head 1.6; access; symbols pkgsrc-2013Q2:1.6.0.2 pkgsrc-2013Q2-base:1.6 pkgsrc-2013Q1:1.5.0.14 pkgsrc-2013Q1-base:1.5 pkgsrc-2012Q4:1.5.0.12 pkgsrc-2012Q4-base:1.5 pkgsrc-2012Q3:1.5.0.10 pkgsrc-2012Q3-base:1.5 pkgsrc-2012Q2:1.5.0.8 pkgsrc-2012Q2-base:1.5 pkgsrc-2012Q1:1.5.0.6 pkgsrc-2012Q1-base:1.5 pkgsrc-2011Q4:1.5.0.4 pkgsrc-2011Q4-base:1.5 pkgsrc-2011Q3:1.5.0.2 pkgsrc-2011Q3-base:1.5 pkgsrc-2011Q2:1.4.0.8 pkgsrc-2011Q2-base:1.4 pkgsrc-2011Q1:1.4.0.6 pkgsrc-2011Q1-base:1.4 pkgsrc-2010Q4:1.4.0.4 pkgsrc-2010Q4-base:1.4 pkgsrc-2010Q3:1.4.0.2 pkgsrc-2010Q3-base:1.4 pkgsrc-2010Q2:1.3.0.4 pkgsrc-2010Q2-base:1.3 pkgsrc-2010Q1:1.3.0.2 pkgsrc-2010Q1-base:1.3 pkgsrc-2009Q4:1.2.0.6 pkgsrc-2009Q4-base:1.2 pkgsrc-2009Q3:1.2.0.4 pkgsrc-2009Q3-base:1.2 pkgsrc-2009Q2:1.2.0.2 pkgsrc-2009Q2-base:1.2 pkgsrc-2009Q1:1.1.0.14 pkgsrc-2009Q1-base:1.1 pkgsrc-2008Q4:1.1.0.12 pkgsrc-2008Q4-base:1.1 pkgsrc-2008Q3:1.1.0.10 pkgsrc-2008Q3-base:1.1 cube-native-xorg:1.1.0.8 cube-native-xorg-base:1.1 pkgsrc-2008Q2:1.1.0.6 pkgsrc-2008Q2-base:1.1 cwrapper:1.1.0.4 pkgsrc-2008Q1:1.1.0.2 pkgsrc-2008Q1-base:1.1; locks; strict; comment @# @; 1.6 date 2013.04.30.15.43.31; author hauke; state dead; branches; next 1.5; 1.5 date 2011.09.22.01.20.21; author christos; state Exp; branches; next 1.4; 1.4 date 2010.07.19.21.21.25; author markd; state Exp; branches; next 1.3; 1.3 date 2010.01.17.11.48.03; author markd; state Exp; branches; next 1.2; 1.2 date 2009.06.09.13.57.56; author taca; state Exp; branches; next 1.1; 1.1 date 2008.03.22.04.40.45; author taca; state Exp; branches; next ; desc @@ 1.6 log @Untangle the m0nster patch to configure. To the quota experts: Please check all the bells and whistles are still in place, and functional. While here, update to Netatalk 2.2.4. Note that we will ship Netatalk 2 as long as NetBSD ships ddp ("netatalk") support, so v3 is not a replacement. Changes to package setup: Set PLIST_VARS.{ea,acl} so that the package builds on Ubuntu Linux 10 LTS. I guess there are version and file-system dependencies? Add dnssd option for mDNSResponder ("zeroconf") support. Remaining (upstream) issues: dbd(8) breaks with a less-than-helpful error message, see end of PR pkg/47578 afpd(8) mis-maps user IDs -- a security issue Upstream changes: Changes in 2.2.4 ================ * FIX: Missing UAM links * FIX: Lockup in AFP logout on Fedora 17 * FIX: Reset signal handlers and alarm timer after successfull PAM authentication. Fixes a problem with AFP disconnects caused by pam_smbpass.so messing with our handlers and timer. * FIX: afpd: Fix a possible problem with sendfile on Solaris derived platforms Changes in 2.2.3 ================ * NEW: afpd: support for mdnsresponder * NEW: afpd: new LDAP config option ldap_uuid_string * UPD: based on Unicode 6.1.0 * UPD: experimental systemd service files: always run both afpd and cnid_metad * UPD: afpd: Ensure our umask is not altered by eg pam_umask * UPD: afpd: Use GSS_C_NO_NAME as server principal when Kerberos options -fqdn and -krb5service are not set, from Jamie Gilbertson * UPD: afpd: Changed behaviour for TimeMachine volumes in case there's a problem talking to the CNID daemons. Previously the volume was flagged read-only and an AFP message was sent to the client. As this might result in TimeMachine assuming the backup sparse bundle is damaged, we now just switch the CNID database to an in-memory tdb without the additional stuff. * FIX: afpd: sendfile() on FreeBSD was broken, courtesy of Denis Ahrens * FIX: afpd: Dont use