summaryrefslogtreecommitdiff
path: root/net/samba
AgeCommit message (Collapse)AuthorFilesLines
2006-07-11Fix path in patch-cd.ghen2-5/+5
2006-07-11Apply the patch from http://www.samba.org/samba/security/CAN-2006-3403.htmlghen3-3/+23
to fix a memory exhaustion DoS against smbd. Bump PKGREVISION.
2006-07-08Change the format of BUILDLINK_ORDER to contain depth information as well,jlam1-2/+2
and add a new helper target and script, "show-buildlink3", that outputs a listing of the buildlink3.mk files included as well as the depth at which they are included. For example, "make show-buildlink3" in fonts/Xft2 displays: zlib fontconfig iconv zlib freetype2 expat freetype2 Xrender renderproto
2006-07-08Track information in a new variable BUILDLINK_ORDER that informs usjlam1-1/+2
of the order in which buildlink3.mk files are (recursively) included by a package Makefile.
2006-05-31The databases/openldap package has been split in -client and -server componentghen1-2/+2
packages. Convert LDAP-based applications to depend on openldap-client, and bump PKGREVISION for those that depend on it by default.
2006-05-03Samba developers say that winbindd does not require nmbd to be running.jlam2-18/+4
Bump PKGREVISION to 1.
2006-04-20ignore gssapi.h on Solaris when Active Directory support is beinggrant1-1/+6
compiled in, as it conflicts with <gssapi/gssapi.h>. fixes build on Solaris w/ AD support.
2006-04-12Aligned the last line of the buildlink3.mk files with the first line, sorillig1-2/+2
that they look nicer.
2006-04-06Over 1200 files touched but no revisions bumped :)reed1-2/+2
RECOMMENDED is removed. It becomes ABI_DEPENDS. BUILDLINK_RECOMMENDED.foo becomes BUILDLINK_ABI_DEPENDS.foo. BUILDLINK_DEPENDS.foo becomes BUILDLINK_API_DEPENDS.foo. BUILDLINK_DEPENDS does not change. IGNORE_RECOMMENDED (which defaulted to "no") becomes USE_ABI_DEPENDS which defaults to "yes". Added to obsolete.mk checking for IGNORE_RECOMMENDED. I did not manually go through and fix any aesthetic tab/spacing issues. I have tested the above patch on DragonFly building and packaging subversion and pkglint and their many dependencies. I have also tested USE_ABI_DEPENDS=no on my NetBSD workstation (where I have used IGNORE_RECOMMENDED for a long time). I have been an active user of IGNORE_RECOMMENDED since it was available. As suggested, I removed the documentation sentences suggesting bumping for "security" issues. As discussed on tech-pkg. I will commit to revbump, pkglint, pkg_install, createbuildlink separately. Note that if you use wip, it will fail! I will commit to pkgsrc-wip later (within day).
2006-04-03Sprinkle some .PHONY targets to make pkglint happy.salo2-2/+8
2006-04-01Update net/samba to version 3.0.22. Changes from version 3.0.21a include:jlam19-132/+154
* Fix CAN-2006-1059 -- samba<3.0.22 exposes the clear text of the server's machine account credentials in the winbind log files when the log level is set to 5 or higher. * Append "-pkgsrc" to the Samba version string so as to distinguish the official version from the pkgsrc version, which has the modifications for "state directory" and "passwd expand gecos". * Modify package so that we automatically determine the name of the nsswitch modules that are installed by samba with the winbind option. We extract this information by invoking the config.status script to get the value that the configure script determined. o Access checks when deleting printer driver meta-data. o Several non-default combinations schannel and SPNEGO support. o Password changes with NT4 and Win2k pre-SP4 clients. o High load issues on IRIX caused by a bug when interfacing with kernel oplocks. o Server crashes in smbd. o Compile issues on 64-bit platforms. o Crash bugs on big-endian systems. o Packaging fixes for RHEL/Fedora, Solaris, & Debian. o Over 30 bugzilla reports closed.
2006-01-08Bump PKGREVISION due to mysql.buildlink3.mk changes (default mysqlxtraeme1-1/+2
pkg has been changed to 5.x). Reminded by wiz... thanks.
2006-01-06Use SUBST framework. Be pedantic and also replace /bin/sh with ${SH}.joerg3-8/+14
2006-01-02Update net/samba to 3.0.21a. Changes since version 3.0.20b include:jlam25-222/+184
Bugfixes: o Address a bug in the oplock code which may cause clients to stall when multiple users are accessing a share concurrently o Missing groups in a user's token when logging in via kerberos o Incompatibilities with newer MS Windows hotfixes and embedded OS platforms o Portability and crash bugs. o Performance issues in winbindd. Additions: o Complete NTLMv2 support by consolidating authentication mechanism used at the CIFS and RPC layers. o The capability to manage Unix services using the Win32 Service Control API. o The capability to view external Unix log files via the Microsoft Event Viewer. o New libmsrpc share library for application developers. o Rewrite of CIFS oplock implementation. o Performance Counter external daemon. o Winbindd auto-detection query methods when communicating with a domain controller. o The ability to enumerate long share names in libsmbclient applications.
