = 0; i < (xserver_params->count); i++)
                  {
                      log_message(LOG_LEVEL_DEBUG, "        argv[%d] = %s",
                                  i, (char *)list_get_item(xserver_params, i));
                  }
  
                  list_delete(xserver_params);
                  g_exit(1);
              }
              else
              {
                  wait_for_xserver(display);
                  chansrv_pid = session_start_chansrv(s->username, display);
                  log_message(LOG_LEVEL_ALWAYS, "waiting for window manager "
                              "(pid %d) to exit", window_manager_pid);
                  g_waitpid(window_manager_pid);
                  log_message(LOG_LEVEL_ALWAYS, "window manager (pid %d) did "
                              "exit, cleaning up session", window_manager_pid);
                  log_message(LOG_LEVEL_INFO, "calling auth_stop_session and "
                              "auth_end from pid %d", g_getpid());
                  auth_stop_session(data);
                  auth_end(data);
                  g_sigterm(display_pid);
                  g_sigterm(chansrv_pid);
                  cleanup_sockets(display);
                  g_deinit();
                  g_exit(0);
              }
          }
      }
      else
      {
          temp->item->pid = pid;
          temp->item->display = display;
          temp->item->width = s->width;
          temp->item->height = s->height;
          temp->item->bpp = s->bpp;
          temp->item->data = data;
          g_strncpy(temp->item->client_ip, s->client_ip, 255);   /* store client ip data */
          g_strncpy(temp->item->name, s->username, 255);
          g_memcpy(temp->item->guid, s->guid, 16);
  
          ltime = g_time1();
          localtime_r(&ltime, &stime);
          temp->item->connect_time.year = (tui16)(stime.tm_year + 1900);
          temp->item->connect_time.month = (tui8)(stime.tm_mon + 1);
          temp->item->connect_time.day = (tui8)stime.tm_mday;
          temp->item->connect_time.hour = (tui8)stime.tm_hour;
          temp->item->connect_time.minute = (tui8)stime.tm_min;
          zero_time(&(temp->item->disconnect_time));
          zero_time(&(temp->item->idle_time));
  
          temp->item->type = type;
          temp->item->status = SESMAN_SESSION_STATUS_ACTIVE;
  
          temp->next = g_sessions;
          g_sessions = temp;
          g_session_count++;
  
          return display;
      }
  
      g_free(temp->item);
      g_free(temp);
      return display;
  }
  
  /******************************************************************************/
  /* called with the main thread */
  static int
  session_reconnect_fork(int display, long data, struct SCP_SESSION *s,struct session_item * s_item)
  {
      int pid;
  
      pid = g_fork();
  
      if (pid == -1)
      {
      }
      else if (pid == 0)
      {
          if(compareIpAddresses(s->client_ip,s_item->client_ip) == 0)
          {
              log_message(LOG_LEVEL_DEBUG,
                      "Reconnecting from existing session IP Address %s - current Ip %s",
                      s->client_ip, s_item->client_ip);
          }
          else
          {
              log_message(LOG_LEVEL_INFO,
                      "Reconnecting from new IP Address %s - old IP %s",
                      s->client_ip, s_item->client_ip);
          
              utmp_login(s_item->pid, display, s->username, s->client_ip);
              
          }
  
          env_set_user(s->username,
                       0,
                       display,
                       g_cfg->env_names,
                       g_cfg->env_values);
          auth_set_env(data);
  
          if (g_file_exist(g_cfg->reconnect_sh))
          {
              g_execlp3(g_cfg->reconnect_sh, g_cfg->reconnect_sh, 0);
          }
  
          g_exit(0);
      }
  
      return display;
  }
  
  /******************************************************************************/
  /* called by a worker thread, ask the main thread to call session_sync_start
     and wait till done */
  int
  session_start(long data, tui8 type, struct SCP_CONNECTION *c,
                struct SCP_SESSION *s)
  {
      return session_start_fork(data, type, c, s);
  }
  
  /******************************************************************************/
  /* called by a worker thread, ask the main thread to call session_sync_start
     and wait till done */
  int
  session_reconnect(int display, long data, struct SCP_SESSION *s, struct session_item * s_item)
  {
      return session_reconnect_fork(display, data ,s, s_item);
  }
  
