Re: UPDATE: John the Ripper
On 30 May 2005, at 2:07 AM, Ian Darwin wrote: Alexandre Anriot wrote: John the Ripper 1.6.38 just goes out (http://marc.theaimsgroup.com/?l=openwall- announce&m=111587390912061&w=2ini). Here is an update of the port. builds fine on sparc, i386, and macppc build on macppc tested by xsa@ Builds and runs for me on mappc. However it does not *seem* to be using the altivec support, which makes a difference on slower hardware. Do many ppl run OpenBSD on G3 processors?? Not any more, but I'm sure others do or will. What if you tested for the existence of altivec instructions and acted acordingly at runtime rather than just enabling the support and making the port >= G4 processor. Ian McWilliam
Re: Openwebmail woes
JR Dalrymple wrote:
Fresh install of 3.7 release, one user added and nosuid pulled from
fstab entry for /var filesystem before reboot:
$ uname -a
OpenBSD stacy.jrssite.com 3.7 GENERIC#50 i386
$ su
Password:
stacy# pkg_add -v
ftp://ftp3.usa.openbsd.org/pub/OpenBSD/3.7/packages/i386/openwebmail-2.51.tgz
stacy# exit
$ cd /var/www/cgi-bin/openwebmail
$ ls -lF
total 2448
drwxr-xr-x 2 root _mail 512 Jun 21 16:44 auth/
drwxr-xr-x 6 root _mail 512 Jun 21 16:44 misc/
drwxr-xr-x 2 root _mail 512 Jun 21 16:44 modules/
-r-sr-xr-x 1 276 _mail 264663 Mar 17 15:04 openwebmail-abook.pl*
-r-sr-xr-x 1 276 _mail 27911 Mar 17 15:04 openwebmail-advsearch.pl*
-r-sr-xr-x 1 276 _mail 114770 Mar 17 15:04 openwebmail-cal.pl*
-r-sr-xr-x 1 276 _mail 26033 Mar 17 15:04 openwebmail-folder.pl*
-r-sr-xr-x 1 276 _mail 70560 Mar 17 15:04 openwebmail-main.pl*
-r-sr-xr-x 1 276 _mail 139617 Mar 17 15:04 openwebmail-prefs.pl*
-r-sr-xr-x 1 276 _mail 76944 Mar 17 15:04 openwebmail-read.pl*
-r-sr-xr-x 1 276 _mail 23155 Mar 17 15:04 openwebmail-saprefs.pl*
-r-sr-xr-x 1 276 _mail 114738 Mar 17 15:04 openwebmail-send.pl*
-r-sr-xr-x 1 276 _mail 25166 Mar 17 15:04 openwebmail-spell.pl*
-r-sr-xr-x 1 276 _mail 58102 Mar 17 15:04 openwebmail-tool.pl*
-r-sr-xr-x 1 276 _mail 49130 Mar 17 15:04 openwebmail-vdomain.pl*
-r-sr-xr-x 1 276 _mail 19192 Mar 17 15:04 openwebmail-viewatt.pl*
-r-sr-xr-x 1 276 _mail 118571 Mar 17 15:04 openwebmail-webdisk.pl*
-r-sr-xr-x 1 276 _mail 35830 Mar 17 15:04 openwebmail.pl*
-rwxr-xr-x 1 276 _mail4855 Jan 28 22:11 preload.pl*
drwxr-xr-x 2 root _mail 512 Jun 21 16:45 quota/
drwxr-xr-x 2 root _mail 512 Jun 21 16:45 shares/
-rwxr-xr-x 1 276 _mail4105 Jan 28 22:20 userstat.pl*
-rwxr-xr-x 1 276 _mail 19301 Jan 28 22:11 vacation.pl*
$ perl ./openwebmail.pl
Content-type: text/html
'./openwebmail.pl' must setuid to root$ su
Password:
stacy# apachectl start
stacy#
cat /var/www/logs/error_log
[Tue Jun 21 17:25:38 2005] [error] (2)No such file or directory: exec
of /cgi-bin/openwebmail/openwebmail.pl failed
[Tue Jun 21 17:25:38 2005] [error] [client 192.168.0.4] Premature end
of script headers: /cgi-bin/openwebmail/openwebmail.pl
stacy#
By default Apache is chroot'ed to /var/www
OpenWebmail needs access outside of /var/www specifically /var/mail and
user home directories.
Don't run apache chroot.
see the -u option in the httpd man page and /etc/rc.conf
In the above directory listing who is user 276? The Owner should be root.
So now I rebuild perl with suidperl support, or how to make this work?
I don't read on google, OpenBSD forums, or OWM forums where that
anyone else has any trouble with the package so I figured it "just
worked", but am really feeling like a total idiot here.
No you don't need to rebuild perl
There are user _mail problems with the 3.6 port inside of the perl
scripts but these were fixed for the 3.7 port.
I run OpenWebMail under 3.6 for a client, but haven't looked at
upgrading thier installation to 3.7 yet. If the package is installing
the files as user 276 then something is wrong with the port for 3.7.
the following is a directoy listing from the 3.6 installation.
fragile:ianm {103} ls -al /var/www/cgi-bin/openwebmail/
total 1812
drwxr-xr-x 7 root daemon1024 Mar 16 01:22 .
drwxr-xr-x 3 root daemon 512 Mar 16 01:22 ..
drwxr-xr-x 2 root daemon 512 Mar 16 01:22 auth
drwxr-xr-x 2 root daemon 512 Mar 16 01:22 modules
-r-sr-xr-x 1 root _mail38190 Feb 14 22:17 openwebmail-abook.pl
-r-sr-xr-x 1 root _mail24199 Feb 14 22:17 openwebmail-advsearch.pl
-r-sr-xr-x 1 root _mail 112394 Feb 14 22:17 openwebmail-cal.pl
-r-sr-xr-x 1 root _mail23017 Feb 14 22:17 openwebmail-folder.pl
-r-sr-xr-x 1 root _mail62906 Feb 14 22:17 openwebmail-main.pl
-r-sr-xr-x 1 root _mail 127566 Feb 14 22:17 openwebmail-prefs.pl
-r-sr-xr-x 1 root _mail61647 Feb 14 22:17 openwebmail-read.pl
-r-sr-xr-x 1 root _mail 105376 Feb 14 22:17 openwebmail-send.pl
-r-sr-xr-x 1 root _mail24732 Feb 14 22:17 openwebmail-spell.pl
-r-sr-xr-x 1 root _mail52307 Feb 14 22:17 openwebmail-tool.pl
-r-sr-xr-x 1 root _mail48638 Feb 14 22:17 openwebmail-vdomain.pl
-r-sr-xr-x 1 root _mail18628 Feb 14 22:17 openwebmail-viewatt.pl
-r-sr-xr-x 1 root _mail 109783 Feb 14 22:17 openwebmail-webdisk.pl
-r-sr-xr-x 1 root _mail31335 Feb 14 22:17 openwebmail.pl
-rwxr-xr-x 1 root wheel 4756 Apr 12 2004 preload.pl
drwxr-xr-x 2 root daemon 512 Mar 16 01:22 quota
drwxr-xr-x 2 root daemon 512 Mar 16 01:22 shares
-rwxr-xr-x 1 root wheel 4151 May 8 2004 userstat.pl
drwxr-xr-x 2 root daemon1024 Mar 16 01:22 uty
-rwxr-xr-x 1 root wheel18228 Apr 12 2004 vacation.pl
Thanks again for your help.
Ian McWilliam
Re: Will somebody make a OpenOffice-Port?
Lars Hansson wrote: On Wed, 22 Jun 2005 05:30:03 -0500 (CDT) "Edd Barrett" <[EMAIL PROTECTED]> wrote: This url is now dead, is there not a port of OO maintained anymore? It would appear not. Why is it that we must use linux emulation? Because OO is inherently a behemoth to port and apparently noone with the skills necessary has felt the urge to undertake it. Because if memory serves right, OO is dependant upon java for some of it's functionality. We've not had native java support until recently and only on selected architectures. The licensing model that Sun uses for java sux. There is a great deal of work porting OO especally C++ Another mammoth task in the vain of mozilla.. Ian McWilliam FreeBSD have managed to build a native port I believe. That's great for them, I guess. It's possibly that their work could be used when porting to openbsd but I wouldnt know and I have personally no wish to find out. --- Lars Hansson
Re: [-stable UPDATE] samba-4.19.7
Hi,
Thanks for this.
Builds, and tests fine. Ok from me.
Ian McWilliam
> On 11 Jun 2024, at 5:26 am, Bjorn Ketelaars wrote:
>
> Here is an update to the latest release of the Samba 4.19 release series
> for -stable. Release notes:
> https://www.samba.org/samba/history/samba-4.19.7.html
>
> Tests/comments/OKs welcome.
>
>
> Index: Makefile
> ===
> RCS file: /cvs/ports/net/samba/Makefile,v
> retrieving revision 1.343.2.1
> diff -u -p -r1.343.2.1 Makefile
> --- Makefile 16 Apr 2024 16:44:24 - 1.343.2.1
> +++ Makefile 10 Jun 2024 19:20:02 -
> @@ -1,4 +1,4 @@
> -VERSION =4.19.6
> +VERSION =4.19.7
> DISTNAME =samba-${VERSION}
> EPOCH = 0
>
> Index: distinfo
> ===
> RCS file: /cvs/ports/net/samba/distinfo,v
> retrieving revision 1.114.2.1
> diff -u -p -r1.114.2.1 distinfo
> --- distinfo 16 Apr 2024 16:44:24 - 1.114.2.1
> +++ distinfo 10 Jun 2024 19:20:02 -
> @@ -1,2 +1,2 @@
> -SHA256 (samba-4.19.6.tar.gz) = ZTtSCVVU28IjxjuWr1zfnpjD4EhUnF9WFD07M9zhzvE=
> -SIZE (samba-4.19.6.tar.gz) = 41847853
> +SHA256 (samba-4.19.7.tar.gz) = K7uACvLWvHucI+cIzVjQCNo7+m735iHZ7ItTOH7+5EU=
> +SIZE (samba-4.19.7.tar.gz) = 41851647
> Index: pkg/PLIST-main
> ===
> RCS file: /cvs/ports/net/samba/pkg/PLIST-main,v
> retrieving revision 1.73
> diff -u -p -r1.73 PLIST-main
> --- pkg/PLIST-main12 Oct 2023 07:28:23 - 1.73
> +++ pkg/PLIST-main10 Jun 2024 19:20:03 -
> @@ -1042,6 +1042,10 @@ lib/python${MODPY_VERSION}/site-packages
> lib/python${MODPY_VERSION}/site-packages/samba/tests/blackbox/${MODPY_PYCACHE}check_output.${MODPY_PYC_MAGIC_TAG}pyc
> lib/python${MODPY_VERSION}/site-packages/samba/tests/blackbox/${MODPY_PYCACHE}downgradedatabase.${MODPY_PYC_MAGIC_TAG}${MODPY_PYOEXTENSION}
> lib/python${MODPY_VERSION}/site-packages/samba/tests/blackbox/${MODPY_PYCACHE}downgradedatabase.${MODPY_PYC_MAGIC_TAG}pyc
> +lib/python${MODPY_VERSION}/site-packages/samba/tests/blackbox/${MODPY_PYCACHE}http_chunk.${MODPY_PYC_MAGIC_TAG}${MODPY_PYOEXTENSION}
> +lib/python${MODPY_VERSION}/site-packages/samba/tests/blackbox/${MODPY_PYCACHE}http_chunk.${MODPY_PYC_MAGIC_TAG}pyc
> +lib/python${MODPY_VERSION}/site-packages/samba/tests/blackbox/${MODPY_PYCACHE}http_content.${MODPY_PYC_MAGIC_TAG}${MODPY_PYOEXTENSION}
> +lib/python${MODPY_VERSION}/site-packages/samba/tests/blackbox/${MODPY_PYCACHE}http_content.${MODPY_PYC_MAGIC_TAG}pyc
> lib/python${MODPY_VERSION}/site-packages/samba/tests/blackbox/${MODPY_PYCACHE}mdsearch.${MODPY_PYC_MAGIC_TAG}${MODPY_PYOEXTENSION}
> lib/python${MODPY_VERSION}/site-packages/samba/tests/blackbox/${MODPY_PYCACHE}mdsearch.${MODPY_PYC_MAGIC_TAG}pyc
> lib/python${MODPY_VERSION}/site-packages/samba/tests/blackbox/${MODPY_PYCACHE}ndrdump.${MODPY_PYC_MAGIC_TAG}${MODPY_PYOEXTENSION}
> @@ -1073,6 +1077,8 @@ lib/python${MODPY_VERSION}/site-packages
> lib/python${MODPY_VERSION}/site-packages/samba/tests/blackbox/bug13653.py
> lib/python${MODPY_VERSION}/site-packages/samba/tests/blackbox/check_output.py
> lib/python${MODPY_VERSION}/site-packages/samba/tests/blackbox/downgradedatabase.py
> +lib/python${MODPY_VERSION}/site-packages/samba/tests/blackbox/http_chunk.py
> +lib/python${MODPY_VERSION}/site-packages/samba/tests/blackbox/http_content.py
> lib/python${MODPY_VERSION}/site-packages/samba/tests/blackbox/mdsearch.py
> lib/python${MODPY_VERSION}/site-packages/samba/tests/blackbox/ndrdump.py
> lib/python${MODPY_VERSION}/site-packages/samba/tests/blackbox/netads_dns.py
Re: UPDATE net/samba-4.20.2
Hi,
Thanks for the update.
Builds and tests fine. OK
Ian McWilliam
> On 20 Jun 2024, at 4:55 am, Björn Ketelaars
> wrote:
>
> Update to the latest stable release of the Samba 4.20 release series for
> current. Release notes:
> https://www.samba.org/samba/history/samba-4.20.2.html
>
> libdcerpc and libsamba-credentials require a minor bump because of the
> addition of a couple of symbols.
>
> Run tested on amd64.
>
> Tests and OKs welcome.
>
>
> diff --git Makefile Makefile
> index 61777a12f00..311e62490ab 100644
> --- Makefile
> +++ Makefile
> @@ -1,4 +1,4 @@
> -VERSION =4.20.1
> +VERSION =4.20.2
> DISTNAME =samba-${VERSION}
> EPOCH = 0
>
> @@ -10,7 +10,7 @@ PKGNAME-docs = samba-docs-${VERSION}
>
> PKG_ARCH-docs = *
>
> -SHARED_LIBS =dcerpc 1.1 \
> +SHARED_LIBS =dcerpc 1.2 \
> dcerpc-binding 5.0 \
> dcerpc-samr 1.0 \
> dcerpc-server-core 3.1 \
> @@ -20,7 +20,7 @@ SHARED_LIBS = dcerpc 1.1 \
> ndr-nbt 2.1 \
> ndr-standard6.0 \
> netapi 3.3 \
> - samba-credentials 1.5 \
> + samba-credentials 1.6 \
> samba-errors2.1 \
> samba-hostconfig14.0 \
> samba-passdb3.0 \
> diff --git distinfo distinfo
> index f75d0ea042a..d47334ad9a5 100644
> --- distinfo
> +++ distinfo
> @@ -1,2 +1,2 @@
> -SHA256 (samba-4.20.1.tar.gz) = +Tw69SlTQNCBBsfA3PuF5PhQV9/RRYeqiBe+sxr/iPc=
> -SIZE (samba-4.20.1.tar.gz) = 42441898
> +SHA256 (samba-4.20.2.tar.gz) = +Wn/7VjM8+hcu8wOM6FybQJcK0D0KmU7ESW4K5LS4OU=
> +SIZE (samba-4.20.2.tar.gz) = 42458953
> diff --git pkg/PLIST-main pkg/PLIST-main
> index b826066f469..65400a77f88 100644
> --- pkg/PLIST-main
> +++ pkg/PLIST-main
> @@ -1169,6 +1169,8 @@
> lib/python${MODPY_VERSION}/site-packages/samba/tests/blackbox/${MODPY_PYCACHE}ht
> lib/python${MODPY_VERSION}/site-packages/samba/tests/blackbox/${MODPY_PYCACHE}http_content.${MODPY_PYC_MAGIC_TAG}pyc
> lib/python${MODPY_VERSION}/site-packages/samba/tests/blackbox/${MODPY_PYCACHE}mdsearch.${MODPY_PYC_MAGIC_TAG}${MODPY_PYOEXTENSION}
> lib/python${MODPY_VERSION}/site-packages/samba/tests/blackbox/${MODPY_PYCACHE}mdsearch.${MODPY_PYC_MAGIC_TAG}pyc
> +lib/python${MODPY_VERSION}/site-packages/samba/tests/blackbox/${MODPY_PYCACHE}misc_dfs_widelink.${MODPY_PYC_MAGIC_TAG}${MODPY_PYOEXTENSION}
> +lib/python${MODPY_VERSION}/site-packages/samba/tests/blackbox/${MODPY_PYCACHE}misc_dfs_widelink.${MODPY_PYC_MAGIC_TAG}pyc
> lib/python${MODPY_VERSION}/site-packages/samba/tests/blackbox/${MODPY_PYCACHE}ndrdump.${MODPY_PYC_MAGIC_TAG}${MODPY_PYOEXTENSION}
> lib/python${MODPY_VERSION}/site-packages/samba/tests/blackbox/${MODPY_PYCACHE}ndrdump.${MODPY_PYC_MAGIC_TAG}pyc
> lib/python${MODPY_VERSION}/site-packages/samba/tests/blackbox/${MODPY_PYCACHE}netads_dns.${MODPY_PYC_MAGIC_TAG}${MODPY_PYOEXTENSION}
> @@ -1206,6 +1208,7 @@
> lib/python${MODPY_VERSION}/site-packages/samba/tests/blackbox/downgradedatabase.
> lib/python${MODPY_VERSION}/site-packages/samba/tests/blackbox/http_chunk.py
> lib/python${MODPY_VERSION}/site-packages/samba/tests/blackbox/http_content.py
> lib/python${MODPY_VERSION}/site-packages/samba/tests/blackbox/mdsearch.py
> +lib/python${MODPY_VERSION}/site-packages/samba/tests/blackbox/misc_dfs_widelink.py
> lib/python${MODPY_VERSION}/site-packages/samba/tests/blackbox/ndrdump.py
> lib/python${MODPY_VERSION}/site-packages/samba/tests/blackbox/netads_dns.py
> lib/python${MODPY_VERSION}/site-packages/samba/tests/blackbox/netads_json.py
Re: CHANGE net/samba - drop meta rc-script
Sure Ok Ian McWilliam > On 3 Jul 2024, at 5:37 am, Jeremie Courreges-Anglas wrote: > > On Tue, Jul 02, 2024 at 08:57:34PM +0200, Bjorn Ketelaars wrote: >> The meta rc-script for Samba does not play nice with 'rcctl ls rogue'. >> When a meta script is used, services started by the child scripts are >> seen as rogue [0]. >> >> Samba's meta script provides little functionality, which can be easily >> replaced by using its two child scipts. Proposal is to remove the meta >> script and inform users via faq/current.html. >> >> Diff for net/samba below. >> Diff for current.html attached. >> >> OK? > > Looks reasonable to me, I would not expect other systems to provide > such a "meta" service. I'm not even sure you should bother mentioning > rcctl ls rogue. Small nit in the current.html entry: > >> To replace the meta script by the child script*s* one can use: > > ok jca@ > > -- > jca
Re: meta rc-scripts [Re: CHANGE net/samba - drop meta rc-script]
> On 3 Jul 2024, at 8:01 pm, Stuart Henderson wrote: > > On 2024/07/02 20:57, Bjorn Ketelaars wrote: >> The meta rc-script for Samba does not play nice with 'rcctl ls rogue'. >> When a meta script is used, services started by the child scripts are >> seen as rogue [0]. > > There are 5 others of these, and they do encapsulate knowledge of > which order the daemons should be started/stopped in. In the case of > gromox/kopano there are a _lot_ of daemons, and for netatalk the > two separate daemons don't have very memorable names, so they do > add something useful. > > It seems a bit sad to remove meta scripts just because a new thing > was added to daily. > That was my initial thought too. My preference is to keep it but if not i have a copy... Ian McWilliam
Re: [SECURITY] samba-4.17.10
Hi,
For spot light support you need to install and configure an elastic
search engine.
as well as turn spotlight support on in the samba config. Have never
tried to use it so no idea if it works.
It's not on by default in the samba config.
spotlight backend = elasticsearch
elasticsearch:address = localhost
elasticsearch:port = 9200
Ian McWilliam
On 20/07/2023 2:44 am, Jeremie Courreges-Anglas wrote:
Security update published today, some problems in winbind, SMB2 packet
signing. As far as I know we don't ship spotlight support.
Release notes:
https://www.samba.org/samba/history/samba-4.17.10.html
Tests and oks welcome!
Index: Makefile
===
RCS file: /cvs/ports/net/samba/Makefile,v
retrieving revision 1.329.2.3
diff -u -p -r1.329.2.3 Makefile
--- Makefile8 Jul 2023 08:13:01 - 1.329.2.3
+++ Makefile19 Jul 2023 16:38:38 -
@@ -1,4 +1,4 @@
-VERSION = 4.17.9
+VERSION = 4.17.10
DISTNAME =samba-${VERSION}
EPOCH = 0
Index: distinfo
===
RCS file: /cvs/ports/net/samba/distinfo,v
retrieving revision 1.103.2.3
diff -u -p -r1.103.2.3 distinfo
--- distinfo8 Jul 2023 08:13:01 - 1.103.2.3
+++ distinfo19 Jul 2023 16:38:38 -
@@ -1,2 +1,4 @@
-SHA256 (samba-4.17.9.tar.gz) = 7xwyciDyv0M/RPhaOUh4WVmWBjT0bMhPtnOJaXs0kKY=
-SIZE (samba-4.17.9.tar.gz) = 30892107
+SHA256 (samba-4.17.10.tar.asc) = A2cdeQABHALsiD8BEyxToZ5oMfC3hdxRVwjwCUN4HRg=
+SHA256 (samba-4.17.10.tar.gz) = ANuwqsn0z+6AD3CPTpCYlkpDp2RuYYIwcG1TLJu2w1A=
+SIZE (samba-4.17.10.tar.asc) = 833
+SIZE (samba-4.17.10.tar.gz) = 30892671
4.4-stable ClamAV update 0.94.1
An update for the mail list archives. I'm not expecting feedback. Ian McWilliam clamav.diff Description: Binary data
4.4-stable SpamAssassin 3.2.5 update
An update for the mail list archives. I'm not expecting feedback. Ian McWilliam p5-Mail-SpamAssassin.diff Description: Binary data
4.4-stable Dovecot 1.0.15 update
An update for the mail list archives. I'm not expecting feedback. Ian McWilliam dovecot.diff Description: Binary data
4.4-stable isc-dhcpd 3.1.1 update
An update for the mail list archives. I'm not expecting feedback. Ian McWilliam isc-dhcpd.diff Description: Binary data
Re: 4.4-stable MySQL 5.0.67 update
On 15/11/2008, at 12:18 PM, Brad wrote: On Friday 14 November 2008 20:06:14 Ian McWilliam wrote: An update for the mail list archives. I'm not expecting feedback. All MySQL dependant ports ie that depend on Mysql will need to be rebuilt due to lib changes. A package bump should happen for those, but as stable is unsupported, you all know the situation. I don't know where you got this idea from that there were "lib changes" but a rebuild should not be necessary. Ian McWilliam -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. Considering this back port was done around the 8th September, I was unsure of what I did at the time. Thanx for the feedback. Ian McWilliam
4.4-stable Apache httpd 2.2.10
An update for the mail list archives. I'm not expecting feedback. Fixes * ) SECURITY: CVE-2008-2939 (cve.mitre.org) mod_proxy_ftp: Prevent XSS attacks when using wildcards in the path of the FTP URL. Discovered by Marc Bevand of Rapid7. And I have to laugh at this one, I'm sure it has a funny history somewhere ;-) *) Support chroot on Unix-family platforms. http://www.apache.org/dist/httpd/CHANGES_2.2.10 Ian McWilliam apache-httpd.diff Description: Binary data
4.4-stable samba-3.0.33 update
For the archives and those interested. An update for Samba. Fixes security issues http://us6.samba.org/samba/security/CVE-2008-4314.html CVE-2008-4314 Ian McWilliam samba.diff Description: Binary data
4.4-stable honeyd security update
Security update for CVE-2008-3928.
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3928
http://secunia.com/advisories/31658
Most advisories I have read on this one only talk about the file
'scripts/test.sh'. 'scripts/web.sh' seems vulnerable too, so I have
patched for that case accordingly.
Ian McWilliamIndex: Makefile
===
RCS file: /cvs/ports/net/honeyd/Makefile,v
retrieving revision 1.21
diff -u -r1.21 Makefile
--- Makefile14 Feb 2008 21:36:27 - 1.21
+++ Makefile13 Dec 2008 01:26:24 -
@@ -4,7 +4,7 @@
COMMENT= utility to create virtual hosts on a network
DISTNAME= honeyd-1.5c
-PKGNAME= ${DISTNAME}p2
+PKGNAME= ${DISTNAME}p3
CATEGORIES=net
MASTER_SITES= http://www.citi.umich.edu/u/provos/honeyd/ \
http://niels.xtdnet.nl/honeyd/
Index: patches/patch-scripts_test_sh
===
RCS file: patches/patch-scripts_test_sh
diff -N patches/patch-scripts_test_sh
--- /dev/null 1 Jan 1970 00:00:00 -
+++ patches/patch-scripts_test_sh 13 Dec 2008 01:26:24 -
@@ -0,0 +1,19 @@
+$OpenBSD$
+--- scripts/test.sh.orig Sat Dec 13 11:52:43 2008
scripts/test.shSat Dec 13 12:05:09 2008
+@@ -1,8 +1,13 @@
+ DATE=`date`
+-echo "$DATE: Started From $1 Port $2" >> /tmp/log
++TMPFILE=`mktemp -q -t honeyd_test_log.XX`
++if [ $? -ne 0 ]; then
++ echo "test.sh: Unable to create log file. mktemp failed: $?"
