head 1.12; access; symbols pkgsrc-2015Q4:1.11.0.20 pkgsrc-2015Q4-base:1.11 pkgsrc-2015Q3:1.11.0.18 pkgsrc-2015Q3-base:1.11 pkgsrc-2015Q2:1.11.0.16 pkgsrc-2015Q2-base:1.11 pkgsrc-2015Q1:1.11.0.14 pkgsrc-2015Q1-base:1.11 pkgsrc-2014Q4:1.11.0.12 pkgsrc-2014Q4-base:1.11 pkgsrc-2014Q3:1.11.0.10 pkgsrc-2014Q3-base:1.11 pkgsrc-2014Q2:1.11.0.8 pkgsrc-2014Q2-base:1.11 pkgsrc-2014Q1:1.11.0.6 pkgsrc-2014Q1-base:1.11 pkgsrc-2013Q4:1.11.0.4 pkgsrc-2013Q4-base:1.11 pkgsrc-2013Q3:1.11.0.2 pkgsrc-2013Q3-base:1.11 pkgsrc-2013Q2:1.10.0.14 pkgsrc-2013Q2-base:1.10 pkgsrc-2013Q1:1.10.0.12 pkgsrc-2013Q1-base:1.10 pkgsrc-2012Q4:1.10.0.10 pkgsrc-2012Q4-base:1.10 pkgsrc-2012Q3:1.10.0.8 pkgsrc-2012Q3-base:1.10 pkgsrc-2012Q2:1.10.0.6 pkgsrc-2012Q2-base:1.10 pkgsrc-2012Q1:1.10.0.4 pkgsrc-2012Q1-base:1.10 pkgsrc-2011Q4:1.10.0.2 pkgsrc-2011Q4-base:1.10 pkgsrc-2011Q3:1.9.0.18 pkgsrc-2011Q3-base:1.9 pkgsrc-2011Q2:1.9.0.16 pkgsrc-2011Q2-base:1.9 pkgsrc-2011Q1:1.9.0.14 pkgsrc-2011Q1-base:1.9 pkgsrc-2010Q4:1.9.0.12 pkgsrc-2010Q4-base:1.9 pkgsrc-2010Q3:1.9.0.10 pkgsrc-2010Q3-base:1.9 pkgsrc-2010Q2:1.9.0.8 pkgsrc-2010Q2-base:1.9 pkgsrc-2010Q1:1.9.0.6 pkgsrc-2010Q1-base:1.9 pkgsrc-2009Q4:1.9.0.4 pkgsrc-2009Q4-base:1.9 pkgsrc-2009Q3:1.9.0.2 pkgsrc-2009Q3-base:1.9 pkgsrc-2009Q2:1.8.0.4 pkgsrc-2009Q2-base:1.8 pkgsrc-2009Q1:1.8.0.2 pkgsrc-2009Q1-base:1.8 pkgsrc-2008Q4:1.7.0.12 pkgsrc-2008Q4-base:1.7 pkgsrc-2008Q3:1.7.0.10 pkgsrc-2008Q3-base:1.7 cube-native-xorg:1.7.0.8 cube-native-xorg-base:1.7 pkgsrc-2008Q2:1.7.0.6 pkgsrc-2008Q2-base:1.7 cwrapper:1.7.0.4 pkgsrc-2008Q1:1.7.0.2 pkgsrc-2008Q1-base:1.7 pkgsrc-2007Q4:1.6.0.2 pkgsrc-2007Q4-base:1.6 pkgsrc-2007Q3:1.4.0.6 pkgsrc-2007Q3-base:1.4 pkgsrc-2007Q2:1.4.0.4 pkgsrc-2007Q2-base:1.4 pkgsrc-2007Q1:1.4.0.2 pkgsrc-2007Q1-base:1.4 pkgsrc-2006Q4:1.3.0.6 pkgsrc-2006Q4-base:1.3 pkgsrc-2006Q3:1.3.0.4 pkgsrc-2006Q3-base:1.3 pkgsrc-2006Q2:1.3.0.2 pkgsrc-2006Q2-base:1.3 pkgsrc-2006Q1:1.2.0.2 pkgsrc-2006Q1-base:1.2 pkgsrc-2005Q4:1.1.0.2 pkgsrc-2005Q4-base:1.1; locks; strict; comment @# @; 1.12 date 2016.02.29.17.13.06; author jperkin; state dead; branches; next 1.11; commitid 2Cpw953xgY55MPWy; 1.11 date 2013.08.12.02.45.55; author taca; state Exp; branches; next 1.10; commitid EB23ZUIBzNlQT61x; 1.10 date 2011.12.16.11.05.24; author asau; state Exp; branches 1.10.14.1; next 1.9; 1.9 date 2009.09.09.11.22.22; author sketch; state Exp; branches; next 1.8; 1.8 date 2009.03.21.18.25.35; author tron; state Exp; branches; next 1.7; 1.7 date 2008.04.03.20.19.42; author jlam; state Exp; branches; next 1.6; 1.6 date 2007.11.06.00.47.51; author rillig; state Exp; branches; next 1.5; 1.5 date 2007.10.28.07.28.48; author taca; state Exp; branches; next 1.4; 1.4 date 2007.02.11.18.39.04; author tron; state Exp; branches 1.4.6.1; next 1.3; 1.3 date 2006.04.01.04.55.35; author jlam; state Exp; branches 1.3.6.1; next 1.2; 1.2 date 2006.01.02.22.33.36; author jlam; state Exp; branches 1.2.2.1; next 1.1; 1.1 date 2005.11.14.08.05.27; author jlam; state Exp; branches; next ; 1.10.14.1 date 2013.08.12.12.20.19; author tron; state Exp; branches; next ; commitid DRsIlszbKSa45a1x; 1.4.6.1 date 2007.11.16.15.19.25; author ghen; state Exp; branches; next ; 1.3.6.1 date 2007.02.15.13.14.50; author salo; state Exp; branches; next ; 1.2.2.1 date 2006.04.02.14.16.16; author salo; state Exp; branches; next ; desc @@ 1.12 log @Various build and install fixes for Darwin. @ text @$NetBSD: patch-ba,v 1.11 2013/08/12 02:45:55 taca Exp $ --- configure.in.orig 2013-07-29 18:55:18.000000000 +0000 +++ configure.in @@@@ -6541,6 +6541,11 @@@@ AC_CHECK_MEMBER(struct passwd.pw_age, AC_DEFINE(HAVE_PASSWD_PW_AGE, 1, [Defined if struct passwd has pw_age field]),, [#include ]) +# NetBSD +AC_CHECK_MEMBER(struct passwd.pw_class, + AC_DEFINE(HAVE_PASSWD_PW_CLASS, 1, [Defined if struct passwd has pw_class field]),, + [#include ]) + # AIX 4.3.x and 5.1 do not have as many members in # struct secmethod_table as AIX 5.2 AC_CHECK_MEMBERS([struct secmethod_table.method_attrlist], , , @ 1.11 log @Update samba to 3.6.17, security release. ============================== Release Notes for Samba 3.6.17 August 05, 2013 ============================== This is a security release in order to address CVE-2013-4124 (Missing integer wrap protection in EA list reading can cause server to loop with DOS). o CVE-2013-4124: All current released versions of Samba are vulnerable to a denial of service on an authenticated or guest connection. A malformed packet can cause the smbd server to loop the CPU performing memory allocations and preventing any further service. A connection to a file share, or a local account is needed to exploit this problem, either authenticated or unauthenticated if guest connections are allowed. This flaw is not exploitable beyond causing the code to loop allocating memory, which may cause the machine to exceed memory limits. Changes since 3.6.16: --------------------- o Jeremy Allison * BUG 10010: CVE-2013-4124: Missing integer wrap protection in EA list reading can cause server to loop with DOS. @ text @d1 1 a1 1 $NetBSD: patch-ba,v 1.10 2011/12/16 11:05:24 asau Exp $ @ 1.10 log @Update to Samba 3.5.11 from net/samba35, part of Samba packages rearrangement. @ text @d1 1 a1 1 $NetBSD: patch-ba,v 1.1 2011/10/11 20:30:00 jmcneill Exp $ d3 1 a3 1 --- configure.in.orig 2011-08-03 18:24:05.000000000 +0000 d5 1 a5 1 @@@@ -6239,6 +6239,11 @@@@ AC_CHECK_MEMBER(struct passwd.pw_age, @ 1.10.14.1 log @Pullup ticket #4207 - requested by taca net/samba: security update Revisions pulled up: - net/samba/Makefile 1.235,1.237 - net/samba/Makefile.mirrors 1.10 - net/samba/PLIST 1.54 - net/samba/distinfo 1.91-1.92 - net/samba/patches/patch-ac 1.15 - net/samba/patches/patch-ad 1.19 - net/samba/patches/patch-ae 1.11 - net/samba/patches/patch-af 1.12 - net/samba/patches/patch-ah 1.7 - net/samba/patches/patch-ai 1.7 - net/samba/patches/patch-aj 1.7 - net/samba/patches/patch-ak 1.6 - net/samba/patches/patch-an 1.4 - net/samba/patches/patch-ao 1.4 - net/samba/patches/patch-aq 1.4 - net/samba/patches/patch-as 1.4 - net/samba/patches/patch-av 1.5 - net/samba/patches/patch-aw 1.4 - net/samba/patches/patch-ba 1.11 - net/samba/patches/patch-bb 1.5 - net/samba/patches/patch-bf 1.6 --- Module Name: pkgsrc Committed By: adam Date: Wed Jul 3 20:00:48 UTC 2013 Modified Files: pkgsrc/net/samba: Makefile