summaryrefslogtreecommitdiff
path: root/net/samba
AgeCommit message (Collapse)AuthorFilesLines
2007-06-08fix path to .cz mirrorjdolecek1-2/+2
2007-05-22Fix package list issue affecting Linux, "sbin/mount.cifs" andtron2-3/+5
"sbin/umount.cifs" were missing. Bump package revision. This should fix PR pkg/36372 by Ondrej Tuma.
2007-05-19Add security patches for CVE-2007-2444, CVE-2007-2446 and CVE-2007-2447tron3-4/+22
from Samba website. Bump package revision because of these security fixes.
2007-03-20add PKG_OPTION acl to enable Access Control Lists. tested on Solarisgrant1-2/+9
10 w/ UFS (ZFS/NFSv4 style ACLs not yet supported as of this release of Samba).
2007-03-17Add official patches for 3.0.24.taca3-8/+36
o security = share and NTLMv2 Fixes an issues with servers set to "security = share" and Vista clients that send NTLMv2 responses by default. o Vista Point-n-Print Fixes several point-n-print bugs with Vista clients. o BUG 4361 Fix failure when using the Vista backup utility. o BUG 4093 Fix expansion of the %a smb.conf variable for Vista clients. o BUG 4356 Fix MS-DFS referrals with Windows Vista clients. o BUG 4188 Fix for Vista failing to delete directories on a Samba share. Bump PKGREVISION.
2007-02-19Fix PLIST problem with samba-3.0.24 with "pam" option.taca1-9/+2
- Explictly specify PAM_INSTMODULEDIR with --with-pammodulesdir. (Now Samba itself install pam modules.) - Don't install pam modules in post-install process.
2007-02-18Fix installing pam_winbind.so module.taca1-2/+2
2007-02-16Remove "ldap-compat" option because it is now longer supported bytron1-12/+2
the latest version of Samba.
2007-02-16Remove the "mysql", "pgsql" and "xml" options, as they were removed from theghen1-41/+2
Samba distribution since version 3.0.23. "mysql" and "pgsql" passdb backends are now maintained via http://pdbsql.sourceforge.net/ and will have to be packaged separately.
2007-02-11Update "samba" package to version 3.0.24.tron23-611/+18833
Major changes since version 3.0.22: - CVE-2007-0452 (Potential Denial of Service bug in smbd) - CVE-2007-0453 (Buffer overrun in NSS host lookup Winbind NSS library on Solaris) - CVE-2007-0454 (Format string bug in afsacl.so VFS plugin) - Stability fixes for winbindd - Portability fixes on FreeBSD and Solaris operating systems. - Authentication failures in pam_winbind when the AD domain policy is set to not expire passwords. - Authorization failures when using smb.conf options such as "valid users" with the smbpasswd passdb backend. - Ambiguity with unqualified names in smb.conf parameters such as "force user" and "valid users". - Errors in 'net ads join' caused by bad IP address in the list of domain controllers. - SMB signing errors in the client and server code. - Domain join failures when using smbpasswd on a Samba PDC. - Failure to strip the domain name from groups when 'winbind use default domain = yes' - Failure in pam_winbind to correctly parse arguments. - Bad token creation of local users on member servers not running winbindd. - Failure to add users or groups to ACLs using the Windows object picker. - Failure in file serving code when 'kernel oplocks = yes'. - New "createupn" option to "net ads join" - Rewritten Kerberos keytab generation when 'use kerberos keytab = yes' - Improved 'make test' - New offline mode in winbindd. - New Kerberos support for pam_winbind.so. - New handling of unmapped users and groups. - New non-root share management tools. - Improved support for local and BUILTIN groups. - Winbind IDMAP integration with RFC2307 schema objects supported by Windows 2003 R2. - Rewritten 'net ads join' to mimic Windows XP without requiring administrative rights to join a domain.
2006-10-23MAKE_JOBS_SAFE=NOdan1-1/+2
blows up very early in build with -j, it seems make may not be aware of dependencies on some generated .h/.c files
2006-10-17Don't use .for with on-demand expanded variables that depend on antv1-5/+5
extracted source tree. That expands them at parse time, and without the source tree, causes all kinds of headaches in bmake, e.g. /usr/bin/awk: can't open file /export/SRC/netbsd/pkgsrc/net/samba/work.i386/samba-3.0.22/source/Makefile.in source line number 1 make: "/usr/bin/awk -F= '/^LIBMSRPC_MAJOR/ { print $2; }' /export/SRC/netbsd/pkgsrc/net/samba/work.i386/samba-3.0.22/source/Makefile.in" returned non-zero status Rewrite to use a shell loop.