++ exit 1;
++fi
++echo "$DATE: Started From $1 Port $2" >> $TMPFILE
+ echo SSH-1.5-2.40
+ while read name
+ do
+- echo "$name" >> /tmp/log
++ echo "$name" >> $TMPFILE
+ echo "$name"
+ done
Index: patches/patch-scripts_web_sh
===
RCS file: patches/patch-scripts_web_sh
diff -N patches/patch-scripts_web_sh
--- /dev/null 1 Jan 1970 00:00:00 -
+++ patches/patch-scripts_web_sh13 Dec 2008 01:26:24 -
@@ -0,0 +1,23 @@
+$OpenBSD$
+--- scripts/web.sh.origSat Dec 13 12:06:02 2008
scripts/web.sh Sat Dec 13 12:08:17 2008
+@@ -1,5 +1,10 @@
+ #!/bin/sh
+ REQUEST=""
++TMPFILE=`mktemp -q -t honeyd_web_log.XX`
++if [ $? -ne 0 ]; then
++ echo "web.sh: Unable to create log file. mktemp failed: $?"
++ exit 1;
++fi
+ while read name
+ do
+ LINE=`echo "$name" | egrep -i "[a-z:]"`
+@@ -7,7 +12,7 @@ do
+ then
+ break
+ fi
+- echo "$name" >> /tmp/log
++ echo "$name" >> $TMPFILE
+ NEWREQUEST=`echo "$name" | grep "GET .scripts.*cmd.exe.*dir.* HTTP/1.0"`
+ if [ ! -z "$NEWREQUEST" ] ; then
+ REQUEST=$NEWREQUEST
4.4-stable print/enscript security update
Fixes security issues
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3863
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4306
Fix From FreeBSD
http://www.FreeBSD.org/cgi/query-pr.cgi?prp=128958-1-txt&n=/1.6.4_1-to-1.6.4_2-fix-CVE-2008-4306.diff
Ian McWilliamIndex: Makefile
===
RCS file: /cvs/ports/print/enscript/Makefile,v
retrieving revision 1.24
diff -u -a -r1.24 Makefile
--- Makefile15 Sep 2007 21:36:44 - 1.24
+++ Makefile17 Dec 2008 00:45:35 -
@@ -3,7 +3,7 @@
COMMENT= convert ASCII files to PostScript
DISTNAME= enscript-1.6.3
-PKGNAME= ${DISTNAME}p1
+PKGNAME= ${DISTNAME}p2
CATEGORIES=print
HOMEPAGE= http://www.codento.com/people/mtr/genscript/
Index: patches/patch-afm_Makefile_in
===
RCS file: /cvs/ports/print/enscript/patches/patch-afm_Makefile_in,v
retrieving revision 1.1
diff -u -a -r1.1 patch-afm_Makefile_in
--- patches/patch-afm_Makefile_in 11 Feb 2005 17:57:31 - 1.1
+++ patches/patch-afm_Makefile_in 17 Dec 2008 00:45:35 -
@@ -1,7 +1,7 @@
$OpenBSD: patch-afm_Makefile_in,v 1.1 2005/02/11 17:57:31 naddy Exp $
afm/Makefile.in.orig Thu Jan 24 08:39:24 2002
-+++ afm/Makefile.inFri Feb 11 18:47:55 2005
-@@ -227,14 +227,14 @@ maintainer-clean-generic clean mostlycle
+--- afm/Makefile.in.orig Thu Jan 24 18:39:24 2002
afm/Makefile.inWed Dec 17 10:53:54 2008
+@@ -227,14 +227,14 @@ maintainer-clean-generic clean mostlyclean distclean m
install-data-local:
Index: patches/patch-src_gsint_h
===
RCS file: /cvs/ports/print/enscript/patches/patch-src_gsint_h,v
retrieving revision 1.1
diff -u -a -r1.1 patch-src_gsint_h
--- patches/patch-src_gsint_h 11 Feb 2005 19:12:42 - 1.1
+++ patches/patch-src_gsint_h 17 Dec 2008 00:45:35 -
@@ -1,7 +1,7 @@
$OpenBSD: patch-src_gsint_h,v 1.1 2005/02/11 19:12:42 naddy Exp $
src/gsint.h.orig Fri Feb 11 20:01:12 2005
-+++ src/gsint.hFri Feb 11 20:01:25 2005
-@@ -701,4 +701,9 @@ FILE *printer_open ___P ((char *cmd, cha
+--- src/gsint.h.orig Wed Jul 12 01:28:06 2000
src/gsint.hWed Dec 17 10:53:54 2008
+@@ -701,4 +701,9 @@ FILE *printer_open ___P ((char *cmd, char *options, ch
*/
void printer_close ___P ((void *context));
Index: patches/patch-src_main_c
===
RCS file: /cvs/ports/print/enscript/patches/patch-src_main_c,v
retrieving revision 1.1
diff -u -a -r1.1 patch-src_main_c
--- patches/patch-src_main_c11 Feb 2005 19:12:42 - 1.1
+++ patches/patch-src_main_c17 Dec 2008 00:45:35 -
@@ -1,7 +1,7 @@
$OpenBSD: patch-src_main_c,v 1.1 2005/02/11 19:12:42 naddy Exp $
src/main.c.origFri Feb 11 20:01:12 2005
-+++ src/main.c Fri Feb 11 20:01:25 2005
-@@ -1546,9 +1546,13 @@ name width\theight\tllx\tlly
+--- src/main.c.origThu Jan 24 18:35:45 2002
src/main.c Wed Dec 17 10:53:54 2008
+@@ -1546,9 +1546,13 @@ name width\theight\tllx\tlly\turx\tury\n\
buffer_append (&cmd, intbuf);
buffer_append (&cmd, " ");
@@ -18,7 +18,7 @@
buffer_append (&cmd, "-Dtoc=");
buffer_append (&cmd, toc ? "1" : "0");
-@@ -1565,8 +1569,14 @@ name width\theight\tllx\tlly
+@@ -1565,8 +1569,14 @@ name width\theight\tllx\tlly\turx\tury\n\
/* Append input files. */
for (i = optind; i < argc; i++)
{
@@ -35,7 +35,7 @@
}
/* And do the job. */
-@@ -1627,7 +1637,7 @@ name width\theight\tllx\tlly
+@@ -1627,7 +1637,7 @@ name width\theight\tllx\tlly\turx\tury\n\
buffer_ptr (opts), buffer_len (opts));
}
Index: patches/patch-src_psgen_c
===
RCS file: /cvs/ports/print/enscript/patches/patch-src_psgen_c,v
retrieving revision 1.1
diff -u -a -r1.1 patch-src_psgen_c
--- patches/patch-src_psgen_c 11 Feb 2005 19:12:42 - 1.1
+++ patches/patch-src_psgen_c 17 Dec 2008 00:45:35 -
@@ -1,7 +1,96 @@
$OpenBSD: patch-src_psgen_c,v 1.1 2005/02/11 19:12:42 naddy Exp $
src/psgen.c.orig Fri Feb 11 20:01:12 2005
-+++ src/psgen.cFri Feb 11 20:01:25 2005
-@@ -2034,8 +2034,9 @@ dump_ps_page_header (char *fname, int em
+--- src/psgen.c.orig Thu Jan 24 18:38:58 2002
src/psgen.cWed Dec 17 11:39:56 2008
+@@ -24,6 +24,7 @@
+ * Boston, MA 02111-1307, USA.
+ */
+
++#include
+ #include "gsint.h"
+
+ /*
+@@ -124,7 +125,7 @@ struct gs_token_st
+ double xscale;
+ double yscale;
+ int llx, lly, urx, ury; /* Bounding box. */
+-char filename[512];
++char filename[PATH_MAX];
+ char *ski
4.4-stable net/no-ip security update
Backport from current for no-ip-2.1.9
Fixes CVE-2008-5297
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5297
Ian McWilliamIndex: Makefile
===
RCS file: /cvs/ports/net/no-ip/Makefile,v
retrieving revision 1.12
retrieving revision 1.15
diff -u -a -r1.12 -r1.15
--- Makefile23 Oct 2007 08:27:14 - 1.12
+++ Makefile23 Nov 2008 09:36:30 - 1.15
@@ -1,8 +1,8 @@
-# $OpenBSD: Makefile,v 1.12 2007/10/23 08:27:14 wilfried Exp $
+# $OpenBSD: Makefile,v 1.15 2008/11/23 09:36:30 wilfried Exp $
COMMENT= No-IP.com Dynamic DNS client
-V= 2.1.7
+V= 2.1.9
DISTNAME= noip-${V}
PKGNAME= no-ip-${V}
CATEGORIES=net
@@ -25,7 +25,7 @@
ALL_TARGET=noip2
do-configure:
- @perl -pi -e 's|_SYSCONFDIR_|${SYSCONFDIR}|g' ${WRKSRC}/noip2.c
+ @${SUBST_CMD} ${WRKSRC}/noip2.c
do-install:
${INSTALL_PROGRAM} ${WRKBUILD}/noip2 ${PREFIX}/sbin
Index: distinfo
===
RCS file: /cvs/ports/net/no-ip/distinfo,v
retrieving revision 1.10
retrieving revision 1.13
diff -u -a -r1.10 -r1.13
--- distinfo23 Oct 2007 08:27:14 - 1.10
+++ distinfo23 Nov 2008 09:36:30 - 1.13
@@ -1,5 +1,5 @@
-MD5 (noip-2.1.7.tar.gz) = e2tkwIcIwrFHw3XdoHSo3A==
-RMD160 (noip-2.1.7.tar.gz) = ulUBw4lyplfdVcVqDq5eRuB3wC4=
-SHA1 (noip-2.1.7.tar.gz) = 9DNWo3qBpTg4Kppdm2IE+WzA/lc=
-SHA256 (noip-2.1.7.tar.gz) = EQWiPLCpV8Sx58R72b/tAPGgib3d0qafab9PgEf3ojc=
-SIZE (noip-2.1.7.tar.gz) = 147640
+MD5 (noip-2.1.9.tar.gz) = 7tjp757ft93Dbhh96Gf+ZA==
+RMD160 (noip-2.1.9.tar.gz) = UD8aalLBx1PIfzW5+WFvXwPy26s=
+SHA1 (noip-2.1.9.tar.gz) = u67ipPfeolER9RBLajSUgEhA1qw=
+SHA256 (noip-2.1.9.tar.gz) = hq0KY2ImOjP1mmWNGxzkKOJVVW3a0NBiqg7kt/QS+Yo=
+SIZE (noip-2.1.9.tar.gz) = 152995
Index: patches/patch-Makefile
===
RCS file: /cvs/ports/net/no-ip/patches/patch-Makefile,v
retrieving revision 1.4
retrieving revision 1.5
diff -u -a -r1.4 -r1.5
--- patches/patch-Makefile 18 Oct 2006 22:02:39 - 1.4
+++ patches/patch-Makefile 20 Nov 2008 07:49:51 - 1.5
@@ -1,12 +1,13 @@
-$OpenBSD: patch-Makefile,v 1.4 2006/10/18 22:02:39 wilfried Exp $
Makefile.orig Fri Feb 24 17:45:51 2006
-+++ Makefile Wed Oct 18 23:58:14 2006
-@@ -1,16 +1,15 @@
+$OpenBSD: patch-Makefile,v 1.5 2008/11/20 07:49:51 wilfried Exp $
+--- Makefile.orig Thu Nov 13 02:31:49 2008
Makefile Thu Nov 20 08:40:53 2008
+@@ -1,5 +1,4 @@
TGT=noip2
-CC=gcc
+ PKG=noip-2.1.tgz
PREFIX=/usr/local
- CONFDIR=${PREFIX}/etc
+@@ -7,11 +6,11 @@ CONFDIR=${PREFIX}/etc
BINDIR=${PREFIX}/bin
# these defines are for Linux
@@ -21,12 +22,12 @@
# for early BSD systems without getifaddrs(), uncomment the next line
#ARCH=bsd
-@@ -21,7 +20,7 @@ ARCH=linux
+@@ -22,7 +21,7 @@ ARCH=linux
# ARCH=sun
${TGT}: Makefile ${TGT}.c
-- ${CC} -Wall -g -O2 -D${ARCH} -DPREFIX=\"${PREFIX}\" ${TGT}.c -o ${TGT}
${LIBS}
-+ ${CC} ${CFLAGS} -D${ARCH} ${TGT}.c -o ${TGT} ${LIBS}
+- ${CC} -Wall -g -D${ARCH} -DPREFIX=\"${PREFIX}\" ${TGT}.c -o ${TGT}
${LIBS}
++ ${CC} -D${ARCH} -DPREFIX=\"${PREFIX}\" ${TGT}.c -o ${TGT} ${LIBS}
install: ${TGT}
if [ ! -d ${BINDIR} ]; then mkdir -p ${BINDIR};fi
Index: patches/patch-noip2_c
===
RCS file: /cvs/ports/net/no-ip/patches/patch-noip2_c,v
retrieving revision 1.5
retrieving revision 1.7
diff -u -a -r1.5 -r1.7
--- patches/patch-noip2_c 23 Oct 2007 08:27:14 - 1.5
+++ patches/patch-noip2_c 23 Nov 2008 09:36:30 - 1.7
@@ -1,17 +1,17 @@
-$OpenBSD: patch-noip2_c,v 1.5 2007/10/23 08:27:14 wilfried Exp $
noip2.c.orig Mon Aug 27 23:54:19 2007
-+++ noip2.cTue Oct 23 09:49:14 2007
-@@ -218,11 +218,8 @@
- #define NODNSGROUP"@@NO_GROUP@@"
+$OpenBSD: patch-noip2_c,v 1.7 2008/11/23 09:36:30 wilfried Exp $
+--- noip2.c.orig Fri Nov 21 23:19:54 2008
noip2.cSun Nov 23 10:33:56 2008
+@@ -232,11 +232,8 @@
#define HOST 1
#define GROUP 2
+ #define DOMAIN3
-#ifndef PREFIX
- #define PREFIX "/usr/local"
-#endif
-#define CONFIG_FILEPATH PREFIX"/etc"
-#define CONFIG_FILENAME PREFIX"/etc/no-ip2.conf"
-+#define CONFIG_FILEPATH "_SYSCONFDIR_"
-+#define CONFIG_FILENAME "_SYSCONFDIR_/no-ip2.conf"
++#define CONFIG_FILEPATH "${SYSCONFDIR}"
++#define CONFIG_FILENAME "${SYSCONFDIR}/no-ip2.conf"
#define CONFSTRLEN1024
#define MAX_DEVLEN16
#define MAX_INSTANCE 4
Index: pkg/PLIST
===
RCS file: /cvs/ports/net/no-ip/pkg/PLIS
make update-plist abnormality
only tested against 4.4-stable, have no idea whether fixed in current.
make update-plist finds /etc in an existing PLIST file and substitues
${SYSCONFDIR}
in this case and cases like it, it's completely wrong.
-libexec/etc2ps.sh
+libexec${SYSCONFDIR}2ps.sh
Ian McWilliam
4.4-stable net/netatalk security update 2.0.4-beta2
Update to netatalk-2.0.4beta2 for CVE-2008-5718.
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5718
"The papd daemon in Netatalk before 2.0.4-beta2, when using certain
variables in a pipe command for the print file, allows remote attackers
to execute arbitrary commands via shell metacharacters in a print
request, as demonstrated using a crafted Title"
The attached patch will remove 2 files from the patches directory.
patches/patch-bin_cnid_cnid_index_c
patches/patch-etc_cnid_dbd_dbif_c
Use patch -E when applying diff.
This should go into current as well at some point.
Ian McWilliam
cvs server: Diffing inside .
Index: Makefile
===
RCS file: /cvs/ports/net/netatalk/Makefile,v
retrieving revision 1.23
diff -N -u Makefile
--- Makefile26 Oct 2007 14:27:23 - 1.23
+++ Makefile16 Feb 2009 08:55:52 -
@@ -2,8 +2,8 @@
COMMENT= AFP file and print services for AppleTalk/IP networks
-DISTNAME= netatalk-2.0.3
-PKGNAME= ${DISTNAME}p2
+DISTNAME= netatalk-2.0.4beta2
+PKGNAME= ${DISTNAME}
CATEGORIES=net
HOMEPAGE= http://netatalk.sourceforge.net/
@@ -55,8 +55,7 @@
${INSTALL_DATA} ${WRKSRC}/COPYRIGHT ${WRKSRC}/COPYING\
${PREFIX}/share/doc/netatalk
-.for i in FAQ README.hidden-items README.platforms README.logger \
- README.ids Netatalk-Manual.txt Netatalk-Manual.pdf
+.for i in FAQ README.hidden-items README.platforms
${INSTALL_DATA} ${WRKSRC}/doc/$i ${PREFIX}/share/doc/netatalk
.endfor
Index: distinfo
===
RCS file: /cvs/ports/net/netatalk/distinfo,v
retrieving revision 1.4
diff -N -u distinfo
--- distinfo5 Apr 2007 16:20:11 - 1.4
+++ distinfo16 Feb 2009 08:55:52 -
@@ -1,5 +1,5 @@
-MD5 (netatalk-2.0.3.tar.gz) = F5F6vX0lXSMcwMYYjM0n+w==
-RMD160 (netatalk-2.0.3.tar.gz) = VdEgzZeooQ+ewRL0P5lS+6ygNKM=
-SHA1 (netatalk-2.0.3.tar.gz) = X5TZaR4UzPZuN2ZK/HO7DDG8hDc=
-SHA256 (netatalk-2.0.3.tar.gz) = tuAc/AtCI/YP2ZTu6VBjWxZdVKls9ju+YHpf9kNVvYw=
-SIZE (netatalk-2.0.3.tar.gz) = 1920570
+MD5 (netatalk-2.0.4beta2.tar.gz) = waEmangXnnWKUXSPTq0cPQ==
+RMD160 (netatalk-2.0.4beta2.tar.gz) = t81Dt06IsLQkGhUbmlSZZc32Xso=
+SHA1 (netatalk-2.0.4beta2.tar.gz) = +oyDAvlTJ0zPXiQ6Q7r0SPJKtRg=
+SHA256 (netatalk-2.0.4beta2.tar.gz) =
gvqZNFE4crHfHeVPGg29dSu0XRddEWuocOC7tExvGPc=
+SIZE (netatalk-2.0.4beta2.tar.gz) = 1340353
cvs server: Diffing inside patches
Index: patches/patch-bin_megatron_nad_c
===
RCS file: /cvs/ports/net/netatalk/patches/patch-bin_megatron_nad_c,v
retrieving revision 1.2
diff -N -u patches/patch-bin_megatron_nad_c
--- patches/patch-bin_megatron_nad_c25 Oct 2007 18:57:32 - 1.2
+++ patches/patch-bin_megatron_nad_c16 Feb 2009 08:55:52 -
@@ -1,7 +1,7 @@
$OpenBSD: patch-bin_megatron_nad_c,v 1.2 2007/10/25 18:57:32 steven Exp $
bin/megatron/nad.c.origThu Feb 10 02:23:08 2005
-+++ bin/megatron/nad.c Thu Oct 25 20:30:05 2007
-@@ -414,8 +414,8 @@ void select_charset( int options)
+--- bin/megatron/nad.c.origTue Sep 19 10:08:00 2006
bin/megatron/nad.c Sat Feb 7 23:53:28 2009
+@@ -412,8 +412,8 @@ void select_charset( int options)
#endif /* HEXOUTPUT */
struct nad_file_data {
@@ -12,7 +12,7 @@
int offset[ NUMFORKS ];
struct adoublead;
} nad;
-@@ -451,9 +451,10 @@ int nad_open( path, openflags, fh, options )
+@@ -449,9 +449,10 @@ int nad_open( path, openflags, fh, options )
if ( openflags == O_RDONLY ) {
initvol(path);
@@ -26,7 +26,7 @@
for ( fork = 0 ; fork < NUMFORKS ; fork++ ) {
if ( stat( nad.adpath[ fork ], &st ) < 0 ) {
if ( errno == ENOENT ) {
-@@ -478,10 +479,11 @@ int nad_open( path, openflags, fh, options )
+@@ -476,10 +477,11 @@ int nad_open( path, openflags, fh, options )
} else {
initvol (".");
@@ -42,7 +42,7 @@
#if DEBUG
fprintf(stderr, "%s\n", nad.macname);
fprintf(stderr, "%s is adpath[0]\n", nad.adpath[0]);
-@@ -512,7 +514,7 @@ int nad_header_read( fh )
+@@ -510,7 +512,7 @@ int nad_header_read( fh )
memcpy( nad.macname, ad_entry( &nad.ad, ADEID_NAME ),
ad_getentrylen( &nad.ad, ADEID_NAME ));
nad.macname[ ad_getentrylen( &nad.ad, ADEID_NAME ) ] = '\0';
@@ -51,7 +51,7 @@
#endif
/* just in case there's nothing in macname */
-@@ -521,9 +523,9 @@ int nad_header_read( fh )
+@@ -519,9 +521,9 @@ int nad_header_read( fh )
p = nad.adpath[DATA];
else p++;
#if 0
Index: patches/patch-bin_psorder_psorder_c
===
RCS file: /cvs/ports/net/netatalk/patches/patch-bin_psorder_psorder_c,v
retrieving revision 1.1
diff -N -u patches/patch-bin_p
4.5-stable netatalk-2.0.4beta2 security update
4.5 not released yet, I'm starting ultra early on stable ports fixes
this time round. This is against a OPENBSD_4_5 tagged tree.
Update to netatalk-2.0.4beta2 for CVE-2008-5718.
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5718
"The papd daemon in Netatalk before 2.0.4-beta2, when using certain
variables in a pipe command for the print file, allows remote attackers
to execute arbitrary commands via shell metacharacters in a print
request, as demonstrated using a crafted Title"
The attached patch will remove 2 files from the patches directory.
patches/patch-bin_cnid_cnid_index_c
patches/patch-etc_cnid_dbd_dbif_c
Use patch -E when applying diff.
Ian McWilliam
cvs server: Diffing inside .