PLIST distinfo pkgsrc/net/samba/patches: patch-bf Log Message: Changes 3.6.16: * BUG 9881: Link dbwrap_tool and dbwrap_torture against libtevent. * BUG 9722: Properly handle Oplock breaks in compound requests. * BUG 9822: Fix crash bug during Win8 sync. * BUG 9927: errno gets overwritten in call to check_parent_exists(). * BUG 8997: Change libreplace GPL source to LGPL. * BUG 9900: is_printer_published GUID retrieval. * BUG 9941: Fix a bug of drvupgrade of smbcontrol. * BUG 9868: Don't know how to make LIBNDR_PREG_OBJ. * BUG 9688: Remove "experimental" label on "max protocol=SMB2" parameter. * BUG 9881: Check for system libtevent. --- Module Name: pkgsrc Committed By: wiz Date: Thu Jul 4 19:31:10 UTC 2013 Modified Files: pkgsrc/net/samba: Makefile.mirrors Log Message: Fix URL. --- Module Name: pkgsrc Committed By: taca Date: Mon Aug 12 02:45:55 UTC 2013 Modified Files: pkgsrc/net/samba: Makefile distinfo pkgsrc/net/samba/patches: patch-ac patch-ad patch-ae patch-af patch-ah patch-ai patch-aj patch-ak patch-an patch-ao patch-aq patch-as patch-av patch-aw patch-ba patch-bb Log Message: Update samba to 3.6.17, security release. ============================== Release Notes for Samba 3.6.17 August 05, 2013 ============================== This is a security release in order to address CVE-2013-4124 (Missing integer wrap protection in EA list reading can cause server to loop with DOS). o CVE-2013-4124: All current released versions of Samba are vulnerable to a denial of service on an authenticated or guest connection. A malformed packet can cause the smbd server to loop the CPU performing memory allocations and preventing any further service. A connection to a file share, or a local account is needed to exploit this problem, either authenticated or unauthenticated if guest connections are allowed. This flaw is not exploitable beyond causing the code to loop allocating memory, which may cause the machine to exceed memory limits. Changes since 3.6.16: --------------------- o Jeremy Allison * BUG 10010: CVE-2013-4124: Missing integer wrap protection in EA list reading can cause server to loop with DOS. @ text @d1 1 a1 1 $NetBSD$ d3 1 a3 1 --- configure.in.orig 2013-07-29 18:55:18.000000000 +0000 d5 1 a5 1 @@@@ -6541,6 +6541,11 @@@@ AC_CHECK_MEMBER(struct passwd.pw_age, @ 1.9 log @Conditionalise on NSS_INFO_MODULES further, fixes Solaris build. Change double-negative test to a positive one. @ text @d1 1 a1 1 $NetBSD: patch-ba,v 1.8 2009/03/21 18:25:35 tron Exp $ d3 10 a12 8 --- Makefile.in.orig Mon Jan 19 10:40:09 2009 +++ Makefile.in Wed Sep 9 11:00:17 2009 @@@@ -106,6 +106,9 @@@@ # the directory where lock files go LOCKDIR = @@lockdir@@ +# the directory where persistent-state files go +STATEDIR = @@statedir@@ d14 3 a16 107 # the directory where pid files go PIDDIR = @@piddir@@ @@@@ -136,7 +139,7 @@@@ PATH_FLAGS1 = -DCONFIGFILE=\"$(CONFIGFILE)\" -DSBINDIR=\"$(SBINDIR)\" PATH_FLAGS2 = $(PATH_FLAGS1) -DBINDIR=\"$(BINDIR)\" PATH_FLAGS3 = $(PATH_FLAGS2) -DLMHOSTSFILE=\"$(LMHOSTSFILE)\" -PATH_FLAGS4 = $(PATH_FLAGS3) -DSWATDIR=\"$(SWATDIR)\" -DLOCKDIR=\"$(LOCKDIR)\" -DPIDDIR=\"$(PIDDIR)\" +PATH_FLAGS4 = $(PATH_FLAGS3) -DSWATDIR=\"$(SWATDIR)\" -DLOCKDIR=\"$(LOCKDIR)\" -DSTATEDIR=\"$(STATEDIR)\" -DPIDDIR=\"$(PIDDIR)\" PATH_FLAGS5 = $(PATH_FLAGS4) -DLIBDIR=\"$(LIBDIR)\" \ -DLOGFILEBASE=\"$(LOGFILEBASE)\" -DSHLIBEXT=\"@@SHLIBEXT@@\" PATH_FLAGS6 = $(PATH_FLAGS5) -DCONFIGDIR=\"$(CONFIGDIR)\" @@@@ -1059,7 +1062,7 @@@@ bin/smbget@@EXEEXT@@: proto_exists $(SMBGET_OBJ) @@BUILD_POPT@@ bin/.dummy @@echo Linking $@@ - @@$(CC) $(FLAGS) -o $@@ $(SMBGET_OBJ) $(LDFLAGS) $(DYNEXP) $(LIBS) @@POPTLIBS@@ $(KRB5LIBS) $(LDAP_LIBS) $(NSCD_LIBS) + @@$(CC) $(FLAGS) -o $@@ $(SMBGET_OBJ) $(LDFLAGS) $(DYNEXP) $(LIBS) @@POPTLIBS@@ $(KRB5LIBS) $(LDAP_LIBS) $(NSCD_LIBS) $(PASSDB_LIBS) bin/samtest@@EXEEXT@@: $(SAMTEST_OBJ) @@BUILD_POPT@@ bin/.dummy @@echo Linking $@@ @@@@ -1094,12 +1097,12 @@@@ bin/smbcacls@@EXEEXT@@: proto_exists $(SMBCACLS_OBJ) @@BUILD_POPT@@ bin/.dummy @@echo Linking $@@ @@$(CC) $(FLAGS) -o $@@ $(SMBCACLS_OBJ) $(DYNEXP) $(LDFLAGS) $(LIBS) @@POPTLIBS@@ \ - $(KRB5LIBS) $(LDAP_LIBS) $(NSCD_LIBS) + $(KRB5LIBS) $(LDAP_LIBS) $(NSCD_LIBS) $(PASSDB_LIBS) bin/smbcquotas@@EXEEXT@@: proto_exists $(SMBCQUOTAS_OBJ) @@BUILD_POPT@@ bin/.dummy @@echo Linking $@@ @@$(CC) $(FLAGS) -o $@@ $(SMBCQUOTAS_OBJ) $(DYNEXP) $(LDFLAGS) $(LIBS) @@POPTLIBS@@ \ - $(KRB5LIBS) $(LDAP_LIBS) $(NSCD_LIBS) + $(KRB5LIBS) $(LDAP_LIBS) $(NSCD_LIBS) $(PASSDB_LIBS) bin/eventlogadm@@EXEEXT@@: proto_exists $(EVTLOGADM_OBJ) @@BUILD_POPT@@ bin/.dummy @@echo Linking $@@ @@@@ -1162,7 +1165,7 @@@@ bin/libsmbclient.@@SHLIBEXT@@: proto_exists $(LIBSMBCLIENT_OBJ) @@echo Linking libsmbclient shared library $@@ @@$(SHLD) $(LDSHFLAGS) -o $@@ $(LIBSMBCLIENT_OBJ) $(LIBS) \ - $(KRB5LIBS) $(LDAP_LIBS) $(NSCD_LIBS) \ + $(KRB5LIBS) $(LDAP_LIBS) $(NSCD_LIBS) $(PASSDB_LIBS) \ @@SONAMEFLAG@@`basename $@@`.$(LIBSMBCLIENT_MAJOR) bin/libsmbclient.a: proto_exists $(LIBSMBCLIENT_OBJ) @@@@ -1534,11 +1537,11 @@@@ @@echo Linking $@@ @@$(CC) $(FLAGS) -o $@@ $(LDFLAGS) $(DYNEXP) $(NTLM_AUTH_OBJ) \ $(PARAM_OBJ) $(LIB_NONSMBD_OBJ) $(LIBS) \ - @@POPTLIBS@@ $(KRB5LIBS) $(LDAP_LIBS) $(NSCD_LIBS) + @@POPTLIBS@@ $(KRB5LIBS) $(LDAP_LIBS) $(NSCD_LIBS) $(PASSDB_LIBS) bin/pam_smbpass.@@SHLIBEXT@@: $(PAM_SMBPASS_OBJ) @@echo "Linking shared library $@@" - @@$(SHLD) $(LDSHFLAGS) -o $@@ $(PAM_SMBPASS_OBJ) -lpam $(DYNEXP) $(LIBS) $(LDAP_LIBS) $(KRB5LIBS) $(NSCD_LIBS) + @@$(SHLD) $(LDSHFLAGS) -o $@@ $(PAM_SMBPASS_OBJ) -lpam $(DYNEXP) $(LIBS) $(LDAP_LIBS) $(KRB5LIBS) $(NSCD_LIBS) $(PASSDB_LIBS) bin/tdbbackup@@EXEEXT@@: proto_exists $(TDBBACKUP_OBJ) bin/.dummy @@echo Linking $@@ @@@@ -1573,7 +1576,7 @@@@ @@echo Linking $@@ @@$(CC) $(FLAGS) -o $@@ $(DYNEXP) script/tests/timelimit.o -install: installservers installbin @@INSTALL_CIFSMOUNT@@ @@INSTALL_CIFSUPCALL@@ installman installscripts installdat installswat installmodules @@INSTALL_LIBSMBCLIENT@@ @@INSTALL_LIBMSRPC@@ @@INSTALL_PAM_MODULES@@ @@INSTALL_LIBSMBSHAREMODES@@ +install: installservers installbin @@INSTALL_CIFSMOUNT@@ @@INSTALL_CIFSUPCALL@@ installman installscripts installdat installswat installmodules @@INSTALL_LIBSMBCLIENT@@ @@INSTALL_LIBMSRPC@@ @@INSTALL_PAM_MODULES@@ @@INSTALL_LIBSMBSHAREMODES@@ @@INSTALL_LIBADDNS@@ install-everything: install installmodules @@@@ -1586,7 +1589,7 @@@@ # is not used installdirs: - @@$(SHELL) $(srcdir)/script/installdirs.sh $(INSTALLPERMS) $(DESTDIR) $(prefix) $(BINDIR) $(SBINDIR) $(LIBDIR) $(VARDIR) $(PRIVATEDIR) $(PIDDIR) $(LOCKDIR) $(MANDIR) + @@$(SHELL) $(srcdir)/script/installdirs.sh $(INSTALLPERMS) $(DESTDIR) $(prefix) $(BINDIR) $(SBINDIR) $(LIBDIR) $(VARDIR) $(STATEDIR) $(PRIVATEDIR) $(PIDDIR) $(LOCKDIR) $(MANDIR) installservers: all installdirs @@$(SHELL) script/installbin.sh $(INSTALLPERMS) $(DESTDIR) $(prefix) $(SBINDIR) $(SBIN_PROGS) @@@@ -1609,7 +1612,9 @@@@ @@$(SHELL) $(srcdir)/script/installmodules.sh $(INSTALLPERMS) $(DESTDIR) $(prefix) $(PDBLIBDIR) $(PDB_MODULES) @@$(SHELL) $(srcdir)/script/installmodules.sh $(INSTALLPERMS) $(DESTDIR) $(prefix) $(RPCLIBDIR) $(RPC_MODULES) @@$(SHELL) $(srcdir)/script/installmodules.sh $(INSTALLPERMS) $(DESTDIR) $(prefix) $(IDMAPLIBDIR) $(IDMAP_MODULES) - @@$(SHELL) $(srcdir)/script/installmodules.sh $(INSTALLPERMS) $(DESTDIR) $(prefix) $(NSSINFOLIBDIR) $(NSS_INFO_MODULES) + @@if [ -n "$(NSS_INFO_MODULES)" ]; then \ + $(SHELL) $(srcdir)/script/installmodules.sh $(INSTALLPERMS) $(DESTDIR) $(prefix) $(NSSINFOLIBDIR) $(NSS_INFO_MODULES); \ + fi @@$(SHELL) $(srcdir)/script/installmodules.sh $(INSTALLPERMS) $(DESTDIR) $(prefix) $(CHARSETLIBDIR) $(CHARSET_MODULES) @@$(SHELL) $(srcdir)/script/installmodules.sh $(INSTALLPERMS) $(DESTDIR) $(prefix) $(AUTHLIBDIR) $(AUTH_MODULES) @@$(SHELL) $(srcdir)/script/linkmodules.sh $(DESTDIR)$(PDBLIBDIR) ldapsam.@@SHLIBEXT@@ ldapsam_compat.@@SHLIBEXT@@ @@@@ -1617,7 +1622,9 @@@@ @@$(SHELL) $(srcdir)/script/linkmodules.sh $(DESTDIR)$(AUTHLIBDIR) sam.@@SHLIBEXT@@ sam_ignoredomain.@@SHLIBEXT@@ @@$(SHELL) $(srcdir)/script/linkmodules.sh $(DESTDIR)$(AUTHLIBDIR) domain.@@SHLIBEXT@@ trustdomain.@@SHLIBEXT@@ ntdomain.@@SHLIBEXT@@ @@$(SHELL) $(srcdir)/script/linkmodules.sh $(DESTDIR)$(AUTHLIBDIR) builtin.@@SHLIBEXT@@ guest.@@SHLIBEXT@@ fixed_challenge.@@SHLIBEXT@@ name_to_ntstatus.@@SHLIBEXT@@ - @@$(SHELL) $(srcdir)/script/linkmodules.sh $(DESTDIR)$(NSSINFOLIBDIR) ../idmap/ad.@@SHLIBEXT@@ rfc2307.@@SHLIBEXT@@ sfu.@@SHLIBEXT@@ + @@if [ -n "$(NSS_INFO_MODULES)" ]; then \ + $(SHELL) $(srcdir)/script/linkmodules.sh $(DESTDIR)$(NSSINFOLIBDIR) ../idmap/ad.@@SHLIBEXT@@ rfc2307.@@SHLIBEXT@@ sfu.@@SHLIBEXT@@; \ + fi installscripts: installdirs @@$(SHELL) $(srcdir)/script/installscripts.sh $(INSTALLPERMS) $(DESTDIR)$(BINDIR) $(SCRIPTS) @@@@ -1715,6 +1722,7 @@@@ @@echo " privatedir: $(PRIVATE_DIR)" @@echo " configdir: $(CONFIGDIR)" @@echo " lockdir: $(LOCKDIR)" + @@echo " statedir: $(STATEDIR)" @@echo " piddir: $(PIDDIR)" @@echo " swatdir: $(SWATDIR)" @ 1.8 log @Update "samba" package to version 3.0.34. Changes since version 3.0.32: - Fix update of machine account passwords. - Fix SMB signing issue on Windows Vista with MS Hotfix KB955302. - Fix Winbind crashes. - Correctly detect if the current dc is the closest one. - Add saf_join_store() function to memorize the dc used at join time. This avoids problems caused by replication delays shortly after domain joins. - Fix write list in setups using "security = share". @ text @d1 1 a1 1 $NetBSD$ d3 2 a4 2 --- Makefile.in.orig 2009-01-19 10:40:09.000000000 +0000 +++ Makefile.in 2009-03-21 14:48:11.000000000 +0000 d94 1 a94 1 + @@if [ ! -z "$(NSS_INFO_MODULES)" ]; then \ d100 12 a111 1 @@@@ -1715,6 +1720,7 @@@@ @ 1.7 log @Update samba to version 3.0.28a. CHANGES FOR PKGSRC: ================== Makefile: + Modify section that manually handles the ELF symlinks for samba shared libraries -- add additional libraries that are built (addns, smbsharemodes) and reorganize so we don't need two loops where one will do. + Pass --with-included-popt to the configure script to force using the popt distribution included with samba to avoid any library mismatch errors between samba and any installed popt. This fixes PR pkg/34444 by Jason Lingohr. + Don't build the smbmount programs on Linux -- they're deprecated in favor of the mount.cifs programs. + Remove some pkgviews-related settings -- I'm not supporting pkgviews installation of samba. Makefile.patches: + Empty out PATCHFILES because we are updating to the latest release of samba, which has all previous patches for security advisories already rolled into the main sources. Makefile.mirrors: + Update SAMBA_MIRRORS in Makefile.mirrors to the latest list of FTP mirrors. options.mk: + Only show the ``acl'' option on platforms that actually support POSIX ACLs. + Add a new ``fam'' option to enable building the notify_fam VFS module. patch-ab, patch-ax: + Remove patch-ab and update patch-ax -- there's nothing for the scripts to back up so we don't need to patch the install* scripts to avoid this. patch-ae, patch-ah: + Update patch-ae and remove patch-ah -- we should definitely check that PAM_AUTHTOK_RECOVERY_ERR is defined before using its value to define PAM_AUTHTOK_RECOVER_ERR. patch-at, patch-au: + Fix patch-at and patch-au -- in configure.in, we need to "escape" left and right brackets or else m4 will strip them away in the resulting configure script. This should fix the detection of FreeBSD and NetBSD systems capable of using nss_winbind noted in PR pkg/38076 by Ingo Meyer. patch-ay: + Remove some unnecessary changes -- we can safely just do "mkdir" in some places because we know the parent and any intermediate directories exist. patch-be: + Fix a bug in locating WINS_LIST -- nmbd/nmbd_winsserver.c was referring to WINS_LIST under the state directory in one place and under the lock directory in another; change all references to be under the state directory. patch-db: + Add patch to fix the build of samba on older BSDs. Patch supplied in PR pkg/37487 by John Frear. All remaining changes to patches/patch-* are simply to remove fuzz. MAJOR CHANGES FROM VERSION 3.0.26a: * Fix failure to join Windows 2008 domains. * Fix Windows Vista (including SP1 RC) inter-op issues. * Add a new ``administrative share'' service parameter for defining hidden shares that cannot be managed from Windows. * Fix for CVS-2007-6015 (already fixed in 3.0.26anb4 in pkgsrc). * Fix for CVS-2007-5398 (already fixed in 3.0.26anb4 in pkgsrc). * Fix for CVS-2007-4572 (already fixed in 3.0.26anb4 in pkgsrc). Also subsequent fix for regression experienced by smbfs clients caused by the fix for CVS-2007-4572, noted in PR pkg/38300 by Dave Barnes. * Many