2006-10-17Fixed the install stage so that it is more likely to pass therillig4-19/+37
files-check: No backup copies of the Samba binaries are made. Before using ln -s, the destination file is removed. This is necessary for installing the package over an already-installed version.
2006-10-01Corrected the file whose Perl interpreter is corrected.rillig1-2/+2
2006-09-30Fix perl path in findsmb. Bump PKGREVISION.hira1-2/+7
This closes PR pkg/34520. OK'd by agc@.
2006-09-14Fixed the path to the man pages, which is hard-coded in the configurerillig1-1/+6
script.
2006-07-11Fix path in patch-cd.ghen2-5/+5
2006-07-11Apply the patch from http://www.samba.org/samba/security/CAN-2006-3403.htmlghen3-3/+23
to fix a memory exhaustion DoS against smbd. Bump PKGREVISION.
2006-07-08Change the format of BUILDLINK_ORDER to contain depth information as well,jlam1-2/+2
and add a new helper target and script, "show-buildlink3", that outputs a listing of the buildlink3.mk files included as well as the depth at which they are included. For example, "make show-buildlink3" in fonts/Xft2 displays: zlib fontconfig iconv zlib freetype2 expat freetype2 Xrender renderproto
2006-07-08Track information in a new variable BUILDLINK_ORDER that informs usjlam1-1/+2
of the order in which buildlink3.mk files are (recursively) included by a package Makefile.
2006-05-31The databases/openldap package has been split in -client and -server componentghen1-2/+2
packages. Convert LDAP-based applications to depend on openldap-client, and bump PKGREVISION for those that depend on it by default.
2006-05-03Samba developers say that winbindd does not require nmbd to be running.jlam2-18/+4
Bump PKGREVISION to 1.
2006-04-20ignore gssapi.h on Solaris when Active Directory support is beinggrant1-1/+6
compiled in, as it conflicts with <gssapi/gssapi.h>. fixes build on Solaris w/ AD support.
2006-04-12Aligned the last line of the buildlink3.mk files with the first line, sorillig1-2/+2
that they look nicer.
2006-04-06Over 1200 files touched but no revisions bumped :)reed1-2/+2
RECOMMENDED is removed. It becomes ABI_DEPENDS. BUILDLINK_RECOMMENDED.foo becomes BUILDLINK_ABI_DEPENDS.foo. BUILDLINK_DEPENDS.foo becomes BUILDLINK_API_DEPENDS.foo. BUILDLINK_DEPENDS does not change. IGNORE_RECOMMENDED (which defaulted to "no") becomes USE_ABI_DEPENDS which defaults to "yes". Added to obsolete.mk checking for IGNORE_RECOMMENDED. I did not manually go through and fix any aesthetic tab/spacing issues. I have tested the above patch on DragonFly building and packaging subversion and pkglint and their many dependencies. I have also tested USE_ABI_DEPENDS=no on my NetBSD workstation (where I have used IGNORE_RECOMMENDED for a long time). I have been an active user of IGNORE_RECOMMENDED since it was available. As suggested, I removed the documentation sentences suggesting bumping for "security" issues. As discussed on tech-pkg. I will commit to revbump, pkglint, pkg_install, createbuildlink separately. Note that if you use wip, it will fail! I will commit to pkgsrc-wip later (within day).
2006-04-03Sprinkle some .PHONY targets to make pkglint happy.salo2-2/+8
2006-04-01Update net/samba to version 3.0.22. Changes from version 3.0.21a include:jlam19-132/+154
* Fix CAN-2006-1059 -- samba<3.0.22 exposes the clear text of the server's machine account credentials in the winbind log files when the log level is set to 5 or higher. * Append "-pkgsrc" to the Samba version string so as to distinguish the official version from the pkgsrc version, which has the modifications for "state directory" and "passwd expand gecos". * Modify package so that we automatically determine the name of the nsswitch modules that are installed by samba with the winbind option. We extract this information by invoking the config.status script to get the value that the configure script determined. o Access checks when deleting printer driver meta-data. o Several non-default combinations schannel and SPNEGO support. o Password changes with NT4 and Win2k pre-SP4 clients. o High load issues on IRIX caused by a bug when interfacing with kernel oplocks. o Server crashes in smbd. o Compile issues on 64-bit platforms. o Crash bugs on big-endian systems. o Packaging fixes for RHEL/Fedora, Solaris, & Debian. o Over 30 bugzilla reports closed.
2006-01-08Bump PKGREVISION due to mysql.buildlink3.mk changes (default mysqlxtraeme1-1/+2
pkg has been changed to 5.x). Reminded by wiz... thanks.