searchdb when doing partial name search * FIX: afpd: Fix a possible bug handling disconnected sessions, NetAFP Bug ID #16 * FIX: afpd: Close IPC fds in afpd session child inherited from the afpd master process * FIX: dbd: Don't remove BerkeleyDB if it's still in use by eg cnid_dbd, fixes bug introduced in 2.2.2 * FIX: debian initscript: start avahi-daemon (if available) before atalkd * FIX: Zeroconf could not advertise non-ASCII time machine volume name Changes in 2.2.2 ================ * NEW: afpd: New option "adminauthuser". Specifying eg "-adminauthuser root" whenever a normal user login fails, afpd tries to authenticate as the specified adminauthuser. If this succeeds, a normal session is created for the original connecting user. Said differently: if you know the password of adminauthuser, you can authenticate as any other user. * NEW: configure option "--enable-suse-systemd" for openSUSE12.1 and later. "--enable-redhat-systemd" and "--enable-suse-systemd" are same as "--enable-systemd". "--enable-suse" is renamed "--enable-suse-sysv". * NEW: experimental systemd service files in distrib/systemd/ * UPD: afpd: Enhanced POSIX ACL mapping semantics, from Laura Mueller * UPD: afpd: Reset options every time a :DEFAULT: line is found in a AppleVolumes file * UPD: afpd: Convert passwords from legacy encoding (wire format) to host encoding, NetAFP Bug ID #14 * UPD: afpd: Don't set ATTRBIT_SHARED flag for directories * UPD: afpd: Use sendfile() on Solaris and FreeBSD for sending data * UPD: afpd: Faster volume used size calculation for "volsizelimit" option, cf man AppleVolume.default for details * FIX: afpd: ACL access checking * FIX: afpd: Fix an error when duplicating files that lacked an AppleDouble file which lead to a possible Finder crash * FIX: afpd: Read-only filesystems lead to afpd processes running as root * FIX: afpd: Fix for filesystem without NFSv4 ACL support on Solaris * FIX: afpd: Fix catsearch bug, NetAFP Bug ID #12 * FIX: afpd: Fix dircache bug, NetAFP Bug ID #13 * FIX: dbd: Better checking for duplicated or bogus CNIDs from AppleDouble files * FIX: dbd: Remove BerkeleyDB database environment after running `dbd`. This is crucial for the automatic BerkeleyDB database upgrade feature which is built into cnid_dbd and dbd. * FIX: Fix compilation error when AppleTalk support is disabled * FIX: Portability fixes * FIX: search of surrogate pair @ text @$NetBSD: patch-bj,v 1.5 2011/09/22 01:20:21 christos Exp $ --- distrib/initscripts/Makefile.in.orig 2011-09-06 07:41:21.000000000 -0400 +++ distrib/initscripts/Makefile.in 2011-09-21 11:28:50.000000000 -0400 @@@@ -498,7 +498,7 @@@@ info-am: -install-data-am: install-serviceDATA install-sysvSCRIPTS +install-data-am: install-serviceDATA @@$(NORMAL_INSTALL) $(MAKE) $(AM_MAKEFLAGS) install-data-hook @@@@ -621,23 +621,23 @@@@ @@USE_TRU64_TRUE@@uninstall-startup: uninstall-am @@USE_NETBSD_TRUE@@afpd: rc.afpd.netbsd -@@USE_NETBSD_TRUE@@ cp -f $< $@@ +@@USE_NETBSD_TRUE@@ cp -f $? $@@ @@USE_NETBSD_TRUE@@ chmod a+x $@@ @@USE_NETBSD_TRUE@@atalkd: rc.atalkd.netbsd -@@USE_NETBSD_TRUE@@ cp -f $< $@@ +@@USE_NETBSD_TRUE@@ cp -f $? $@@ @@USE_NETBSD_TRUE@@ chmod a+x $@@ @@USE_NETBSD_TRUE@@cnid_metad: rc.cnid_metad.netbsd -@@USE_NETBSD_TRUE@@ cp -f $< $@@ +@@USE_NETBSD_TRUE@@ cp -f $? $@@ @@USE_NETBSD_TRUE@@ chmod a+x $@@ @@USE_NETBSD_TRUE@@papd: rc.papd.netbsd -@@USE_NETBSD_TRUE@@ cp -f $< $@@ +@@USE_NETBSD_TRUE@@ cp -f $? $@@ @@USE_NETBSD_TRUE@@ chmod a+x $@@ @@USE_NETBSD_TRUE@@timelord: rc.timelord.netbsd -@@USE_NETBSD_TRUE@@ cp -f $< $@@ +@@USE_NETBSD_TRUE@@ cp -f $? $@@ @@USE_NETBSD_TRUE@@ chmod a+x $@@ @@USE_NETBSD_TRUE@@install-data-hook: @ 1.5 log @update to 2.2.1, see: http://netatalk.sourceforge.net/2.2/ReleaseNotes2.2.1.html @ text @d1 1 a1 1 $NetBSD: patch-bj,v 1.4 2010/07/19 21:21:25 markd Exp $ @ 1.4 log @Update to netatalk 2.1.3 Changes in 2.1.3 ================ * FIX: afpd: fix a serious error in networking IO code * FIX: afpd: Solaris 10 compatibilty fix: don't use SO_SNDTIMEO, use non-blocking IO and select instead for writing/sending data. * UPD: Support for BerkeleyDB 5.0. Changes in 2.1.2 ================ * FIX: afpd: fix for possible crash in case more then one server is configured in afpd.conf. * FIX: afpd: ExtendedAttributes in FreeBSD * FIX: afpd: sharing home folders corrupted the per volume umask. * UPD: afpd: umask for home folders is no longer taken from startup umask. * UPD: afpd: dont and permissions with parent folder when creating new directories on "upriv" volumes. * UPD: afpd: use 'afpserver@@fqdn' instead of 'afpserver/fqdn@@realm'. Prevents a crash in older GNU GSSAPI libs on eg. CentOS 5.x. Changes in 2.1.1 ================ * UPD: fallback to a temporary in memory tdb CNID database if the volume database can't be opened now works with the default backend "dbd" too. * FIX: afpd: afp_ldap.conf was missing from tarball. This only effected [Open]Solaris. * FIX: afpd: Check if options->server is set in set_signature, preventing SIGSEGV. * FIX: afpd: server signature wasn't initialized in some cases * FIX: DESTDIR support: DESTDIR was expanded twice * FIX: Fix for compilation error if header files of an older Netatalk version are installed. Changes in 2.1-release ====================== * NEW: afpd: new volume option "volsizelimit" for limitting reported volume size. Useful for limitting TM backup size. * UPD: dbd: -c option for rebuilding volumes which prevents the creation of .AppleDouble stuff, only removes orphaned files. Changes in 2.1-beta2 ==================== * NEW: afpd: static generated AFP signature stored in afp_signature.conf, cf man 5 afp_signature.conf * NEW: afpd: clustering support: new per volume option "cnidserver". * UPD: afpd: set volume defaults options "upriv" and "usedots" in the volume config file AppleVolumes.default. This will only affect new installations, but not upgrades. * FIX: afpd: prevent security attack guessing valid server accounts. afpd now returns error -5023 for unknown users, as does AppleFileServer. Changes in 2.1-beta1 ==================== * NEW: afpd: AFP 3.2 support * NEW: afpd: Extended Attributes support using native attributes or using files inside .AppleDouble directories. * NEW: afpd: ACL support with ZFS * NEW: cnid_metad: options -l and -f to configure logging * NEW: IPv6 support * NEW: AppleDouble compatible UNIX files utility suite `ad ...`. With 2.1 only `ad ls`. * NEW: CNID database maintanance utility dbd * NEW: support BerkeleyDB upgrade. Starting with the next release after 2.1 in case of BerkeleyDB library updates, Netatalk will be able to upgrade the CNID databases. * NEW: afpd: store and read CNIDs to/from AppleDouble files by default. This is used as a cache and as a backup in case the database is deleted or corrupted. It can be disabled with a new volume option "nocnidcache". * NEW: afpd: sending SIGINT to a child afpd process enables debug logging to /tmp/afpd.PID.XXXXXX. * NEW: configure args to download and install a "private" Webmin instance