other bugs fixed and memory leaks plugged. @ text @d3 3 a5 3 --- Makefile.in.orig 2008-03-08 10:56:26.000000000 -0500 +++ Makefile.in @@@@ -106,6 +106,9 @@@@ SWATDIR = @@swatdir@@ d15 1 a15 1 @@@@ -136,7 +139,7 @@@@ PASSWD_FLAGS = -DSMB_PASSWD_FILE=\"$(SMB d24 1 a24 1 @@@@ -1052,7 +1055,7 @@@@ bin/pdbedit@@EXEEXT@@: proto_exists $(PDBE d33 1 a33 1 @@@@ -1087,12 +1090,12 @@@@ bin/msgtest@@EXEEXT@@: proto_exists $(MSGT d48 1 a48 1 @@@@ -1155,7 +1158,7 @@@@ bin/libaddns.a: proto_exists $(LIBADDNS_ d57 1 a57 1 @@@@ -1527,11 +1530,11 @@@@ bin/ntlm_auth@@EXEEXT@@: proto_exists $(NT d71 1 a71 1 @@@@ -1566,7 +1569,7 @@@@ bin/timelimit@@EXEEXT@@: script/tests/time d75 2 a76 2 -install: installservers installbin @@INSTALL_CIFSMOUNT@@ installman installscripts installdat installswat installmodules @@INSTALL_LIBSMBCLIENT@@ @@INSTALL_LIBMSRPC@@ @@INSTALL_PAM_MODULES@@ @@INSTALL_LIBSMBSHAREMODES@@ +install: installservers installbin @@INSTALL_CIFSMOUNT@@ installman installscripts installdat installswat installmodules @@INSTALL_LIBSMBCLIENT@@ @@INSTALL_LIBMSRPC@@ @@INSTALL_PAM_MODULES@@ @@INSTALL_LIBSMBSHAREMODES@@ @@INSTALL_LIBADDNS@@ d78 1 d80 1 a80 2 install-everything: install installmodules @@@@ -1580,7 +1583,7 @@@@ install-everything: install installmodul d89 1 a89 1 @@@@ -1599,7 +1602,9 @@@@ installmodules: modules installdirs d100 1 a100 1 @@@@ -1705,6 +1710,7 @@@@ showlayout: @ 1.6 log @Fixed an expansion of @@mandir@@ that accidentally got into patch-ba in revision 1.5. PKGREVISION++ @ text @d1 1 a1 1 $NetBSD: patch-ba,v 1.5 2007/10/28 07:28:48 taca Exp $ d3 1 a3 1 --- Makefile.in.orig 2007-06-20 02:11:39.000000000 +0900 a4 9 @@@@ -81,7 +81,7 @@@@ AUTHLIBDIR = $(LIBDIR)/auth CONFIGLIBDIR = $(LIBDIR)/config CONFIGDIR = @@configdir@@ VARDIR = @@localstatedir@@ -MANDIR = @@mandir@@ +MANDIR = @@mandir@@ DATADIR = @@datadir@@ # The permissions to give the executables d71 9 d100 1 a100 1 @@@@ -1704,6 +1709,7 @@@@ showlayout: @ 1.5 log @Update samba to 3.0.26a. pkgsrc change: Add support for DESTDIR. Changes from 3.0.24 are huge, please refer WHATSNEW.txt. @ text @d1 1 a1 1 $NetBSD: patch-ba,v 1.4 2007/02/11 18:39:04 tron Exp $ d10 1 a10 1 +MANDIR = /usr/pkg/man @ 1.4 log @Update "samba" package to version 3.0.24. Major changes since version 3.0.22: - CVE-2007-0452 (Potential Denial of Service bug in smbd) - CVE-2007-0453 (Buffer overrun in NSS host lookup Winbind NSS library on Solaris) - CVE-2007-0454 (Format string bug in afsacl.so VFS plugin) - Stability fixes for winbindd - Portability fixes on FreeBSD and Solaris operating systems. - Authentication failures in pam_winbind when the AD domain policy is set to not expire passwords. - Authorization failures when using smb.conf options such as "valid users" with the smbpasswd passdb backend. - Ambiguity with unqualified names in smb.conf parameters such as "force user" and "valid users". - Errors in 'net ads join' caused by bad IP address in the list of domain controllers. - SMB signing errors in the client and server code. - Domain join failures when using smbpasswd on a Samba PDC. - Failure to strip the domain name from groups when 'winbind use default domain = yes' - Failure in pam_winbind to correctly parse arguments. - Bad token creation of local users on member servers not running winbindd. - Failure to add users or groups to ACLs using the Windows object picker. - Failure in file serving code when 'kernel oplocks = yes'. - New "createupn" option to "net ads join" - Rewritten Kerberos keytab generation when 'use kerberos keytab = yes' - Improved 'make test' - New offline mode in winbindd. - New Kerberos support for pam_winbind.so. - New handling of unmapped users and groups. - New non-root share management tools. - Improved support for local and BUILTIN groups. - Winbind IDMAP integration with RFC2307 schema objects supported by Windows 2003 R2. - Rewritten 'net ads join' to mimic Windows XP without requiring administrative rights to join a domain. @ text @d1 1 a1 1 $NetBSD$ d3 12 a14 3 --- Makefile.in.orig 2007-02-04 18:59:28.000000000 +0000 +++ Makefile.in 2007-02-11 17:40:41.000000000 +0000 @@@@ -100,6 +100,9 @@@@ d24 1 a24 1 @@@@ -126,7 +129,7 @@@@ d26 2 a27 2 PATH_FLAGS2 = $(PATH_FLAGS1) -DBINDIR=\"$(BINDIR)\" -DDRIVERFILE=\"$(DRIVERFILE)\" PATH_FLAGS3 = $(PATH_FLAGS2) -DLMHOSTSFILE=\"$(LMHOSTSFILE)\" d29 1 a29 1 +PATH_FLAGS4 = $(PATH_FLAGS3) -DSWATDIR=\"$(SWATDIR)\" -DLOCKDIR=\"$(LOCKDIR)\" -DSTATEDIR=\"$(STATEDIR)\" -DPIDDIR=\"$(PIDDIR)\" d33 1 a33 1 @@@@ -1009,7 +1012,7 @@@@ d35 1 a35 1 bin/smbget@@EXEEXT@@: $(SMBGET_OBJ) @@BUILD_POPT@@ bin/.dummy d37 2 a38 2 - @@$(CC) $(FLAGS) @@PIE_LDFLAGS@@ -o $@@ $(SMBGET_OBJ) $(LDFLAGS) $(DYNEXP) $(LIBS) @@POPTLIBS@@ $(KRB5LIBS) $(LDAP_LIBS) $(NSCD_LIBS) + @@$(CC) $(FLAGS) @@PIE_LDFLAGS@@ -o $@@ $(SMBGET_OBJ) $(LDFLAGS) $(DYNEXP) $(LIBS) @@POPTLIBS@@ $(KRB5LIBS) $(LDAP_LIBS) $(NSCD_LIBS) $(PASSDB_LIBS) d42 2 a43 2 @@@@ -1038,12 +1041,12 @@@@ bin/smbcacls@@EXEEXT@@: $(SMBCACLS_OBJ) @@BUILD_POPT@@ bin/.dummy d45 1 a45 1 @@$(CC) $(FLAGS) @@PIE_LDFLAGS@@ -o $@@ $(SMBCACLS_OBJ) $(DYNEXP) $(LDFLAGS) $(LIBS) @@POPTLIBS@@ \ d49 1 a49 1 bin/smbcquotas@@EXEEXT@@: $(SMBCQUOTAS_OBJ) @@BUILD_POPT@@ bin/.dummy d51 1 a51 1 @@$(CC) $(FLAGS) @@PIE_LDFLAGS@@ -o $@@ $(SMBCQUOTAS_OBJ) $(DYNEXP) $(LDFLAGS) $(LIBS) @@POPTLIBS@@ \ d55 1 a55 1 bin/eventlogadm@@EXEEXT@@: $(EVTLOGADM_OBJ) @@BUILD_POPT@@ bin/.dummy d57 2 a58 2 @@@@ -1102,7 +1105,7 @@@@ bin/libsmbclient.@@SHLIBEXT@@: $(LIBSMBCLIENT_PICOBJS) d60 3 a62 3 @@$(SHLD) $(LDSHFLAGS) -o $@@ $(LIBSMBCLIENT_PICOBJS) $(LDFLAGS) $(LIBS) \ - $(KRB5LIBS) $(LDAP_LIBS) \ + $(KRB5LIBS) $(LDAP_LIBS) $(PASSDB_LIBS) \ d65 2 a66 2 bin/libsmbclient.a: $(LIBSMBCLIENT_PICOBJS) @@@@ -1382,11 +1385,11 @@@@ d68 1 a68 1 @@$(CC) $(FLAGS) @@PIE_LDFLAGS@@ -o $@@ $(LDFLAGS) $(DYNEXP) $(NTLM_AUTH_OBJ) \ d73 1 a73 1 bin/pam_smbpass.