2006-01-06Use SUBST framework. Be pedantic and also replace /bin/sh with ${SH}.joerg3-8/+14
2006-01-02Update net/samba to 3.0.21a. Changes since version 3.0.20b include:jlam25-222/+184
Bugfixes: o Address a bug in the oplock code which may cause clients to stall when multiple users are accessing a share concurrently o Missing groups in a user's token when logging in via kerberos o Incompatibilities with newer MS Windows hotfixes and embedded OS platforms o Portability and crash bugs. o Performance issues in winbindd. Additions: o Complete NTLMv2 support by consolidating authentication mechanism used at the CIFS and RPC layers. o The capability to manage Unix services using the Win32 Service Control API. o The capability to view external Unix log files via the Microsoft Event Viewer. o New libmsrpc share library for application developers. o Rewrite of CIFS oplock implementation. o Performance Counter external daemon. o Winbindd auto-detection query methods when communicating with a domain controller. o The ability to enumerate long share names in libsmbclient applications.
2005-12-29Remove USE_PKGINSTALL from pkgsrc now that mk/install/pkginstall.mkjlam1-2/+1
automatically detects whether we want the pkginstall machinery to be used by the package Makefile.
2005-12-21Fix PR pkg/32080 by adding a non-conflicting definition forjlam3-4/+30
load_rc_config_var so that platforms with older versions of /etc/rc.subr can run smbd.sh and winbindd.sh without updating /etc/rc.subr. Bump PKGREVISION to 3.
2005-12-17Change my MAINTAINER email address to the one I've been using forjlam1-2/+2
pkgsrc work.
2005-12-05Ran "pkglint --autofix", which corrected some of the quoting issues inrillig2-11/+11
CONFIGURE_ARGS.
2005-12-05Fixed pkglint warnings. The warnings are mostly quoting issues, forrillig1-9/+9
example MAKE_ENV+=FOO=${BAR} is changed to MAKE_ENV+=FOO=${BAR:Q}. Some other changes are outlined in http://mail-index.netbsd.org/tech-pkg/2005/12/02/0034.html
2005-11-15Move WINBINDD_RCD_SCRIPT fix entirely from options.mk to Makefile as thejlam2-4/+3
last two revisions of options.mk and Makefile fixed the same problem.
2005-11-15Fix creation of "samba" startup script. Bump package revision.tron1-2/+3
2005-11-14Other part of fix for the WINBINDD_RCD_SCRIPT problem in the samba rc.djlam1-1/+2
script.
2005-11-14Fix the samba rc.d script in the case where winbind support is notjlam2-3/+4
compiled (the default). Bump the PKGREVISION of net/samba to 3.0.20.2nb1.
2005-11-14Update net/samba to 3.0.20.2 from samba-3.0.20b. Recommended patchesjlam60-770/+2499
for samba-3.0.20b that are applied as part of this update include: http://www.samba.org/samba/patches/print_lprm.patch http://www.samba.org/samba/patches/quota.patch http://www.samba.org/samba/patches/bug3201_wbinfo.patch This fixes PRs pkg/31352 and pkg/31991. Important changes that were made as part of porting this Samba release to pkgsrc include the following: * The new release model for Samba includes distributing patches for urgent bug fixes that will be included in the next release of Samba, and are available at http://www.samba.org/samba/patches/. Since these patches are rather generically named, we download all DISTFILES and PATCHFILES for Samba into a ${DISTNAME}-specific directory. * The default configuration for the samba package no longer builds the "winbind" portions of samba, which are really only useful when attempting to unify logons between Unix and Microsoft Windows. When the "winbind" option is specified, we also build the RID and AD idmap backends, which allow sharing UIDs/GIDs across Unix machines. * New package options have been added to the build: "mysql", "pgsql", and "xml" allow adding optional support for experimental passdb storage backends, and "winbind" allows for optionally building the winbindd daemon and associated plugins. * Two new smb.conf options were added -- "passwd expand gecos" and "state directory". The first describes whether "&" in the GECOS field of a passwd db entry is expanded to the login name. The second describes the location where the persistent-state database files are stored. * Luke Mewburn contributed code to allow nss_winbind.so to work properly on supported NetBSD systems. The FreeBSD NSS winbind code should probably be replaced with a suitably tweaked version of the NetBSD code since the latter is much more complete in the functions that are provided, but I'll leave that to freebsd-pkg-people. * Samba dumps all of its files into "lock directory", but some of them need to persist across reboots. We make a distinction between these files and the temporary files that are re-created by the Samba daemons when they are restarted -- the former are now stored in a "state directory" and the