Index: Makefile
===
RCS file: /cvs/ports/net/netatalk/Makefile,v
retrieving revision 1.23
diff -N -u -r1.23 Makefile
--- Makefile26 Oct 2007 14:27:23 - 1.23
+++ Makefile4 Mar 2009 21:06:52 -
@@ -2,8 +2,8 @@
COMMENT= AFP file and print services for AppleTalk/IP networks
-DISTNAME= netatalk-2.0.3
-PKGNAME= ${DISTNAME}p2
+DISTNAME= netatalk-2.0.4beta2
+PKGNAME= ${DISTNAME}
CATEGORIES=net
HOMEPAGE= http://netatalk.sourceforge.net/
@@ -55,8 +55,7 @@
${INSTALL_DATA} ${WRKSRC}/COPYRIGHT ${WRKSRC}/COPYING\
${PREFIX}/share/doc/netatalk
-.for i in FAQ README.hidden-items README.platforms README.logger \
- README.ids Netatalk-Manual.txt Netatalk-Manual.pdf
+.for i in FAQ README.hidden-items README.platforms
${INSTALL_DATA} ${WRKSRC}/doc/$i ${PREFIX}/share/doc/netatalk
.endfor
Index: distinfo
===
RCS file: /cvs/ports/net/netatalk/distinfo,v
retrieving revision 1.4
diff -N -u -r1.4 distinfo
--- distinfo5 Apr 2007 16:20:11 - 1.4
+++ distinfo4 Mar 2009 21:06:52 -
@@ -1,5 +1,5 @@
-MD5 (netatalk-2.0.3.tar.gz) = F5F6vX0lXSMcwMYYjM0n+w==
-RMD160 (netatalk-2.0.3.tar.gz) = VdEgzZeooQ+ewRL0P5lS+6ygNKM=
-SHA1 (netatalk-2.0.3.tar.gz) = X5TZaR4UzPZuN2ZK/HO7DDG8hDc=
-SHA256 (netatalk-2.0.3.tar.gz) = tuAc/AtCI/YP2ZTu6VBjWxZdVKls9ju+YHpf9kNVvYw=
-SIZE (netatalk-2.0.3.tar.gz) = 1920570
+MD5 (netatalk-2.0.4beta2.tar.gz) = waEmangXnnWKUXSPTq0cPQ==
+RMD160 (netatalk-2.0.4beta2.tar.gz) = t81Dt06IsLQkGhUbmlSZZc32Xso=
+SHA1 (netatalk-2.0.4beta2.tar.gz) = +oyDAvlTJ0zPXiQ6Q7r0SPJKtRg=
+SHA256 (netatalk-2.0.4beta2.tar.gz) =
gvqZNFE4crHfHeVPGg29dSu0XRddEWuocOC7tExvGPc=
+SIZE (netatalk-2.0.4beta2.tar.gz) = 1340353
cvs server: Diffing inside patches
Index: patches/patch-bin_megatron_nad_c
===
RCS file: /cvs/ports/net/netatalk/patches/patch-bin_megatron_nad_c,v
retrieving revision 1.2
diff -N -u -r1.2 patches/patch-bin_megatron_nad_c
--- patches/patch-bin_megatron_nad_c25 Oct 2007 18:57:32 - 1.2
+++ patches/patch-bin_megatron_nad_c4 Mar 2009 21:06:52 -
@@ -1,7 +1,7 @@
$OpenBSD: patch-bin_megatron_nad_c,v 1.2 2007/10/25 18:57:32 steven Exp $
bin/megatron/nad.c.origThu Feb 10 02:23:08 2005
-+++ bin/megatron/nad.c Thu Oct 25 20:30:05 2007
-@@ -414,8 +414,8 @@ void select_charset( int options)
+--- bin/megatron/nad.c.origTue Sep 19 10:08:00 2006
bin/megatron/nad.c Sat Feb 7 23:53:28 2009
+@@ -412,8 +412,8 @@ void select_charset( int options)
#endif /* HEXOUTPUT */
struct nad_file_data {
@@ -12,7 +12,7 @@
int offset[ NUMFORKS ];
struct adoublead;
} nad;
-@@ -451,9 +451,10 @@ int nad_open( path, openflags, fh, options )
+@@ -449,9 +449,10 @@ int nad_open( path, openflags, fh, options )
if ( openflags == O_RDONLY ) {
initvol(path);
@@ -26,7 +26,7 @@
for ( fork = 0 ; fork < NUMFORKS ; fork++ ) {
if ( stat( nad.adpath[ fork ], &st ) < 0 ) {
if ( errno == ENOENT ) {
-@@ -478,10 +479,11 @@ int nad_open( path, openflags, fh, options )
+@@ -476,10 +477,11 @@ int nad_open( path, openflags, fh, options )
} else {
initvol (".");
@@ -42,7 +42,7 @@
#if DEBUG
fprintf(stderr, "%s\n", nad.macname);
fprintf(stderr, "%s is adpath[0]\n", nad.adpath[0]);
-@@ -512,7 +514,7 @@ int nad_header_read( fh )
+@@ -510,7 +512,7 @@ int nad_header_read( fh )
memcpy( nad.macname, ad_entry( &nad.ad, ADEID_NAME ),
ad_getentrylen( &nad.ad, ADEID_NAME ));
nad.macname[ ad_getentrylen( &nad.ad, ADEID_NAME ) ] = '\0';
@@ -51,7 +51,7 @@
#endif
/* just in case there's nothing in macname */
-@@ -521,9 +523,9 @@ int nad_header_read( fh )
+@@ -519,9 +521,9 @@ int nad_header_read( fh )
p = nad.adpath[DATA];
else p++;
#if 0
Index: patches/patch-bin_psorder_psorder_c
===
RCS file: /cvs/ports/net
Re: security support
b...@openbsd.rutgers.edu wrote: On 31 March 2009 at 0:56, Stefan Sperling wrote: On Mon, Mar 30, 2009 at 07:22:08PM -0400, Aaron W. Hsu wrote: It's much easier for people in -STABLE to just run the stable packages. That is still probably the best advice for most people. Yes. Also, due to various exploit mitigation techniques in OpenBSD, many bugs that show up in ports are not exploitable or harder to exploit: http://cvs.openbsd.org/papers/ven05-deraadt/index.html If you additionally use things like noscript in firefox, as a desktop user you are already much safer than most other desktop users out there. true... [snip] If you run critical and publicly accessible OpenBSD servers, of course you will want to patch all services from ports you are running as soon as security updates become available upstream. And when you're running these kinds of servers there's certainly no harm in learning how to patch ports yourself. Although it might be tedious to do, but that's why we have the current -stable ports situation. That's where I am: production servers with software that needs security fixes. On the other hand, I don't think anyone would complain if there were someone tracking the security updates and making sure that they got in to -STABLE or at least that the patches were sent to po...@. http://openbsd.rutgers.edu/4.4-stable/ looks like a good start. Do all those patches get posted to po...@? Do people use them? If so, that's a great start. Thanks, Ian and I try. They aren't all posted to ports, though Ian has shared some here. It was discouraged so we try to not spam the list (though there is another list setup for -stable ports discussion). :-) as best we can. I've probably been a little slacking of lateI digress... I usually submit to ports@ just so the stuff I work on finds it way into the archive incase people are searching. Is it used? Yes, but not as much as I'd expect... especially given how many people talk about it. I use it in production on several machines. As do I. Is this the new de-facto standard -stable ports tree yet? :-) I was hoping someday... that was why we take the time to produce per-port patches. But I've been doing this since -stable ports was abandoned ~4.1. Few if any have ever gotten committed to the official tree, although several committers have been interested at one time or another. Per port patches make it easier for you to see the changes. Are people interested enough in a stable cvs tree? The only issue here is it won't be a sanctioned OpenBSD cvs stable ports tree and your probably going to be diffing it against a release tree anyway to see the changes. Just what grabs peoples fancy with regard -stable ports??? Ian McWilliam
4.5-stable www/apache-httpd 2.2.11 security update
update Apache httpd to 2.2.11 - security fix for CVE-2008-2939. Back ported from current. Ian McWilliam apache-httpd.diff Description: Binary data
4.5-stable security/clamav clamav-0.95.1
Security update for security/clamav clamav-0.95.1. Back port from current. You'll need patch -E when applying the diff. The following 2 patches from the patches directory needs to be removed. patch-clamav_milter-clamav_milter_c patch-libclamav_Makefile_am Ian McWilliam clamav.diff Description: Binary data
4.5-stable www/dansguardian dansguardian-2.10.0.3 update (fix clamav breakage)
Stuart Henderson (thanx) pointed out that my previous 4.5-stable clamav update breaks www/dansguardian. This updates www/dansguardian to dansguardian-2.10.0.3. Back ported from current therefore "the clamav flavour was using libclamav, which past experience shows to not be a stable interface to the clamav virus scanner; dansguardian also supports scanning via the clamd socket, this is now enabled instead (by default since it doesn't add a required dependency). note: those currently using the clamav flavour and upgrading will need to adjust their configuration." applies. see http://www.openbsd.org/cgi-bin/cvsweb/ports/www/dansguardian/Makefile for more details. You'll need patch -E as patches are removed with the diff. added: patch-configs_contentscanners_clamdscan_conf_in removed: patch-Makefile_in patch-configure patch-src_contentscanners_clamav_cpp patch-configs_contentscanners_clamav_conf_in patch-doc_dansguardian_8 Ian McWilliam dansguardian.diff Description: Binary data
4.5-stable print/ghostscript ghostscript-8.63p5
Security update for print/ghostscript to ghostscript-8.63p5. Back ported from current. Fixes SA34534, CVE-2009-0196, CVE-2009-0583 and CVE-2009-0584. You'll need patch -E when applying the diff. The following patches will be added to the patches dir. added: patch-icclib_icc_c patch-src_gdevpdtb_c patch-jbig2dec_jbig2_symbol_dict_c Ian McWilliam ghostscript.diff Description: Binary data
4.5-stable textproc/xpdf xpdf-3.02pl3 update
Update for textproc/xpdf to xpdf-3.02pl3. Back port from current. Resolves security issues CVE-2009-0146 CVE-2009-0147 CVE-2009-0166 CVE-2009-0195 CVE-2009-0799 CVE-2009-0800 CVE-2009-1179 CVE-2009-1180 CVE-2009-1181 CVE-2009-1182 CVE-2009-1183 Use patch -E as patch-xpdf_GlobalParams_cc is added. Ian McWilliam xpdf.diff Description: Binary data
Re: Sympa's wwsympa Fails "Can't locate CGI/Fast.pm in @INC"
Did you pkg_add p5-CGI-Fast at some point?
What does your pkg_info | grep -i p5-CGI look like?
Ian McWilliam
From: owner-po...@openbsd.org on behalf of
nik...@rpgresearch.com
Sent: Monday, 16 March 2020 12:35 PM
To: ports@openbsd.org
Subject: Sympa's wwsympa Fails "Can't locate CGI/Fast.pm in @INC"
I have been working on setting up Sympa on OpenBSD.
I have OpenSMTPd working with the Sympa daemon, but I'm getting stuck on
the wwsympa set up with nginx (I hope to switch to OpenBSD's HTTPd after
I get Nginx working).
I used the Nginx config provided by the port maintainer:
>server {
> server_name domain.com;
> listen on 0.0.0.0:80;
>
> location /static-sympa {
> alias /var/www/sympa/;
> }
>
>
> location / {
> fastcgi_pass localhost:1026;
> fastcgi_split_path_info ^(/sympa)(.+)$;
> include fastcgi_params;
> fastcgi_param PATH_INFO $fastcgi_path_info;
> fastcgi_param
> SCRIPT_FILENAME /usr/local/libexec/sympa/wwsympa-wrapper.fcgi; }
>}
When I launch all the services, wwsympa crashes out with the following
error in /var/log/messages.
>wwsympa[40272]: err main::#138 DIED: Can't locate CGI/Fast.pm in @INC
>(you may need to install the CGI::Fast module) (@INC
>contains: /usr/local/libdata/perl5/site_perl/amd64-openbsd
>/usr/local/libdata/perl5/site_perl /usr/libdata/perl5/amd64-openbsd
>/usr/libdata/perl5)
>at /usr/local/libexec/sympa/wwsympa.fcgi line 139
I will now make this email unbearably long by sharing this dump:
>ls /usr/local/libdata/perl5/site_perl/
AppConfigEncode MIME
Role iso8859.pl mhsingle.pl
AppConfig.pm ErrorMLDBM
SQL libwww mhthread.pl
Archive Error.pm MLDBM.pm
Sort mhamain.pl mhtime.pl
BEval MRO
StackTrace mhdb.pl mhtxtenrich.pl
Bundle Exporter Mail
Sub mhdysub.pl mhtxthtml.pl
CGI Fh.pmMath
Sympamhexternal.plmhtxtplain.pl
CGI.pm File MaxMind
Sympa.pm mhfile.plmhtxttsv.pl
CGI.pod Font Method
Term mhidxrc.pl mhusage.pl
ClassFreezeThaw.pmModule
Test mhindex.pl mhutil.pl
CloneGeoIP2 MojoX
Throwablemhinit.plnamespace
Conf.pm GeoIP2.pmMoo
Throwable.pm mhlock.ploo.pm Convert
HTML Moo.pm Time
mhmimetypes.pl osinit.pl Crypt
HTTP MooX Try
mhmsgextbody.pl qprint.pl DDP.pm
IO Mozilla URI
mhmsgfile.pl readmail.pl Data
JSON MuninURI.pm
mhnote.plspamassassin-run.pod Date
LWP Net WWW
mhnull.plstrictures DateTime
LWP.pm OpenBSD XML
mhopt.pl strictures.pm Devel
List POD2 amd64-openbsd
mhrcfile.pl Digest Locale
Package base64.plmhrcvars.pl
Dist Log RPC
ewhutil.pl mhrmm.pl EmailMHonArc
RRDp.pm iso2022jp.pl mhscan.pl
Is this a dependency issue, or is there a step that I could be
missing? I am not familiar with CGI in general.
Thank you all!
Re: Sympa's wwsympa Fails "Can't locate CGI/Fast.pm in @INC"
You'll actually need to add CGI::Fast as a package as it is missing.
pkg_add p5-CGI-Fast
Ian McWilliam
From: nik...@rpgresearch.com
Sent: Monday, 16 March 2020 4:27 PM
To: Ian McWilliam
Cc: ports@openbsd.org
Subject: Re: Sympa's wwsympa Fails "Can't locate CGI/Fast.pm in @INC"
On Mon, 16 Mar 2020 04:12:41 +
Ian McWilliam wrote:
> Did you pkg_add p5-CGI-Fast at some point?
>
> What does your pkg_info | grep -i p5-CGI look like?
>
> Ian McWilliam
>
> From: owner-po...@openbsd.org on behalf of
> nik...@rpgresearch.com Sent: Monday, 16
> March 2020 12:35 PM To: ports@openbsd.org
> Subject: Sympa's wwsympa Fails "Can't locate CGI/Fast.pm in @INC"
>
> I have been working on setting up Sympa on OpenBSD.
>
> I have OpenSMTPd working with the Sympa daemon, but I'm getting stuck
> on the wwsympa set up with nginx (I hope to switch to OpenBSD's HTTPd
> after I get Nginx working).
>
> I used the Nginx config provided by the port maintainer:
>
> >server {
> > server_name domain.com;
> > listen on 0.0.0.0:80;
> >
> > location /static-sympa {
> > alias /var/www/sympa/;
> > }
> >
> >
> > location / {
> > fastcgi_pass localhost:1026;
> > fastcgi_split_path_info ^(/sympa)(.+)$;
> > include fastcgi_params;
> > fastcgi_param PATH_INFO $fastcgi_path_info;
> > fastcgi_param
> > SCRIPT_FILENAME /usr/local/libexec/sympa/wwsympa-wrapper.fcgi; }
> >}
>
> When I launch all the services, wwsympa crashes out with the following
> error in /var/log/messages.
>
> >wwsympa[40272]: err main::#138 DIED: Can't locate CGI/Fast.pm in @INC
> >(you may need to install the CGI::Fast module) (@INC
> >contains: /usr/local/libdata/perl5/site_perl/amd64-openbsd
> >/usr/local/libdata/perl5/site_perl /usr/libdata/perl5/amd64-openbsd
> >/usr/libdata/perl5)
> >at /usr/local/libexec/sympa/wwsympa.fcgi line 139
>
> I will now make this email unbearably long by sharing this dump:
>
> >ls /usr/local/libdata/perl5/site_perl/
> AppConfigEncode MIME
> Role iso8859.pl mhsingle.pl
> AppConfig.pm ErrorMLDBM
> SQL libwww mhthread.pl
> Archive Error.pm MLDBM.pm
> Sort mhamain.pl mhtime.pl
> BEval MRO
> StackTrace mhdb.pl mhtxtenrich.pl
> Bundle Exporter Mail
> Sub mhdysub.pl mhtxthtml.pl
> CGI Fh.pmMath
> Sympamhexternal.plmhtxtplain.pl
> CGI.pm File MaxMind
> Sympa.pm mhfile.plmhtxttsv.pl
> CGI.pod Font Method
> Term mhidxrc.pl mhusage.pl
> ClassFreezeThaw.pmModule
> Test mhindex.pl mhutil.pl
> CloneGeoIP2 MojoX
> Throwablemhinit.plnamespace
> Conf.pm GeoIP2.pmMoo
> Throwable.pm mhlock.ploo.pm Convert
> HTML Moo.pm Time
> mhmimetypes.pl osinit.pl Crypt
> HTTP MooX Try
> mhmsgextbody.pl qprint.pl DDP.pm
> IO Mozilla URI
> mhmsgfile.pl readmail.pl Data
> JSON MuninURI.pm
> mhnote.plspamassassin-run.pod Date
> LWP Net WWW
> mhnull.plstrictures DateTime
> LWP.pm OpenBSD XML
> mhopt.pl strictures.pm Devel
> List POD2 amd64-openbsd
> mhrcfile.pl Digest Locale
> Package base64.plmhrcvars.pl
> Dist Log RPC
> ewhutil.pl mhrmm.pl EmailMHonArc
> RRDp.pm iso2022jp.pl mhscan.pl
>
> Is this a dependency issue, or is there a step that I could be
> missing? I am not familiar with CGI in general.
>
>
> Thank you all!
>
Thank you for responding so quickly:
>pkg_info | grep -i p5-CGI
>p5-CGI-4.43 handle Common Gateway Interface requests and
>responses
It does appear to be a listed dependency and is installed:
>cat /var/db/pkg/sympa-6.2.16p2/+REQUIRING | grep p5-CGI-4.43
>p5-CGI-4.43
Re: what do to about ap2-mod_perl (was: Re: apache24 WIP port)
Pkgsrc have it working with apache 2.4.x. That is where I last used it under Mac OS X. http://cvsweb.netbsd.org/bsdweb.cgi/pkgsrc/www/ap2-perl/Makefile.diff?r1=1.44&r2=1.45&only_with_tag=MAIN Might be worth trolling their changes to see what they have done. Ian McWilliam From: Stefan Sperling [s...@stsp.name] Sent: Wednesday, 13 May 2015 10:50 PM To: ports@openbsd.org; Ian Mcwilliam Cc: Srebrenko Sehic Subject: what do to about ap2-mod_perl (was: Re: apache24 WIP port) On Tue, May 12, 2015 at 07:56:13AM +0100, Stuart Henderson wrote: > On 2015/05/11 20:08, Claudio Jeker wrote: > > Hmm. I think these modules have been superseeded by mod_proxy_fcgi which > > is part of apache 2.4. Which is one of the reasons I started going down > > this road. So maybe the way to go is to remove these two ports and tell > > people to change their config to use mod_proxy_fcgi. > > That sounds like the right approach to me. If php still works (highly > likely to, but better check) then I think we should go ahead. Only other bulk build fallout is ap2-mod_perl (thanks aja!) I've checked perl.apache.org. Their latest release is 2.0.8 from 2013. It only supports httpd 2.2. Support for httpd 2.4 was committed to the trunk of mod_perl after 2.0.8 was released. No release has been made since. http://svn.apache.org/repos/asf/perl/modperl/trunk/README lists 2.4 as supported, but http://svn.apache.org/repos/asf/perl/modperl/tags/2_0_8/README does not. I am inclined to drop mod_perl as "unmaintained upstream" and perhaps revive it later once there is demand and a release supporting httpd 2.4 is available. Unless I hear objections, I am going to do the following soon: - remove ap2-mod_fcgid, ap2-mod_fastcgi, and ap2-mod_perl - update httpd to 2.4 using the diff posted earlier and tested in bulk build
Re: [update] samba-4.0.26
Hmm, I see this.
===> Building package for samba-4.0.26
Create /usr/packages/amd64/all/samba-4.0.26.tgz
Error: Libraries in packing-lists in the ports tree
and libraries from installed packages don't match
--- /tmp/dep_cache.jj4UL4tjY/portstree-samba-4.0.26 Thu Jun 11 13:41:38 2015
+++ /tmp/dep_cache.jj4UL4tjY/inst-samba-4.0.26 Thu Jun 11 13:41:38 2015
@@ -24,7 +24,7 @@
-W ldb.0.0
-W pyldb-util.0.0
-W pytalloc-util.0.0
--W tdb.4.0
+-W tdb.5.0
-W tevent.0.0
-W lib/samba/nss_wrapper.0.0
-W lib/samba/socket_wrapper.0.0
*** Error 1 in . (/usr/ports/infrastructure/mk/bsd.port.mk:3242 'wantlib-args')
*** Error 1 in . (/usr/ports/infrastructure/mk/bsd.port.mk:1955
'/usr/packages/amd64/all/samba-4.0.26.tgz')
*** Error 1 in . (/usr/ports/infrastructure/mk/bsd.port.mk:2506
'_internal-package')
*** Error 1 in /usr/mystuff/net/samba4
(/usr/ports/infrastructure/mk/bsd.port.mk:2486 'package')
Ian McWilliam
From: owner-po...@openbsd.org [owner-po...@openbsd.org] on behalf of Jérémie
Courrèges-Anglas [j...@wxcvbn.org]
Sent: Saturday, 6 June 2015 5:14 AM
To: Ian McWilliam
Cc: OpenBSD ports; d...@openbsd.org
Subject: [update] samba-4.0.26
Untested so far. talloc shlib version bumped only because the package
version changed, I haven't checked other libs.
Comments and test reports welcome!
Cheers,
Index: Makefile
===
RCS file: /cvs/ports/net/samba4/Makefile,v
retrieving revision 1.10
diff -u -p -r1.10 Makefile
--- Makefile27 Feb 2015 17:32:52 - 1.10
+++ Makefile5 Jun 2015 18:11:37 -
@@ -1,9 +1,7 @@
# $OpenBSD: Makefile,v 1.10 2015/02/27 17:32:52 jca Exp $
-BROKEN = affected by CVE-2014-8143 and CVE-2015-0240
-
SHARED_ONLY = Yes
-VERSION = 4.0.22
+VERSION = 4.0.26
DISTNAME = samba-${VERSION}
DOCSVERSION = v3-5-test-4c5a1b6b
DISTFILES =${DISTNAME}${EXTRACT_SUFX} \
@@ -29,7 +27,7 @@ PKG_ARCH-docs = *
LDB_V =1.1.16
#NTDB_V = 0.9
-TALLOC_V = 2.0.7
+TALLOC_V = 2.1.2
TDB_V =1.2.11
TEVENT_V = 0.9.18
@@ -72,7 +70,7 @@ SHARED_LIBS = asn1-samba4 0.0 \
smbldap 0.0 \
smbsharemodes 2.0 \
talloc 1.0 \
- tdb 4.0 \
+ tdb 5.0 \
tevent 0.0 \
tevent-util 0.0 \
torture 0.0 \
@@ -189,8 +187,6 @@ CONFIGURE_ARGS =--enable-fhs \
--with-privatedir=${VARBASE}/samba/private \
--with-lockdir=${VARBASE}/run/samba \
--with-privileged-socket-dir=${VARBASE}/samba \
- --with-perl-arch-install-dir=${PREFIX}/${P5ARCH} \
- --with-perl-lib-install-dir=${PREFIX}/${P5SITE} \
--enable-selftest \
--pedantic
@@ -231,6 +227,8 @@ post-install:
-name '*.beforesubst' -or \
-name '*.deconforig' | \
xargs -rt rm --
+ # fix path to perl modules
+ mv ${PREFIX}/share/perl5/* ${PREFIX}/${P5SITE}
# precompiling Python modules
${MODPY_BIN} ${MODPY_LIBDIR}/compileall.py ${WRKINST}${MODPY_SITEPKG}
${MODPY_BIN} -O ${MODPY_LIBDIR}/compileall.py ${WRKINST}${MODPY_SITEPKG}
Index: distinfo
===
RCS file: /cvs/ports/net/samba4/distinfo,v
retrieving revision 1.6
diff -u -p -r1.6 distinfo
--- distinfo1 Nov 2014 10:44:05 - 1.6
+++ distinfo4 Jun 2015 11:43:17 -
@@ -1,4 +1,4 @@
-SHA256 (samba-4.0.22.tar.gz) = SxXmh/HgOFoj+vf4BbYSTbaZkcOa1tkWbe1gNcFr2lM=
+SHA256 (samba-4.0.26.tar.gz) = ziRBmSxtGJUNdS7bLRJ0s/fgVrLi6FFvxC5AjkoliUo=
SHA256 (samba-docs-v3-5-test-4c5a1b6b.tar.bz2) =
bsF0WP1KT1M3jMx3Z88MbsEQ1QEq9catijXpnPm7hZA=
-SIZE (samba-4.0.22.tar.gz) = 22140230
+SIZE (samba-4.0.26.tar.gz) = 22155521
SIZE (samba-docs-v3-5-test-4c5a1b6b.tar.bz2) = 8070761
Index: patches/patch-buildtools_wafsamba_wafsamba_py
===
RCS file: /cvs/ports/net/samba4/patches/patch-buildtools_wafsamba_wafsamba_py,v
retrieving revision 1.1.1.1
diff -u -p -r1.1.1.1 patch-buildtools_wafsamba_wafsamba_py
--- patches/patch-buildtools_wafsamba_wafsamba_py 4 May 2014 16:08:29
- 1.1.1.1
+++ patches/patch-buildtools_wafsamba_wafsamba_py 4 Jun 2015 11:45:08
-
@@ -1,9 +1,9 @@
$OpenBSD: patch-buildtools_wafsamba_wafsamba_py,v 1.1.1.1 2014/05/04 16:08:29
Re: [update] samba-4.0.26
Everything updated, kernel / userland / xenocara built about an hour before trying to build. Fresh ports tree from the same time. My previous attempts at building a newer samba 4.0.x failed at the packing stage due to the perl stuff being in a different location so nothing should have been registered anywhere. I'll clean out everything throughly today and see what happens. Ian McWilliam From: Jérémie Courrèges-Anglas [j...@wxcvbn.org] Sent: Thursday, 11 June 2015 7:43 PM To: Ian Mcwilliam Cc: Ian McWilliam; OpenBSD ports; d...@openbsd.org Subject: Re: [update] samba-4.0.26 Ian Mcwilliam writes: > Hmm, I see this. > > ===> Building package for samba-4.0.26 > Create /usr/packages/amd64/all/samba-4.0.26.tgz > Error: Libraries in packing-lists in the ports tree >and libraries from installed packages don't match > --- /tmp/dep_cache.jj4UL4tjY/portstree-samba-4.0.26 Thu Jun 11 13:41:38 > 2015 > +++ /tmp/dep_cache.jj4UL4tjY/inst-samba-4.0.26 Thu Jun 11 13:41:38 2015 > @@ -24,7 +24,7 @@ > -W ldb.0.0 > -W pyldb-util.0.0 > -W pytalloc-util.0.0 > --W tdb.4.0 > +-W tdb.5.0 > -W tevent.0.0 > -W lib/samba/nss_wrapper.0.0 > -W lib/samba/socket_wrapper.0.0 > *** Error 1 in . (/usr/ports/infrastructure/mk/bsd.port.mk:3242 > 'wantlib-args') > *** Error 1 in . (/usr/ports/infrastructure/mk/bsd.port.mk:1955 > '/usr/packages/amd64/all/samba-4.0.26.tgz') > *** Error 1 in . (/usr/ports/infrastructure/mk/bsd.port.mk:2506 > '_internal-package') > *** Error 1 in /usr/mystuff/net/samba4 > (/usr/ports/infrastructure/mk/bsd.port.mk:2486 'package') This looks like a local problem. Had you already built/installed samba-4.0.26 packages before? Please rebuild after "make clean=all", with an up-to-date ports tree. -- jca | PGP : 0x1524E7EE / 5135 92C1 AD36 5293 2BDF DDCC 0DFA 74AE 1524 E7EE
Re: [update] samba-4.0.26
x 2 root wheel 512 Apr 9 14:29 libltdl-2.4.2p1
drwxr-xr-x 2 root wheel 512 Jun 11 13:16 libnettle-2.7.1p2
drwxr-xr-x 2 root wheel 512 Jun 11 12:50 libpaper-1.1.24p0
drwxr-xr-x 2 root wheel 512 Jun 11 12:46 libsigsegv-2.10p1
drwxr-xr-x 2 root wheel 512 Jun 11 13:16 libtasn1-4.5
drwxr-xr-x 2 root wheel 512 Apr 9 14:29 libtool-2.4.2p0
drwxr-xr-x 2 root wheel 512 Jun 11 13:12 libusb1-1.0.9p9
drwxr-xr-x 2 root wheel 512 Jun 11 12:28 libxml-2.9.2p0
drwxr-xr-x 2 root wheel 512 Jun 12 11:49 libxslt-1.1.28p1
drwxr-xr-x 2 root wheel 512 Jun 11 12:50 lynx-2.8.9pl6
drwxr-xr-x 2 root wheel 512 Jun 11 13:02 lzo2-2.09
drwxr-xr-x 2 root wheel 512 Jun 11 12:46 m4-1.4.17
drwxr-xr-x 2 root wheel 512 Jun 11 13:12 metaauto-1.0p1
drwxr-xr-x 2 root wheel 512 Jun 11 12:44 openldap-client-2.4.40
drwxr-xr-x 2 root wheel 512 Jun 11 13:18 openpam-20141014
drwxr-xr-x 2 root wheel 512 Jun 11 13:16 p11-kit-0.22.1p1
drwxr-xr-x 2 root wheel 512 Jun 11 11:43 p5-Error-0.17024
drwxr-xr-x 2 root wheel 512 Jun 11 12:54 p5-XML-Parser-2.44
drwxr-xr-x 2 root wheel 512 Jun 11 13:18 pcre-8.37p0
drwxr-xr-x 2 root wheel 512 May 13 12:07 pico-5.07p3
drwxr-xr-x 2 root wheel 512 Jun 11 13:02 png-1.6.17
drwxr-xr-x 2 root wheel 512 Jun 11 13:18 popt-1.16p0
drwxr-xr-x 2 root wheel 512 Jun 11 13:04 py-MarkupSafe-0.23
drwxr-xr-x 2 root wheel 512 Jun 11 13:04 py-beaker-1.6.2p3
drwxr-xr-x 2 root wheel 512 Jun 11 13:04 py-crypto-2.6.1p0
drwxr-xr-x 2 root wheel 512 Jun 11 12:05 py-dnspython-1.11.1
drwxr-xr-x 2 root wheel 512 Jun 11 12:08 py-libxml-2.9.2p0
drwxr-xr-x 2 root wheel 512 Jun 11 13:05 py-mako-0.9.1p1
drwxr-xr-x 2 root wheel 512 Jun 12 11:48 py-setuptools-3.4.4p2v0
drwxr-xr-x 2 root wheel 512 Jun 12 11:48 python-2.7.10
drwxr-xr-x 2 root wheel 512 Jun 11 11:43 rsync-3.1.1
drwxr-xr-x 2 root wheel 512 Jun 11 12:01 tcl-8.5.18
drwxr-xr-x 2 root wheel 512 Jun 11 11:38 tcsh-6.19.00
drwxr-xr-x 2 root wheel 512 Jun 11 12:01 tk-8.5.18
drwxr-xr-x 2 root wheel 512 Jun 11 12:05 unzip-6.0p7
drwxr-xr-x 2 root wheel 512 Apr 9 14:18 vmwh-1.1v0
drwxr-xr-x 2 root wheel 512 Apr 9 14:25 xclip-0.12p0
drwxr-xr-x 2 root wheel 512 Jun 11 12:50 xmlto-0.0.26p0
drwxr-xr-x 2 root wheel 512 Jun 11 12:45 xmltoman-0.4
drwxr-xr-x 2 root wheel 512 Jun 11 12:28 xz-5.2.1
ianm-openbsd:amd64 {136} dmesg | head
OpenBSD 5.7-current (GENERIC.MP) #0: Thu Jun 11 10:24:17 AEST 2015
r...@ianm-openbsd.uws-libsystems.edu.au:/usr/src/sys/arch/amd64/compile/GENERIC.MP
real mem = 3141468160 (2995MB)
avail mem = 3042451456 (2901MB)
mpath0 at root
scsibus0 at mpath0: 256 targets
mainbus0 at root
bios0 at mainbus0: SMBIOS rev. 2.4 @ 0xe0010 (364 entries)
bios0: vendor Phoenix Technologies LTD version "6.00" date 07/31/2013
bios0: VMware, Inc. VMware Virtual Platform
Ian McWilliam
From: Juan Francisco Cantero Hurtado [i...@juanfra.info]
Sent: Friday, 12 June 2015 11:45 AM
To: Ian Mcwilliam
Cc: Jérémie Courrèges-Anglas; Ian McWilliam; OpenBSD ports; d...@openbsd.org
Subject: Re: [update] samba-4.0.26
You need to update the subpackage "tdb" before of to build samba.