@@SHLIBEXT@@: $(PAM_SMBPASS_PICOOBJ) d75 2 a76 2 - @@$(SHLD) $(LDSHFLAGS) -o $@@ $(PAM_SMBPASS_PICOOBJ) -lpam $(DYNEXP) $(LIBS) $(LDAP_LIBS) $(KRB5LIBS) + @@$(SHLD) $(LDSHFLAGS) -o $@@ $(PAM_SMBPASS_PICOOBJ) -lpam $(DYNEXP) $(LIBS) $(LDAP_LIBS) $(KRB5LIBS) $(PASSDB_LIBS) d78 1 a78 1 bin/tdbbackup@@EXEEXT@@: $(TDBBACKUP_OBJ) bin/.dummy d80 1 a80 1 @@@@ -1437,7 +1440,7 @@@@ d89 12 a100 1 @@@@ -1550,6 +1553,7 @@@@ @ 1.4.6.1 log @Pullup ticket 2228 - requested by tron security update for samba - pkgsrc/net/samba/Makefile 1.175-1.177 - pkgsrc/net/samba/Makefile.patches 1.5-1.6 - pkgsrc/net/samba/PLIST 1.37 - pkgsrc/net/samba/distinfo 1.55-1.57 - pkgsrc/net/samba/options.mk 1.22 - pkgsrc/net/samba/patches/patch-ag 1.7 - pkgsrc/net/samba/patches/patch-ai removed - pkgsrc/net/samba/patches/patch-aj removed - pkgsrc/net/samba/patches/patch-al removed - pkgsrc/net/samba/patches/patch-am removed - pkgsrc/net/samba/patches/patch-au 1.7 - pkgsrc/net/samba/patches/patch-au 1.7 - pkgsrc/net/samba/patches/patch-av 1.3 - pkgsrc/net/samba/patches/patch-ay 1.3 - pkgsrc/net/samba/patches/patch-ba 1.5-1.6 - pkgsrc/net/samba/patches/patch-bb removed - pkgsrc/net/samba/patches/patch-bc 1.2 - pkgsrc/net/samba/patches/patch-bd 1.3 - pkgsrc/net/samba/patches/patch-be 1.3 - pkgsrc/net/samba/patches/patch-bf removed - pkgsrc/net/samba/patches/patch-bh 1.3 - pkgsrc/net/samba/patches/patch-bi 1.5 - pkgsrc/net/samba/patches/patch-bj removed - pkgsrc/net/samba/patches/patch-bk removed - pkgsrc/net/samba/patches/patch-bo 1.4 - pkgsrc/net/samba/patches/patch-bp 1.4 - pkgsrc/net/samba/patches/patch-br 1.3 - pkgsrc/net/samba/patches/patch-bs 1.4 - pkgsrc/net/samba/patches/patch-bt 1.3 - pkgsrc/net/samba/patches/patch-bu 1.5 - pkgsrc/net/samba/patches/patch-bw 1.4 - pkgsrc/net/samba/patches/patch-bx removed - pkgsrc/net/samba/patches/patch-by removed - pkgsrc/net/samba/patches/patch-bz removed - pkgsrc/net/samba/patches/patch-ca 1.4 - pkgsrc/net/samba/patches/patch-ce 1.1 - pkgsrc/net/samba/patches/patch-cf 1.1 - pkgsrc/net/samba/patches/patch-cg 1.1 - pkgsrc/net/samba/patches/patch-ch 1.1 Module Name: pkgsrc Committed By: taca Date: Sun Oct 28 07:28:51 UTC 2007 Modified Files: pkgsrc/net/samba: Makefile Makefile.patches PLIST distinfo options.mk pkgsrc/net/samba/patches: patch-ag patch-at patch-au patch-av patch-ay patch-ba patch-bc patch-bd patch-be patch-bh patch-bi patch-bo patch-bp patch-br patch-bs patch-bt patch-bu patch-bw patch-ca Added Files: pkgsrc/net/samba/patches: patch-ce patch-cf patch-cg patch-ch Removed Files: pkgsrc/net/samba/patches: patch-ai patch-aj patch-al patch-am patch-bb patch-bf patch-bj patch-bk patch-bx patch-by patch-bz Log Message: Update samba to 3.0.26a. pkgsrc change: Add support for DESTDIR. Changes from 3.0.24 are huge, please refer WHATSNEW.txt. --- Module Name: pkgsrc Committed By: rillig Date: Tue Nov 6 00:47:53 UTC 2007 Modified Files: pkgsrc/net/samba: Makefile distinfo pkgsrc/net/samba/patches: patch-ba Log Message: Fixed an expansion of @@mandir@@ that accidentally got into patch-ba in revision 1.5. PKGREVISION++ --- Module Name: pkgsrc Committed By: tron Date: Fri Nov 16 11:41:38 UTC 2007 Modified Files: pkgsrc/net/samba: Makefile Makefile.patches distinfo Log Message: Apply security fixes for CVE-2007-4572 and CVE-2007-5398 released by the Samba project. Bump package revision. @ text @d1 1 a1 1 $NetBSD: patch-ba,v 1.4 2007/02/11 18:39:04 tron Exp $ d3 3 a5 12 --- Makefile.in.orig 2007-06-20 02:11:39.000000000 +0900 +++ Makefile.in @@@@ -81,7 +81,7 @@@@ AUTHLIBDIR = $(LIBDIR)/auth CONFIGLIBDIR = $(LIBDIR)/config CONFIGDIR = @@configdir@@ VARDIR = @@localstatedir@@ -MANDIR = @@mandir@@ +MANDIR = @@mandir@@ DATADIR = @@datadir@@ # The permissions to give the executables @@@@ -106,6 +106,9 @@@@ SWATDIR = @@swatdir@@ d15 1 a15 1 @@@@ -136,7 +139,7 @@@@ PASSWD_FLAGS = -DSMB_PASSWD_FILE=\"$(SMB d17 2 a18 2 PATH_FLAGS2 = $(PATH_FLAGS1) -DBINDIR=\"$(BINDIR)\" PATH_FLAGS3 = $(PATH_FLAGS2) -DLMHOSTSFILE=\"$(LMHOSTSFILE)\" d20 1 a20 1 +PATH_FLAGS4 = $(PATH_FLAGS3) -DSWATDIR=\"$(SWATDIR)\" -DLOCKDIR=\"$(LOCKDIR)\" -DSTATEDIR=\"$(STATEDIR)\" -DPIDDIR=\"$(PIDDIR)\" d24 1 a24 1 @@@@ -1052,7 +1055,7 @@@@ bin/pdbedit@@EXEEXT@@: proto_exists $(PDBE d26 1 a26 1 bin/smbget@@EXEEXT@@: proto_exists $(SMBGET_OBJ) @@BUILD_POPT@@ bin/.dummy d28 2 a29 2 - @@$(CC) $(FLAGS) -o $@@ $(SMBGET_OBJ) $(LDFLAGS) $(DYNEXP) $(LIBS) @@POPTLIBS@@ $(KRB5LIBS) $(LDAP_LIBS) $(NSCD_LIBS) + @@$(CC) $(FLAGS) -o $@@ $(SMBGET_OBJ) $(LDFLAGS) $(DYNEXP) $(LIBS) @@POPTLIBS@@ $(KRB5LIBS) $(LDAP_LIBS) $(NSCD_LIBS) $(PASSDB_LIBS) d33 2 a34 2 @@@@ -1087,12 +1090,12 @@@@ bin/msgtest@@EXEEXT@@: proto_exists $(MSGT bin/smbcacls@@EXEEXT@@: proto_exists $(SMBCACLS_OBJ) @@BUILD_POPT@@ bin/.dummy d36 1 a36 1 @@$(CC) $(FLAGS) -o $@@ $(SMBCACLS_OBJ) $(DYNEXP) $(LDFLAGS) $(LIBS) @@POPTLIBS@@ \ d40 1 a40 1 bin/smbcquotas@@EXEEXT@@: proto_exists $(SMBCQUOTAS_OBJ) @@BUILD_POPT@@ bin/.dummy d42 1 a42 1 @@$(CC) $(FLAGS) -o $@@ $(SMBCQUOTAS_OBJ) $(DYNEXP) $(LDFLAGS) $(LIBS) @@POPTLIBS@@ \ d46 1 a46 1 bin/eventlogadm@@EXEEXT@@: proto_exists $(EVTLOGADM_OBJ) @@BUILD_POPT@@ bin/.dummy d48 2 a49 2 @@@@ -1155,7 +1158,7 @@@@ bin/libaddns.a: proto_exists $(LIBADDNS_ bin/libsmbclient.@@SHLIBEXT@@: proto_exists $(LIBSMBCLIENT_OBJ) d51 3 a53 3 @@$(SHLD) $(LDSHFLAGS) -o $@@ $(LIBSMBCLIENT_OBJ) $(LIBS) \ - $(KRB5LIBS) $(LDAP_LIBS) $(NSCD_LIBS) \ + $(KRB5LIBS) $(LDAP_LIBS) $(NSCD_LIBS) $(PASSDB_LIBS) \ d56 2 a57 2 bin/libsmbclient.a: proto_exists $(LIBSMBCLIENT_OBJ) @@@@ -1527,11 +1530,11 @@@@ bin/ntlm_auth@@EXEEXT@@: proto_exists $(NT d59 1 a59 1 @@$(CC) $(FLAGS) -o $@@ $(LDFLAGS) $(DYNEXP) $(NTLM_AUTH_OBJ) \ d64 1 a64 1 bin/pam_smbpass.@@SHLIBEXT@@: $(PAM_SMBPASS_OBJ) d66 2 a67 2 - @@$(SHLD) $(LDSHFLAGS) -o $@@ $(PAM_SMBPASS_OBJ) -lpam $(DYNEXP) $(LIBS) $(LDAP_LIBS) $(KRB5LIBS) $(NSCD_LIBS) + @@$(SHLD) $(LDSHFLAGS) -o $@@ $(PAM_SMBPASS_OBJ) -lpam $(DYNEXP) $(LIBS) $(LDAP_LIBS) $(KRB5LIBS) $(NSCD_LIBS) $(PASSDB_LIBS) d69 1 a69 1 bin/tdbbackup@@EXEEXT@@: proto_exists $(TDBBACKUP_OBJ) bin/.dummy d71 1 a71 1 @@@@ -1580,7 +1583,7 @@@@ install-everything: install installmodul d80 1 a80 12 @@@@ -1599,7 +1602,9 @@@@ installmodules: modules installdirs @@$(SHELL) $(srcdir)/script/installmodules.sh $(INSTALLPERMS) $(DESTDIR) $(prefix) $(PDBLIBDIR) $(PDB_MODULES) @@$(SHELL) $(srcdir)/script/installmodules.sh $(INSTALLPERMS) $(DESTDIR) $(prefix) $(RPCLIBDIR) $(RPC_MODULES) @@$(SHELL) $(srcdir)/script/installmodules.sh $(INSTALLPERMS) $(DESTDIR) $(prefix) $(IDMAPLIBDIR) $(IDMAP_MODULES) - @@$(SHELL) $(srcdir)/script/installmodules.sh $(INSTALLPERMS) $(DESTDIR) $(prefix) $(NSSINFOLIBDIR) $(NSS_INFO_MODULES) + @@if [ ! -z "$(NSS_INFO_MODULES)" ]; then \ + $(SHELL) $(srcdir)/script/installmodules.sh $(INSTALLPERMS) $(DESTDIR) $(prefix) $(NSSINFOLIBDIR) $(NSS_INFO_MODULES); \ + fi @@$(SHELL) $(srcdir)/script/installmodules.sh $(INSTALLPERMS) $(DESTDIR) $(prefix) $(CHARSETLIBDIR) $(CHARSET_MODULES) @@$(SHELL) $(srcdir)/script/installmodules.sh $(INSTALLPERMS) $(DESTDIR) $(prefix) $(AUTHLIBDIR) $(AUTH_MODULES) @@$(SHELL) $(srcdir)/script/linkmodules.sh $(DESTDIR)$(PDBLIBDIR) ldapsam.