  /******************************************************************************/
  int
  session_kill(int pid)
  {
      struct session_chain *tmp;
      struct session_chain *prev;
  
      tmp = g_sessions;
      prev = 0;
  
      while (tmp != 0)
      {
          if (tmp->item == 0)
          {
              log_message(LOG_LEVEL_ERROR, "session descriptor for "
                          "pid %d is null!", pid);
  
              if (prev == 0)
              {
                  /* prev does no exist, so it's the first element - so we set
                     g_sessions */
                  g_sessions = tmp->next;
              }
              else
              {
                  prev->next = tmp->next;
              }
  
              return SESMAN_SESSION_KILL_NULLITEM;
          }
  
          if (tmp->item->pid == pid)
          {
              /* deleting the session */
              log_message(LOG_LEVEL_INFO, "++ terminated session:  username %s, display :%d.0, session_pid %d, ip %s", tmp->item->name, tmp->item->display, tmp->item->pid, tmp->item->client_ip);
  
              utmp_logout(tmp->item->pid, tmp->item->display, tmp->item->name, tmp->item->client_ip);
  
              g_free(tmp->item);
  
              if (prev == 0)
              {
                  /* prev does no exist, so it's the first element - so we set
                     g_sessions */
                  g_sessions = tmp->next;
              }
              else
              {
                  prev->next = tmp->next;
              }
  
              g_free(tmp);
              g_session_count--;
              return SESMAN_SESSION_KILL_OK;
          }
  
          /* go on */
          prev = tmp;
          tmp = tmp->next;
      }
  
      return SESMAN_SESSION_KILL_NOTFOUND;
  }
  
  /******************************************************************************/
  void
  session_sigkill_all(void)
  {
      struct session_chain *tmp;
  
      tmp = g_sessions;
  
      while (tmp != 0)
      {
          if (tmp->item == 0)
          {
              log_message(LOG_LEVEL_ERROR, "found null session "
                          "descriptor!");
          }
          else
          {
              g_sigterm(tmp->item->pid);
          }
  
          /* go on */
          tmp = tmp->next;
      }
  }
  
  /******************************************************************************/
  struct session_item *
  session_get_bypid(int pid)
  {
      struct session_chain *tmp;
      struct session_item *dummy;
  
      dummy = g_new0(struct session_item, 1);
  
      if (0 == dummy)
      {
          log_message(LOG_LEVEL_ERROR, "session_get_bypid: out of memory");
          return 0;
      }
  
      tmp = g_sessions;
  
      while (tmp != 0)
      {
          if (tmp->item == 0)
          {
              log_message(LOG_LEVEL_ERROR, "session descriptor for "
                          "pid %d is null!", pid);
              g_free(dummy);
              return 0;
          }
  
          if (tmp->item->pid == pid)
          {
              g_memcpy(dummy, tmp->item, sizeof(struct session_item));
              return dummy;
          }
  
          /* go on */
          tmp = tmp->next;
      }
  
      g_free(dummy);
      return 0;
  }
  
  /******************************************************************************/
  struct SCP_DISCONNECTED_SESSION *
  session_get_byuser(const char *user, int *cnt, unsigned char flags)
  {
      struct session_chain *tmp;
      struct SCP_DISCONNECTED_SESSION *sess;
      int count;
      int index;
  
      count = 0;
  
      tmp = g_sessions;
  
      while (tmp != 0)
      {
          LOG_DBG("user: %s", user);
  
          if ((NULL == user) || (!g_strncasecmp(user, tmp->item->name, 256)))
          {
              LOG_DBG("session_get_byuser: status=%d, flags=%d, "
                      "result=%d", (tmp->item->status), flags,
                      ((tmp->item->status) & flags));
  
              if ((tmp->item->status) & flags)
              {
                  count++;
              }
          }
  