IIRC, "env SUBPACKAGE="-tdb" make update"
On Thu, Jun 11, 2015 at 11:44:30PM +, Ian Mcwilliam wrote:
> Everything updated, kernel / userland / xenocara built about an hour before
> trying to build. Fresh ports tree from the same time. My previous attempts at
> building a newer samba 4.0.x failed at the packing stage due to the perl
> stuff being in a different location so nothing should have been registered
> anywhere. I'll clean out everything throughly today and see what happens.
>
>
> Ian McWilliam
>
> ____________
> From: Jérémie Courrèges-Anglas [j...@wxcvbn.org]
> Sent: Thursday, 11 June 2015 7:43 PM
> To: Ian Mcwilliam
> Cc: Ian McWilliam; OpenBSD ports; d...@openbsd.org
> Subject: Re: [update] samba-4.0.26
>
> Ian Mcwilliam writes:
>
> > Hmm, I see this.
> >
> > ===> Building package for samba-4.0.26
> > Create /usr/packages/amd64/all/samba-4.0.26.tgz
> > Error: Libraries in packing-lists in the ports tree
> >and libraries from installed packages don't match
> > --- /tmp/dep_cache.jj4UL4tjY/portstree-samba-4.0.26 Thu Jun 11 13:41:38
> > 2015
> > +++ /tmp/dep_cache.jj4UL4tjY/inst-samba-4.0.26 Thu Jun 11 13:41:38 2015
> > @@ -24,7 +24,7 @@
> > -W ldb.0.0
> > -W pyldb-util.0.0
> > -W pytalloc-util.0.0
> > --W tdb.4.0
> > +-W tdb.5.0
> > -W tevent.0.0
> > -W lib/samba/nss_wrapper.0.0
> > -W lib/samba/socket_wrapper.0.0
> > *** Error 1 in . (/usr/ports/infrastructure/mk/bsd.port.mk:3242
> > 'wantlib-arg
Re: [update] samba-4.0.26
Building out of mystuff directory fails. Building from the ports directory
works. Go figure...
Ian McWilliam
From: Juan Francisco Cantero Hurtado [i...@juanfra.info]
Sent: Saturday, 13 June 2015 1:26 AM
To: Ian Mcwilliam
Cc: Jérémie Courrèges-Anglas; Ian McWilliam; OpenBSD ports; d...@openbsd.org
Subject: Re: [update] samba-4.0.26
I've tried the patch with samba4 installed (which showed a different
error to yours) and without it. It builds fine without samba
installed.
Obviously you have the previous version of tds somewhere.
Try this: find /usr/lib /usr/local/lib -name '*tdb*'
On Fri, Jun 12, 2015 at 03:16:46AM +, Ian Mcwilliam wrote:
> Still no dice even with cleaning everything up.
>
> make clean=all
> env SUBPACKAGE="-tdb" make update
>
> Brand spanking new usr/ports/* that has the empty plist/amd64 directory. Same
> error, same bat channel.
>
>
> ===> Building package for samba-4.0.26
> Create /usr/packages/amd64/all/samba-4.0.26.tgz
> Error: Libraries in packing-lists in the ports tree
>and libraries from installed packages don't match
> --- /tmp/dep_cache.jIhQSC1pn/portstree-samba-4.0.26 Fri Jun 12 13:02:25
> 2015
> +++ /tmp/dep_cache.jIhQSC1pn/inst-samba-4.0.26 Fri Jun 12 13:02:25 2015
> @@ -24,7 +24,7 @@
> -W ldb.0.0
> -W pyldb-util.0.0
> -W pytalloc-util.0.0
> --W tdb.4.0
> +-W tdb.5.0
> -W tevent.0.0
> -W lib/samba/nss_wrapper.0.0
> -W lib/samba/socket_wrapper.0.0
> *** Error 1 in . (/usr/ports/infrastructure/mk/bsd.port.mk:3243
> 'wantlib-args')
> *** Error 1 in . (/usr/ports/infrastructure/mk/bsd.port.mk:1956
> '/usr/packages/amd64/all/samba-4.0.26.tgz')
> *** Error 1 in . (/usr/ports/infrastructure/mk/bsd.port.mk:2507
> '_internal-package')
> *** Error 1 in . (/usr/ports/infrastructure/mk/bsd.port.mk:1978
> '/usr/ports/update/amd64/samba-4.0.26')
> *** Error 1 in /usr/mystuff/net/samba4
> (/usr/ports/infrastructure/mk/bsd.port.mk:2487 'update')
>
>
> ianm-openbsd:amd64 {131} pkg_info
> alpine-2.20 UW e-mail client
> aspell-0.60.6.1p2 spell checker designed to eventually replace Ispell
> autoconf-2.13p3 automatically configure source code on many Un*x platforms
> autoconf-2.65p0 automatically configure source code on many Un*x platforms
> autoconf-2.67p0 automatically configure source code on many Un*x platforms
> autoconf-2.69p1 automatically configure source code on many Un*x platforms
> automake-1.14.1 GNU Standards-compliant Makefile generator
> avahi-0.6.31p17 framework for Multicast DNS Service Discovery
> bash-4.3.39 GNU Bourne Again Shell
> bison-2.3p2 GNU parser generator
> bzip2-1.0.6p1 block-sorting file compressor, unencumbered
> cairo-1.14.2vector graphics library
> cups-libs-2.0.3p0 CUPS libraries and headers
> curl-7.42.1 get files from FTP, Gopher, HTTP or HTTPS servers
> cvsps-2.1p0 generate patchsets from CVS repositories
> cyrus-sasl-2.1.26p13 RFC SASL (Simple Authentication and Security Layer)
> db-4.6.21p1v0 Berkeley DB package, revision 4
> dbus-1.8.18v0 message bus system
> dbus-daemon-launch-helper-1.8.18 DBus setuid helper for starting system
> services
> docbook-4.5p1 technical documentation XML/SGML definitions
> docbook-dsssl-1.79 modular DSSSL stylesheets for the DocBook DTD
> docbook-xsl-1.68.1p5 docbook XSL modular stylesheet
> dos2unix-7.2.2 convert DOS/MAC files to UNIX (line-endings/charset)
> e2fsprogs-1.42.12p0 utilities to manipulate ext2 filesystems
> gamin-0.1.10p21 file and directory monitoring system
> gdbm-1.11p0 GNU dbm
> gettext-0.19.4p0GNU gettext
> git-2.4.3 GIT - Tree History Storage Tool
> glib2-2.44.1general-purpose utility library
> gmake-4.1p0 GNU make
> gmp-5.0.2p3 library for arbitrary precision arithmetic
> gnugetopt-1.1.6 GNU getopt(1) utility
> gnutls-3.3.15 GNU Transport Layer Security library
> gobject-introspection-1.44.0 GObject Introspection
> gperf-3.0.4p0 perfect hash functions, to help write parsers
> groff-1.22.3p1 GNU troff typesetter
> help2man-1.46.6 generates simple manual pages from program output
> icu4c-55.1p0International Components for Unicode
> iniparser-3.1p1 ini file parsing library
> intltool-0.51.0 internationalization tools
> iso8879-1986p0 character entity sets from ISO 8879:1986 (SGML)
> libdaemon-0.14p1lightweight C library that eases the writing of daemons
> libelf-0.8.13p3 read, modify, create ELF files on any arch
> libexecinfo-0.2p5v0 clone of backtrace facility found in the GNU libc
> l
Re: [update] samba-4.0.26
On 16/06/2015 9:43 PM, Jérémie Courrèges-Anglas wrote: Ian Mcwilliam writes: Building out of mystuff directory fails. Building from the ports directory works. Go figure... I didn't try building it outside of /usr/ports/net/samba4; there are of course several problems with the build system. Including "make package fails if samba4 is already installed" reported by sthen@ But given the state of this port I think that we'd better work in small steps and ship this update. Objections / oks? To date all of the work I've done on the samba4 port has been out of mystuff directory. Mystified as to why this fails this time. Please commit, Ian McWilliam Ian McWilliam
Re: [update] samba-4.1.18
Thanks for this. I won't get around to testing this till next week.
SAMBA_LOGDIR in the Makefile should be changed to use ${VARBASE} instead of
${SYSCONFIGDIR}.
I had this change in a version I was once working on.
SAMBA_LOGDIR = ${SYSCONFDIR}/log/samba
I'll completed the RC scripts next week too. Been sitting here for a while
rotting.......
Ian McWilliam
From: owner-po...@openbsd.org [owner-po...@openbsd.org] on behalf of Jérémie
Courrèges-Anglas [j...@wxcvbn.org]
Sent: Friday, 19 June 2015 1:17 AM
To: OpenBSD ports
Cc: Ian McWilliam; d...@openbsd.org
Subject: Re: [update] samba-4.1.18
Oh, by the way: the print_sockaddr() functions in libc/asr and samba4
conflict, this should be resolved after the next libc crank. For those
who want to test this update right now:
Index: asr_debug.c
===
RCS file: /cvs/src/lib/libc/asr/asr_debug.c,v
retrieving revision 1.18
diff -u -p -r1.18 asr_debug.c
--- asr_debug.c 26 May 2015 19:28:57 - 1.18
+++ asr_debug.c 18 Jun 2015 11:38:26 -
@@ -219,7 +219,7 @@ asr_dump_packet(FILE *f, const void *dat
}
const char *
-print_sockaddr(const struct sockaddr *sa, char *buf, size_t len)
+asr_print_sockaddr(const struct sockaddr *sa, char *buf, size_t len)
{
charh[256];
int portno;
@@ -300,7 +300,7 @@ asr_dump_config(FILE *f, struct asr *a)
ac->ac_nstimeout,
ac->ac_nsretries);
for (i = 0; i < ac->ac_nscount; i++)
- fprintf(f, "%s\n", print_sockaddr(ac->ac_ns[i], buf,
+ fprintf(f, "%s\n", asr_print_sockaddr(ac->ac_ns[i], buf,
sizeof buf));
fprintf(f, "LOOKUP %s", ac->ac_db);
fprintf(f, "\n\n");
Index: asr_private.h
===
RCS file: /cvs/src/lib/libc/asr/asr_private.h,v
retrieving revision 1.30
diff -u -p -r1.30 asr_private.h
--- asr_private.h 4 Jun 2015 19:23:17 - 1.30
+++ asr_private.h 18 Jun 2015 11:38:06 -
@@ -342,7 +342,7 @@ struct asr_query *gethostbyaddr_async_ct
const char *asr_querystr(int);
const char *asr_statestr(int);
const char *asr_transitionstr(int);
-const char *print_sockaddr(const struct sockaddr *, char *, size_t);
+const char *asr_print_sockaddr(const struct sockaddr *, char *, size_t);
void asr_dump_config(FILE *, struct asr *);
void asr_dump_packet(FILE *, const void *, size_t);
Index: res_send_async.c
===
RCS file: /cvs/src/lib/libc/asr/res_send_async.c,v
retrieving revision 1.22
diff -u -p -r1.22 res_send_async.c
--- res_send_async.c26 Mar 2014 18:13:15 - 1.22
+++ res_send_async.c18 Jun 2015 11:38:40 -
@@ -426,7 +426,7 @@ udp_send(struct asr_query *as)
#endif
DPRINT("asr: [%p] connecting to %s UDP\n", as,
- print_sockaddr(AS_NS_SA(as), buf, sizeof buf));
+ asr_print_sockaddr(AS_NS_SA(as), buf, sizeof buf));
as->as_fd = sockaddr_connect(AS_NS_SA(as), SOCK_DGRAM);
if (as->as_fd == -1)
@@ -503,7 +503,7 @@ tcp_write(struct asr_query *as)
/* First try to connect if not already */
if (as->as_fd == -1) {
DPRINT("asr: [%p] connecting to %s TCP\n", as,
- print_sockaddr(AS_NS_SA(as), buf, sizeof buf));
+ asr_print_sockaddr(AS_NS_SA(as), buf, sizeof buf));
as->as_fd = sockaddr_connect(AS_NS_SA(as), SOCK_STREAM);
if (as->as_fd == -1)
return (-1); /* errno set */
--
jca | PGP : 0x1524E7EE / 5135 92C1 AD36 5293 2BDF DDCC 0DFA 74AE 1524 E7EE
Re: [update] samba-4.1.18
Heimdal comes to mind as an issue.
Post 5.8 would be a good time to resolve these things.
Ian McWilliam
From: owner-po...@openbsd.org [owner-po...@openbsd.org] on behalf of Stuart
Henderson [st...@openbsd.org]
Sent: Friday, 19 June 2015 6:53 PM
To: OpenBSD ports; Ian McWilliam; d...@openbsd.org
Subject: Re: [update] samba-4.1.18
On 2015/06/18 16:27, Jérémie Courrèges-Anglas wrote:
>
> A few notes:
>
> - ntdb support has been enabled by default upstream; I decided not to
> put it in an "ntdb" subpackage since upstream is discussing its
> removal:
>
> https://lists.samba.org/archive/samba-technical/2015-March/106098.html
>
> - Ian spotted that only OpenBSD doesn't make use of -Wl,--as-needed.
> Changing that fixes the sluggish startup time mostly spent in ld.so.
>
> - regedit support disabled for now because of a linker failure
>
> - pidl patches now needed anymore
>
> Lightly tested with --server-role=dc --use-ntvfs and a win7 client.
> Doesn't work with /etc/malloc.conf -> S
This works fine for my use case (I'm not using AD here, just simple
serving), and actually even with 'S' malloc.conf.
Seeing as it isn't hooked up to the build, I don't see any reason
not to update, and with the addition of -as-needed it's hugely more
usable for people building themselves, so OK sthen@.
With an eye to switching net/samba over to 4.x at some point (which
should be considerably easier than building it in net/samba4 alongside
3.x in net/samba as the "main" version), it seems sensible to make a
note of any known issues with this:
- fdm needs a simple tweak in order to find tdb, i.e.
MAKE_FLAGS= CPPFLAGS="-I${LOCALBASE}/include
-I${LOCALBASE}/include/samba-4.0 -I."
- needs rc scripts
- obviously it will need dependencies checking and I imagine in most
cases fixing up to find headers
- anyone know of anything else?
I'm thinking that post-5.8 would probably be a good timescale for an
actual changeover.
Re: [update] samba-4.1.18
tdb. We should be able to update the ports/databases/tdb to a version Samba 4
likes and point Samba 4 at it. The Samba 3 ports currently does this. Just need
to make sure that the 2? other ports using tdb are fine with the update.
Ian McWilliam
From: Jérémie Courrèges-Anglas [j...@wxcvbn.org]
Sent: Tuesday, 23 June 2015 8:43 PM
To: Ian Mcwilliam
Cc: Stuart Henderson; OpenBSD ports
Subject: Re: [update] samba-4.1.18
Ian Mcwilliam writes:
> Heimdal comes to mind as an issue.
It's not sure to me how things will evolve upstream. On one hand
heimdal is embedded in the build system right now, on the other hand
there's work being done to get rid of that dependency. Most Linux
distros use MIT krb5, not Heimdal, as their main Kerberos
implementation. So moving to heimdal from ports right now may not be
that interesting in the end.
> Post 5.8 would be a good time to resolve these things.
Indeed, I don't think pre-5.8 will leave us enough time.
[...]
>> Lightly tested with --server-role=dc --use-ntvfs and a win7 client.
>> Doesn't work with /etc/malloc.conf -> S
>
> This works fine for my use case (I'm not using AD here, just simple
> serving), and actually even with 'S' malloc.conf.
With AD I've seen segfaults when joining machines, it looked like the
dynamic DNS update step; I haven't looked further. I'm already glad it
appears to work for AD auth and netlogon, and for simple file sharing.
> Seeing as it isn't hooked up to the build, I don't see any reason
> not to update, and with the addition of -as-needed it's hugely more
> usable for people building themselves, so OK sthen@.
>
> With an eye to switching net/samba over to 4.x at some point (which
> should be considerably easier than building it in net/samba4 alongside
> 3.x in net/samba as the "main" version), it seems sensible to make a
> note of any known issues with this:
>
> - fdm needs a simple tweak in order to find tdb, i.e.
>
> MAKE_FLAGS= CPPFLAGS="-I${LOCALBASE}/include
> -I${LOCALBASE}/include/samba-4.0 -I."
There's a more recent, standalone tdb distribution. It's not clear if
standalone tdb could be used instead of the bundled one. I'll have to
ask upstream.
> - needs rc scripts
>
> - obviously it will need dependencies checking and I imagine in most
> cases fixing up to find headers
The biggest problems will probably occur at link time. :-/
> - anyone know of anything else?
>
> I'm thinking that post-5.8 would probably be a good timescale for an
> actual changeover.
--
jca | PGP : 0x1524E7EE / 5135 92C1 AD36 5293 2BDF DDCC 0DFA 74AE 1524 E7EE
[update] Samba4 4.1.19
https://www.samba.org/samba/history/samba-4.1.19.html Ian McWilliam samba-4.1.19.diff Description: samba-4.1.19.diff
Re: samba4 switch - affected ports
PLIST-main:@man man/man8/nmbd.8 PLIST-main:@bin sbin/nmbd is built and packaged. There are no rc scripts yet. I was working on having a set that worked as samba3 flittering did, i.e. using smbd and nmbd and a set for starting AD. The scripts need to check your not running AD or the old style file sharing before launching any daemons. Haven't finished those yet. Ian McWilliam From: owner-po...@openbsd.org [owner-po...@openbsd.org] on behalf of Jérémie Courrèges-Anglas [j...@wxcvbn.org] Sent: Thursday, 16 July 2015 8:13 AM To: Giovanni Bechis Cc: OpenBSD ports; Ian McWilliam Subject: Re: samba4 switch - affected ports Stuart Henderson writes: > On 2015/07/15 12:45, Jérémie Courrèges-Anglas wrote: >> Giovanni Bechis writes: [...] >> > From my latest tests there is no network browsing with a Samba4 AD server >> > (at least till 4.1.18, I haven't tested 4.2.x) and a samba3 nmbd could be >> > used as a workaround. >> >> I was not aware of this. nmbd comes from source3/, so that would be >> a regression. >> >> I won't have a windows box handy to reproduce this until... august. Do >> others experience the same problem? > > Is that this > > https://wiki.samba.org/index.php/FAQ#Why_is_Network_Neighbourhood_empty_or_does_not_show_all_machines_in_an_Samba_AD_environment.3F > > (i.e. functionality not implemented in the AD DC yet)? Hmm, ok. IMHO such a limitation is not a showstopper for the switch to samba4. (BTW, note that the informations on the samba wiki sometimes get outdated...) > Can you just run samba4 as an NT4-type DC instead? I don't see a reason > why that would be any worse than running samba3 as an NT4-type DC. Indeed. It would be nicer than keeping net/samba around, unhooked, both for you and for ports. -- jca | PGP : 0x1524E7EE / 5135 92C1 AD36 5293 2BDF DDCC 0DFA 74AE 1524 E7EE
Re: [update] devel/libtalloc -> 2.1.2 (samba4)
Could libtalloc and tdb python parts be split into multiple packages so we
don't have to install python module libs unless there is something python that
depends on these? Just a thought.
Ian McWilliam
From: owner-po...@openbsd.org [owner-po...@openbsd.org] on behalf of Jérémie
Courrèges-Anglas [j...@wxcvbn.org]
Sent: Saturday, 18 July 2015 5:35 AM
To: OpenBSD ports
Cc: Ian McWilliam
Subject: [update] devel/libtalloc -> 2.1.2 (samba4)
Similar to the databases/tdb update, let's also bite the bullet with
talloc. The waf patches are slightly different because of the addition
of OpenBSD-specific tests that actually make things worse.
(btw I'm not expecting reviews for the waf parts. ;)
net/ocserv and net/samba still look happy.
Comments / ok?
These two updates would help ongoing efforts on net/samba4, even if
switching the ports tree from samba3 to samba4 will happen later,
post-5.8.
Index: Makefile
===
RCS file: /cvs/ports/devel/libtalloc/Makefile,v
retrieving revision 1.5
diff -u -p -r1.5 Makefile
--- Makefile3 Jul 2015 22:47:25 - 1.5
+++ Makefile17 Jul 2015 19:27:51 -
@@ -2,25 +2,40 @@
SHARED_ONLY= Yes
-SHARED_LIBS= talloc 0.0 # .2.0
-
COMMENT= hierarchical memory pool system with destructors
-DISTNAME= talloc-2.0.1
-REVISION= 2
+
+DISTNAME= talloc-2.1.2
PKGNAME= lib${DISTNAME}
+SHARED_LIBS+= talloc 1.0
+SHARED_LIBS+= pytalloc-util 0.0
+
CATEGORIES=devel
+
HOMEPAGE= https://talloc.samba.org/
+MAINTAINER=Jeremie Courreges-Anglas
+
# LGPLv3+
PERMIT_PACKAGE_CDROM= Yes
+WANTLIB += m pthread util ${MODPY_WANTLIB}
+
MASTER_SITES= https://samba.org/ftp/talloc/
-CONFIGURE_STYLE=gnu
-CONFIGURE_ENV= CFLAGS="${CFLAGS} -g"
-MAKE_FLAGS+= TALLOC_SOLIB=libtalloc.so.${LIBtalloc_VERSION} \
- SHLD_FLAGS="-g -shared" \
- SONAMEFLAG="" TALLOC_SONAME=""
+MODULES= lang/python
+MODPY_RUNDEP= No
+MODPY_ADJ_FILES= buildtools/bin/waf
+
+LIB_DEPENDS= ${MODPY_LIB_DEPENDS}
+
+WAF_ARGS= -v -j ${MAKE_JOBS}
+MAKE_FLAGS=WAF_ARGS="${WAF_ARGS}"
+.for _l _v in ${SHARED_LIBS}
+MAKE_ENV += LIB${_l:S/-/_/g}_VERSION=${_v}
+.endfor
+
+CONFIGURE_STYLE= simple
+CONFIGURE_ARGS= --mandir="${PREFIX}/man"
.include
Index: distinfo
===
RCS file: /cvs/ports/devel/libtalloc/distinfo,v
retrieving revision 1.2
diff -u -p -r1.2 distinfo
--- distinfo13 Jan 2014 22:49:11 - 1.2
+++ distinfo17 Jul 2015 19:27:51 -
@@ -1,2 +1,2 @@
-SHA256 (talloc-2.0.1.tar.gz) = W4EFJ0BfKdVPUO/Xi/LInjGPLNi+0AHyLyoUEv0nybQ=
-SIZE (talloc-2.0.1.tar.gz) = 242426
+SHA256 (talloc-2.1.2.tar.gz) = Iw14o/ynWhWrD11217uurdPB5pWty7CFky0if1wxg40=
+SIZE (talloc-2.1.2.tar.gz) = 423706
Index: patches/patch-Makefile
===
RCS file: patches/patch-Makefile
diff -N patches/patch-Makefile
--- /dev/null 1 Jan 1970 00:00:00 -
+++ patches/patch-Makefile 17 Jul 2015 19:27:51 -
@@ -0,0 +1,11 @@
+$OpenBSD$
+--- Makefile.orig Wed Jul 15 22:53:08 2015
Makefile Wed Jul 15 22:52:56 2015
+@@ -1,6 +1,6 @@
+ # simple makefile wrapper to run waf
+
+-WAF=WAF_MAKE=1 PATH=buildtools/bin:../../buildtools/bin:$$PATH waf
++WAF=WAF_MAKE=1 PATH=buildtools/bin:../../buildtools/bin:$$PATH waf ${WAF_ARGS}
+
+ all:
+ $(WAF) build
Index: patches/patch-buildtools_wafadmin_Tools_ccroot_py
===
RCS file: patches/patch-buildtools_wafadmin_Tools_ccroot_py
diff -N patches/patch-buildtools_wafadmin_Tools_ccroot_py
--- /dev/null 1 Jan 1970 00:00:00 -
+++ patches/patch-buildtools_wafadmin_Tools_ccroot_py 17 Jul 2015 19:27:51
-
@@ -0,0 +1,55 @@
+$OpenBSD$
+
+- badly computed target name, install fails
+
+- at build time, encode the full library name + version in the SONAME
+
+- remove openbsd-specific tests, install fails
+
+--- buildtools/wafadmin/Tools/ccroot.py.orig Tue Mar 10 06:28:31 2015
buildtools/wafadmin/Tools/ccroot.pyThu Jul 16 14:29:24 2015
+@@ -183,10 +183,6 @@ def get_target_name(self):
+ # include the version in the dll file name,
+ # the import lib file name stays unversionned.