@@SHLIBEXT@@ ldapsam_compat.@@SHLIBEXT@@ @@@@ -1704,6 +1709,7 @@@@ showlayout: @ 1.3 log @Update net/samba to version 3.0.22. Changes from version 3.0.21a include: * Fix CAN-2006-1059 -- samba<3.0.22 exposes the clear text of the server's machine account credentials in the winbind log files when the log level is set to 5 or higher. * Append "-pkgsrc" to the Samba version string so as to distinguish the official version from the pkgsrc version, which has the modifications for "state directory" and "passwd expand gecos". * Modify package so that we automatically determine the name of the nsswitch modules that are installed by samba with the winbind option. We extract this information by invoking the config.status script to get the value that the configure script determined. o Access checks when deleting printer driver meta-data. o Several non-default combinations schannel and SPNEGO support. o Password changes with NT4 and Win2k pre-SP4 clients. o High load issues on IRIX caused by a bug when interfacing with kernel oplocks. o Server crashes in smbd. o Compile issues on 64-bit platforms. o Crash bugs on big-endian systems. o Packaging fixes for RHEL/Fedora, Solaris, & Debian. o Over 30 bugzilla reports closed. @ text @d3 3 a5 3 --- Makefile.in.orig 2006-02-20 15:33:23.000000000 -0500 +++ Makefile.in @@@@ -91,6 +91,9 @@@@ SWATDIR = @@swatdir@@ d15 1 a15 1 @@@@ -117,7 +120,7 @@@@ PASSWD_FLAGS = -DSMB_PASSWD_FILE=\"$(SMB d24 1 a24 1 @@@@ -964,7 +967,7 @@@@ bin/pdbedit@@EXEEXT@@: $(PDBEDIT_OBJ) @@BUI d28 2 a29 2 - @@$(CC) $(FLAGS) @@PIE_LDFLAGS@@ -o $@@ $(SMBGET_OBJ) $(LDFLAGS) $(DYNEXP) $(LIBS) @@POPTLIBS@@ $(KRB5LIBS) $(LDAP_LIBS) + @@$(CC) $(FLAGS) @@PIE_LDFLAGS@@ -o $@@ $(SMBGET_OBJ) $(LDFLAGS) $(DYNEXP) $(LIBS) @@POPTLIBS@@ $(KRB5LIBS) $(LDAP_LIBS) $(PASSDB_LIBS) d33 1 a33 2 @@@@ -992,11 +995,11 @@@@ bin/msgtest@@EXEEXT@@: $(MSGTEST_OBJ) bin/ d36 3 a38 2 - @@$(CC) $(FLAGS) @@PIE_LDFLAGS@@ -o $@@ $(SMBCACLS_OBJ) $(DYNEXP) $(LDFLAGS) $(LIBS) @@POPTLIBS@@ $(KRB5LIBS) $(LDAP_LIBS) + @@$(CC) $(FLAGS) @@PIE_LDFLAGS@@ -o $@@ $(SMBCACLS_OBJ) $(DYNEXP) $(LDFLAGS) $(LIBS) @@POPTLIBS@@ $(KRB5LIBS) $(LDAP_LIBS) $(PASSDB_LIBS) d42 3 a44 2 - @@$(CC) $(FLAGS) @@PIE_LDFLAGS@@ -o $@@ $(SMBCQUOTAS_OBJ) $(DYNEXP) $(LDFLAGS) $(LIBS) @@POPTLIBS@@ $(KRB5LIBS) $(LDAP_LIBS) + @@$(CC) $(FLAGS) @@PIE_LDFLAGS@@ -o $@@ $(SMBCQUOTAS_OBJ) $(DYNEXP) $(LDFLAGS) $(LIBS) @@POPTLIBS@@ $(KRB5LIBS) $(LDAP_LIBS) $(PASSDB_LIBS) d48 1 a48 1 @@@@ -1055,7 +1058,7 @@@@ bin/smbwrapper.@@SHLIBEXT@@: $(PICOBJS) bi d57 1 a57 1 @@@@ -1353,11 +1356,11 @@@@ bin/ntlm_auth@@EXEEXT@@: $(NTLM_AUTH_OBJ) d61 2 a62 2 - @@POPTLIBS@@ $(KRB5LIBS) $(LDAP_LIBS) + @@POPTLIBS@@ $(KRB5LIBS) $(LDAP_LIBS) $(PASSDB_LIBS) d71 1 a71 1 @@@@ -1403,7 +1406,7 @@@@ install-everything: install installmodul d75 2 a76 2 - @@$(SHELL) $(srcdir)/script/installdirs.sh $(DESTDIR)$(BASEDIR) $(DESTDIR)$(BINDIR) $(DESTDIR)$(SBINDIR) $(DESTDIR)$(LIBDIR) $(DESTDIR)$(VARDIR) $(DESTDIR)$(PRIVATEDIR) $(DESTDIR)$(PIDDIR) $(DESTDIR)$(LOCKDIR) $(DESTDIR)$(MANDIR) + @@$(SHELL) $(srcdir)/script/installdirs.sh $(DESTDIR)$(BASEDIR) $(DESTDIR)$(BINDIR) $(DESTDIR)$(SBINDIR) $(DESTDIR)$(LIBDIR) $(DESTDIR)$(VARDIR) $(DESTDIR)$(PRIVATEDIR) $(DESTDIR)$(PIDDIR) $(DESTDIR)$(LOCKDIR) $(DESTDIR)$(STATEDIR) $(DESTDIR)$(MANDIR) d79 2 a80 2 @@$(SHELL) $(srcdir)/script/installbin.sh $(INSTALLPERMS) $(DESTDIR)$(BASEDIR) $(DESTDIR)$(SBINDIR) $(DESTDIR)$(LIBDIR) $(DESTDIR)$(VARDIR) $(SBIN_PROGS) @@@@ -1506,6 +1509,7 @@@@ showlayout: @ 1.3.6.1 log @Pullup ticket 2019 - requested by tron security update for samba Revisions pulled up: - pkgsrc/net/samba/Makefile 1.169 - pkgsrc/net/samba/PLIST 1.35 - pkgsrc/net/samba/distinfo 1.52 - pkgsrc/net/samba/patches/patch-ab 1.26 - pkgsrc/net/samba/patches/patch-ad removed - pkgsrc/net/samba/patches/patch-af 1.8 - pkgsrc/net/samba/patches/patch-ag 1.6 - pkgsrc/net/samba/patches/patch-ai 1.4 - pkgsrc/net/samba/patches/patch-al 1.5 - pkgsrc/net/samba/patches/patch-at 1.6 - pkgsrc/net/samba/patches/patch-au 1.6 - pkgsrc/net/samba/patches/patch-aw 1.2 - pkgsrc/net/samba/patches/patch-ay 1.2 - pkgsrc/net/samba/patches/patch-ba 1.4 - pkgsrc/net/samba/patches/patch-bb 1.2 - pkgsrc/net/samba/patches/patch-bg 1.2 - pkgsrc/net/samba/patches/patch-bi 1.4 - pkgsrc/net/samba/patches/patch-bl removed - pkgsrc/net/samba/patches/patch-bm 1.2 - pkgsrc/net/samba/patches/patch-bn 1.2 - pkgsrc/net/samba/patches/patch-bu 1.4 - pkgsrc/net/samba/patches/patch-bv 1.2 - pkgsrc/net/samba/patches/patch-cd removed Module Name: pkgsrc Committed By: tron Date: Sun Feb 11 18:39:04 UTC 2007 Modified Files: pkgsrc/net/samba: Makefile PLIST distinfo pkgsrc/net/samba/patches: patch-ab patch-af patch-ag patch-ai patch-al patch-at patch-au patch-aw patch-ay patch-ba patch-bb patch-bg patch-bi patch-bm patch-bn patch-bu patch-bv Removed Files: pkgsrc/net/samba/patches: patch-ad patch-bl patch-cd Log Message: Update "samba" package to version 3.0.24. Major changes since version 3.0.22: - CVE-2007-0452 (Potential Denial of Service bug in smbd) - CVE-2007-0453 (Buffer overrun in NSS host lookup Winbind NSS library on Solaris) - CVE-2007-0454 (Format string bug in afsacl.so VFS plugin) - Stability fixes for winbindd - Portability fixes on FreeBSD and Solaris operating systems. - Authentication failures in pam_winbind when the AD domain policy is set to not expire passwords. - Authorization failures when using smb.conf options such as "valid users" with the smbpasswd passdb backend. - Ambiguity with unqualified names in smb.conf parameters such as "force user" and "valid users". - Errors in 'net ads join' caused by bad IP address in the list of domain controllers. - SMB signing errors in the client and server code. - Domain join failures when using smbpasswd on a Samba PDC. - Failure to strip the domain name from groups when 'winbind use default domain =3D yes' - Failure in pam_winbind to correctly parse arguments. - Bad token creation of local users on member servers not running winbindd. - Failure to add users or groups to ACLs using the