head 1.6; access; symbols pkgsrc-2013Q2:1.6.0.6 pkgsrc-2013Q2-base:1.6 pkgsrc-2012Q4:1.6.0.4 pkgsrc-2012Q4-base:1.6 pkgsrc-2011Q4:1.6.0.2 pkgsrc-2011Q4-base:1.6 pkgsrc-2011Q3:1.5.0.18 pkgsrc-2011Q3-base:1.5 pkgsrc-2011Q2:1.5.0.16 pkgsrc-2011Q2-base:1.5 pkgsrc-2011Q1:1.5.0.14 pkgsrc-2011Q1-base:1.5 pkgsrc-2010Q4:1.5.0.12 pkgsrc-2010Q4-base:1.5 pkgsrc-2010Q3:1.5.0.10 pkgsrc-2010Q3-base:1.5 pkgsrc-2010Q2:1.5.0.8 pkgsrc-2010Q2-base:1.5 pkgsrc-2010Q1:1.5.0.6 pkgsrc-2010Q1-base:1.5 pkgsrc-2009Q4:1.5.0.4 pkgsrc-2009Q4-base:1.5 pkgsrc-2009Q3:1.5.0.2 pkgsrc-2009Q3-base:1.5 pkgsrc-2009Q2:1.4.0.18 pkgsrc-2009Q2-base:1.4 pkgsrc-2009Q1:1.4.0.16 pkgsrc-2009Q1-base:1.4 pkgsrc-2008Q4:1.4.0.14 pkgsrc-2008Q4-base:1.4 pkgsrc-2008Q3:1.4.0.12 pkgsrc-2008Q3-base:1.4 cube-native-xorg:1.4.0.10 cube-native-xorg-base:1.4 pkgsrc-2008Q2:1.4.0.8 pkgsrc-2008Q2-base:1.4 cwrapper:1.4.0.6 pkgsrc-2008Q1:1.4.0.4 pkgsrc-2008Q1-base:1.4 pkgsrc-2007Q4:1.4.0.2 pkgsrc-2007Q4-base:1.4 pkgsrc-2007Q3:1.3.0.12 pkgsrc-2007Q3-base:1.3 pkgsrc-2007Q2:1.3.0.10 pkgsrc-2007Q2-base:1.3 pkgsrc-2007Q1:1.3.0.8 pkgsrc-2007Q1-base:1.3 pkgsrc-2006Q4:1.3.0.6 pkgsrc-2006Q4-base:1.3 pkgsrc-2006Q3:1.3.0.4 pkgsrc-2006Q3-base:1.3 pkgsrc-2006Q2:1.3.0.2 pkgsrc-2006Q2-base:1.3 pkgsrc-2006Q1:1.2.0.2 pkgsrc-2006Q1-base:1.2 pkgsrc-2005Q4:1.1.0.2 pkgsrc-2005Q4-base:1.1; locks; strict; comment @# @; 1.6 date 2011.12.16.11.05.25; author asau; state dead; branches; next 1.5; 1.5 date 2009.10.04.16.58.38; author taca; state Exp; branches; next 1.4; 1.4 date 2007.10.28.07.28.49; author taca; state Exp; branches; next 1.3; 1.3 date 2006.04.01.04.55.35; author jlam; state Exp; branches 1.3.12.1; next 1.2; 1.2 date 2006.01.02.22.33.36; author jlam; state Exp; branches 1.2.2.1; next 1.1; 1.1 date 2005.11.14.08.05.28; author jlam; state Exp; branches; next ; 1.3.12.1 date 2007.11.16.15.19.26; author ghen; state Exp; branches; next ; 1.2.2.1 date 2006.04.02.14.16.17; author salo; state Exp; branches; next ; desc @@ 1.6 log @Update to Samba 3.5.11 from net/samba35, part of Samba packages rearrangement. @ text @$NetBSD: patch-bp,v 1.5 2009/10/04 16:58:38 taca Exp $ --- smbd/server.c.orig 2009-09-30 21:21:56.000000000 +0900 +++ smbd/server.c @@@@ -1008,6 +1008,9 @@@@ extern void build_options(BOOL screen); if (!directory_exist(lp_lockdir(), NULL)) mkdir(lp_lockdir(), 0755); + if (!directory_exist(lp_statedir(), NULL)) + mkdir(lp_statedir(), 0755); + if (is_daemon) pidfile_create("smbd"); @ 1.5 log @Update samba package to 3.0.37. This is a security release in order to address CVE-2009-2813, CVE-2009-2948 and CVE-2009-2906. Please note that Samba 3.0 is not maintained any longer. This security release is shipped on a voluntary basis. o CVE-2009-2813: In all versions of Samba later than 3.0.11, connecting to the home share of a user will use the root of the filesystem as the home directory if this user is misconfigured to have an empty home directory in /etc/passwd. o CVE-2009-2948: If mount.cifs is installed as a setuid program, a user can pass it a credential or password path to which he or she does not have access and then use the --verbose option to view the first line of that file. o CVE-2009-2906: Specially crafted SMB requests on authenticated SMB connections can send smbd into a 100% CPU loop, causing a DoS on the Samba server. @ text @d1 1 a1 1 $NetBSD: patch-bp,v 1.4 2007/10/28 07:28:49 taca Exp $ @ 1.4 log @Update samba to 3.0.26a. pkgsrc change: Add support for DESTDIR. Changes from 3.0.24 are huge, please refer WHATSNEW.txt. @ text @d1 1 a1 1 $NetBSD: patch-bp,v 1.3 2006/04/01 04:55:35 jlam Exp $ d3 1 a3 1 --- smbd/server.c.orig 2007-09-11 23:17:48.000000000 +0900 d5 1 a5 1 @@@@ -1010,6 +1010,9 @@@@ extern void build_options(BOOL screen); @ 1.3 log @Update net/samba to version 3.0.22. Changes from version 3.0.21a include: * Fix CAN-2006-1059 -- samba<3.0.22 exposes the clear text of the server's machine account credentials in the winbind log files when the log level is set to 5 or higher. * Append "-pkgsrc" to the Samba version string so as to distinguish the official version from the pkgsrc version, which has the modifications for "state directory" and "passwd expand gecos". * Modify package so that we automatically determine the name of the nsswitch modules that are installed by samba with the winbind option. We extract this information by invoking the config.status script to get the value that the configure script determined. o Access checks when deleting printer driver meta-data. o Several non-default combinations schannel and SPNEGO support. o Password changes with NT4 and Win2k pre-SP4 clients. o High load issues on IRIX caused by a bug when interfacing with kernel oplocks. o Server crashes in smbd. o Compile issues on 64-bit platforms. o Crash bugs on big-endian systems. o Packaging fixes for RHEL/Fedora, Solaris, & Debian. o Over 30 bugzilla reports closed. @ text @d1 1 a1 1 $NetBSD$ d3 1 a3 1 --- smbd/server.c.orig 2006-01-24 18:46:32.000000000 -0500 d5 1 a5 1 @@@@ -868,6 +868,9 @@@@ void build_options(BOOL screen); @ 1.3.12.1 log @Pullup ticket 2228 - requested by tron security update for samba - pkgsrc/net/samba/Makefile 1.175-1.177 - pkgsrc/net/samba/Makefile.patches 1.5-1.6 - pkgsrc/net/samba/PLIST 1.37 - pkgsrc/net/samba/distinfo 1.55-1.57 - pkgsrc/net/samba/options.mk 1.22 - pkgsrc/net/samba/patches/patch-ag 1.7 - pkgsrc/net/samba/patches/patch-ai removed - pkgsrc/net/samba/patches/patch-aj removed - pkgsrc/net/samba/patches/patch-al removed - pkgsrc/net/samba/patches/patch-am removed - pkgsrc/net/samba/patches/patch-au 1.7 - pkgsrc/net/samba/patches/patch-au 1.7 - pkgsrc/net/samba/patches/patch-av 1.3 - pkgsrc/net/samba/patches/patch-ay 1.3 - pkgsrc/net/samba/patches/patch-ba 1.5-1.6 - pkgsrc/net/samba/patches/patch-bb removed - pkgsrc/net/samba/patches/patch-bc 1.2 - pkgsrc/net/samba/patches/patch-bd 1.3 - pkgsrc/net/samba/patches/patch-be 1.3 - pkgsrc/net/samba/patches/patch-bf removed - pkgsrc/net/samba/patches/patch-bh 1.3 - pkgsrc/net/samba/patches/patch-bi 1.5 - pkgsrc/net/samba/patches/patch-bj removed - pkgsrc/net/samba/patches/patch-bk removed - pkgsrc/net/samba/patches/patch-bo 1.4 - pkgsrc/net/samba/patches/patch-bp 1.4 - pkgsrc/net/samba/patches/patch-br 1.3 - pkgsrc/net/samba/patches/patch-bs 1.4 - pkgsrc/net/samba/patches/patch-bt 1.3 - pkgsrc/net/samba/patches/patch-bu 1.5 - pkgsrc/net/samba/patches/patch-bw 1.4 - pkgsrc/net/samba/patches/patch-bx removed - pkgsrc/net/samba/patches/patch-by removed - pkgsrc/net/samba/patches/patch-bz removed - pkgsrc/net/samba/patches/patch-ca 1.4 - pkgsrc/net/samba/patches/patch-ce 1.1 - pkgsrc/net/samba/patches/patch-cf 