Quoting Ian McWilliam <kaosa...@gmail.com>:
On 13 April 2016 at 04:41, Jeremie Courreges-Anglas <j...@wxcvbn.org>
wrote:
I've just committed an update to 4.3.6. Here's another diff for the
security releases published today.
Release notes excerpt and diff below.
Apart from the extra libs in the checks that I haven't investigated yet
and
one error installing gdbm that I need to look at everything else appears
ok.
make lib-depends-check
samba-4.3.8(net/samba,-main):
Extra: gcrypt.19 iniparser.0 m.9 ncurses.14 sasl2.3 util.12
ldb-1.1.21(net/samba,-ldb):
Extra: m.9 replace.0 tdb.4 util-setid.0 util.12
tevent-0.9.25(net/samba,-tevent):
Extra: m.9 replace.0 util-setid.0 util.12
samba-util-4.3.8(net/samba,-util):
Extra: m.9 pytalloc-util.0 python2.7.0 talloc.1 util.12
Scanning: ok
-------
make port-lib-depends-check
samba-4.3.8(net/samba,-main):
Extra: gcrypt.19 iniparser.0 m.9 ncurses.14 sasl2.3 util.12
ldb-1.1.21(net/samba,-ldb):
Extra: m.9 replace.0 tdb.4 util-setid.0 util.12
tevent-0.9.25(net/samba,-tevent):
Extra: m.9 replace.0 util-setid.0 util.12
samba-util-4.3.8(net/samba,-util):
Extra: m.9 pytalloc-util.0 python2.7.0 talloc.1 util.12
---------
ianm-openbsd:all {107} pkg_add samba-4.3.8.tgz
UNSIGNED PACKAGE file:./openpam-20141014.tgz: install anyway ? [y/N/a] a
samba-4.3.8:openpam-20141014: ok
samba-4.3.8:popt-1.16p1: ok
samba-4.3.8:python-2.7.11p0: ok
samba-4.3.8:libtalloc-2.1.3: ok
samba-4.3.8:samba-util-4.3.8: ok
samba-4.3.8:tevent-0.9.25: ok
samba-4.3.8:tdb-1.3.7: ok
samba-4.3.8:ldb-1.1.21: ok
samba-4.3.8:e2fsprogs-1.42.12p3: ok
samba-4.3.8:libexecinfo-0.3v0: ok
samba-4.3.8:py-dnspython-1.12.0p0: ok
samba-4.3.8:cyrus-sasl-2.1.26p16: ok
samba-4.3.8:openldap-client-2.4.44: ok
samba-4.3.8:libgpg-error-1.21p0: ok
samba-4.3.8:libgcrypt-1.6.5p0: ok
samba-4.3.8:dbus-1.10.8v0: ok
samba-4.3.8:dbus-daemon-launch-helper-1.10.8: ok
samba-4.3.8:pcre-8.38p0: ok
samba-4.3.8:libelf-0.8.13p3: ok
samba-4.3.8:glib2-2.46.2p0: ok
install-info: menu item `gdbm_load' already exists, for file `(none)'
system(/usr/bin/install-info, --info-dir=/usr/local/info, --,
/usr/local/info/gdbm.info) failed: exit(1)
samba-4.3.8:gdbm-1.11p1: ok
samba-4.3.8:libdaemon-0.14p1: ok
samba-4.3.8:avahi-0.6.31p24: ok
samba-4.3.8:libtasn1-4.7: ok
samba-4.3.8:p11-kit-0.23.2p0: ok
samba-4.3.8:gmp-5.0.2p3: ok
samba-4.3.8:libnettle-3.2: ok
samba-4.3.8:libidn-1.32p0: ok
samba-4.3.8:gnutls-3.4.10p0: ok
samba-4.3.8:cups-libs-2.1.3p0: ok
samba-4.3.8:iniparser-3.1p1: ok
samba-4.3.8:gamin-0.1.10p21: ok
samba-4.3.8: ok
The following new rcscripts were installed: /etc/rc.d/avahi_daemon
/etc/rc.d/avahi_dnsconfd /etc/rc.d/messagebus /etc/rc.d/nmbd
/etc/rc.d/samba /etc/rc.d/samba_ad_dc /etc/rc.d/saslauthd /etc/rc.d/smbd
/etc/rc.d/winbindd
See rcctl(8) for details.
Look in /usr/local/share/doc/pkg-readmes for extra documentation.
--- +python-2.7.11p0 -------------------
If you want to use this package as your default system python, as root
create symbolic links like so (overwriting any previous default):
ln -sf /usr/local/bin/python2.7 /usr/local/bin/python
ln -sf /usr/local/bin/python2.7-2to3 /usr/local/bin/2to3
ln -sf /usr/local/bin/python2.7-config /usr/local/bin/python-config
ln -sf /usr/local/bin/pydoc2.7 /usr/local/bin/pydoc
UNSIGNED PACKAGES: libelf-0.8.13p3, iniparser-3.1p1, dbus-1.10.8v0,
tdb-1.3.7, libnettle-3.2, tevent-0.9.25, gamin-0.1.10p21,
libtalloc-2.1.3,
avahi-0.6.31p24, gmp-5.0.2p3, py-dnspython-1.12.0p0, libgpg-error-1.21p0,
p11-kit-0.23.2p0, libdaemon-0.14p1, popt-1.16p1, cyrus-sasl-2.1.26p16,
pcre-8.38p0, libtasn1-4.7, samba-util-4.3.8, glib2-2.46.2p0, ldb-1.1.21,
cups-libs-2.1.3p0, libgcrypt-1.6.5p0, dbus-daemon-launch-helper-1.10.8,
gnutls-3.4.10p0, python-2.7.11p0, libidn-1.32p0, samba-4.3.8,
openpam-20141014, openldap-client-2.4.44, e2fsprogs-1.42.12p3,
libexecinfo-0.3v0, gdbm-1.11p1
-----------------------------Ian McWilliam
This is great! Many thanks to JCA and yourself for the 4.3.8 port.