Windows object picker. - Failure in file serving code when 'kernel oplocks =3D yes'. - New "createupn" option to "net ads join" - Rewritten Kerberos keytab generation when 'use kerberos keytab =3D yes' - Improved 'make test' - New offline mode in winbindd. - New Kerberos support for pam_winbind.so. - New handling of unmapped users and groups. - New non-root share management tools. - Improved support for local and BUILTIN groups. - Winbind IDMAP integration with RFC2307 schema objects supported by Windows 2003 R2. - Rewritten 'net ads join' to mimic Windows XP without requiring administrative rights to join a domain. @ text @d1 1 a1 1 $NetBSD: patch-ba,v 1.4 2007/02/11 18:39:04 tron Exp $ d3 3 a5 3 --- Makefile.in.orig 2007-02-04 18:59:28.000000000 +0000 +++ Makefile.in 2007-02-11 17:40:41.000000000 +0000 @@@@ -100,6 +100,9 @@@@ d15 1 a15 1 @@@@ -126,7 +129,7 @@@@ d24 1 a24 1 @@@@ -1009,7 +1012,7 @@@@ d28 2 a29 2 - @@$(CC) $(FLAGS) @@PIE_LDFLAGS@@ -o $@@ $(SMBGET_OBJ) $(LDFLAGS) $(DYNEXP) $(LIBS) @@POPTLIBS@@ $(KRB5LIBS) $(LDAP_LIBS) $(NSCD_LIBS) + @@$(CC) $(FLAGS) @@PIE_LDFLAGS@@ -o $@@ $(SMBGET_OBJ) $(LDFLAGS) $(DYNEXP) $(LIBS) @@POPTLIBS@@ $(KRB5LIBS) $(LDAP_LIBS) $(NSCD_LIBS) $(PASSDB_LIBS) d33 2 a34 1 @@@@ -1038,12 +1041,12 @@@@ d37 2 a38 3 @@$(CC) $(FLAGS) @@PIE_LDFLAGS@@ -o $@@ $(SMBCACLS_OBJ) $(DYNEXP) $(LDFLAGS) $(LIBS) @@POPTLIBS@@ \ - $(KRB5LIBS) $(LDAP_LIBS) $(NSCD_LIBS) + $(KRB5LIBS) $(LDAP_LIBS) $(NSCD_LIBS) $(PASSDB_LIBS) d42 2 a43 3 @@$(CC) $(FLAGS) @@PIE_LDFLAGS@@ -o $@@ $(SMBCQUOTAS_OBJ) $(DYNEXP) $(LDFLAGS) $(LIBS) @@POPTLIBS@@ \ - $(KRB5LIBS) $(LDAP_LIBS) $(NSCD_LIBS) + $(KRB5LIBS) $(LDAP_LIBS) $(NSCD_LIBS) $(PASSDB_LIBS) d47 1 a47 1 @@@@ -1102,7 +1105,7 @@@@ d56 1 a56 1 @@@@ -1382,11 +1385,11 @@@@ d60 2 a61 2 - @@POPTLIBS@@ $(KRB5LIBS) $(LDAP_LIBS) $(NSCD_LIBS) + @@POPTLIBS@@ $(KRB5LIBS) $(LDAP_LIBS) $(NSCD_LIBS) $(PASSDB_LIBS) d70 1 a70 1 @@@@ -1437,7 +1440,7 @@@@ d74 2 a75 2 - @@$(SHELL) $(srcdir)/script/installdirs.sh $(INSTALLPERMS) $(DESTDIR) $(prefix) $(BINDIR) $(SBINDIR) $(LIBDIR) $(VARDIR) $(PRIVATEDIR) $(PIDDIR) $(LOCKDIR) $(MANDIR) + @@$(SHELL) $(srcdir)/script/installdirs.sh $(INSTALLPERMS) $(DESTDIR) $(prefix) $(BINDIR) $(SBINDIR) $(LIBDIR) $(VARDIR) $(STATEDIR) $(PRIVATEDIR) $(PIDDIR) $(LOCKDIR) $(MANDIR) d78 2 a79 2 @@$(SHELL) script/installbin.sh $(INSTALLPERMS) $(DESTDIR) $(prefix) $(SBINDIR) $(SBIN_PROGS) @@@@ -1550,6 +1553,7 @@@@ @ 1.2 log @Update net/samba to 3.0.21a. Changes since version 3.0.20b include: Bugfixes: o Address a bug in the oplock code which may cause clients to stall when multiple users are accessing a share concurrently o Missing groups in a user's token when logging in via kerberos o Incompatibilities with newer MS Windows hotfixes and embedded OS platforms o Portability and crash bugs. o Performance issues in winbindd. Additions: o Complete NTLMv2 support by consolidating authentication mechanism used at the CIFS and RPC layers. o The capability to manage Unix services using the Win32 Service Control API. o The capability to view external Unix log files via the Microsoft Event Viewer. o New libmsrpc share library for application developers. o Rewrite of CIFS oplock implementation. o Performance Counter external daemon. o Winbindd auto-detection query methods when communicating with a domain controller. o The ability to enumerate long share names in libsmbclient applications. @ text @d3 1 a3 1 --- Makefile.in.orig 2005-12-14 07:45:49.000000000 -0500 d24 1 a24 1 @@@@ -963,7 +966,7 @@@@ bin/pdbedit@@EXEEXT@@: $(PDBEDIT_OBJ) @@BUI d33 1 a33 1 @@@@ -991,11 +994,11 @@@@ bin/msgtest@@EXEEXT@@: $(MSGTEST_OBJ) bin/ d47 1 a47 1 @@@@ -1054,7 +1057,7 @@@@ bin/smbwrapper.@@SHLIBEXT@@: $(PICOBJS) bi d56 1 a56 1 @@@@ -1352,11 +1355,11 @@@@ bin/ntlm_auth@@EXEEXT@@: $(NTLM_AUTH_OBJ) d65 2 a66 2 - @@$(SHLD) $(LDSHFLAGS) -o $@@ $(PAM_SMBPASS_PICOOBJ) -lpam $(DYNEXP) $(LIBS) -lc $(LDAP_LIBS) $(KRB5LIBS) + @@$(SHLD) $(LDSHFLAGS) -o $@@ $(PAM_SMBPASS_PICOOBJ) -lpam $(DYNEXP) $(LIBS) -lc $(LDAP_LIBS) $(KRB5LIBS) $(PASSDB_LIBS) d70 1 a70 1 @@@@ -1402,7 +1405,7 @@@@ install-everything: install installmodul d79 1 a79 1 @@@@ -1505,6 +1508,7 @@@@ showlayout: @ 1.2.2.1 log @Pullup ticket 1298 - requested by jlam security update for samba Revisions pulled up: - pkgsrc/net/samba/DESCR 1.4 - pkgsrc/net/samba/Makefile 1.159 - pkgsrc/net/samba/Makefile.mirrors 1.3 - pkgsrc/net/samba/PLIST 1.34 - pkgsrc/net/samba/distinfo 1.48 - pkgsrc/net/samba/options.mk 1.13 - pkgsrc/net/samba/patches/patch-am 1.7 - pkgsrc/net/samba/patches/patch-at 1.5 - pkgsrc/net/samba/patches/patch-au 1.5 - pkgsrc/net/samba/patches/patch-ba 1.3 - pkgsrc/net/samba/patches/patch-be 1.2 - pkgsrc/net/samba/patches/patch-bf 1.3 - pkgsrc/net/samba/patches/patch-bi 1.3 - pkgsrc/net/samba/patches/patch-bo 1.3 - pkgsrc/net/samba/patches/patch-bp 1.3 - pkgsrc/net/samba/patches/patch-bs 1.3 - pkgsrc/net/samba/patches/patch-bu 1.3 - pkgsrc/net/samba/patches/patch-bw 1.3 - pkgsrc/net/samba/patches/patch-ca 1.3 Module Name: pkgsrc Committed By: jlam Date: Sat Apr 1 04:55:35 UTC 2006 Modified Files: pkgsrc/net/samba: DESCR Makefile Makefile.mirrors PLIST distinfo options.mk pkgsrc/net/samba/patches: patch-am patch-at patch-au patch-ba patch-be patch-bf patch-bi patch-bo patch-bp patch-bs patch-bu patch-bw Added Files: pkgsrc/net/samba/patches: patch-ca Log Message: Update net/samba to version 3.0.22. Changes from version 3.0.21a include: * Fix CAN-2006-1059 -- samba<3.0.22 exposes the clear text of the server's machine account credentials in the winbind log files when the log level is set to 5 or higher. * Append "-pkgsrc" to the Samba version string so as to distinguish the official version from the pkgsrc version, which has the modifications for "state directory" and "passwd expand gecos". * Modify package so that we automatically determine the name of the nsswitch modules that are installed by samba with the winbind option. We extract this information by invoking the config.status script to get the value that the configure script determined. o Access checks when deleting printer driver meta-data. o Several non-default combinations schannel and SPNEGO support. o Password changes with NT4 and Win2k pre-SP4 clients. o High load issues on IRIX caused by a bug when interfacing with kernel oplocks. o Server crashes in smbd. o Compile issues on 64-bit platforms. o Crash bugs on big-endian systems. o Packaging fixes for RHEL/Fedora, Solaris, & Debian. o Over 30 bugzilla reports closed. @ text @d1 1 a1 1 $NetBSD: patch-ba,v 1.3 2006/04/01 04:55:35 jlam Exp $ d3 1 a3 1 --- Makefile.in.orig 2006-02-20 15:33:23.000000000 -0500 d24 1 a24 1 @@@@ -964,7 +967,7 @@@@ bin/pdbedit@@EXEEXT@@: $(PDBEDIT_OBJ) @@BUI d33 1 a33 1 @@@@ -992,11 +995,11 @@@@ bin/msgtest@@EXEEXT@@: $(MSGTEST_OBJ) bin/ d47 1 a47 1 @@@@ -1055,7 +1058,7 @@@@ bin/smbwrapper.