2005-12-29Remove USE_PKGINSTALL from pkgsrc now that mk/install/pkginstall.mkjlam1-2/+1
automatically detects whether we want the pkginstall machinery to be used by the package Makefile.
2005-12-21Fix PR pkg/32080 by adding a non-conflicting definition forjlam3-4/+30
load_rc_config_var so that platforms with older versions of /etc/rc.subr can run smbd.sh and winbindd.sh without updating /etc/rc.subr. Bump PKGREVISION to 3.
2005-12-17Change my MAINTAINER email address to the one I've been using forjlam1-2/+2
pkgsrc work.
2005-12-05Ran "pkglint --autofix", which corrected some of the quoting issues inrillig2-11/+11
CONFIGURE_ARGS.
2005-12-05Fixed pkglint warnings. The warnings are mostly quoting issues, forrillig1-9/+9
example MAKE_ENV+=FOO=${BAR} is changed to MAKE_ENV+=FOO=${BAR:Q}. Some other changes are outlined in http://mail-index.netbsd.org/tech-pkg/2005/12/02/0034.html
2005-11-15Move WINBINDD_RCD_SCRIPT fix entirely from options.mk to Makefile as thejlam2-4/+3
last two revisions of options.mk and Makefile fixed the same problem.
2005-11-15Fix creation of "samba" startup script. Bump package revision.tron1-2/+3
2005-11-14Other part of fix for the WINBINDD_RCD_SCRIPT problem in the samba rc.djlam1-1/+2
script.
2005-11-14Fix the samba rc.d script in the case where winbind support is notjlam2-3/+4
compiled (the default). Bump the PKGREVISION of net/samba to 3.0.20.2nb1.
2005-11-14Update net/samba to 3.0.20.2 from samba-3.0.20b. Recommended patchesjlam60-770/+2499
for samba-3.0.20b that are applied as part of this update include: http://www.samba.org/samba/patches/print_lprm.patch http://www.samba.org/samba/patches/quota.patch http://www.samba.org/samba/patches/bug3201_wbinfo.patch This fixes PRs pkg/31352 and pkg/31991. Important changes that were made as part of porting this Samba release to pkgsrc include the following: * The new release model for Samba includes distributing patches for urgent bug fixes that will be included in the next release of Samba, and are available at http://www.samba.org/samba/patches/. Since these patches are rather generically named, we download all DISTFILES and PATCHFILES for Samba into a ${DISTNAME}-specific directory. * The default configuration for the samba package no longer builds the "winbind" portions of samba, which are really only useful when attempting to unify logons between Unix and Microsoft Windows. When the "winbind" option is specified, we also build the RID and AD idmap backends, which allow sharing UIDs/GIDs across Unix machines. * New package options have been added to the build: "mysql", "pgsql", and "xml" allow adding optional support for experimental passdb storage backends, and "winbind" allows for optionally building the winbindd daemon and associated plugins. * Two new smb.conf options were added -- "passwd expand gecos" and "state directory". The first describes whether "&" in the GECOS field of a passwd db entry is expanded to the login name. The second describes the location where the persistent-state database files are stored. * Luke Mewburn contributed code to allow nss_winbind.so to work properly on supported NetBSD systems. The FreeBSD NSS winbind code should probably be replaced with a suitably tweaked version of the NetBSD code since the latter is much more complete in the functions that are provided, but I'll leave that to freebsd-pkg-people. * Samba dumps all of its files into "lock directory", but some of them need to persist across reboots. We make a distinction between these files and the temporary files that are re-created by the Samba daemons when they are restarted -- the former are now stored in a "state directory" and the latter are stored in the "lock directory". This is modeled after the Debian patch to Samba located in: packaging/Debian/debian-unstable/patches/fhs.patch The "lock directory" default has been moved to ${VARBASE}/run/samba to emphasize the temporary status of the files stored in that directory. * Samba persists in using PAM_AUTHTOK_RECOVER_ERR, when there is almost universal agreement that PAM_AUTHTOK_RECOVERY_ERR is the right constant to use. Even the Linux-PAM distribution ensures that PAM_AUTHTOK_RECOVERY_ERR is correctly defined. To work around this, we define PAM_AUTHTOK_RECOVER_ERR appropriately in all the places where it is used. * The configure script checks for OpenSSL's libcrypto.so by looking for the symbol "des_set_key". However, libcrypto.so