+ name = name + '-' + nums[0]
+- elif self.env.DEST_OS == 'openbsd':
+- pattern = '%s.%s' % (pattern, nums[0])
+- if len(nums) >= 2:
+- pattern += '.%s' % nums[1]
+
+ return os.path.join(dir, pattern % name)
+
+@@ -594,7 +590,10 @@ def apply_vnum(self):
+ name2 = libname + '.' + nums[0]
Re: OpenJDK 8
ports/devel/jdk/1.8/ ONLY_FOR_ARCHS= i386 amd64 Ian McWilliam From: owner-po...@openbsd.org [owner-po...@openbsd.org] on behalf of Lior Malka [lio...@gmail.com] Sent: Wednesday, 23 September 2015 12:40 PM To: ports@openbsd.org; k...@openbsd.org Subject: OpenJDK 8 Hello, It seems that the only port for OpenJDK on OpenBSD is v1.7.0 71v0. Is that correct? I need OpenJDK 8, because I am trying to build OpenJFX for OpenBSD, and the build process uses Gradle, and Gradle reports an error. I think the error is due to the version of Java I have (I have 7, but I need 8). To summarize: I need your help in installing OpenJDK 8 on my OpenBSD 5.7 64bit. I would be happy to contribute (instructions/binaries) from my experience so that others can use JavaFX on OpenBSD. I don't know if I have enough experience to create a port for OpenJDK 8, and I don't want to commit to this effort because I don't know if I can put the time into it. I do appreciate all the efforts that you guys are putting into porting very much!! Thanks! Lior
Unbreak ClamAV OpenBSD_6_6 stable
Attached diff removes currents @static-lib from the packing list so it packages under 6.6 stable. Ian McWilliam clamav-unbreak-6.6-stable.diff Description: clamav-unbreak-6.6-stable.diff
Re: UPDATE: Nextcloud-17.0.1
On Wed, 27 Nov 2019 20:44:30 -0300 Adriano Barbosa wrote: > Sorry for insisting, but I'm trying to figure out what I'm doing wrong. > > I update my ports tree with `cvs -qd > anon...@anoncvs.usa.openbsd.org:/cvs up -Pd -rOPENBSD_6_6` Your trying to apply a patch destined for current against the 6.6-stable ports tree. Ian McWilliam From: owner-po...@openbsd.org on behalf of George Koehler Sent: Thursday, 28 November 2019 2:12 PM To: Adriano Barbosa Cc: Gonzalo L. Rodriguez ; ports@openbsd.org Subject: Re: UPDATE: Nextcloud-17.0.1 On Wed, 27 Nov 2019 20:44:30 -0300 Adriano Barbosa wrote: > Sorry for insisting, but I'm trying to figure out what I'm doing wrong. > > I update my ports tree with `cvs -qd > anon...@anoncvs.usa.openbsd.org:/cvs up -Pd -rOPENBSD_6_6` > I end up with Makefile with the following header: # $OpenBSD: > Makefile,v 1.44.2.1 2019/10/29 07:27:41 gonzalo Exp $ > Apply the diff you provided with `patch < /tmp/nextcloud-17.0.1.diff` > while in /usr/ports/www/nextcloud directory > I end up with the same errors: > Hmm... Looks like a unified diff to me... > The text leading up to this was: > -- > |Index: Makefile > |=== > |RCS file: /cvs/ports/www/nextcloud/Makefile,v > |retrieving revision 1.45 > |diff -u -p -r1.45 Makefile > |--- Makefile 29 Oct 2019 07:24:03 - 1.45 > |+++ Makefile 19 Nov 2019 07:17:43 - > -- > Patching file Makefile using Plan A... > Hunk #1 failed at 2. > 1 out of 1 hunks failed--saving rejects to Makefile.rej This hunk would change the "V= 17.0.0" line to say "V= 17.0.1", but failed to find the "V= 17.0.0" line. Your Makefile might differ from the one in cvs, and these differences might conflict with the patch. Try to revert your local modifications, then apply the patch again. You might have modifications if you patched nextcloud in the past, and didn't undo the patch before cvs update. You can check for local modifications with $ cd /usr/ports/www/nextcloud $ cvs -nq up -Pd It might show lines like: M Makefile C distinfo Those files have 'M' local modification or 'C' conflict. To revert them, you might rm(1) those files, then do another cvs update. -- George Koehler
UPDATE: samba-3.6.10
Bugfix update for samba to 3.6.10. http://www.samba.org/samba/history/samba-3.6.10.html It also includes a patch from Christian Weisgerber (naddy@) to support posix_openpt() Ian McWilliam samba-3.6.10_update.diff Description: Binary data
UPDATE: samba 3.6.11
Update for samba to 3.6.11. General bug fix release. http://www.samba.org/samba/history/samba-3.6.11.html Ian McWilliam samba-3.6.11_update.diff Description: Binary data
Re: UPDATE: Samba 3.6.13
Ok by me.
Ian McWilliam
On 22/03/2013 9:24 PM, Brad Smith wrote:
Here is an update to Samba 3.6.13.
OK?
Index: Makefile
===
RCS file: /home/cvs/ports/net/samba/Makefile,v
retrieving revision 1.178
diff -u -p -r1.178 Makefile
--- Makefile11 Mar 2013 11:35:56 - 1.178
+++ Makefile22 Mar 2013 09:46:53 -
@@ -5,7 +5,7 @@ SHARED_ONLY=Yes
COMMENT-main= SMB and CIFS client and server for UNIX
COMMENT-docs= additional documentation and examples for Samba
-DISTNAME= samba-3.6.12
+DISTNAME= samba-3.6.13
PKGNAME-main= ${DISTNAME}
FULLPKGNAME-docs= ${DISTNAME:S/-/-docs-/}
FULLPKGPATH-docs= net/samba,-docs
@@ -24,8 +24,8 @@ MAINTAINER= Ian McWilliam
-WANTLIB += asn1 c crypto cups execinfo gssapi iniparser krb5 m ncurses
-WANTLIB += popt pthread readline ssl talloc tdb z
+WANTLIB += c cups execinfo iniparser ncurses popt pthread readline talloc
+WANTLIB += tdb z
MASTER_SITES= http://download.samba.org/samba/ftp/ \
http://us2.samba.org/samba/ftp/ \
@@ -57,7 +57,7 @@ USE_GMAKE=Yes
USE_GROFF=Yes
#SEPARATE_BUILD= Yes
CONFIGURE_STYLE= gnu
-AUTOCONF_VERSION= 2.68
+AUTOCONF_VERSION= 2.69
CONFIGURE_ARGS= --disable-fam \
--without-pam \
Index: distinfo
===
RCS file: /home/cvs/ports/net/samba/distinfo,v
retrieving revision 1.38
diff -u -p -r1.38 distinfo
--- distinfo30 Jan 2013 23:22:05 - 1.38
+++ distinfo22 Mar 2013 08:51:34 -
@@ -1,2 +1,2 @@
-SHA256 (samba-3.6.12.tar.gz) = b/eXwXcmE71RctLIuQD9Vr8JbXJS+u6LR8SSWk/cn4s=
-SIZE (samba-3.6.12.tar.gz) = 34073788
+SHA256 (samba-3.6.13.tar.gz) = mS+K1WcXv1UbAK0dMRcFiKCH+1wtTZzTj9EVRPK4pZY=
+SIZE (samba-3.6.13.tar.gz) = 34101849
Index: patches/patch-source3_configure_in
===
RCS file: /home/cvs/ports/net/samba/patches/patch-source3_configure_in,v
retrieving revision 1.7
diff -u -p -r1.7 patch-source3_configure_in
--- patches/patch-source3_configure_in 17 Dec 2012 00:52:58 - 1.7
+++ patches/patch-source3_configure_in 22 Mar 2013 08:53:19 -
@@ -1,16 +1,7 @@
$OpenBSD: patch-source3_configure_in,v 1.7 2012/12/17 00:52:58 brad Exp $
source3/configure.in.orig Thu Dec 6 20:28:00 2012
-+++ source3/configure.in Sun Dec 16 20:12:54 2012
-@@ -1112,7 +1112,7 @@ AC_CHECK_FUNCS(sigprocmask sigblock sigaction sigset i
- AC_CHECK_FUNCS(initgroups select rdchk getgrnam getgrent pathconf)
- AC_CHECK_FUNCS(getgrset)
- AC_CHECK_FUNCS(setpriv setgidx setuidx setgroups sysconf stat64 fstat64)
--AC_CHECK_FUNCS(lstat64 fopen64 atexit grantpt lseek64 ftruncate64
posix_fallocate posix_fallocate64)
-+AC_CHECK_FUNCS(lstat64 fopen64 atexit grantpt posix_openpt lseek64
ftruncate64 posix_fallocate posix_fallocate64)
- AC_CHECK_FUNCS(fallocate fallocate64)
- AC_CHECK_FUNCS(fseeko fseek64 fseeko64 ftell64 ftello64 setluid getpwanam)
- AC_CHECK_FUNCS(opendir64 readdir64 seekdir64 telldir64 rewinddir64 closedir64)
-@@ -1671,8 +1671,7 @@ DSO_EXPORTS=""
+--- source3/configure.in.orig Mon Mar 18 04:59:37 2013
source3/configure.in Fri Mar 22 04:52:13 2013
+@@ -1675,8 +1675,7 @@ DSO_EXPORTS=""
;;
*openbsd*) BLDSHARED="true"
LDSHFLAGS="-shared"
@@ -20,7 +11,7 @@ $OpenBSD: patch-source3_configure_in,v 1
PICFLAG="-fPIC"
AC_DEFINE(STAT_ST_BLOCKSIZE,512,[The size of a block])
AC_DEFINE(BROKEN_GETGRNAM,1,[Does getgrnam work
correctly])
-@@ -6806,13 +6805,43 @@ fi
+@@ -6810,13 +6809,43 @@ fi
CFLAGS=$CFLAGS_SAVE
Index: patches/patch-source3_rpc_server_samr_srv_samr_chgpasswd_c
===
RCS file: patches/patch-source3_rpc_server_samr_srv_samr_chgpasswd_c
diff -N patches/patch-source3_rpc_server_samr_srv_samr_chgpasswd_c
--- patches/patch-source3_rpc_server_samr_srv_samr_chgpasswd_c 17 Dec 2012
00:52:58 - 1.1
+++ /dev/null 1 Jan 1970 00:00:00 -
@@ -1,16 +0,0 @@
-$OpenBSD: patch-source3_rpc_server_samr_srv_samr_chgpasswd_c,v 1.1 2012/12/17
00:52:58 brad Exp $
source3/rpc_server/samr/srv_samr_chgpasswd.c.orig Sat Dec 8 23:53:28 2012
-+++ source3/rpc_server/samr/srv_samr_chgpasswd.c Sat Dec 8 23:54:49 2012
-@@ -73,8 +73,12 @@ static int findpty(char **slave)
- *slave = NULL;
-
- #if defined(HAVE_GRANTPT)
-+#if defined(HAVE_POSIX_OPENPT)
-+ if ((master = posix_openpt(O_RDWR|O_NOCTTY)) >= 0) {
-+#else
- /* Try to open /dev/ptmx. If that fails, fall through to old method. */
- if ((master = sys_open("/dev/ptmx", O_RDWR, 0)) >= 0) {
-+#endi
UPDATE: samba-3.6.14
Udpate for samba to 3.6.14. General bug fix release. http://www.samba.org/samba/history/samba-3.6.14.html Ian McWilliam samba-3.6.14.diff Description: Binary data
Re: [update] samba-4.8.6
Builds fine, runs fine in my little test setup.
Ian McWilliam
From: owner-po...@openbsd.org on behalf of Jeremie
Courreges-Anglas
Sent: Wednesday, 17 October 2018 4:56 AM
To: ports
Cc: Ian McWilliam
Subject: [update] samba-4.8.6
Hi,
here's an update to the latest version on the 4.8 branch. I plan to
commit it to -current and 6.4. Test reports welcome.
Index: Makefile
===
RCS file: /cvs/ports/net/samba/Makefile,v
retrieving revision 1.260
diff -u -p -r1.260 Makefile
--- Makefile5 Sep 2018 08:54:26 - 1.260
+++ Makefile16 Oct 2018 17:51:15 -
@@ -1,6 +1,6 @@
# $OpenBSD: Makefile,v 1.260 2018/09/05 08:54:26 ajacoutot Exp $
-VERSION = 4.8.5
+VERSION = 4.8.6
DISTNAME = samba-${VERSION}
COMMENT-main = SMB and CIFS client and server for UNIX
@@ -20,9 +20,8 @@ PKG_ARCH-docs = *
LDB_V = 1.3.6
TEVENT_V = 0.9.36
-REVISION-main =1
-REVISION-ldb = 0
-REVISION-tevent = 2
+REVISION-ldb = 1
+REVISION-tevent = 3
SHARED_LIBS = asn1-samba4 0.0 \
com_err-samba4 0.0 \
Index: distinfo
===
RCS file: /cvs/ports/net/samba/distinfo,v
retrieving revision 1.71
diff -u -p -r1.71 distinfo
--- distinfo29 Aug 2018 11:40:23 - 1.71
+++ distinfo16 Oct 2018 11:46:30 -
@@ -1,2 +1,2 @@
-SHA256 (samba-4.8.5.tar.gz) = 5Y7msSYtQSi4kyzu5Z1fCwqbvgBUfrPMTEFVLeGmUVU=
-SIZE (samba-4.8.5.tar.gz) = 17715401
+SHA256 (samba-4.8.6.tar.gz) = c7khYXgODZj42iuhrill59wSBhmGkTDTpYaeURvmCpY=
+SIZE (samba-4.8.6.tar.gz) = 17723841
--
jca | PGP : 0x1524E7EE / 5135 92C1 AD36 5293 2BDF DDCC 0DFA 74AE 1524 E7EE
Re: mathjax and firefox
On 4/12/2013 9:05 PM, Brad Smith wrote: On 04/12/13 5:01 AM, Paul Irofti wrote: It works in midori/webkit, and doesnt work in Firefox probably because of different options in your profiles wrt loading mixed content - if i So if I would start fresh with a new profile I wouldn't run into this problem? Possibly, if using pre FF 23. If using FF 23 or newer it sounds like the default setting is what is causing problems for that site. Firefox on other platforms behaves the same with mixed https / http content as does Google Chrome. What needs to happen is for the site to fix the way it loads content such that it is all https for https requests and all http for http requests. Send'em an email and tell them how shoddy their site is. Lowering the security bar by twisting knobs in the browser is just that, lowing the bar again. Ian McWilliam
Re: samba and e2fsprogs packages -- 5.4
On 5/12/2013 8:53 PM, Stuart Henderson wrote: On 2013/12/05 00:48, Nigel Taylor wrote: the problem is this - for amd64/i386 current. $ cd /usr/ports/packages/amd64/all $ check-lib-depends -d . samba-* samba-3.6.15p2-ads(net/samba,-main,ads): Missing lib: uuid.14 (/usr/local/bin/net) (NOT REACHABLE) Scanning: ok This check is run every now and then for all ports. I didn't even know this existed. Is it documented anywhere? How is it different from say make port-lib-depends-check or lib-depends-check ? We haven't done this for ages actually. If anyone's bored it would be great to have a tool that updates WANTLIB automatically for the simple cases (no FLAVOR or subpackages) and this would reduce the pain enough that handling the rest by hand wouldn't be too bad. Something like this should fix current, Please also remove the BUILD_DEPENDS on e2fsprogs, then ok sthen@. If it's not the ads flavor your using, then the dependency is hidden, in which case the FLAVORS other than ads will require changes. It does just affect ads. I've probably not noticed this as all my boxen with samba on have e2fsprogs installed. On a side note samabe 3.6.x is no longer being maintained, just security fixes. We'll have to seriously start porting 4.1.x Ian McWilliam
Re: waf woes
On 1/01/2014 7:00 AM, Brad Smith wrote: Sadly enough autohell is the suck least of build infrastructure and there is a lot of documentation and knowledge regarding its inner workings. IMO not something that can be said about the other build infrastructure whether it is relatively common or not. It might not be m4, but it is python, that's a pretty heavy dependency for build infrastructure. Yup and any new samba + external samba deps is riddled with it. It's what is stopping me from moving forward atm. Need to learn python. At least I have a few weeks to pull out some python books. A newer in tree waf, or multiple versions would help ease the situation rather than patch the hell out of samba build infrastructure. Ian McWilliam
Re: question related to the samba port on OpenBSD
On 20/02/2014 9:00 PM, Sebastian Rother wrote: Dear Brad, dear Ian, Why aint the Version number of the Samba port raised after applying the security patches? >From what I see the most recent version is samba 3.6.22 but OpenBSD includes 3.6.15+&whatever&. If all security patches to 3.6.15 where applied it should be 3.6.22 or? If just the CVE-patches got applied: What's wrong about the other Bugfixes? No new functionality was added. It would be kind if you might could answer me my question about the versioning of this port. Kind regards, Sebastian Because it's not 3.6.22. It is what is says 3.6.15+ patch level. Not all bug fixes post 3.6.15 are rolled in. Only security fixes (thanx Brad). Look, the Samba folk decided from 3.6.16 to change the build environment that had been with the 3.6 branch for 15 releases to python and waf. Unfortunately that busted how we handle shared library versioning on OpenBSD. They changed the build environment for 4.x. No issue. They could have left 3.6 that way it was seeing it was to become obsolete when the 4.1 branch was released. The world is linux and linux only, no project seems to give a rats ass about much else. If it works on linux then it must work everywhere.. Our in-ports tree waf was out of date to use. Some discussion was had about updating this. Not sure what happened after that. Ian McWilliam
Building perl ports and busted paths
OK, so I'm working on an update to a Perl port and I see this ===> Building package for p5-CGI-Application-4.50p0 Create /usr/packages/amd64/no-arch/p5-CGI-Application-4.50p0.tgz ///sr/ports/pobj/p5-CGI-Application-4.50/fake-amd64/usr/local/man/man3p/CGI::Application.3p: fopen: No such file or directory ///sr/ports/pobj/p5-CGI-Application-4.50/fake-amd64/usr/local/man/man3p/CGI::Application::Mailform.3p: fopen: No such file or directory So I tried building another perl port and found this. ===> Building package for p5-YAML-0.84 Create /usr/packages/amd64/no-arch/p5-YAML-0.84.tgz ///sr/ports/pobj/p5-YAML-0.84/fake-amd64/usr/local/man/man3p/YAML::Loader::Base.3p: fopen: No such file or directory ///sr/ports/pobj/p5-YAML-0.84/fake-amd64/usr/local/man/man3p/YAML.3p: fopen: No such file or directory ///sr/ports/pobj/p5-YAML-0.84/fake-amd64/usr/local/man/man3p/YAML::Dumper.3p: fopen: No such file or directory ///sr/ports/pobj/p5-YAML-0.84/fake-amd64/usr/local/man/man3p/YAML::Error.3p: fopen: No such file or directory ///sr/ports/pobj/p5-YAML-0.84/fake-amd64/usr/local/man/man3p/YAML::Tag.3p: fopen: No such file or directory ///sr/ports/pobj/p5-YAML-0.84/fake-amd64/usr/local/man/man3p/YAML::Types.3p: fopen: No such file or directory ///sr/ports/pobj/p5-YAML-0.84/fake-amd64/usr/local/man/man3p/Test::YAML.3p: fopen: No such file or directory ///sr/ports/pobj/p5-YAML-0.84/fake-amd64/usr/local/man/man3p/YAML::Loader.3p: fopen: No such file or directory ///sr/ports/pobj/p5-YAML-0.84/fake-amd64/usr/local/man/man3p/YAML::Node.3p: fopen: No such file or directory ///sr/ports/pobj/p5-YAML-0.84/fake-amd64/usr/local/man/man3p/YAML::Marshall.3p: fopen: No such file or directory ///sr/ports/pobj/p5-YAML-0.84/fake-amd64/usr/local/man/man3p/YAML::Any.3p: fopen: No such file or directory ///sr/ports/pobj/p5-YAML-0.84/fake-amd64/usr/local/man/man3p/YAML::Dumper::Base.3p: fopen: No such file or directory Link to /usr/packages/amd64/all/p5-YAML-0.84.tgz Link to /usr/packages/amd64/ftp/p5-YAML-0.84.tgz Link to /usr/packages/amd64/cdrom/p5-YAML-0.84.tgz Umm what might be breaking the path by replacing /usr with ///sr ? I haven't found the culprit yet.. Ian McWilliam
Re: Building perl ports and busted paths
Thanks, works now.
ianm-openbsd:p5-CGI-Application {109} make repackage
===> Cleaning for p5-CGI-Application-4.50p0
rm -f /usr/packages/amd64/all/p5-CGI-Application-4.50p0.tgz
/usr/packages/amd64/no-arch/p5-CGI-Application-4.50p0.tgz
/usr/packages/amd64/ftp/p5-CGI-Application-4.50p0.tgz
/usr/packages/amd64/cdrom/p5-CGI-Application-4.50p0.tgz
/usr/ports/update/amd64/p5-CGI-Application-4.50p0
`/usr/ports/pobj/p5-CGI-Application-4.50/fake-amd64/.fake_done' is up to date.
===> Building package for p5-CGI-Application-4.50p0
Create /usr/packages/amd64/no-arch/p5-CGI-Application-4.50p0.tgz
Link to /usr/packages/amd64/all/p5-CGI-Application-4.50p0.tgz
Link to /usr/packages/amd64/ftp/p5-CGI-Application-4.50p0.tgz
Link to /usr/packages/amd64/cdrom/p5-CGI-Application-4.50p0.tgz
Ian McWilliam
From: Stuart Henderson [st...@openbsd.org]
Sent: Thursday, 5 June 2014 7:00 PM
To: Ian Mcwilliam
Cc: ports@openbsd.org
Subject: Re: Building perl ports and busted paths
On 2014/06/05 03:17, Ian Mcwilliam wrote:
> OK, so I'm working on an update to a Perl port and I see this
> ///sr/ports/pobj/p5-CGI-Application-4.50/fake-amd64/usr/local/man/man3p/CGI::Application.3p:
> fopen: No such file or directory
Update mandocdb.