I was able to build it on 4.9 without any issues and provision an AD DC in
a test network. I plan to test Windows 10/8/7/XP clients running Office
2016 applications over the weekend.
vm3.vmlab.foretell.ca# sysctl kern.version
kern.version=OpenBSD 5.9 (GENERIC) #2: Thu Mar 31 12:27:22 CDT 2016
r...@n59.lab.foretell.ca:/usr/src/sys/arch/amd64/compile/GENERIC
vm3.vmlab.foretell.ca# samba-tool domain provision --use-rfc2307
--interactive
Realm [VMLAB.FORETELL.CA]:
Domain [VMLAB]:
Server Role (dc, member, standalone) [dc]:
DNS backend (SAMBA_INTERNAL, BIND9_FLATFILE, BIND9_DLZ, NONE)
[SAMBA_INTERNAL]:
DNS forwarder IP address (write 'none' to disable forwarding)
[10.72.3.10]:
Administrator password:
Retype password:
You are not root or your system do not support xattr, using tdb backend for
attributes.
not using extended attributes to store ACLs and other metadata. If you
intend to use this provision in production, rerun the script as root on a
system supporting xattrs.
Looking up IPv4 addresses
Looking up IPv6 addresses
No IPv6 address will be assigned
Setting up secrets.ldb
Setting up the registry
Setting up the privileges database
Setting up idmap db
Setting up SAM db
Setting up sam.ldb partitions and settings
Setting up sam.ldb rootDSE
Pre-loading the Samba 4 and AD schema
Adding DomainDN: DC=vmlab,DC=foretell,DC=ca
Adding configuration container
Setting up sam.ldb schema
Setting up sam.ldb configuration data
Setting up display specifiers
Modifying display specifiers
Adding users container
Modifying users container
Adding computers container
Modifying computers container
Setting up sam.ldb data
Setting up well known security principals
Setting up sam.ldb users and groups
Setting up self join
Setting acl on sysvol skipped
Adding DNS accounts
Creating CN=MicrosoftDNS,CN=System,DC=vmlab,DC=foretell,DC=ca
Creating DomainDnsZones and ForestDnsZones partitions
Populating DomainDnsZones and ForestDnsZones partitions
Setting up sam.ldb rootDSE marking as synchronized
Fixing provision GUIDs
A Kerberos configuration suitable for Samba 4 has been generated at
/var/samba/private/krb5.conf
Setting up fake yp server settings
Once the above files are installed, your Samba4 server will be ready to use
Server Role: active directory domain controller
Hostname: vm3
NetBIOS Domain: VMLAB
DNS Domain: vmlab.foretell.ca
DOMAIN SID: S-1-5-21-1013011009-1478524130-3114102471
All services are working great at the moment. Will run it for a few days
and see ...
vm3.vmlab.foretell.ca# netstat -anf inet
Active Internet connections (including servers)
Proto Recv-Q Send-Q Local Address Foreign
Address (state)
tcp 0 44 10.72.3.3.22
10.72.3.201.17868 ESTABLISHED
tcp 0 0
*.389
*.* LISTEN
tcp 0 0
*.143
*.* LISTEN
tcp 0 0
*.2000
*.* LISTEN
tcp 0 0
*.995
*.* LISTEN
tcp 0 0
*.4190
*.* LISTEN
tcp 0 0
*.53
*.* LISTEN
tcp 0 0
*.464
*.* LISTEN
tcp 0 0
*.88
*.* LISTEN
tcp 0 0
*.139
*.* LISTEN
tcp 0 0
*.445
*.* LISTEN
tcp 0 0
*.135
*.* LISTEN
tcp 0 0
*.993
*.* LISTEN
tcp 0 0
*.1024
*.* LISTEN
tcp 0 0
*.110
*.* LISTEN
tcp 0 0
*.3269
*.* LISTEN
tcp 0 0
*.80
*.* LISTEN
tcp 0 0 127.0.0.1.3306
*.* LISTEN
tcp 0 0
*.3268
*.* LISTEN
tcp 0 0
*.636
*.* LISTEN
tcp 0 0 127.0.0.1.25
*.* LISTEN
tcp 0 0
*.22
*.* LISTEN
Active Internet connections (including servers)
Proto Recv-Q Send-Q Local Address Foreign
Address (state)
udp 0 0 10.72.3.3.5240
129.250.35.251.123
udp 0 0 10.72.3.3.5768
192.150.149.245.123
udp 0 0 10.72.3.3.26694
198.55.111.5.123
udp 0 0 10.72.3.3.8607
97.107.128.58.123
udp 0 0 10.72.3.255.137
*.*
udp 0 0
*.138
*.*
udp 0 0
*.137
*.*
udp 0 0 10.72.3.3.464
*.*
udp 0 0 10.72.3.3.88
*.*
udp 0 0
*.464
*.*
udp 0 0
*.88
*.*
udp 0 0 10.72.3.3.389
*.*
udp 0 0
*.389
*.*
udp 0 0 *.46587
*.*
udp 0 0
*.5353
*.*
udp 0 0
*.514
*.*
udp 0 0
*.53
*.*
udp 0 0 10.72.3.3.138
*.*
udp 0 0 10.72.3.255.138
*.*
udp 0 0 10.72.3.3.137
*.*
--
Vijay Sankar, M.Eng., P.Eng.
ForeTell Technologies Limited
vsan...@foretell.ca