might not contain that symbol because the DES functions might come from a separate library, e.g. libdes.so. In this case, the configure script will think that libcrypto.so is not available, when it actually may be. Instead, look for EVP_des_cbc, which is always provided by libcrypto.so. * Add some missing $(PASSDB_LIBS) references to the Makefile to fix compilation problems if the experimental passdb backends are statically compiled into the Samba suite programs. * Fix compilation problems in sam/idmap_rid.c and sam/idmap_ad.c if the "rid" and "ad" idmap backends are statically compiled into winbindd. Changes between version 3.0.14a and 3.0.20b include: o Reporting files as read-only instead of returning the correct error code of "access denied" o File system quota support defects o Crash bugs caused by incompatibilities on 64-bit systems. o User Manager interoperability problems. o Support for several new Win32 rpc pipes. o New 'net rpc service' tool for managing Win32 services. o Capability to set the owner on new files and directory based on the parent's ownership. o Experimental, asynchronous IO file serving support. o Support for Microsoft Print Migrator. o New Winbind IDmap plugin (ad) for retrieving uid and gid from AD servers which maintain the SFU user and group attributes. o Rewritten support for POSIX pathnames when utilizing the Linux CIFS fs client. o New asynchronous winbindd. o New Windows NT registry file I/O library. o New user right (SeTakeOwnershipPrivilege) added. o New "net share migrate" options.
2005-08-19Merge CONF_FILES/SUPPORT_FILES and CONF_FILES_PERMS/SUPPORT_FILES_PERMSjlam1-3/+3
as the INSTALL and DEINSTALL scripts no longer distinguish between the two types of files. Drop SUPPORT_FILES{,_PERMS} and modify the packages in pkgsrc accordingly.
2005-06-08Look for "EVP_des_cbc" instead of "des_set_key" in libcrypto.so tojlam3-13/+77
decide if it's actually libcrypto.so from the OpenSSL distribution. Samba looks to see if libkrb5.so needs it to link when samba is configured to build ADS support. However, newer versions of heimdal don't need the old DES API, and newer versions of OpenSSL don't even provide the old des_* symbol names in the library, so "des_set_key" is a poor choice to use to detect libcrypto.so. The only place in the samba sources where the old DES API is even used is in the AFS fake kaserver support, which pkgsrc does not (ever) intend to support. This fixes PR pkg/24456.
2005-06-06Fix refering PAM value of PKG_OPTIONS.taca1-2/+2
2005-06-05Add patches for support DragonFly.taca5-3/+71
- DragonFly dosen't support NSS currently. - Fix some typo in congigure scripts. Provided by Joerg Sonnenberger by private mail. Bump PKGREVISION.
2005-06-05Update samba package to 3.0.14a.taca5-36/+20
Changes from 3.0.10 are huge, please see http://www.samba.org/samba/history/samba-3.0.14a.html in detail. pkgsrc changes: * replace ln command to ${LN}. * avoid use file for shell's variable. * remove trailing spaces.
2005-06-03Teach the tools framework about mktemp. Replace explicit tests forjlam1-6/+6
mktemp with USE_TOOLS+=mktemp in the samba packages.
2005-05-31Rename option PAM to pam (so all options are lower case). Backwardsdillo1-3/+3
compatibility provided via PKG_OPTIONS_LEGACY_OPTS.
2005-05-22For packages that use GNU configure, don't bother adding "TOOL"jlam1-2/+1
variables into CONFIGURE_ENV if the new tools framework already takes care of adding them automatically.
2005-05-03Sort.wiz1-41/+41
2005-05-02RCD_SCRIPTS_EXAMPLEDIR is no longer customizable.reed1-1/+5
And always is defined as share/examples/rc.d which was the default before. This rc.d scripts are not automatically added to PLISTs now also. So add to each corresponding PLIST as required. This was discussed on tech-pkg in late January and late April. Todo: remove the RCD_SCRIPTS_EXAMPLEDIR uses in MESSAGES and elsewhere and remove the RCD_SCRIPTS_EXAMPLEDIR itself.
2005-04-15Add conflicts between samba and tdb: both install tdbtool and tdbdump.wiz1-2/+2
2005-04-11Remove USE_BUILDLINK3 and NO_BUILDLINK; these are no longer used.tv1-2/+1
2005-03-08Add a note as to the purpose of this script.lukem1-1/+7
2005-02-24Add RMD160 digests.agc1-1/+2
2005-01-09Fix the pam build: lunix defines both the portablechristos3-3/+39
PAM_AUTHTOK_RECOVERY_ERR and the non-portable PAM_AUTHTOK_RECOVER_ERR as 21, and you guessed which samba decided to use. Bump the version to nb2.