1.1 - pkgsrc/net/samba/patches/patch-cg 1.1 - pkgsrc/net/samba/patches/patch-ch 1.1 Module Name: pkgsrc Committed By: taca Date: Sun Oct 28 07:28:51 UTC 2007 Modified Files: pkgsrc/net/samba: Makefile Makefile.patches PLIST distinfo options.mk pkgsrc/net/samba/patches: patch-ag patch-at patch-au patch-av patch-ay patch-ba patch-bc patch-bd patch-be patch-bh patch-bi patch-bo patch-bp patch-br patch-bs patch-bt patch-bu patch-bw patch-ca Added Files: pkgsrc/net/samba/patches: patch-ce patch-cf patch-cg patch-ch Removed Files: pkgsrc/net/samba/patches: patch-ai patch-aj patch-al patch-am patch-bb patch-bf patch-bj patch-bk patch-bx patch-by patch-bz Log Message: Update samba to 3.0.26a. pkgsrc change: Add support for DESTDIR. Changes from 3.0.24 are huge, please refer WHATSNEW.txt. --- Module Name: pkgsrc Committed By: rillig Date: Tue Nov 6 00:47:53 UTC 2007 Modified Files: pkgsrc/net/samba: Makefile distinfo pkgsrc/net/samba/patches: patch-ba Log Message: Fixed an expansion of @@mandir@@ that accidentally got into patch-ba in revision 1.5. PKGREVISION++ --- Module Name: pkgsrc Committed By: tron Date: Fri Nov 16 11:41:38 UTC 2007 Modified Files: pkgsrc/net/samba: Makefile Makefile.patches distinfo Log Message: Apply security fixes for CVE-2007-4572 and CVE-2007-5398 released by the Samba project. Bump package revision. @ text @d1 1 a1 1 $NetBSD: patch-bp,v 1.3 2006/04/01 04:55:35 jlam Exp $ d3 1 a3 1 --- smbd/server.c.orig 2007-09-11 23:17:48.000000000 +0900 d5 1 a5 1 @@@@ -1010,6 +1010,9 @@@@ extern void build_options(BOOL screen); @ 1.2 log @Update net/samba to 3.0.21a. Changes since version 3.0.20b include: Bugfixes: o Address a bug in the oplock code which may cause clients to stall when multiple users are accessing a share concurrently o Missing groups in a user's token when logging in via kerberos o Incompatibilities with newer MS Windows hotfixes and embedded OS platforms o Portability and crash bugs. o Performance issues in winbindd. Additions: o Complete NTLMv2 support by consolidating authentication mechanism used at the CIFS and RPC layers. o The capability to manage Unix services using the Win32 Service Control API. o The capability to view external Unix log files via the Microsoft Event Viewer. o New libmsrpc share library for application developers. o Rewrite of CIFS oplock implementation. o Performance Counter external daemon. o Winbindd auto-detection query methods when communicating with a domain controller. o The ability to enumerate long share names in libsmbclient applications. @ text @d3 1 a3 1 --- smbd/server.c.orig 2005-10-17 22:44:57.000000000 -0400 d5 1 a5 1 @@@@ -866,6 +866,9 @@@@ void build_options(BOOL screen); @ 1.2.2.1 log @Pullup ticket 1298 - requested by jlam security update for samba Revisions pulled up: - pkgsrc/net/samba/DESCR 1.4 - pkgsrc/net/samba/Makefile 1.159 - pkgsrc/net/samba/Makefile.mirrors 1.3 - pkgsrc/net/samba/PLIST 1.34 - pkgsrc/net/samba/distinfo 1.48 - pkgsrc/net/samba/options.mk 1.13 - pkgsrc/net/samba/patches/patch-am 1.7 - pkgsrc/net/samba/patches/patch-at 1.5 - pkgsrc/net/samba/patches/patch-au 1.5 - pkgsrc/net/samba/patches/patch-ba 1.3 - pkgsrc/net/samba/patches/patch-be 1.2 - pkgsrc/net/samba/patches/patch-bf 1.3 - pkgsrc/net/samba/patches/patch-bi 1.3 - pkgsrc/net/samba/patches/patch-bo 