          /* go on */
          tmp = tmp->next;
      }
  
      if (count == 0)
      {
          (*cnt) = 0;
          return 0;
      }
  
      /* malloc() an array of disconnected sessions */
      sess = g_new0(struct SCP_DISCONNECTED_SESSION, count);
  
      if (sess == 0)
      {
          (*cnt) = 0;
          return 0;
      }
  
      tmp = g_sessions;
      index = 0;
  
      while (tmp != 0)
      {
  /* #warning FIXME: we should get only disconnected sessions! */
          if ((NULL == user) || (!g_strncasecmp(user, tmp->item->name, 256)))
          {
              if ((tmp->item->status) & flags)
              {
                  (sess[index]).SID = tmp->item->pid;
                  (sess[index]).type = tmp->item->type;
                  (sess[index]).height = tmp->item->height;
                  (sess[index]).width = tmp->item->width;
                  (sess[index]).bpp = tmp->item->bpp;
  /* #warning FIXME: setting idle times and such */
                  /*(sess[index]).connect_time.year = tmp->item->connect_time.year;
                  (sess[index]).connect_time.month = tmp->item->connect_time.month;
                  (sess[index]).connect_time.day = tmp->item->connect_time.day;
                  (sess[index]).connect_time.hour = tmp->item->connect_time.hour;
                  (sess[index]).connect_time.minute = tmp->item->connect_time.minute;
                  (sess[index]).disconnect_time.year = tmp->item->disconnect_time.year;
                  (sess[index]).disconnect_time.month = tmp->item->disconnect_time.month;
                  (sess[index]).disconnect_time.day = tmp->item->disconnect_time.day;
                  (sess[index]).disconnect_time.hour = tmp->item->disconnect_time.hour;
                  (sess[index]).disconnect_time.minute = tmp->item->disconnect_time.minute;
                  (sess[index]).idle_time.year = tmp->item->idle_time.year;
                  (sess[index]).idle_time.month = tmp->item->idle_time.month;
                  (sess[index]).idle_time.day = tmp->item->idle_time.day;
                  (sess[index]).idle_time.hour = tmp->item->idle_time.hour;
                  (sess[index]).idle_time.minute = tmp->item->idle_time.minute;*/
                  (sess[index]).conn_year = tmp->item->connect_time.year;
                  (sess[index]).conn_month = tmp->item->connect_time.month;
                  (sess[index]).conn_day = tmp->item->connect_time.day;
                  (sess[index]).conn_hour = tmp->item->connect_time.hour;
                  (sess[index]).conn_minute = tmp->item->connect_time.minute;
                  (sess[index]).idle_days = tmp->item->idle_time.day;
                  (sess[index]).idle_hours = tmp->item->idle_time.hour;
                  (sess[index]).idle_minutes = tmp->item->idle_time.minute;
  
                  index++;
              }
          }
  
          /* go on */
          tmp = tmp->next;
      }
  
      (*cnt) = count;
      return sess;
  }
  
  /******************************************************************************/
  int
  cleanup_sockets(int display)
  {
      log_message(LOG_LEVEL_DEBUG, "cleanup_sockets:");
      char file[256];
      int error;
  
      error = 0;
  
      g_snprintf(file, 255, CHANSRV_PORT_OUT_STR, display);
      if (g_file_exist(file))
      {
          log_message(LOG_LEVEL_DEBUG, "cleanup_sockets: deleting %s", file);
          if (g_file_delete(file) == 0)
          {
              log_message(LOG_LEVEL_DEBUG,
                         "cleanup_sockets: failed to delete %s", file);
              error++;
          }
      }
  
      g_snprintf(file, 255, CHANSRV_PORT_IN_STR, display);
      if (g_file_exist(file))
      {
          log_message(LOG_LEVEL_DEBUG, "cleanup_sockets: deleting %s", file);
          if (g_file_delete(file) == 0)
          {
              log_message(LOG_LEVEL_DEBUG,
                         "cleanup_sockets: failed to delete %s", file);
              error++;
          }
      }
  
      g_snprintf(file, 255, XRDP_CHANSRV_STR, display);
      if (g_file_exist(file))
      {
          log_message(LOG_LEVEL_DEBUG, "cleanup_sockets: deleting %s", file);
          if (g_file_delete(file) == 0)
          {
              log_message(LOG_LEVEL_DEBUG,
                         "cleanup_sockets: failed to delete %s", file);
              error++;
          }
      }
  
      g_snprintf(file, 255, CHANSRV_API_STR, display);
      if (g_file_exist(file))
      {
          log_message(LOG_LEVEL_DEBUG, "cleanup_sockets: deleting %s", file);
          if (g_file_delete(file) == 0)
          {
              log_message(LOG_LEVEL_DEBUG,
                         "cleanup_sockets: failed to delete %s", file);
              error++;
          }
      }
  
      return error;
  
  }
  