2004-12-28The default location of the pkgsrc-installed rc.d scripts is nowreed1-1/+2
under share/examples/rc.d. The variable name already was named RCD_SCRIPTS_EXAMPLEDIR. This is from ideas from Greg Woods and others. Also bumped PKGREVISION for all packages using RCD_SCRIPTS mechanism (as requested by wiz).
2004-12-17Update "samba" package to version 3.0.10. Changes since version 3.0.9:tron4-106/+106
- Added checks surrounding all *alloc() calls to fix CAN-2004-1154. - Fix long standing memory size bug in bitmap_allocate(). - Remove bogus error check in deferred open file serving code. - Fix autoconf script on platforms using a version of GNU ld that does not include a date stamp in the output of --version. - Fix the swat install script to deal with the new image destination directory used by the docs.
2004-11-30Update to 3.0.9.xtraeme3-7/+7
Changes: o Problem updating roaming user profiles. o Crash in smbd when printing from a Windows 9x client. o Unresolved symbols in libsmbclient which caused applications such as KDE's konqueror to fail when accessing smb:// URLs.
2004-11-17Remove obsolete variables. You'll want to use:xtraeme1-17/+1
PKG_OPTIONS.<pkg>+= foo blah
2004-11-13Fix full name expansion (again).kim3-2/+58
2004-11-12Use ${VARBASE} instead of hardcoding /var.sketch1-2/+2
2004-11-09update to samba-3.0.8.grant3-12/+7
Common bugs fixed in 3.0.8 include: o Compile fixes for HP-UX o Fixes for the printer publishing code used when joined to an AD domain. o Incompatibilities with file system quotas. o Several bugs in the spoolss printing code and print system backends. o Inconsistencies in the username map functionality when configured on domain member servers. o Various compile warnings and errors on various platforms. o Fixes for kerberos interoperability with Windows 200x domains when using DES keys. o Fix for CAN-2004-0930 -- smbd remote DoS vulnerability. New features included in the 3.0.8 release are: o New migration functionality added the the net tool for files/directories, printers, and shares. o New experimental idmap backend for assigning uids/gids directly based on the user/group RID when acting as a member of single domain without any trusts. o Additional printer migration support for XP/2003 platforms.
2004-11-06When cups support is enabled, link smbspool into cups' backend directoryjmmv3-4/+10
as smb (as the manual says). This enables samba printing through cups (at least, the option appears in the web configuration form). Bump PKGREVISION to 2.
2004-10-03Libtool fix for PR pkg/26633, and other issues. Update libtool to 1.5.10tv1-1/+2
in the process. (More information on tech-pkg.) Bump PKGREVISION and BUILDLINK_DEPENDS of all packages using libtool and installing .la files. Bump PKGREVISION (only) of all packages depending directly on the above via a buildlink3 include.
2004-09-15Strip binaries on installadam2-1/+14
2004-09-14Update net/samba to 3.0.7. Changes from version 3.0.5 include:jlam6-232/+229
o Fixes for two Denial of Service vulnerabalities (CVE ID# CAN-2004-0807 & CAN-2004-0808). o Winbind failure to return user entries under certain conditions. o Syntax errors in the OpenLDAP schema file (samba.schema). o Printing errors caused by not setting default values for the various printing commands. * Disable 'winbind enable local accounts' by default. o Schannel failure in winbindd. o Incompatibilities between the 'write list' and 'force user' smb.conf options. o Premature optimization of the open_directory() internal function that broke tools such as the ArcServe backup agent, Macromedia HomeSite, and Robocopy. o Sharing violation errors commonly seen when opening when serving Microsoft Office documents from a Samba file share. o Browsing problems caused by an apostrophe (') in the computer's description field. o Problems creating special file types from UNIX CIFS clients and enabling 'unix extensions'. o Fix stalls in smbd caused by inaccessible LDAP servers. o Remove various memory leaks. o Fix issues in the password lockout feature. o Using a cups server other than localhost. o Maintaining the service principal entry in the system keytab for integration with other kerberized services. Please refer to the 'use kerberos keytab' entry in smb.conf(5). When using the heimdal kerberos libraries, you must also specify the following in /etc/krb5.conf: [libdefaults] default_keytab_name = FILE:/etc/krb5.keytab o Support for maintaining individual printer names stored separately from the printer's sharename. o Support for maintaining user password history. o Support for honoring the logon times for user in a Samba domain. * Reintroduce 'force unknown acl user' parameter. When getting a security descriptor for a file, if the owner sid is not known, the owner uid is set to the current uid. Same for group sid.