latter are stored in the "lock directory". This is modeled after the Debian patch to Samba located in: packaging/Debian/debian-unstable/patches/fhs.patch The "lock directory" default has been moved to ${VARBASE}/run/samba to emphasize the temporary status of the files stored in that directory. * Samba persists in using PAM_AUTHTOK_RECOVER_ERR, when there is almost universal agreement that PAM_AUTHTOK_RECOVERY_ERR is the right constant to use. Even the Linux-PAM distribution ensures that PAM_AUTHTOK_RECOVERY_ERR is correctly defined. To work around this, we define PAM_AUTHTOK_RECOVER_ERR appropriately in all the places where it is used. * The configure script checks for OpenSSL's libcrypto.so by looking for the symbol "des_set_key". However, libcrypto.so might not contain that symbol because the DES functions might come from a separate library, e.g. libdes.so. In this case, the configure script will think that libcrypto.so is not available, when it actually may be. Instead, look for EVP_des_cbc, which is always provided by libcrypto.so. * Add some missing $(PASSDB_LIBS) references to the Makefile to fix compilation problems if the experimental passdb backends are statically compiled into the Samba suite programs. * Fix compilation problems in sam/idmap_rid.c and sam/idmap_ad.c if the "rid" and "ad" idmap backends are statically compiled into winbindd. Changes between version 3.0.14a and 3.0.20b include: o Reporting files as read-only instead of returning the correct error code of "access denied" o File system quota support defects o Crash bugs caused by incompatibilities on 64-bit systems. o User Manager interoperability problems. o Support for several new Win32 rpc pipes. o New 'net rpc service' tool for managing Win32 services. o Capability to set the owner on new files and directory based on the parent's ownership. o Experimental, asynchronous IO file serving support. o Support for Microsoft Print Migrator. o New Winbind IDmap plugin (ad) for retrieving uid and gid from AD servers which maintain the SFU user and group attributes. o Rewritten support for POSIX pathnames when utilizing the Linux CIFS fs client. o New asynchronous winbindd. o New Windows NT registry file I/O library. o New user right (SeTakeOwnershipPrivilege) added. o New "net share migrate" options.
2005-08-19Merge CONF_FILES/SUPPORT_FILES and CONF_FILES_PERMS/SUPPORT_FILES_PERMSjlam1-3/+3
as the INSTALL and DEINSTALL scripts no longer distinguish between the two types of files. Drop SUPPORT_FILES{,_PERMS} and modify the packages in pkgsrc accordingly.
2005-06-08Look for "EVP_des_cbc" instead of "des_set_key" in libcrypto.so tojlam3-13/+77
decide if it's actually libcrypto.so from the OpenSSL distribution. Samba looks to see if libkrb5.so needs it to link when samba is configured to build ADS support. However, newer versions of heimdal don't need the old DES API, and newer versions of OpenSSL don't even provide the old des_* symbol names in the library, so "des_set_key" is a poor choice to use to detect libcrypto.so. The only place in the samba sources where the old DES API is even used is in the AFS fake kaserver support, which pkgsrc does not (ever) intend to support. This fixes PR pkg/24456.
2005-06-06Fix refering PAM value of PKG_OPTIONS.taca1-2/+2
2005-06-05Add patches for support DragonFly.taca5-3/+71
- DragonFly dosen't support NSS currently. - Fix some typo in congigure scripts. Provided by Joerg Sonnenberger by private mail. Bump PKGREVISION.
2005-06-05Update samba package to 3.0.14a.taca5-36/+20
Changes from 3.0.10 are huge, please see http://www.samba.org/samba/history/samba-3.0.14a.html in detail. pkgsrc changes: * replace ln command to ${LN}. * avoid use file for shell's variable. * remove trailing spaces.
2005-06-03Teach the tools framework about mktemp. Replace explicit tests forjlam1-6/+6
mktemp with USE_TOOLS+=mktemp in the samba packages.
2005-05-31Rename option PAM to pam (so all options are lower case). Backwardsdillo1-3/+3
compatibility provided via PKG_OPTIONS_LEGACY_OPTS.
2005-05-22For packages that use GNU configure, don't bother adding "TOOL"jlam1-2/+1
variables into CONFIGURE_ENV if the new tools framework already takes care of adding them automatically.
2005-05-03Sort.wiz1-41/+41
2005-05-02RCD_SCRIPTS_EXAMPLEDIR is no longer customizable.reed1-1/+5
And always is defined as share/examples/rc.d which was the default before. This rc.d scripts are not automatically added to PLISTs now also. So add to each corresponding PLIST as required. This was discussed on tech-pkg in late January and late April. Todo: remove the RCD_SCRIPTS_EXAMPLEDIR uses in MESSAGES and elsewhere and remove the RCD_SCRIPTS_EXAMPLEDIR itself.
generated by cgit v1.2.3 (git 2.39.1) at 2025-01-02 12:52:05 +0000