SECURITY: www/p5-CGI-Application
Update www/p5-CGI-Application for CVE-2013-7329 Fix RT 84403 - 'Security problem: missing "start" mode dumps ENV to output page' https://github.com/markstos/CGI--Application/pull/15 While here remove groff and fix runtime depends. www/p5-CGI-PSGI is optional, include it as people nowadays run PSGI and are moving away from MOD_PERL. Ian McWilliam p5-CGI-Application.diff Description: p5-CGI-Application.diff
Re: SECURITY: www/p5-CGI-Application
ping. Ian McWilliam From: owner-po...@openbsd.org [owner-po...@openbsd.org] on behalf of Ian Mcwilliam [i.mcwill...@uws.edu.au] Sent: Friday, 6 June 2014 3:31 PM To: ports@openbsd.org Subject: SECURITY: www/p5-CGI-Application Update www/p5-CGI-Application for CVE-2013-7329 Fix RT 84403 - 'Security problem: missing "start" mode dumps ENV to output page' https://github.com/markstos/CGI--Application/pull/15 While here remove groff and fix runtime depends. www/p5-CGI-PSGI is optional, include it as people nowadays run PSGI and are moving away from MOD_PERL. Ian McWilliam
Re: Samba and fruit question
On 9/8/19, 9:52 pm, "owner-po...@openbsd.org on behalf of kasak" wrote: > >09.08.2019 14:42, Jeremie Courreges-Anglas пишет: >> On Thu, Aug 08 2019, kasak wrote: >>> 08.08.2019 16:53, kasak пишет: >>>> 08.08.2019 10:47, kasak пишет: >>>>> Hello. >>>>> >>>>> The samba port has vfs module fruit, that must be used with >>>>> streams_xattr module. >>>>> >>>>> But documentation about streams_xattr says that the file system of >>>>> the share must support extended attributes. And OpenBSD doesn't >>>>> support ea. >>>>> >>>>> So, in this way, i cannot use fruit on OpenBSD? >>>> >>>> In case if anybody will have such question, I'll repost here answer >>>> from samba mailing lists. >>>> >>>> I can use experimental streams_depot vfs module instead of >>>>streams_xattr. >>> >>> I am afraid something's wrong with this method. I have very simple >>>setup: >>> >>> [global] >>> map to guest = bad user >>> interfaces = 192.168.0.1 >>> bind interfaces only = yes >>> load printers = no >>> printing = bsd >>> printcap name = /dev/null >>> disable spoolss = yes >>> vfs objects = fruit streams_depot >>> >>> [tm] >>> path = /mnt/hdd/tm >>> read only = no >>> guest ok = yes >>> guest only = yes >>> fruit:time machine = yes >>> >>> and it just doesn't allow me to see shares. I think, while netatalk can >>> do the job, i'll stop there. >> This setup seems to work for me. smbclient -L lists the tm share, >> smbclient lets me get/post files there. No idea whether vfs_fruit works >> well, though. >> >Strange! Maybe i've done something wrong? Luckily i have old mac for >experiments, i'll try to play with it soon, and post here if I have any >luck with it! > >Thank's a lot Jeremie! If your using OpenBSD 6.5 you might be running into the long wait while the library loading completes for the bfs modules each time you try connecting a a share, it may actually work after a period of time. The attached patch is a back port of the changes to ld.so from current that helps resolve the issue, makes samba under 6.5 for me on older hardware usable. For me time machine see the share with fruit:time machine = yes as a valid time machine drive to backup to. Ian McWilliam > 6.5-stable-ld-so-prune-visitied-leaves-sym-cache.diff Description: 6.5-stable-ld-so-prune-visitied-leaves-sym-cache.diff
www/apache-httpd OpenBSD 6.5-stable Fix
Hi, After the update for Apache HTTPD on the 6.5-stable branch we see while trying to build: ===> Applying OpenBSD patch patch-modules_filters_mod_reqtimeout_c Hmm... Looks like a unified diff to me... The text leading up to this was: -- |$OpenBSD: patch-modules_filters_mod_reqtimeout_c,v 1.1 2019/04/08 23:25:23 sthen Exp $ | |Fix file uploads which were broken in 2.4.39 unless the admin specifies |an explicit RequestReadTimeout. | |https://bz.apache.org/bugzilla/show_bug.cgi?id=63325 |https://svn.apache.org/viewvc?view=revision&revision=1857129 | |Index: modules/filters/mod_reqtimeout.c |--- modules/filters/mod_reqtimeout.c.orig |+++ modules/filters/mod_reqtimeout.c -- Attached is a patch to remove the offending patch file.... Ian McWilliam apache-httpd-65.diff Description: apache-httpd-65.diff
isc-bind 6.7-stable
ISC Bind update under 6.7-stable does not package. Ian McWilliam === RCS file: /cvs/ports/net/isc-bind/pkg/PLIST,v retrieving revision 1.21 diff -u -p -u -p -r1.21 PLIST --- pkg/PLIST 19 Mar 2020 17:07:20 - 1.21 +++ pkg/PLIST 20 May 2020 06:34:23 - @@ -280,7 +280,6 @@ include/pk11/pk11.h include/pk11/result.h include/pk11/site.h include/pkcs11/ -include/pkcs11/eddsa.h include/pkcs11/pkcs11.h @static-lib lib/libbind9.a lib/libbind9.la
wip samba 3.8.18 driving me nuts
Hi all, If anyone wants to hit me with a clue bat about how to over come the following issue, then sock it to me. lrwxr-xr-x 1 root wheel 16 Sep 3 10:38 libtevent.so -> libtevent.so.0.0 lrwxr-xr-x 1 root wheel 19 Sep 3 10:38 libtevent.so.0.0 -> libtevent.so.0.9.11 -rwxr-xr-x 1 root bin 54653 Sep 3 10:38 libtevent.so.0.9.11 This has been driving me nuts trying to work out an easy solution without patching stuff away. I'm sure there is a one liner I've missed. attached is the work in progress diff. thanx Ian McWilliam wip-samba-3.6.18.diff Description: Binary data
Re: wip samba 3.8.18 driving me nuts
On 3/09/2013 11:33 PM, Brad Smith wrote: On 03/09/13 9:18 AM, Ian McWilliam wrote: Hi all, If anyone wants to hit me with a clue bat about how to over come the following issue, then sock it to me. lrwxr-xr-x 1 root wheel 16 Sep 3 10:38 libtevent.so -> libtevent.so.0.0 lrwxr-xr-x 1 root wheel 19 Sep 3 10:38 libtevent.so.0.0 -> libtevent.so.0.9.11 -rwxr-xr-x 1 root bin 54653 Sep 3 10:38 libtevent.so.0.9.11 This has been driving me nuts trying to work out an easy solution without patching stuff away. I'm sure there is a one liner I've missed. Well libtevent will be a new port just as libtalloc is. I was already working on this and have a port and then got sidetracked working with upstream WAF to fix the shared lib creation for OpenBSD and never went back to it. Cool, I'll hold off then till the port is ready. Might back port the DOS fix to what we have in tree while we're waiting.. Ian McWilliam
Re: default samba printing system
On 14/09/2013 3:27 AM, Kirill Bychkov wrote: Hi. By default samba is using cups for printing, so it starts to flood in logfiles with: smbd[12245]: [2013/09/13 21:03:48.595183, 0] printing/print_cups.c:151(cups_connect) smbd[12245]: Unable to connect to CUPS server localhost:631 - Connection refused smbd[14345]: [2013/09/13 21:03:48.613769, 0] printing/print_cups.c:528(cups_async_callback) smbd[14345]: failed to retrieve printer list: NT_STATUS_UNSUCCESSFUL I suggest to change printing system from cups to bsd to prevent this annoying messages in logs. Change MASTER_SITES while here. No issue with changing master sites but the change in config file CHANGES THE DEFAULT to BSD not CUPS. Your own admission is "By default samba is using cups for printing". I don't see the issue that people wanting bsd style printing actually edit their config file and change it. Ian McWilliam
Re: default samba printing system
On 14/09/2013 6:46 PM, Kirill Bychkov wrote: On Sat, September 14, 2013 03:01, Ian McWilliam wrote: On 14/09/2013 3:27 AM, Kirill Bychkov wrote: Hi. By default samba is using cups for printing, so it starts to flood in logfiles with: smbd[12245]: [2013/09/13 21:03:48.595183, 0] printing/print_cups.c:151(cups_connect) smbd[12245]: Unable to connect to CUPS server localhost:631 - Connection refused smbd[14345]: [2013/09/13 21:03:48.613769, 0] printing/print_cups.c:528(cups_async_callback) smbd[14345]: failed to retrieve printer list: NT_STATUS_UNSUCCESSFUL I suggest to change printing system from cups to bsd to prevent this annoying messages in logs. Change MASTER_SITES while here. No issue with changing master sites but the change in config file CHANGES THE DEFAULT to BSD not CUPS. Your own admission is "By default samba is using cups for printing". I don't see the issue that people wanting bsd style printing actually edit their config file and change it. Yes, my thought is to set BSD by default to get rid of messages about refused connection to CUPS on a fresh setup of samba. printing = cups is hardcoded somewhere, so even if this line is commented out in config file, samba still trying to connect to cups. The easyiest way to override it is to set printing = bsd in config. Yes, except that samba now ships with cups for all flavours, therefore cups is the default. If you want a non default, you need to edit the config file. Ian McWilliam
Re: default samba printing system
On 15/09/2013 6:54 AM, Kirill Bychkov wrote: On Sat, September 14, 2013 18:10, Ian McWilliam wrote: On 14/09/2013 6:46 PM, Kirill Bychkov wrote: On Sat, September 14, 2013 03:01, Ian McWilliam wrote: On 14/09/2013 3:27 AM, Kirill Bychkov wrote: Hi. By default samba is using cups for printing, so it starts to flood in logfiles with: smbd[12245]: [2013/09/13 21:03:48.595183, 0] printing/print_cups.c:151(cups_connect) smbd[12245]: Unable to connect to CUPS server localhost:631 - Connection refused smbd[14345]: [2013/09/13 21:03:48.613769, 0] printing/print_cups.c:528(cups_async_callback) smbd[14345]: failed to retrieve printer list: NT_STATUS_UNSUCCESSFUL I suggest to change printing system from cups to bsd to prevent this annoying messages in logs. Change MASTER_SITES while here. No issue with changing master sites but the change in config file CHANGES THE DEFAULT to BSD not CUPS. Your own admission is "By default samba is using cups for printing". I don't see the issue that people wanting bsd style printing actually edit their config file and change it. Yes, my thought is to set BSD by default to get rid of messages about refused connection to CUPS on a fresh setup of samba. printing = cups is hardcoded somewhere, so even if this line is commented out in config file, samba still trying to connect to cups. The easyiest way to override it is to set printing = bsd in config. cups is not started by default and many of samba users doesn't use it's printing support at all. So why not change hardcoded cups and spam in logs to bsd without spam? If many users are not using printing then why not disable printing by default all together instead? Yes, except that samba now ships with cups for all flavours, therefore cups is the default. If you want a non default, you need to edit the config file. Ian McWilliam Ian McWilliam
Re: default samba printing system
On 16/09/2013 1:13 AM, Kirill Bychkov wrote: On Sun, September 15, 2013 14:42, Ian McWilliam wrote: On 15/09/2013 6:54 AM, Kirill Bychkov wrote: On Sat, September 14, 2013 18:10, Ian McWilliam wrote: On 14/09/2013 6:46 PM, Kirill Bychkov wrote: On Sat, September 14, 2013 03:01, Ian McWilliam wrote: On 14/09/2013 3:27 AM, Kirill Bychkov wrote: Hi. By default samba is using cups for printing, so it starts to flood in logfiles with: smbd[12245]: [2013/09/13 21:03:48.595183, 0] printing/print_cups.c:151(cups_connect) smbd[12245]: Unable to connect to CUPS server localhost:631 - Connection refused smbd[14345]: [2013/09/13 21:03:48.613769, 0] printing/print_cups.c:528(cups_async_callback) smbd[14345]: failed to retrieve printer list: NT_STATUS_UNSUCCESSFUL I suggest to change printing system from cups to bsd to prevent this annoying messages in logs. Change MASTER_SITES while here. No issue with changing master sites but the change in config file CHANGES THE DEFAULT to BSD not CUPS. Your own admission is "By default samba is using cups for printing". I don't see the issue that people wanting bsd style printing actually edit their config file and change it. Yes, my thought is to set BSD by default to get rid of messages about refused connection to CUPS on a fresh setup of samba. printing = cups is hardcoded somewhere, so even if this line is commented out in config file, samba still trying to connect to cups. The easyiest way to override it is to set printing = bsd in config. cups is not started by default and many of samba users doesn't use it's printing support at all. So why not change hardcoded cups and spam in logs to bsd without spam? If many users are not using printing then why not disable printing by default all together instead? Is it possible to do at runtime, I think it's not. If noone is interested in changing printing defaults, I can just commit MASTER_SITES chunk and remove trailing whitespace in DESCR. Yes, at least I thought it was. It's a number of options in the config file. Try something like this load printers = no printing = bsd printcap name = /dev/null disable spoolss = yes You may also want to add a message such that when the port is install that printing is disabled by default in the config file. Ian McWilliam
Re: [update] samba-4.8.2
t; rev 0x01 pci4 at ppb3 bus 4 ppb4 at pci0 dev 21 function 2 "VMware PCIE" rev 0x01 pci5 at ppb4 bus 5 ppb5 at pci0 dev 21 function 3 "VMware PCIE" rev 0x01 pci6 at ppb5 bus 6 ppb6 at pci0 dev 21 function 4 "VMware PCIE" rev 0x01 pci7 at ppb6 bus 7 ppb7 at pci0 dev 21 function 5 "VMware PCIE" rev 0x01 pci8 at ppb7 bus 8 ppb8 at pci0 dev 21 function 6 "VMware PCIE" rev 0x01 pci9 at ppb8 bus 9 ppb9 at pci0 dev 21 function 7 "VMware PCIE" rev 0x01 pci10 at ppb9 bus 10 ppb10 at pci0 dev 22 function 0 "VMware PCIE" rev 0x01 pci11 at ppb10 bus 11 ppb11 at pci0 dev 22 function 1 "VMware PCIE" rev 0x01 pci12 at ppb11 bus 12 ppb12 at pci0 dev 22 function 2 "VMware PCIE" rev 0x01 pci13 at ppb12 bus 13 ppb13 at pci0 dev 22 function 3 "VMware PCIE" rev 0x01 pci14 at ppb13 bus 14 ppb14 at pci0 dev 22 function 4 "VMware PCIE" rev 0x01 pci15 at ppb14 bus 15 ppb15 at pci0 dev 22 function 5 "VMware PCIE" rev 0x01 pci16 at ppb15 bus 16 ppb16 at pci0 dev 22 function 6 "VMware PCIE" rev 0x01 pci17 at ppb16 bus 17 ppb17 at pci0 dev 22 function 7 "VMware PCIE" rev 0x01 pci18 at ppb17 bus 18 ppb18 at pci0 dev 23 function 0 "VMware PCIE" rev 0x01 pci19 at ppb18 bus 19 ppb19 at pci0 dev 23 function 1 "VMware PCIE" rev 0x01 pci20 at ppb19 bus 20 ppb20 at pci0 dev 23 function 2 "VMware PCIE" rev 0x01 pci21 at ppb20 bus 21 ppb21 at pci0 dev 23 function 3 "VMware PCIE" rev 0x01 pci22 at ppb21 bus 22 ppb22 at pci0 dev 23 function 4 "VMware PCIE" rev 0x01 pci23 at ppb22 bus 23 ppb23 at pci0 dev 23 function 5 "VMware PCIE" rev 0x01 pci24 at ppb23 bus 24 ppb24 at pci0 dev 23 function 6 "VMware PCIE" rev 0x01 pci25 at ppb24 bus 25 ppb25 at pci0 dev 23 function 7 "VMware PCIE" rev 0x01 pci26 at ppb25 bus 26 ppb26 at pci0 dev 24 function 0 "VMware PCIE" rev 0x01 pci27 at ppb26 bus 27 ppb27 at pci0 dev 24 function 1 "VMware PCIE" rev 0x01 pci28 at ppb27 bus 28 ppb28 at pci0 dev 24 function 2 "VMware PCIE" rev 0x01 pci29 at ppb28 bus 29 ppb29 at pci0 dev 24 function 3 "VMware PCIE" rev 0x01 pci30 at ppb29 bus 30 ppb30 at pci0 dev 24 function 4 "VMware PCIE" rev 0x01 pci31 at ppb30 bus 31 ppb31 at pci0 dev 24 function 5 "VMware PCIE" rev 0x01 pci32 at ppb31 bus 32 ppb32 at pci0 dev 24 function 6 "VMware PCIE" rev 0x01 pci33 at ppb32 bus 33 ppb33 at pci0 dev 24 function 7 "VMware PCIE" rev 0x01 pci34 at ppb33 bus 34 isa0 at pcib0 isadma0 at isa0 pckbc0 at isa0 port 0x60/5 irq 1 irq 12 pckbd0 at pckbc0 (kbd slot) wskbd0 at pckbd0: console keyboard, using wsdisplay0 pms0 at pckbc0 (aux slot) wsmouse0 at pms0 mux 0 pcppi0 at isa0 port 0x61 spkr0 at pcppi0 vmm0 at mainbus0: VMX/EPT uhidev0 at uhub1 port 1 configuration 1 interface 0 "VMware VMware Virtual USB Mouse" rev 1.10/1.02 addr 2 uhidev0: iclass 3/0 ums0 at uhidev0: 16 buttons, Z and W dir wsmouse1 at ums0 mux 0 uhidev1 at uhub1 port 1 configuration 1 interface 1 "VMware VMware Virtual USB Mouse" rev 1.10/1.02 addr 2 uhidev1: iclass 3/0 ums1 at uhidev1: 16 buttons, Z and W dir wsmouse2 at ums1 mux 0 uhub2 at uhub1 port 2 configuration 1 interface 0 "VMware VMware Virtual USB Hub" rev 1.10/1.00 addr 3 vscsi0 at root scsibus3 at vscsi0: 256 targets softraid0 at root scsibus4 at softraid0: 256 targets root on sd0a (66043ec868a376cc.a) swap on sd0b dump on sd0b Ian McWilliam From: owner-po...@openbsd.org on behalf of Jeremie Courreges-Anglas Sent: Thursday, 24 May 2018 3:51 AM To: ports Cc: Ian McWilliam Subject: [update] samba-4.8.2 Hi, last week the samba project has published a samba-4.8.2 release with all goodies from the 4.8.x branch and a critical bugfix for in-place upgrades from previous releases. Build-tested only, test reports welcome! Release notes: https://www.samba.org/samba/history/samba-4.8.0.html Samba 4.8.0 - Release Notes<https://www.samba.org/samba/history/samba-4.8.0.html> www.samba.org Samba 4.8.0 Available for Download. Samba 4.8.0 (gzipped) Signature = Release Notes for Samba 4.8.0 March 13, 2018 = This is the first stable release of the Samba 4.8 release series. https://www.samba.org/samba/history/samba-4.8.1.html https://www.samba.org/samba/history/samba-4.8.2.html Index: Makefile === RCS file: /cvs/ports/net/samba/Makefile,v retrieving revision 1.253 diff -u -p -r1.253 Makefile --- Makefile26 Apr 2018 13:42:45 - 1.253 +++ Makefile23 May 2018 16:55:57 - @@ -1,6 +1,6 @@ # $OpenBSD: Makefile,v 1.253 2018/04/26 13:42:45 jca Exp $ -VERSION = 4.7.7 +VERSION = 4.8.2 DISTNAME =
Re: [update] samba-4.8.2
https://bugzilla.samba.org/show_bug.cgi?id=11761 Bug 11761 - Lock order violation, smbd dumps core acl_tdb module is looks like. Ian McWilliam From: owner-po...@openbsd.org on behalf of Ian McWilliam Sent: Monday, 28 May 2018 2:45 PM To: Jeremie Courreges-Anglas; ports Cc: Ian McWilliam Subject: Re: [update] samba-4.8.2 Currently I am seeing this in testing. May 28 14:25:09 ianm-openbsd nmbd[34925]: Samba name server IANM-OPENBSD is now a local master browser for workgroup IANM-TEST on subnet 172.16.28.120 May 28 14:25:09 ianm-openbsd nmbd[34925]: May 28 14:25:09 ianm-openbsd nmbd[34925]: * May 28 14:38:21 ianm-openbsd smbd[8381]: [2018/05/28 14:38:21.657594, 0] ../lib/dbwrap/dbwrap.c:143(dbwrap_lock_order_lock) May 28 14:38:21 ianm-openbsd smbd[8381]: dbwrap_lock_order_lock: Lock order violation: Trying /var/samba/file_ntacls.tdb at 1 while /var/run/samba/locking.tdb at 1 is locked May 28 14:38:21 ianm-openbsd smbd[8381]: [2018/05/28 14:38:21.657730, 0] ../lib/dbwrap/dbwrap.c:116(debug_lock_order) May 28 14:38:21 ianm-openbsd smbd[8381]: lock order: 1:/var/run/samba/locking.tdb 2: 3: May 28 14:38:21 ianm-openbsd smbd[8381]: [2018/05/28 14:38:21.657749, 0] ../source3/lib/util.c:815(smb_panic_s3) May 28 14:38:21 ianm-openbsd smbd[8381]: PANIC (pid 8381): lock order violation May 28 14:38:21 ianm-openbsd smbd[8381]: [2018/05/28 14:38:21.658811, 0] ../source3/lib/util.c:926(log_stack_trace) May 28 14:38:21 ianm-openbsd smbd[8381]: BACKTRACE: 23 stack frames: May 28 14:38:21 ianm-openbsd smbd[8381]:#0 0x1fcda165d8f3 at /usr/local/lib/libsmbconf.so.4.0 May 28 14:38:21 ianm-openbsd smbd[8381]:#1 0x1fcda165d7c2 at /usr/local/lib/libsmbconf.so.4.0 May 28 14:38:21 ianm-openbsd smbd[8381]:#2 0x1fcdc60b9ac7 at /usr/local/lib/libsamba-util.so.3.1 May 28 14:38:21 ianm-openbsd smbd[8381]:#3 0x1fcd1f43f4f5 at /usr/local/lib/samba/libdbwrap-samba4.so May 28 14:38:21 ianm-openbsd smbd[8381]:#4 0x1fcd1f43ea97 at /usr/local/lib/samba/libdbwrap-samba4.so May 28 14:38:21 ianm-openbsd smbd[8381]:#5 0x1fcd1bf0805a at /usr/local/lib/samba/vfs/acl_tdb.so May 28 14:38:21 ianm-openbsd smbd[8381]:#6 0x1fcd1bf07de1 at /usr/local/lib/samba/vfs/acl_tdb.so May 28 14:38:21 ianm-openbsd smbd[8381]:#7 0x1fcd46197f1c at /usr/local/lib/samba/libsmbd-base-samba4.so May 28 14:38:21 ianm-openbsd smbd[8381]:#8 0x1fcd461cf012 at /usr/local/lib/samba/libsmbd-base-samba4.so May 28 14:38:21 ianm-openbsd smbd[8381]:#9 0x1fcd461ce8fd at /usr/local/lib/samba/libsmbd-base-samba4.so May 28 14:38:21 ianm-openbsd smbd[8381]:#10 0x1fcd461c30c7 at /usr/local/lib/samba/libsmbd-base-samba4.so May 28 14:38:21 ianm-openbsd smbd[8381]:#11 0x1fcd461c6416 at /usr/local/lib/samba/libsmbd-base-samba4.so May 28 14:38:21 ianm-openbsd smbd[8381]:#12 0x1fcd1a758464 at /usr/local/lib/libtevent.so.0.4 May 28 14:38:21 ianm-openbsd smbd[8381]:#13 0x1fcd1a755523 <_tevent_loop_once+227> at /usr/local/lib/libtevent.so.0.4 May 28 14:38:21 ianm-openbsd smbd[8381]:#14 0x1fcd1a7584db at /usr/local/lib/libtevent.so.0.4 May 28 14:38:21 ianm-openbsd smbd[8381]:#15 0x1fcd461b2279 at /usr/local/lib/samba/libsmbd-base-samba4.so May 28 14:38:21 ianm-openbsd smbd[8381]:#16 0x1fcacdb07fc8 <+27816> at /usr/local/sbin/smbd May 28 14:38:21 ianm-openbsd smbd[8381]:#17 0x1fcd1a758464 at /usr/local/lib/libtevent.so.0.4 May 28 14:38:21 ianm-openbsd smbd[8381]:#18 0x1fcd1a755523 <_tevent_loop_once+227> at /usr/local/lib/libtevent.so.0.4 May 28 14:38:21 ianm-openbsd smbd[8381]:#19 0x1fcd1a7584db at /usr/local/lib/libtevent.so.0.4 May 28 14:38:21 ianm-openbsd smbd[8381]:#20 0x1fcacdb06420 <+20736> at /usr/local/sbin/smbd May 28 14:38:21 ianm-openbsd smbd[8381]:#21 0x1fcacdb057ca <+17578> at /usr/local/sbin/smbd May 28 14:38:21 ianm-openbsd smbd[8381]:#22 0x1fcacdb01376 <+86> at /usr/local/sbin/smbd May 28 14:38:21 ianm-openbsd smbd[8381]: [2018/05/28 14:38:21.659186, 0] ../source3/lib/dumpcore.c:315(dump_core) May 28 14:38:21 ianm-openbsd smbd[8381]: dumping core in /var/log/samba/cores/smbd rebooting... OpenBSD 6.3-current (GENERIC.MP) #1: Mon May 28 11:47:38 AEST 2018 i...@ianm-openbsd.xxx.xxx.au:/usr/src/sys/arch/amd64/compile/GENERIC.MP real mem = 3141402624 (2995MB) avail mem = 3038117888 (2897MB) mpath0 at root scsibus0 at mpath0: 256 targets mainbus0 at root bios0 at mainbus0: SMBIOS rev. 2.4 @ 0xe0010 (248 entries) bios0: vendor Phoenix Technologies LTD version "6.00" date 05/19/2017 bios0: VMware, Inc. VMware Virtual Platform acpi0 at bios0: rev 2 acpi0: sleep states S0 S1 S4 S5 acpi0: tables DSDT FACP BOOT APIC MCFG SRAT HPET WAET acpi0: wakeup devices PCI0(S3) USB_(S1) P2P0(S3) S1F0(S3) S2F0(S3) S8F0(S3) S16F(S3) S17F(S3) S18F(S3) S22F(S3) S23F(S3) S24F(S3) S25F(S3) PE40(S3)
Re: [update] samba-4.8.2
samba-4.8.2-1-ianm.diff Description: Binary data
Re: [update] samba-4.8.3
It looked something like this. Unfortunately still haven't compiled a debug version of samba to trace it. Will look at 4.8.3 asap. vfs virusfilter clamav May 29 14:23:26 ianm-openbsd smbd[75668]: [2018/05/29 14:23:26.815150, 0] ../lib/util/fault.c:78(fault_report) May 29 14:23:26 ianm-openbsd smbd[75668]: === May 29 14:23:26 ianm-openbsd smbd[75668]: [2018/05/29 14:23:26.815194, 0] ../lib/util/fault.c:79(fault_report) May 29 14:23:26 ianm-openbsd smbd[75668]: INTERNAL ERROR: Signal 11 in pid 75668 (4.8.2) May 29 14:23:26 ianm-openbsd smbd[75668]: Please read the Trouble-Shooting section of the Samba HOWTO May 29 14:23:26 ianm-openbsd smbd[75668]: [2018/05/29 14:23:26.815213, 0] ../lib/util/fault.c:81(fault_report) May 29 14:23:26 ianm-openbsd smbd[75668]: === May 29 14:23:26 ianm-openbsd smbd[75668]: [2018/05/29 14:23:26.815236, 0] ../source3/lib/util.c:815(smb_panic_s3) May 29 14:23:26 ianm-openbsd smbd[75668]: PANIC (pid 75668): internal error May 29 14:23:26 ianm-openbsd smbd[75668]: [2018/05/29 14:23:26.816597, 0] ../source3/lib/util.c:926(log_stack_trace) May 29 14:23:26 ianm-openbsd smbd[75668]: BACKTRACE: 29 stack frames: May 29 14:23:26 ianm-openbsd smbd[75668]:#0 0x1570ef8fe8f3 at /usr/local/lib/libsmbconf.so.4.0 May 29 14:23:26 ianm-openbsd smbd[75668]:#1 0x1570ef8fe7c2 at /usr/local/lib/libsmbconf.so.4.0 May 29 14:23:26 ianm-openbsd smbd[75668]:#2 0x15711d4c9ac7 at /usr/local/lib/libsamba-util.so.3.1 May 29 14:23:26 ianm-openbsd smbd[75668]:#3 0x15711d4c9d9d at /usr/local/lib/libsamba-util.so.3.1 May 29 14:23:26 ianm-openbsd smbd[75668]:#4 0x15711d4c9aa9 at /usr/local/lib/libsamba-util.so.3.1 May 29 14:23:26 ianm-openbsd smbd[75668]:#5 0x1570ebb05002 May 29 14:23:26 ianm-openbsd smbd[75668]:#6 0x1570881303ac at /usr/local/lib/samba/vfs/virusfilter.so May 29 14:23:26 ianm-openbsd smbd[75668]:#7 0x15708812faec at /usr/local/lib/samba/vfs/virusfilter.so May 29 14:23:26 ianm-openbsd smbd[75668]:#8 0x15708812b1cd at /usr/local/lib/samba/vfs/virusfilter.so May 29 14:23:26 ianm-openbsd smbd[75668]:#9 0x15708812a109 at /usr/local/lib/samba/vfs/virusfilter.so May 29 14:23:26 ianm-openbsd smbd[75668]:#10 0x15706bd0b024 at /usr/local/lib/samba/libsmbd-base-samba4.so May 29 14:23:26 ianm-openbsd smbd[75668]:#11 0x15706bd0ad15 at /usr/local/lib/samba/libsmbd-base-samba4.so May 29 14:23:26 ianm-openbsd smbd[75668]:#12 0x15706bd100e5 at /usr/local/lib/samba/libsmbd-base-samba4.so May 29 14:23:26 ianm-openbsd smbd[75668]:#13 0x15706bd0d6be at /usr/local/lib/samba/libsmbd-base-samba4.so May 29 14:23:26 ianm-openbsd smbd[75668]:#14 0x15706bd0c7a9 at /usr/local/lib/samba/libsmbd-base-samba4.so May 29 14:23:26 ianm-openbsd smbd[75668]:#15 0x15706bd4abf0 at /usr/local/lib/samba/libsmbd-base-samba4.so May 29 14:23:26 ianm-openbsd smbd[75668]:#16 0x15706bd410ad at /usr/local/lib/samba/libsmbd-base-samba4.so May 29 14:23:26 ianm-openbsd smbd[75668]:#17 0x15706bd44416 at /usr/local/lib/samba/libsmbd-base-samba4.so May 29 14:23:26 ianm-openbsd smbd[75668]:#18 0x1570deac9464 at /usr/local/lib/libtevent.so.0.4 May 29 14:23:26 ianm-openbsd smbd[75668]:#19 0x1570deac6523 <_tevent_loop_once+227> at /usr/local/lib/libtevent.so.0.4 May 29 14:23:26 ianm-openbsd smbd[75668]:#20 0x1570deac94db at /usr/local/lib/libtevent.so.0.4 May 29 14:23:26 ianm-openbsd smbd[75668]:#21 0x15706bd30279 at /usr/local/lib/samba/libsmbd-base-samba4.so May 29 14:23:26 ianm-openbsd smbd[75668]:#22 0x156e1f607fc8 <+27816> at /usr/local/sbin/smbd May 29 14:23:26 ianm-openbsd smbd[75668]:#23 0x1570deac9464 at /usr/local/lib/libtevent.so.0.4 May 29 14:23:26 ianm-openbsd smbd[75668]:#24 0x1570deac6523 <_tevent_loop_once+227> at /usr/local/lib/libtevent.so.0.4 May 29 14:23:26 ianm-openbsd smbd[75668]:#25 0x1570deac94db at /usr/local/lib/libtevent.so.0.4 May 29 14:23:26 ianm-openbsd smbd[75668]:#26 0x156e1f606420 <+20736> at /usr/local/sbin/smbd May 29 14:23:26 ianm-openbsd smbd[75668]:#27 0x156e1f6057ca <+17578> at /usr/local/sbin/smbd May 29 14:23:26 ianm-openbsd smbd[75668]:#28 0x156e1f601376 <+86> at /usr/local/sbin/smbd May 29 14:23:26 ianm-openbsd smbd[75668]: [2018/05/29 14:23:26.816817, 0] ../source3/lib/dumpcore.c:315(dump_core) May 29 14:23:26 ianm-openbsd smbd[75668]: dumping core in /var/log/samba/cores/smbd Ian McWilliam From: owner-po...@openbsd.org on behalf of Jeremie Courreges-Anglas Sent: Tuesday, 10 July 2018 12:58 AM To: ports Cc: Ian McWilliam Subject: [update] samba-4.8.3 Bugfix release: https://www.samba.org/samba/history/samba-4.8.3.html Samba 4.8.3 - Release Notes<https://
Re: [update] samba-4.8.3
Ouch, that's a new lock order problem. The one I encountered with 4.8.2 was
with the vfs/acl_tdb module.