1.3 - pkgsrc/net/samba/patches/patch-bp 1.3 - pkgsrc/net/samba/patches/patch-bs 1.3 - pkgsrc/net/samba/patches/patch-bu 1.3 - pkgsrc/net/samba/patches/patch-bw 1.3 - pkgsrc/net/samba/patches/patch-ca 1.3 Module Name: pkgsrc Committed By: jlam Date: Sat Apr 1 04:55:35 UTC 2006 Modified Files: pkgsrc/net/samba: DESCR Makefile Makefile.mirrors PLIST distinfo options.mk pkgsrc/net/samba/patches: patch-am patch-at patch-au patch-ba patch-be patch-bf patch-bi patch-bo patch-bp patch-bs patch-bu patch-bw Added Files: pkgsrc/net/samba/patches: patch-ca Log Message: Update net/samba to version 3.0.22. Changes from version 3.0.21a include: * Fix CAN-2006-1059 -- samba<3.0.22 exposes the clear text of the server's machine account credentials in the winbind log files when the log level is set to 5 or higher. * Append "-pkgsrc" to the Samba version string so as to distinguish the official version from the pkgsrc version, which has the modifications for "state directory" and "passwd expand gecos". * Modify package so that we automatically determine the name of the nsswitch modules that are installed by samba with the winbind option. We extract this information by invoking the config.status script to get the value that the configure script determined. o Access checks when deleting printer driver meta-data. o Several non-default combinations schannel and SPNEGO support. o Password changes with NT4 and Win2k pre-SP4 clients. o High load issues on IRIX caused by a bug when interfacing with kernel oplocks. o Server crashes in smbd. o Compile issues on 64-bit platforms. o Crash bugs on big-endian systems. o Packaging fixes for RHEL/Fedora, Solaris, & Debian. o Over 30 bugzilla reports closed. @ text @d1 1 a1 1 $NetBSD: patch-bp,v 1.3 2006/04/01 04:55:35 jlam Exp $ d3 1 a3 1 --- smbd/server.c.orig 2006-01-24 18:46:32.000000000 -0500 d5 1 a5 1 @@@@ -868,6 +868,9 @@@@ void build_options(BOOL screen); @ 1.1 log @Update net/samba to 3.0.20.2 from samba-3.0.20b. Recommended patches for samba-3.0.20b that are applied as part of this update include: http://www.samba.org/samba/patches/print_lprm.patch http://www.samba.org/samba/patches/quota.patch http://www.samba.org/samba/patches/bug3201_wbinfo.patch This fixes PRs pkg/31352 and pkg/31991. Important changes that were made as part of porting this Samba release to pkgsrc include the following: * The new release model for Samba includes distributing patches for urgent bug fixes that will be included in the next release of Samba, and are available at http://www.samba.org/samba/patches/. Since these patches are rather generically named, we download all DISTFILES and PATCHFILES for Samba into a ${DISTNAME}-specific directory. * The default configuration for the samba package no longer builds the "winbind" portions of samba, which are really only useful when attempting to unify logons between Unix and Microsoft Windows. When the "winbind" option is specified, we also build the RID and AD idmap backends, which allow sharing UIDs/GIDs across Unix machines. * New package options have been added to the build: "mysql", "pgsql", and "xml" allow adding optional support for experimental passdb storage backends, and "winbind" allows for optionally building the winbindd daemon and associated plugins. * Two new smb.conf options were added -- "passwd expand gecos" and "state directory". The first describes whether "&" in the GECOS field of a passwd db entry is expanded to the login name. The second describes the location where the persistent-state database files are stored. * Luke Mewburn contributed code to allow nss_winbind.so to work properly on supported NetBSD systems. The FreeBSD NSS winbind code should probably be replaced with a suitably tweaked version of the NetBSD code since the latter is much more complete in the functions that are provided, but I'll leave that to freebsd-pkg-people. * Samba dumps all of its files into "lock directory", but some of them need to persist across reboots. We make a distinction between these files and the temporary files that are re-created by the Samba daemons when they are restarted -- the former are now stored in a "state directory" and the latter are stored in the "lock directory". This is modeled after the Debian patch to Samba located in: packaging/Debian/debian-unstable/patches/fhs.patch The "lock directory" default has been moved to ${VARBASE}/run/samba to emphasize the temporary status of the files stored in that directory. * Samba persists in using PAM_AUTHTOK_RECOVER_ERR, when there is almost universal agreement that PAM_AUTHTOK_RECOVERY_ERR is the right constant to use. Even the Linux-PAM distribution ensures that PAM_AUTHTOK_RECOVERY_ERR is correctly defined. To work around this, we define PAM_AUTHTOK_RECOVER_ERR appropriately in all the places where it is used. * The configure script checks for OpenSSL's libcrypto.so by looking for the symbol "des_set_key". However, libcrypto.so might not contain that symbol because the DES functions might come from a separate library, e.g. libdes.so. In this case, the configure script will think that libcrypto.so is not available, when it actually may be. Instead, look for EVP_des_cbc, which is always provided by libcrypto.so. * Add some missing $(PASSDB_LIBS) references to the Makefile to fix compilation problems if the experimental passdb backends are statically compiled into the Samba suite programs. * Fix compilation problems in sam/idmap_rid.c and sam/idmap_ad.c if the "rid" and "ad" idmap backends are statically compiled into winbindd. Changes between version 3.0.14a and 3.0.20b include: o Reporting files as read-only instead of returning the correct error code of "access denied" o File system quota support defects o Crash bugs caused by incompatibilities on 64-bit systems. o User Manager interoperability problems. o Support for several new Win32 rpc pipes. o New 'net rpc service' tool for managing Win32 services. o Capability to set the owner on new files and directory based on the parent's ownership. o Experimental, asynchronous IO file serving support. o Support for Microsoft Print Migrator. o New Winbind IDmap plugin (ad) for retrieving uid and gid from AD servers which maintain the SFU user and group attributes. o Rewritten support for POSIX pathnames when utilizing the Linux CIFS fs client. o New asynchronous winbindd. o New Windows NT registry file I/O library. o New user right (SeTakeOwnershipPrivilege) added. o New "net share migrate" options. @ text @d3 1 a3 1 --- smbd/server.c.orig 2005-10-12 13:03:25.000000000 -0400 d5 1 a5 1 @@@@ -867,6 +867,9 @@@@ void build_options(BOOL screen); @