@@SHLIBEXT@@: $(PICOBJS) bi d56 1 a56 1 @@@@ -1353,11 +1356,11 @@@@ bin/ntlm_auth@@EXEEXT@@: $(NTLM_AUTH_OBJ) d65 2 a66 2 - @@$(SHLD) $(LDSHFLAGS) -o $@@ $(PAM_SMBPASS_PICOOBJ) -lpam $(DYNEXP) $(LIBS) $(LDAP_LIBS) $(KRB5LIBS) + @@$(SHLD) $(LDSHFLAGS) -o $@@ $(PAM_SMBPASS_PICOOBJ) -lpam $(DYNEXP) $(LIBS) $(LDAP_LIBS) $(KRB5LIBS) $(PASSDB_LIBS) d70 1 a70 1 @@@@ -1403,7 +1406,7 @@@@ install-everything: install installmodul d79 1 a79 1 @@@@ -1506,6 +1509,7 @@@@ showlayout: @ 1.1 log @Update net/samba to 3.0.20.2 from samba-3.0.20b. Recommended patches for samba-3.0.20b that are applied as part of this update include: http://www.samba.org/samba/patches/print_lprm.patch http://www.samba.org/samba/patches/quota.patch http://www.samba.org/samba/patches/bug3201_wbinfo.patch This fixes PRs pkg/31352 and pkg/31991. Important changes that were made as part of porting this Samba release to pkgsrc include the following: * The new release model for Samba includes distributing patches for urgent bug fixes that will be included in the next release of Samba, and are available at http://www.samba.org/samba/patches/. Since these patches are rather generically named, we download all DISTFILES and PATCHFILES for Samba into a ${DISTNAME}-specific directory. * The default configuration for the samba package no longer builds the "winbind" portions of samba, which are really only useful when attempting to unify logons between Unix and Microsoft Windows. When the "winbind" option is specified, we also build the RID and AD idmap backends, which allow sharing UIDs/GIDs across Unix machines. * New package options have been added to the build: "mysql", "pgsql", and "xml" allow adding optional support for experimental passdb storage backends, and "winbind" allows for optionally building the winbindd daemon and associated plugins. * Two new smb.conf options were added -- "passwd expand gecos" and "state directory". The first describes whether "&" in the GECOS field of a passwd db entry is expanded to the login name. The second describes the location where the persistent-state database files are stored. * Luke Mewburn contributed code to allow nss_winbind.so to work properly on supported NetBSD systems. The FreeBSD NSS winbind code should probably be replaced with a suitably tweaked version of the NetBSD code since the latter is much more complete in the functions that are provided, but I'll leave that to freebsd-pkg-people. * Samba dumps all of its files into "lock directory", but some of them need to persist across reboots. We make a distinction between these files and the temporary files that are re-created by the Samba daemons when they are restarted -- the former are now stored in a "state directory" and the latter are stored in the "lock directory". This is modeled after the Debian patch to Samba located in: packaging/Debian/debian-unstable/patches/fhs.patch The "lock directory" default has been moved to ${VARBASE}/run/samba to emphasize the temporary status of the files stored in that directory. * Samba persists in using PAM_AUTHTOK_RECOVER_ERR, when there is almost universal agreement that PAM_AUTHTOK_RECOVERY_ERR is the right constant to use. Even the Linux-PAM distribution ensures that PAM_AUTHTOK_RECOVERY_ERR is correctly defined. To work around this, we define PAM_AUTHTOK_RECOVER_ERR appropriately in all the places where it is used. * The configure script checks for OpenSSL's libcrypto.so by looking for the symbol "des_set_key". However, libcrypto.so might not contain that symbol because the DES functions might come from a separate library, e.g. libdes.so. In this case, the configure script will think that libcrypto.so is not available, when it actually may be. Instead, look for EVP_des_cbc, which is always provided by libcrypto.so. * Add some missing $(PASSDB_LIBS) references to the Makefile to fix compilation problems if the experimental passdb backends are statically compiled into the Samba suite programs. * Fix compilation problems in sam/idmap_rid.c and sam/idmap_ad.c if the "rid" and "ad" idmap backends are statically compiled into winbindd. Changes between version 3.0.14a and 3.0.20b include: o Reporting files as read-only instead of returning the correct error code of "access denied" o File system quota support defects o Crash bugs caused by incompatibilities on 64-bit systems. o User Manager interoperability problems. o Support for several new Win32 rpc pipes. o New 'net rpc service' tool for managing Win32 services. o Capability to set the owner on new files and directory based on the parent's ownership. o Experimental, asynchronous IO file serving support. o Support for Microsoft Print Migrator. o New Winbind IDmap plugin (ad) for retrieving uid and gid from AD servers which maintain the SFU user and group attributes. o Rewritten support for POSIX pathnames when utilizing the Linux CIFS fs client. o New asynchronous winbindd. o New Windows NT registry file I/O library. o New user right (SeTakeOwnershipPrivilege) added. o New "net share migrate" options. @ text @d3 1 a3 1 --- Makefile.in.orig 2005-10-12 13:03:23.000000000 -0400 d5 1 a5 1 @@@@ -90,6 +90,9 @@@@ SWATDIR = @@swatdir@@ d15 1 a15 1 @@@@ -113,7 +116,7 @@@@ PASSWD_FLAGS = -DSMB_PASSWD_FILE=\"$(SMB d24 1 a24 1 @@@@ -908,7 +911,7 @@@@ bin/pdbedit@@EXEEXT@@: $(PDBEDIT_OBJ) @@BUI d33 1 a33 1 @@@@ -936,11 +939,11 @@@@ bin/msgtest@@EXEEXT@@: $(MSGTEST_OBJ) bin/ d45 1 a45 1 bin/locktest@@EXEEXT@@: $(LOCKTEST_OBJ) bin/.dummy d47 1 a47 1 @@@@ -995,7 +998,7 @@@@ bin/smbwrapper.@@SHLIBEXT@@: $(PICOBJS) bi d56 1 a56 1 @@@@ -1275,11 +1278,11 @@@@ bin/ntlm_auth@@EXEEXT@@: $(NTLM_AUTH_OBJ) d68 3 a70 3 bin/libmsrpc.a: $(LIBMSRPC_PICOBJ) @@-$(AR) -rc $@@ $(LIBMSRPC_PICOBJ) @@@@ -1325,7 +1328,7 @@@@ install-everything: install installmodul d79 1 a79 1 @@@@ -1421,6 +1424,7 @@@@ showlayout: @