Ian McWilliam
From: owner-po...@openbsd.org on behalf of Vijay
Sankar
Sent: Tuesday, 10 July 2018 9:55 AM
To: ports@openbsd.org
Subject: Re: [update] samba-4.8.3
Quoting Jeremie Courreges-Anglas :
> Bugfix release: https://www.samba.org/samba/history/samba-4.8.3.html
Samba 4.8.3 - Release
Notes<https://www.samba.org/samba/history/samba-4.8.3.html>
www.samba.org
Samba 4.8.3 Available for Download. Samba 4.8.3 (gzipped) Signature. Patch
(gzipped) against Samba 4.8.2 Signature = Release Notes for Samba 4.8.3
June 26, 2018 = This is the latest stable release of the Samba 4.8 release
series.
>
> I don't see any change in vfs_virusfilter, which was new (and apparently
> broken) in 4.8.2.
>
> Test reports welcome!
>
>
> Index: Makefile
> ===
> RCS file: /cvs/ports/net/samba/Makefile,v
> retrieving revision 1.254
> diff -u -p -r1.254 Makefile
> --- Makefile 11 Jun 2018 11:59:51 - 1.254
> +++ Makefile 9 Jul 2018 13:10:02 -
> @@ -1,6 +1,6 @@
> # $OpenBSD: Makefile,v 1.254 2018/06/11 11:59:51 jca Exp $
>
> -VERSION =4.8.2
> +VERSION =4.8.3
> DISTNAME =samba-${VERSION}
>
> COMMENT-main =SMB and CIFS client and server for UNIX
> @@ -17,9 +17,11 @@ PKGNAME-docs = samba-docs-${VERSION}
>
> PKG_ARCH-docs = *
>
> -LDB_V = 1.3.3
> +LDB_V = 1.3.4
> TEVENT_V =0.9.36
>
> +REVISION-tevent =0
> +
> SHARED_LIBS = asn1-samba4 0.0 \
>com_err-samba4 0.0 \
>dcerpc 0.0 \
> @@ -34,30 +36,30 @@ SHARED_LIBS = asn1-samba4 0.0 \
>hx509-samba40.0 \
>kdc-samba4 0.0 \
>krb5-samba4 0.1 \
> - ldb 0.6 \
> + ldb 0.7 \
>ndr 0.3 \
>ndr-krb5pac 0.1 \
>ndr-nbt 0.1 \
>ndr-standard3.0 \
>netapi 2.1 \
> - pyldb-util 0.3 \
> + pyldb-util 0.4 \
>roken-samba40.0 \
>samba-credentials 0.2 \
>samba-errors1.0 \
>samba-hostconfig4.0 \
>samba-passdb2.0 \
>samba-policy0.0 \
> - samba-util 3.1 \
> + samba-util 3.2 \
>samdb 0.1 \
>smbclient 4.2 \
> - smbconf 4.0 \
> + smbconf 4.1 \
>smbldap 0.1 \
>tevent 0.4 \
>tevent-util 1.0 \
>wbclient3.2 \
>wind-samba4 0.0 \
> - replace 5.0 \
> - util-setid 5.0
> + replace 6.0 \
> + util-setid 6.0
>
> CATEGORIES = net sysutils security
>
> Index: distinfo
> ===
> RCS file: /cvs/ports/net/samba/distinfo,v
> retrieving revision 1.68
> diff -u -p -r1.68 distinfo
> --- distinfo 11 Jun 2018 11:59:51 - 1.68
> +++ distinfo 9 Jul 2018 09:35:30 -
> @@ -1,2 +1,2 @@
> -SHA256 (samba-4.8.2.tar.gz) = YuVSKW1J5qtEu4fRIKKIgT+lLkJDXVOh9xt3WWUSvyI=
> -SIZE (samba-4.8.2.tar.gz) = 17675145
> +SHA256 (samba-4.8.3.tar.gz) = 4FaaimBdXftJ8f3RHbeW9NNv4DUcSn8hOH7yUwELgu0=
> +SIZE (samba-4.8.3.tar.gz) = 17680660
> Index: pkg/PLIST-main
> ===
> RCS file: /cvs/ports/net/samba/pkg/PLIST-main,v
> retrieving revision 1.41
> diff -u -p -r1.41 PLIST-main
> --- pkg/PLIST-main11 Jun 2018 11:59:51 - 1.41
> +++ pkg/PLIST-main9 Jul 2018 11:35:53 -
> @@ -2,6 +2,11 @@
> @pkgpath net/samba,ldap,-main
> @pkgpath net/samba,ads,-m
Re: [update] samba-4.8.3
I do see this weirdness in logs. Aug 2 09:47:31 ianm-openbsd nmbd[23825]: daemon_ready: STATUS=daemon 'nmbd' finished starting up and ready to serve connections Aug 2 09:47:36 ianm-openbsd smbd: vfprintf %s NULL in "Auth: [%s,%s] user [%s]\\[%s] at [%s] with [%s] status [%s] workstation [%s] remote host [%s]%s local host [%s] %s " Aug 2 09:47:49 ianm-openbsd smbd: vfprintf %s NULL in "sys_get_%s_quota() failed for mntpath[%s] bdev[%s] qtype[%d] id[%d]: %s " Other than that and not having time to look at the virus-filter stuff. My use case is running fine. Ian McWilliam From: owner-po...@openbsd.org on behalf of Vijay Sankar Sent: Thursday, 2 August 2018 4:15 AM To: Jeremie Courreges-Anglas Cc: ports; Ian McWilliam Subject: Re: [update] samba-4.8.3 Quoting Jeremie Courreges-Anglas : > On Mon, Jul 09 2018, Jeremie Courreges-Anglas wrote: >> Bugfix release: https://www.samba.org/samba/history/samba-4.8.3.html Samba 4.8.3 - Release Notes<https://www.samba.org/samba/history/samba-4.8.3.html> www.samba.org Samba 4.8.3 Available for Download. Samba 4.8.3 (gzipped) Signature. Patch (gzipped) against Samba 4.8.2 Signature = Release Notes for Samba 4.8.3 June 26, 2018 = This is the latest stable release of the Samba 4.8 release series. >> >> I don't see any change in vfs_virusfilter, which was new (and apparently >> broken) in 4.8.2. >> >> Test reports welcome! > > The diff should still apply to -current. Vijay, did you spot any issue > (besides the witness(4) logs) during your tests? Any other test > reports? :) > > -- > jca | PGP : 0x1524E7EE / 5135 92C1 AD36 5293 2BDF DDCC 0DFA 74AE 1524 E7EE I am very sorry, I should have reported this earlier. 4.8.3 is running quite well with TWO DCs and ONE Member Server. samba-tool drs showrepl does not show any errors and windbindd on DCs is working great. Member server as well as one Windows 10 and one Windows 7 domain member authenticates etc., without any problems. Built-in GPOs can be edited. New GPO's cannot be created because I am using FFS without any ACLs etc., There were no errors when I was using VMs (qemu). VMs on VMM did not work because I don't know how to get around the time sync issue. So I tried setting up the DC's on a Varia pcengines appliance (the one with two motherboards in one case) and those also work fine (witness logs still show up on pcengines similar to my initial amd64 desktop). dmesg below from pcengines box OpenBSD 6.3-current (SAMBATEST) #5: Fri Jun 22 17:12:09 CDT 2018 vi...@builder.lab.foretell.ca:/usr/src/sys/arch/amd64/compile/SAMBATEST real mem = 1996152832 (1903MB) avail mem = 1905065984 (1816MB) mpath0 at root scsibus0 at mpath0: 256 targets mainbus0 at root bios0 at mainbus0: SMBIOS rev. 2.7 @ 0x77fb7020 (7 entries) bios0: vendor coreboot version "4.0.7" date 02/28/2017 bios0: PC Engines APU2 acpi0 at bios0: rev 2 acpi0: sleep states S0 S1 S2 S3 S4 S5 acpi0: tables DSDT FACP SSDT APIC HEST SSDT SSDT HPET acpi0: wakeup devices PWRB(S4) PBR4(S4) PBR5(S4) PBR6(S4) PBR7(S4) PBR8(S4) UOH1(S3) UOH3(S3) UOH5(S3) XHC0(S4) acpitimer0 at acpi0: 3579545 Hz, 32 bits acpimadt0 at acpi0 addr 0xfee0: PC-AT compat cpu0 at mainbus0: apid 0 (boot processor) cpu0: AMD GX-412TC SOC, 998.26 MHz cpu0: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,MMX,FXSR,SSE,SSE2,HTT,SSE3,PCLMUL,MWAIT,SSSE3,CX16,SSE4.1,SSE4.2,MOVBE,POPCNT,AES,XSAVE,AVX,F16C,NXE,MMXX,FFXSR,PAGE1GB,RDTSCP,LONG,LAHF,CMPLEG,SVM,EAPICSP,AMCR8,ABM,SSE4A,MASSE,3DNOWP,OSVW,IBS,SKINIT,TOPEXT,DBKP,PERFTSC,PCTRL3,ITSC,BMI1,XSAVEOPT cpu0: 32KB 64b/line 2-way I-cache, 32KB 64b/line 8-way D-cache, 2MB 64b/line 16-way L2 cache cpu0: ITLB 32 4KB entries fully associative, 8 4MB entries fully associative cpu0: DTLB 40 4KB entries fully associative, 8 4MB entries fully associative cpu0: smt 0, core 0, package 0 mtrr: Pentium Pro MTRR support, 8 var ranges, 88 fixed ranges cpu0: apic clock running at 99MHz cpu0: mwait min=64, max=64, IBE cpu1 at mainbus0: apid 1 (application processor) cpu1: AMD GX-412TC SOC, 998.13 MHz cpu1: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,MMX,FXSR,SSE,SSE2,HTT,SSE3,PCLMUL,MWAIT,SSSE3,CX16,SSE4.1,SSE4.2,MOVBE,POPCNT,AES,XSAVE,AVX,F16C,NXE,MMXX,FFXSR,PAGE1GB,RDTSCP,LONG,LAHF,CMPLEG,SVM,EAPICSP,AMCR8,ABM,SSE4A,MASSE,3DNOWP,OSVW,IBS,SKINIT,TOPEXT,DBKP,PERFTSC,PCTRL3,ITSC,BMI1,XSAVEOPT cpu1: 32KB 64b/line 2-way I-cache, 32KB 64b/line 8-way D-cache, 2MB 64b/line 16-way L2 cache cpu1: ITLB 32 4KB entries fully associative, 8 4MB entries fully associative cpu1: DTLB 40 4KB entries fully associative, 8 4MB entries fully associative cpu1: smt 0, core 1, package 0 cpu2 at mainbus0: apid 2 (application processor) cpu2: AMD GX-412TC SOC, 998.14 MHz cpu2: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,
Re: [update] samba-4.8.5
Hi,
Thanks for this. All good from my end. Still has the printing of null objects
issue.
Aug 28 14:58:25 ianm-openbsd smbd: vfprintf %s NULL in "Auth: [%s,%s] user
[%s]\\[%s] at [%s] with [%s] status [%s] workstation [%s] remote host [%s]%s
local host [%s] %s "
Aug 28 14:58:26 ianm-openbsd smbd: vfprintf %s NULL in "sys_get_%s_quota()
failed for mntpath[%s] bdev[%s] qtype[%d] id[%d]: %s
Ian McWilliam
From: owner-po...@openbsd.org on behalf of Jeremie
Courreges-Anglas
Sent: Monday, 27 August 2018 4:33 PM
To: ports
Cc: Ian McWilliam
Subject: [update] samba-4.8.5
Hi,
here's an update to the latest version. Test reports welcome!
Index: Makefile
===
RCS file: /cvs/ports/net/samba/Makefile,v
retrieving revision 1.256
diff -u -p -r1.256 Makefile
--- Makefile14 Aug 2018 10:35:00 - 1.256
+++ Makefile26 Aug 2018 15:22:55 -
@@ -1,6 +1,6 @@
# $OpenBSD: Makefile,v 1.256 2018/08/14 10:35:00 jca Exp $
-VERSION = 4.8.4
+VERSION = 4.8.5
DISTNAME = samba-${VERSION}
COMMENT-main = SMB and CIFS client and server for UNIX
@@ -17,10 +17,10 @@ PKGNAME-docs = samba-docs-${VERSION}
PKG_ARCH-docs = *
-LDB_V =1.3.5
+LDB_V =1.3.6
TEVENT_V = 0.9.36
-REVISION-tevent = 1
+REVISION-tevent = 2
SHARED_LIBS = asn1-samba4 0.0 \
com_err-samba4 0.0 \
@@ -36,13 +36,13 @@ SHARED_LIBS = asn1-samba4 0.0 \
hx509-samba40.0 \
kdc-samba4 0.0 \
krb5-samba4 0.1 \
- ldb 0.7 \
+ ldb 0.8 \
ndr 0.3 \
ndr-krb5pac 0.1 \
ndr-nbt 0.1 \
ndr-standard3.0 \
netapi 2.1 \
- pyldb-util 0.4 \
+ pyldb-util 0.5 \
roken-samba40.0 \
samba-credentials 0.2 \
samba-errors1.0 \
@@ -58,8 +58,8 @@ SHARED_LIBS = asn1-samba4 0.0 \
tevent-util 1.0 \
wbclient3.2 \
wind-samba4 0.0 \
- replace 6.0 \
- util-setid 6.0
+ replace 7.0 \
+ util-setid 7.0
CATEGORIES =net sysutils security
Index: distinfo
===
RCS file: /cvs/ports/net/samba/distinfo,v
retrieving revision 1.70
diff -u -p -r1.70 distinfo
--- distinfo14 Aug 2018 10:35:00 - 1.70
+++ distinfo25 Aug 2018 17:49:27 -
@@ -1,2 +1,2 @@
-SHA256 (samba-4.8.4.tar.gz) = 9QRNFJ4BiUoIsdEUuLaa7XgXGnuxlgi9H9dxRTuaVAY=
-SIZE (samba-4.8.4.tar.gz) = 1778
+SHA256 (samba-4.8.5.tar.gz) = 5Y7msSYtQSi4kyzu5Z1fCwqbvgBUfrPMTEFVLeGmUVU=
+SIZE (samba-4.8.5.tar.gz) = 17715401
Index: patches/patch-buildtools_wafsamba_samba_autoconf_py
===
RCS file:
/cvs/ports/net/samba/patches/patch-buildtools_wafsamba_samba_autoconf_py,v
retrieving revision 1.8
diff -u -p -r1.8 patch-buildtools_wafsamba_samba_autoconf_py
--- patches/patch-buildtools_wafsamba_samba_autoconf_py 11 Jun 2018 11:59:51
- 1.8
+++ patches/patch-buildtools_wafsamba_samba_autoconf_py 25 Aug 2018 17:49:55
-
@@ -7,7 +7,7 @@ $OpenBSD: patch-buildtools_wafsamba_samb
Index: buildtools/wafsamba/samba_autoconf.py
--- buildtools/wafsamba/samba_autoconf.py.orig
+++ buildtools/wafsamba/samba_autoconf.py
-@@ -815,6 +815,27 @@ def ADD_LDFLAGS(conf, flags, testflags=False):
+@@ -825,6 +825,27 @@ def ADD_LDFLAGS(conf, flags, testflags=False):
if not 'EXTRA_LDFLAGS' in conf.env:
conf.env['EXTRA_LDFLAGS'] = []
conf.env['EXTRA_LDFLAGS'].extend(TO_LIST(flags))
@@ -35,7 +35,7 @@ Index: buildtools/wafsamba/samba_autocon
return flags
-@@ -878,10 +899,9 @@ def SETUP_CONFIGURE_CACHE(conf, enable):
+@@ -888,10 +909,9 @@ def SETUP_CONFIGURE_CACHE(conf, enable):
def SAMBA_CHECK_UNDEFINED_SYMBOL_FLAGS(conf):
# we don't want any libraries or modules to rely on runtime
# resolution of symbols
Index: patches/patch-lib_ldb_wscript
===
RCS file: /cvs/ports/net/samba/patches/patch-lib
Re: [update] samba-4.8.5
Hi,
smbd.desktop-smnqqj8:[2018/08/28 15:02:47.954111, 3]
../source3/lib/sysquotas.c:488(sys_get_quota)
smbd.desktop-smnqqj8: sys_get_vfs_quota() failed for mntpath[.] bdev[(null)]
qtype[1] id[-1]: Invalid argument
smbd.desktop-smnqqj8:[2018/08/28 15:02:47.954198, 3]
../source3/lib/sysquotas.c:488(sys_get_quota)
smbd.desktop-smnqqj8: sys_get_vfs_quota() failed for mntpath[.] bdev[(null)]
qtype[3] id[-1]: Invalid argument
smbd.desktop-smnqqj8:[2018/08/28 15:02:52.397732, 3]
../source3/lib/sysquotas.c:488(sys_get_quota)
smbd.desktop-smnqqj8: sys_get_vfs_quota() failed for mntpath[.] bdev[(null)]
qtype[1] id[-1]: Invalid argument
smbd.desktop-smnqqj8:[2018/08/28 15:02:52.397802, 3]
../source3/lib/sysquotas.c:488(sys_get_quota)
smbd.desktop-smnqqj8: sys_get_vfs_quota() failed for mntpath[.] bdev[(null)]
qtype[3] id[-1]: Invalid argument
Ian McWilliam
From: Jeremie Courreges-Anglas
Sent: Wednesday, 29 August 2018 2:07 AM
To: Ian McWilliam
Cc: ports; Ian McWilliam
Subject: Re: [update] samba-4.8.5
On Tue, Aug 28 2018, Ian McWilliam wrote:
> Hi,
>
>
> Thanks for this. All good from my end. Still has the printing of null objects
> issue.
>
>
> Aug 28 14:58:25 ianm-openbsd smbd: vfprintf %s NULL in "Auth: [%s,%s] user
> [%s]\\[%s] at [%s] with [%s] status [%s] workstation [%s] remote host [%s]%s
> local host [%s] %s "
>
> Aug 28 14:58:26 ianm-openbsd smbd: vfprintf %s NULL in "sys_get_%s_quota()
> failed for mntpath[%s] bdev[%s] qtype[%d] id[%d]: %s
Grrr, I forgot about those. Here's an updated diff. The
auth/auth_log.c diff will hopefully fix the first line and is based on
the behavior I can see at $DAYJOB. For the second line I'd need to have
a look at your log.samba.
Index: Makefile
===
RCS file: /cvs/ports/net/samba/Makefile,v
retrieving revision 1.256
diff -u -p -r1.256 Makefile
--- Makefile14 Aug 2018 10:35:00 - 1.256
+++ Makefile26 Aug 2018 15:22:55 -
@@ -1,6 +1,6 @@
# $OpenBSD: Makefile,v 1.256 2018/08/14 10:35:00 jca Exp $
-VERSION = 4.8.4
+VERSION = 4.8.5
DISTNAME = samba-${VERSION}
COMMENT-main = SMB and CIFS client and server for UNIX
@@ -17,10 +17,10 @@ PKGNAME-docs = samba-docs-${VERSION}
PKG_ARCH-docs = *
-LDB_V =1.3.5
+LDB_V =1.3.6
TEVENT_V = 0.9.36
-REVISION-tevent = 1
+REVISION-tevent = 2
SHARED_LIBS = asn1-samba4 0.0 \
com_err-samba4 0.0 \
@@ -36,13 +36,13 @@ SHARED_LIBS = asn1-samba4 0.0 \
hx509-samba40.0 \
kdc-samba4 0.0 \
krb5-samba4 0.1 \
- ldb 0.7 \
+ ldb 0.8 \
ndr 0.3 \
ndr-krb5pac 0.1 \
ndr-nbt 0.1 \
ndr-standard3.0 \
netapi 2.1 \
- pyldb-util 0.4 \
+ pyldb-util 0.5 \
roken-samba40.0 \
samba-credentials 0.2 \
samba-errors1.0 \
@@ -58,8 +58,8 @@ SHARED_LIBS = asn1-samba4 0.0 \
tevent-util 1.0 \
wbclient3.2 \
wind-samba4 0.0 \
- replace 6.0 \
- util-setid 6.0
+ replace 7.0 \
+ util-setid 7.0
CATEGORIES =net sysutils security
Index: distinfo
===
RCS file: /cvs/ports/net/samba/distinfo,v
retrieving revision 1.70
diff -u -p -r1.70 distinfo
--- distinfo14 Aug 2018 10:35:00 - 1.70
+++ distinfo25 Aug 2018 17:49:27 -
@@ -1,2 +1,2 @@
-SHA256 (samba-4.8.4.tar.gz) = 9QRNFJ4BiUoIsdEUuLaa7XgXGnuxlgi9H9dxRTuaVAY=
-SIZE (samba-4.8.4.tar.gz) = 1778
+SHA256 (samba-4.8.5.tar.gz) = 5Y7msSYtQSi4kyzu5Z1fCwqbvgBUfrPMTEFVLeGmUVU=
+SIZE (samba-4.8.5.tar.gz) = 17715401
Index: patches/patch-auth_auth_log_c
===
RCS file: patches/patch-auth_auth_log_c
diff -N patches/patch-auth_auth_log_c
--- /dev/null 1 Jan 1970 00:00:00 -
+++ patches/patch-auth_auth_log_c 28 Aug 2018 12:04:54 -
@@ -0,0 +1,48 @@
+$OpenBSD$
+
+Avoid printf("%s", NULL)
Re: backuppc FastCgiExternalServer error on apache2
Try pkg_add mod_fastcgi Ian McWilliam From: owner-po...@openbsd.org on behalf of Maarten Lippmann Sent: Thursday, 13 September 2018 12:00 PM To: ports@openbsd.org Subject: backuppc FastCgiExternalServer error on apache2 Hey All, I'm trying to move my backuppc installation off of debian onto a openbsd amd64 6.3 stable installation. I went through the basics, installed backuppc with pkg_add, as well as apache-httpd and samba. (samba was not listed as a dependency for backuppc, but backuppc startup failed if it could not find /usr/local/bin/smbclient. so samba may need to be added as a pkg dependency for backuppc.) The docs ( /usr/local/share/doc/pkg-readmes/backuppc-3.3.2p0 ) instruct to create a symlink to example file /var/www/conf/modules.sample/backuppc.conf in /var/www/conf/modules. If I try to start apache2 after creating that link per the instructions, I get below error: AH00526: Syntax error on line 5 of /var/www/conf/modules/backuppc.conf: Invalid command 'FastCgiExternalServer', perhaps misspelled or defined by a module not included in the server configuration Relevant example conf file contents: # $OpenBSD: httpd-backuppc.conf,v 1.1.1.1 2011/09/20 11:36:55 landry Exp $ Alias /backuppc /backuppc/ ScriptAlias /BackupPC_Admin /BackupPC_Admin.fcgi FastCgiExternalServer /BackupPC_Admin.fcgi -host 127.0.0.1:1028 SetHandler fastcgi-script Notice the date, this looks old. As a hail-Mary I loaded all (fcgi related and unrelated) modules I could find in /etc/apache2/httpd2.conf but none seem to help. I'm curious if the example backuppc.conf file is out of date and dependencies have changed, but I am having a hard time figuring out an appropriate alternative apache2 directive to get the backuppc web interface working on openbsd. Let me know if someone has figured this out. Maarten
Re: UPDATE samba-4.19.5
Hi,
Builds and test fine on current.
Attached is a patch for 7.4-stable as the one for current does not apply due to
the revision.
Builds and tests fine on current.
Ok from me.
Ian McWilliam
> On 20 Feb 2024, at 4:42 am, Bjorn Ketelaars wrote:
>
> Simple diff for updating samba to 4.19.5. Release notes:
> https://www.samba.org/samba/history/samba-4.19.5.html
>
> Run tested on amd64.
>
> Tests and OKs welcome (for -stable too)!