including only basic Webmin modules plus our netatalk.wbm. * NEW: fallback to a temporary in memory tdb CNID database if the volume database can't be opened. * NEW: support for Unicode characters in the range above U+010000 using internal surrogate pairs * NEW: apple_dump: utility to dump AppleSingle and AppleDouble files * NEW: afpldaptest: utility to check afp_ldap.conf. * UPD: atalkd and papd are now disabled by default. AppleTalk is legacy. * UPD: slp advertisement is now disabled by default. server option -slp SRVLOC is legacy. * UPD: cdb/dbd CNID backend requires BerkeleyDB >= 4.6 * UPD: afpd: default CNID backend is "dbd" * UPD: afpd: try to install PAM config that pulls in system|common auth * UPD: afpd: symlink handling: never followed server side, client resolves them, so it's safe to use them now. * UPD: afpd: Comment out all extension->type/creator mappings in AppleVolumes.system. They're unmaintained, possibly wrong and do not fit for OS X. * FIX: rewritten logger * FIX: afpd: UNIX permissions handling * FIX: cnid_dbd: always use BerkeleyDB transactions * FIX: initscripts installation now correctly uses autoconf paths, ie they're installed to --sysconfdir. * FIX: UTF-8 volume name length * FIX: atalkd: workaround for broken Linux 2.6 AT kernel module: Linux 2.6 sends broadcast queries to the first available socket which is in our case the last configured one. atalkd now tries to find the right one. Note: now a misconfigured or plugged router can broadcast a wrong route ! * REM: afpd: removed CNID backends "db3", "hash" and "mtab" * REM: cnid_maint: use dbd * REM: cleanappledouble.pl: use dbd * REM: nu: use `macusers` instead @ text @d1 1 a1 1 $NetBSD$ d3 3 a5 3 --- distrib/initscripts/Makefile.in.orig 2010-02-14 17:47:12.000000000 +0000 +++ distrib/initscripts/Makefile.in @@@@ -455,7 +455,7 @@@@ info: info-am d9 2 a10 2 -install-data-am: install-sysvSCRIPTS +install-data-am: d14 29 @ 1.3 log @update netatalk to 2.0.5 NEW: afpd: Time Machine support with new volume option "tm". FIX: papd: Remove variable expansion for BSD printers. Fixes CVE-2008-5718. FIX: afpd: .AppleDxxx folders were user accessible if option 'usedots' was set FIX: afpd: vetoed files/dirs where still accessible FIX: afpd: cnid_resolve: don't return '..' as a valid name. FIX: uniconv: -d option wasn't working @ text @d1 1 a1 1 $NetBSD: patch-bj,v 1.2 2009/06/09 13:57:56 taca Exp $ d3 1 a3 1 --- distrib/initscripts/Makefile.in.orig 2009-11-10 13:11:12.000000000 +0000 d5 1 a5 19 @@@@ -251,7 +251,7 @@@@ TEMPLATES = \ rc.atalk.gentoo.tmpl \ rc.atalk.debian.tmpl -CLEANFILES = $(GENERATED_FILES) atalk afpd atalkd papd timelord +CLEANFILES = $(GENERATED_FILES) atalk afpd atalkd papd timelord cnid_metad EXTRA_DIST = $(TEMPLATES) rc.atalk.cobalt # @@@@ -296,7 +296,7 @@@@ EXTRA_DIST = $(TEMPLATES) rc.atalk.cobal @@USE_COBALT_TRUE@@sysv_SCRIPTS = atalk @@USE_DEBIAN_TRUE@@sysv_SCRIPTS = atalk @@USE_GENTOO_TRUE@@sysv_SCRIPTS = atalk -@@USE_NETBSD_TRUE@@sysv_SCRIPTS = afpd atalkd papd timelord +@@USE_NETBSD_TRUE@@sysv_SCRIPTS = afpd atalkd papd timelord cnid_metad @@USE_REDHAT_TRUE@@sysv_SCRIPTS = atalk @@USE_SOLARIS_TRUE@@sysv_SCRIPTS = atalk @@USE_SUSE_TRUE@@sysv_SCRIPTS = atalk @@@@ -443,7 +443,7 @@@@ info: info-am d10 1 a10 1 +install-data-am: a13 19 @@@@ -559,6 +559,7 @@@@ uninstall: uninstall-startup @@USE_NETBSD_TRUE@@afpd: rc.afpd.netbsd @@USE_NETBSD_TRUE@@ cp -f $< $@@ +@@USE_NETBSD_TRUE@@ chmod a+x $@@ @@USE_NETBSD_TRUE@@atalkd: rc.atalkd.netbsd @@USE_NETBSD_TRUE@@ cp -f $< $@@ @@@@ -572,6 +573,10 @@@@ uninstall: uninstall-startup @@USE_NETBSD_TRUE@@ cp -f $< $@@ @@USE_NETBSD_TRUE@@ chmod a+x $@@ +@@USE_NETBSD_TRUE@@cnid_metad: rc.cnid_metad.netbsd +@@USE_NETBSD_TRUE@@ cp -f $< $@@ +@@USE_NETBSD_TRUE@@ chmod a+x $@@ + @@USE_NETBSD_TRUE@@install-data-hook: @@USE_NETBSD_TRUE@@uninstall-hook: @ 1.2 log @Update netatalk package to 2.0.4. pkgsrc changs: * Add LICENSE. * Fix some pkglint warnings. * cjk patch was incorporated and cjk PKG_OPTION was removed. Changes in 2.0.4 ================ * REM: remove timeout * NEW: afpd: DHX2 uams using GNU libgcrypt. * NEW: afpd: volume options 'illegalseq', 'perm' and 'invisibledots' 'ilegalseq' encode illegal sequence in filename asis, ex "\217-", which is not a valid SHIFT-JIS char, is encoded as U\217 -. 'perm' value OR with the client requested permissions. (help with OSX 10.5 strange permissions). Make dot files visible by default with 'usedots', use 'invisibledots' for keeping the old behavior, ie for OS9 (OSX hide dot files on its own). * NEW: afpd: volume options allow_hosts/denied hosts * NEW: afpd: volume options dperm/fperm default directory and file permissions or with server requests. * NEW: afpd: afpd.conf, allow line continuation with \ * NEW: afpd: AppleVolumes.default allow line continuation with \ * NEW: afpd: Mac greek encoding. * NEW: afpd: CJK encoding. * UPD: afpd: Default UAMs: DHX + DHX2 * FIX: afpd: return the right error in createfile and copyfile if the disk is full. * FIX: afpd: resolveid return the same error code than OSX if it's a directory * FIX: afpd: server name check, test for the whole loopback subnet not only 127.0.0.1. * UPD: afpd: limit comments size to 128 bytes, (workaround for Adobe CS2 bug). * UPD: afpd: no more daemon icon. * UPD: usedots, return an invalide name only for .Applexxx files used by netatalk not all files starting with .apple. * UPD: cnid: increase the number of cnid_dbd slots to 512. * FIX: cnid: dbd detach the daemon from the control terminal. * UPD: cnid: never ending Berkeley API changes... * UPD: cnid: dbd add a timeout when reading data from afpd client. * UPD: cnid: Don't wait five second after the first error when speaking to the dbd backend. * FIX: papd: vars use % not $ * FIX: papd: quote chars in popen variables expansion. security fix. * FIX: papd: papd -d didn't write to stderr. * FIX: papd: ps comments don't always use () * FIX: many compilation errors (solaris, AFS, Tru64, xfs quota...). @ text @d1 1 a1 1 $NetBSD: patch-bj,v 1.1 2008/03/22 04:40:45 taca Exp $ d3 1 a3 1 --- distrib/initscripts/Makefile.in.orig 2009-04-23 17:03:29.000000000 +0900 d5 1 a5 1 @@@@ -248,7 +248,7 @@@@ TEMPLATES = \ d14 1 a14 1 @@@@ -293,7 +293,7 @@@@ EXTRA_DIST = $(TEMPLATES) rc.atalk.cobal d23 10 a32 1 @@@@ -556,6 +556,7 @@@@ uninstall: uninstall-startup d40 1 a40 1 @@@@ -569,6 +570,10 @@@@ uninstall: uninstall-startup @ 1.1 log @Install an rc script for cnid_metad as reported by PR pkg/38268 from HAT. And a little pkglint fixes. Bump PKGREVISION. @ text @d1 1 a1 1 $NetBSD$ d3 1 a3 1 --- distrib/initscripts/Makefile.in.orig 2008-03-18 00:13:18.000000000 +0900 d5 2 a6 1 @@@@ -243,7 +243,7 @@@@ TEMPLATES = \ a8 1 d13 1 a13 1 d15 3 a17 3 # checking for Solaris init scripts # @@USE_SOLARIS_TRUE@@sysvdir = /etc/init.d d20 2 d23 1 a23 3 @@USE_GENTOO_TRUE@@sysv_SCRIPTS = atalk @@USE_REDHAT_TRUE@@sysv_SCRIPTS = atalk @@@@ -536,6 +536,7 @@@@ uninstall: uninstall-startup d31 1 a31 1 @@@@ -549,6 +550,10 @@@@ uninstall: uninstall-startup @