>
>
> Index: Makefile
> ===
> RCS file: /cvs/ports/net/samba/Makefile,v
> retrieving revision 1.342
> diff -u -p -r1.342 Makefile
> --- Makefile 29 Jan 2024 18:04:27 - 1.342
> +++ Makefile 19 Feb 2024 17:35:50 -
> @@ -1,5 +1,4 @@
> -VERSION =4.19.4
> -REVISION = 0
> +VERSION =4.19.5
> DISTNAME =samba-${VERSION}
> EPOCH = 0
>
> Index: distinfo
> ===
> RCS file: /cvs/ports/net/samba/distinfo,v
> retrieving revision 1.113
> diff -u -p -r1.113 distinfo
> --- distinfo 12 Jan 2024 12:33:48 - 1.113
> +++ distinfo 19 Feb 2024 17:35:50 -
> @@ -1,2 +1,2 @@
> -SHA256 (samba-4.19.4.tar.gz) = QCbZO4ZtsZjIyhaFsPXVJ5P2XG5jyzZBY69mH9/wlow=
> -SIZE (samba-4.19.4.tar.gz) = 41839810
> +SHA256 (samba-4.19.5.tar.gz) = DiQFtM7CnQRZYh9DQKGnSvdx7Hz/7f9DJQytfx+HYF4=
> +SIZE (samba-4.19.5.tar.gz) = 41840159
samba-4.19.5-stable.diff
Description: Binary data
Re: UPDATE samba-4.20.3
Hi,
Thanks for the Update. Builds and tests fine. OK from me.
Ian McWilliam
> On 3 Aug 2024, at 1:27 am, Bjorn Ketelaars wrote:
>
> Simple diff for updating samba to 4.20.3. Release notes:
> https://www.samba.org/samba/history/samba-4.20.3.html
>
> Run tested on amd64.
>
> Tests and OKs welcome.
>
>
> diff --git Makefile Makefile
> index 311e62490ab..d5badfad5f1 100644
> --- Makefile
> +++ Makefile
> @@ -1,4 +1,4 @@
> -VERSION =4.20.2
> +VERSION =4.20.3
> DISTNAME =samba-${VERSION}
> EPOCH = 0
>
> @@ -58,6 +58,9 @@ WANTLIB-docs =
> SITES = https://download.samba.org/pub/samba/stable/ \
> https://download.samba.org/pub/samba/old-versions/
>
> +# XXX 0640 on Makefile breaks update-patches with PORTS_PRIVSEP=Yes
> +FIX_EXTRACT_PERMISSIONS =Yes
> +
> MULTI_PACKAGES = -main -docs
> DEBUG_PACKAGES = ${BUILD_PACKAGES}
>
> diff --git distinfo distinfo
> index d47334ad9a5..0472bd72531 100644
> --- distinfo
> +++ distinfo
> @@ -1,2 +1,2 @@
> -SHA256 (samba-4.20.2.tar.gz) = +Wn/7VjM8+hcu8wOM6FybQJcK0D0KmU7ESW4K5LS4OU=
> -SIZE (samba-4.20.2.tar.gz) = 42458953
> +SHA256 (samba-4.20.3.tar.gz) = r9WpuwPlySHEwdTktPpuoWz3mNlOXlv/uf1hcWZBzzA=
> +SIZE (samba-4.20.3.tar.gz) = 42464180
Re: UPDATE samba-4.20.4
Hi,
Builds, tests fine. OK from me.
Ian McWilliam
> On 7 Aug 2024, at 3:42 am, Björn Ketelaars
> wrote:
>
> This is an update to the latest stable release of the Samba 4.20 release
> series and only fixes a regression in library version strings. See
> https://www.samba.org/samba/history/samba-4.20.4.html and
> https://bugzilla.samba.org/show_bug.cgi?id=15673.
>
> Though some of the public samba libraries have consumers, OpenBSD is not
> bitten by this.
>
> Run tested on amd64.
>
> OK?
>
>
> diff --git Makefile Makefile
> index d5badfad5f1..3824cb19ee8 100644
> --- Makefile
> +++ Makefile
> @@ -1,4 +1,4 @@
> -VERSION =4.20.3
> +VERSION =4.20.4
> DISTNAME =samba-${VERSION}
> EPOCH = 0
>
> diff --git distinfo distinfo
> index 0472bd72531..1d8169026e1 100644
> --- distinfo
> +++ distinfo
> @@ -1,2 +1,2 @@
> -SHA256 (samba-4.20.3.tar.gz) = r9WpuwPlySHEwdTktPpuoWz3mNlOXlv/uf1hcWZBzzA=
> -SIZE (samba-4.20.3.tar.gz) = 42464180
> +SHA256 (samba-4.20.4.tar.gz) = OpLpfq6zRbazIjL1A+FNNPA6eqZMRR/owlihG72pCOU=
> +SIZE (samba-4.20.4.tar.gz) = 42462586
Re: [-stable UPDATE] samba-4.19.8
Hi,
Thanks for the update.
Build and tests fine. OK from me.
Ian McWilliam
> On 16 Aug 2024, at 3:54 am, Björn Ketelaars
> wrote:
>
> Here is an update to the latest release of the Samba 4.19 release series
> for -stable. Release notes:
> https://www.samba.org/samba/history/samba-4.19.8.html
>
> libdcerpc and libsamba-credentials require a minor bump because of the
> addition of new symbols.
>
> OK for committing to -stable?
>
>
> Index: Makefile
> ===
> RCS file: /cvs/ports/net/samba/Makefile,v
> retrieving revision 1.343.2.2
> diff -u -p -r1.343.2.2 Makefile
> --- Makefile 11 Jun 2024 18:09:43 - 1.343.2.2
> +++ Makefile 15 Aug 2024 17:48:46 -
> @@ -1,4 +1,4 @@
> -VERSION =4.19.7
> +VERSION =4.19.8
> DISTNAME =samba-${VERSION}
> EPOCH = 0
>
> @@ -10,7 +10,7 @@ PKGNAME-docs = samba-docs-${VERSION}
>
> PKG_ARCH-docs = *
>
> -SHARED_LIBS =dcerpc 1.1 \
> +SHARED_LIBS =dcerpc 1.2 \
> dcerpc-binding 4.0 \
> dcerpc-samr 1.0 \
> dcerpc-server-core 3.0 \
> @@ -20,7 +20,7 @@ SHARED_LIBS = dcerpc 1.1 \
> ndr-nbt 2.1 \
> ndr-standard5.0 \
> netapi 3.3 \
> - samba-credentials 1.4 \
> + samba-credentials 1.5 \
> samba-errors2.1 \
> samba-hostconfig13.0 \
> samba-passdb3.0 \
> Index: distinfo
> ===
> RCS file: /cvs/ports/net/samba/distinfo,v
> retrieving revision 1.114.2.2
> diff -u -p -r1.114.2.2 distinfo
> --- distinfo 11 Jun 2024 18:09:43 - 1.114.2.2
> +++ distinfo 15 Aug 2024 17:48:46 -
> @@ -1,2 +1,2 @@
> -SHA256 (samba-4.19.7.tar.gz) = K7uACvLWvHucI+cIzVjQCNo7+m735iHZ7ItTOH7+5EU=
> -SIZE (samba-4.19.7.tar.gz) = 41851647
> +SHA256 (samba-4.19.8.tar.gz) = Gu/3bCB/ODR3zkut69FUaRxAjS4VsBszPIXrd1Ro3fY=
> +SIZE (samba-4.19.8.tar.gz) = 41878540
> Index: pkg/PLIST-main
> ===
> RCS file: /cvs/ports/net/samba/pkg/PLIST-main,v
> retrieving revision 1.73.2.1
> diff -u -p -r1.73.2.1 PLIST-main
> --- pkg/PLIST-main11 Jun 2024 18:09:43 - 1.73.2.1
> +++ pkg/PLIST-main15 Aug 2024 17:48:46 -
> @@ -1048,6 +1048,8 @@ lib/python${MODPY_VERSION}/site-packages
> lib/python${MODPY_VERSION}/site-packages/samba/tests/blackbox/${MODPY_PYCACHE}http_content.${MODPY_PYC_MAGIC_TAG}pyc
> lib/python${MODPY_VERSION}/site-packages/samba/tests/blackbox/${MODPY_PYCACHE}mdsearch.${MODPY_PYC_MAGIC_TAG}${MODPY_PYOEXTENSION}
> lib/python${MODPY_VERSION}/site-packages/samba/tests/blackbox/${MODPY_PYCACHE}mdsearch.${MODPY_PYC_MAGIC_TAG}pyc
> +lib/python${MODPY_VERSION}/site-packages/samba/tests/blackbox/${MODPY_PYCACHE}misc_dfs_widelink.${MODPY_PYC_MAGIC_TAG}${MODPY_PYOEXTENSION}
> +lib/python${MODPY_VERSION}/site-packages/samba/tests/blackbox/${MODPY_PYCACHE}misc_dfs_widelink.${MODPY_PYC_MAGIC_TAG}pyc
> lib/python${MODPY_VERSION}/site-packages/samba/tests/blackbox/${MODPY_PYCACHE}ndrdump.${MODPY_PYC_MAGIC_TAG}${MODPY_PYOEXTENSION}
> lib/python${MODPY_VERSION}/site-packages/samba/tests/blackbox/${MODPY_PYCACHE}ndrdump.${MODPY_PYC_MAGIC_TAG}pyc
> lib/python${MODPY_VERSION}/site-packages/samba/tests/blackbox/${MODPY_PYCACHE}netads_dns.${MODPY_PYC_MAGIC_TAG}${MODPY_PYOEXTENSION}
> @@ -1080,6 +1082,7 @@ lib/python${MODPY_VERSION}/site-packages
> lib/python${MODPY_VERSION}/site-packages/samba/tests/blackbox/http_chunk.py
> lib/python${MODPY_VERSION}/site-packages/samba/tests/blackbox/http_content.py
> lib/python${MODPY_VERSION}/site-packages/samba/tests/blackbox/mdsearch.py
> +lib/python${MODPY_VERSION}/site-packages/samba/tests/blackbox/misc_dfs_widelink.py
> lib/python${MODPY_VERSION}/site-packages/samba/tests/blackbox/ndrdump.py
> lib/python${MODPY_VERSION}/site-packages/samba/tests/blackbox/netads_dns.py
> lib/python${MODPY_VERSION}/site-packages/samba/tests/blackbox/netads_json.py
Re: UPDATE net/samba-4.21.0
Hi,
builds, updates and tests fine. I’d say run with it. OK
Ian McWilliam
> On 3 Sep 2024, at 3:07 am, Bjorn Ketelaars wrote:
>
> This is the first release of the 4.21 branch. Changes are listed in [0].
>
> Changes to the port:
> - Remove pyldb-util.cpython-${MODPY_MAJORMINOR} as API python bindings
> have been removed from the LDB module [0].
> - No need any more for special handling of
> samba-policy.cpython-${MODPY_MAJORMINOR} as this is a normal C
> library, used by python but does not use any python itself (nor by
> dependencies any longer) [1].
> - Bumped several shared libraries (based on output of check_sym).
>
> The first two changes enable us to simplify Makefile.
>
> I have been running the 4.21 branch since the first release candidate
> and found no issues in my environment. Results may vary.
> There is limited time to test this update before the ports tree is
> locked. Not sure if there is enough time. Any opinion on this?
> FWIW, the 4.20 branch we currently have in ports is supported until
> 2025-09 [2], thus well supported. Updating to 4.21 has a slight
> advantage on backporting future updates.
>
> Please note that this release of samba depends on an update of
> databases/tdb to 1.4.12, which will be send in a separate mail.
>
> Wait with updating / comments/ ok?
>
>
> [0] https://www.samba.org/samba/history/samba-4.21.0.html
> [1]
> https://github.com/samba-team/samba/commit/d11b281aefa98e6850053ccd6142253c6cf0d04f
> [2] https://wiki.samba.org/index.php/Samba_Release_Planning
>
>
> diff --git Makefile Makefile
> index 3824cb19ee8..b4a3448447e 100644
> --- Makefile
> +++ Makefile
> @@ -1,4 +1,4 @@
> -VERSION =4.20.4
> +VERSION =4.21.0
> DISTNAME =samba-${VERSION}
> EPOCH = 0
>
> @@ -14,29 +14,26 @@ SHARED_LIBS = dcerpc 1.2 \
> dcerpc-binding 5.0 \
> dcerpc-samr 1.0 \
> dcerpc-server-core 3.1 \
> - ldb 2.3 \
> + ldb 2.4 \
> ndr 3.2 \
> ndr-krb5pac 1.3 \
> ndr-nbt 2.1 \
> ndr-standard6.0 \
> - netapi 3.3 \
> - samba-credentials 1.6 \
> + netapi 3.4 \
> + samba-credentials 2.0 \
> samba-errors2.1 \
> - samba-hostconfig14.0 \
> - samba-passdb3.0 \
> - samba-util 10.1 \
> - samdb 3.1 \
> + samba-hostconfig15.0 \
> + samba-passdb3.1 \
> + samba-policy0.0 \
> + samba-util 11.0 \
> + samdb 4.0 \
> smbclient 6.2 \
> - smbconf 15.0 \
> + smbconf 16.0 \
> smbldap 1.0 \
> tevent 2.3 \
> tevent-util 2.0 \
> wbclient5.1
>
> -# Those have to be handled specially, see "Python ABI" below.
> -SHARED_LIBS += pyldb-util.cpython-${MODPY_MAJORMINOR}
> 1.0
> -SHARED_LIBS += samba-policy.cpython-${MODPY_MAJORMINOR}
> 1.0
> -
> CATEGORIES = net sysutils security
>
> HOMEPAGE =https://www.samba.org/
> @@ -58,9 +55,6 @@ WANTLIB-docs =
> SITES = https://download.samba.org/pub/samba/stable/ \
> https://download.samba.org/pub/samba/old-versions/
>
> -# XXX 0640 on Makefile breaks update-patches with PORTS_PRIVSEP=Yes
> -FIX_EXTRACT_PERMISSIONS =Yes
> -
> MULTI_PACKAGES = -main -docs
> DEBUG_PACKAGES = ${BUILD_PACKAGES}
>
> @@ -84,7 +78,7 @@ RUN_DEPENDS-docs =
> LIB_DEPENDS-main =archivers/libarchive \
> converters/libiconv \
> databases/openldap \
> - databases/tdb>=1.4.10 \
> + databases/tdb>=1.4.12 \
> devel/jansson \
> devel/libinotify \
> devel/libtalloc>=2.4.2 \
> @@ -150,30 +144,6 @@ M
Re: UPDATE databases/tdb-1.4.12
Hi,
Builds and tests fine with the samba update. OK.
Ian McWilliam
> On 3 Sep 2024, at 3:06 am, Bjorn Ketelaars wrote:
>
> Simple diff for updating databases/tdb to 1.4.12, which is needed for an
> update of net/samba.
>
> Tested against the samba update.
>
> Comments / OK?
>
>
> diff --git Makefile Makefile
> index 0cb79630e24..71ee8d7d360 100644
> --- Makefile
> +++ Makefile
> @@ -2,11 +2,10 @@ COMMENT-main= trivial database library
> COMMENT-python= Python ${MODPY_VERSION} bindings for tdb
>
> # Keep in sync with the version bundled in net/samba
> -V= 1.4.10
> +V= 1.4.12
>
> DISTNAME= tdb-$V
> PKGNAME-python= py3-${DISTNAME}
> -REVISION=1
>
> MULTI_PACKAGES= -main -python
>
> diff --git distinfo distinfo
> index 885f4093736..6471965a4ec 100644
> --- distinfo
> +++ distinfo
> @@ -1,2 +1,2 @@
> -SHA256 (tdb-1.4.10.tar.gz) = AjOOM8FsIcnilXHO9SPnaytwhjYlT28wxs8ZXUjGLa8=
> -SIZE (tdb-1.4.10.tar.gz) = 747139
> +SHA256 (tdb-1.4.12.tar.gz) = bOSydJiBLQkjfs5loNbfrAlBYQ5wmEjsuCKqJBCEzXo=
> +SIZE (tdb-1.4.12.tar.gz) = 748827
> diff --git patches/patch-buildtools_wafsamba_wafsamba_py
> patches/patch-buildtools_wafsamba_wafsamba_py
> index 1a8a28706d2..ae284e72547 100644
> --- patches/patch-buildtools_wafsamba_wafsamba_py
> +++ patches/patch-buildtools_wafsamba_wafsamba_py
> @@ -4,7 +4,7 @@
> Index: buildtools/wafsamba/wafsamba.py
> --- buildtools/wafsamba/wafsamba.py.orig
> +++ buildtools/wafsamba/wafsamba.py
> -@@ -292,6 +292,13 @@ def SAMBA_LIBRARY(bld, libname, source,
> +@@ -294,6 +294,13 @@ def SAMBA_LIBRARY(bld, libname, source,
> realname = bld.map_shlib_extension(realname,
> python=(target_type=='PYTHON'))
> link_name = bld.map_shlib_extension(link_name,
> python=(target_type=='PYTHON'))
>
> @@ -18,7 +18,7 @@ Index: buildtools/wafsamba/wafsamba.py
> # we don't want any public libraries without version numbers
> if (not private_library and target_type != 'PYTHON' and not realname):
> if vnum is None and soname is None:
> -@@ -408,9 +415,9 @@ def SAMBA_LIBRARY(bld, libname, source,
> +@@ -410,9 +417,9 @@ def SAMBA_LIBRARY(bld, libname, source,
>
> if pc_files is not None and not private_library:
> if pyembed:
bump rsnapshot pkg version
Hi, After testing an update from 7.5-stable to a current snapshot I see that net/rsnapshot # @rsync-3.2.7p1 -> @rsync-3.3.0p2 doesn’t update without manual intervention. Any chance of a pkg version bump so that it updates correctly? Ian McWilliam
Re: bump rsnapshot pkg version
> On 10 Sep 2024, at 4:35 pm, Stuart Henderson wrote: > > On 2024/09/10 11:52, Ian McWilliam wrote: >> Hi, >> >> >> After testing an update from 7.5-stable to a current snapshot I see that >> >> net/rsnapshot # @rsync-3.2.7p1 -> @rsync-3.3.0p2 >> >> doesn’t update without manual intervention. >> >> Any chance of a pkg version bump so that it updates correctly? > > What is there to update? rsnapshot hasn't changed since 2022 and there's > no detection of rsync version in the autoconf script so should be no > change in the package. > Obviously nothing except the listed run deps gets out of sync, doesn’t stop it from working. I can live with manually updating it each release. Ian McWilliam
Re: bump rsnapshot pkg version
> On 10 Sep 2024, at 5:37 pm, Stuart Henderson wrote: > > On 2024/09/10 17:25, Ian McWilliam wrote: >> >> >>> On 10 Sep 2024, at 4:35 pm, Stuart Henderson wrote: >>> >>> On 2024/09/10 11:52, Ian McWilliam wrote: >>>> Hi, >>>> >>>> >>>> After testing an update from 7.5-stable to a current snapshot I see that >>>> >>>> net/rsnapshot # @rsync-3.2.7p1 -> @rsync-3.3.0p2 >>>> >>>> doesn’t update without manual intervention. >>>> >>>> Any chance of a pkg version bump so that it updates correctly? >>> >>> What is there to update? rsnapshot hasn't changed since 2022 and there's >>> no detection of rsync version in the autoconf script so should be no >>> change in the package. >>> >> >> Obviously nothing except the listed run deps gets out of sync, doesn’t stop >> it from working. I can live with manually updating it each release. > > You're reading more into the @depend line than is actually there - > looking at a fresh pkg_add: > > @depend net/rsync:rsync-*:rsync-3.3.0p2 > > The run dep is on any rsync-* package. The version number just shows > which version was installed when the package was built. > > If your aim is to replace all packages with fresh ones whether they > need it or not, you can use -D installed, but it's more helpful not to > do that (except in an emergency) as using that means you won't find > out about any real missed bumps (i.e. where a depended-on package > changed in an incompatible way that is picked up by autoconf etc > to trigger changes in the build). My main reason for checking to make sure packages with libs were updated correctly not leaving any old packages with old libc, etc installed. This just happened to show up. Thanks for the explanation. Ian McWilliam
Re: smbclient rejects -TcF as net/samba not built --with-libarchive
Hi all, c. april 2016….. Jeremie wrote: > on Tuesday the samba team will release major security patches. You may > have heard of > > http://badlock.org/ <http://badlock.org/> > > samba-4.1 is EOL upstream, thus they won't release a new version. > > At $WORK we've been recognized as samba vendors, meaning that we have > access to the bug, diffs and upcoming tarballs. The diff applied to > 4.2+ is huge, I don't think it's reasonable for us to try to backport > it. Right now I'm trying to upgrade to 4.3.6... If memory serves me, there was an issue at the time linking to lib archive and as no one else was testing and didn’t use the feature, I think it was agreed to look at this at a later date. So, this was removed in the middle of a major Samba security, coupled with moving to newer major versions, in a short period of time. I think that covers it. I have no issue if the feature makes its way back into the port. Ian McWilliam > On 4 Jul 2023, at 9:42 pm, Jeremie Courreges-Anglas wrote: > > On Mon, Jul 03 2023, Alexander Klimov wrote: >> Hello port devs! > > Hi, > >> Any reason why net/samba is built explicitly --without-libarchive? >> That disables the manpage-documented -TcF option (tar backup creation). >> Btw. s/--without-libarchive/--with-libarchive/ made it working for me >> (x86_64). > > Looking at cvs blame and cvs log, there were many changes between 4.1.23 > and 4.3.6. I probably disabled libarchive support out of a judgement > call, knowing I had bigger fish to fry (security updates). > > If the current lack of libarchive support is a problem then we can > probably add it. Can you please confirm that tar/libarchive support in > smbclient is fully usable to backup and restore files on a share? > > PS: if a port has a maintainer then do Cc them. (+cc Ian) > -- > jca | PGP : 0x1524E7EE / 5135 92C1 AD36 5293 2BDF DDCC 0DFA 74AE 1524 E7EE
Re: [update] samba-4.18.4 (was: Re: [update] samba-4.18.3)
Hi,
Builds and runs fine in my testing.
Looks like the additional tar support is working.
ianm-openbsd:dest {111} smbclient //192.168.251.127/ianm --user ianm -Tc
test.tar development
Password for [IANM-TEST\ianm]:
tar: dumped 12 files and 0 directories
Total bytes written: 57190 (1.4 MiB/s)
ianm-openbsd:dest {112} tar -tvf test.tar
drwxr-xr-x 2 root wheel0 Jul 6 12:08 ./development
drwxr-xr-x 2 root wheel0 Mar 23 11:25 ./development/anoncvs
-rw-r--r-- 1 root wheel 6148 Jul 15 2022 ./development/.DS_Store
-rw-r--r-- 1 root wheel 2232 Jan 21 2016
./development/mpage-pledge.diff
-rw-r--r-- 1 root wheel 4096 Jul 15 2022 ./development/._.DS_Store
-rw-r--r-- 1 root wheel 4096 Oct 5 2022
./development/._mpage-pledge.diff
-rw-r--r-- 1 root wheel29254 Jul 6 10:21
./development/samba-4.18.4.diff
-rw-r--r-- 1 root wheel 1588 Sep 25 2021
./development/anoncvs/cvs-src-current
-rw-r--r-- 1 root wheel 1914 Mar 25 10:19
./development/anoncvs/cvs-src-stable
-rw-r--r-- 1 root wheel 1916 Apr 5 2022
./development/anoncvs/cvs-src-stable-7.0
-rw-r--r-- 1 root wheel 1914 Sep 26 2022
./development/anoncvs/cvs-src-stable-7.1
-rw-r--r-- 1 root wheel 1916 Mar 23 11:19
./development/anoncvs/cvs-src-stable-7.2
-rw-r--r-- 1 root wheel 964 Sep 23 2021
./development/anoncvs/fetch-ports-current
-rw-r--r-- 1 root wheel 1152 Mar 23 11:26
./development/anoncvs/fetch-ports-stable
Ok from me.
Ian McWilliam
> On 6 Jul 2023, at 4:12 am, Bjorn Ketelaars wrote:
>
> On Wed 05/07/2023 14:51, Jeremie Courreges-Anglas wrote:
>> On Wed, Jul 05 2023, Jeremie Courreges-Anglas wrote:
>>> Here's an update to samba-4.18.3 and required talloc/tdb versions.
>>> I expect us to follow the 4.18 series for OpenBSD 7.4.
>>>
>>> Release announcements:
>>> https://www.samba.org/samba/history/samba-4.18.0.html
>>> https://www.samba.org/samba/history/samba-4.18.1.html
>>> https://www.samba.org/samba/history/samba-4.18.2.html
>>> https://www.samba.org/samba/history/samba-4.18.3.html
>>
>> and https://www.samba.org/samba/history/samba-4.18.4.html
>>
>>> This includes the addition of libarchive as a dep for smbclient.
>>>
>>> Tests and oks welcome.
>>
>> New diff that updates to samba-4.18.4 - released today - and discards an
>> unwarranted change in devel/libtalloc/pkg.
>
> Diff looks good, build- and run-tested on amd64.
>
> OK bket@
Re: [-stable UPDATE] samba-4.19.6
Hi,
I see issues with macOS not being able to delete files and folders. Copying
populated folders to the share means that the files and folders copied cannot
be deleted. This behaviour is not present in 4.19.5 or the 4.20 series.
I need to file a bug report with the samba bug tracker.
Ian McWilliam
> On 9 Apr 2024, at 2:54 am, Bjorn Ketelaars wrote:
>
> Here is an update to the latest release of the Samba 4.19 release series
> for -stable. Release notes:
> https://www.samba.org/samba/history/samba-4.19.6.html
>
> Note that -current is on the 4.20 release series.
>
> libndr-nbt needs a minor bump because of an addition of a symbol.
> Lightly run tested on OpenBSD-7.5 amd64.
>
> Tests/comments/OKs welcome.
>
>
> Index: Makefile
> ===
> RCS file: /cvs/ports/net/samba/Makefile,v
> retrieving revision 1.343
> diff -u -p -r1.343 Makefile
> --- Makefile 20 Feb 2024 19:45:20 - 1.343
> +++ Makefile 8 Apr 2024 16:39:39 -
> @@ -1,4 +1,4 @@
> -VERSION =4.19.5
> +VERSION =4.19.6
> DISTNAME =samba-${VERSION}
> EPOCH = 0
>
> @@ -17,7 +17,7 @@ SHARED_LIBS = dcerpc 1.1 \
> ldb 2.3 \
> ndr 3.1 \
> ndr-krb5pac 1.3 \
> - ndr-nbt 2.0 \
> + ndr-nbt 2.1 \
> ndr-standard5.0 \
> netapi 3.3 \
> samba-credentials 1.4 \
> Index: distinfo
> ===
> RCS file: /cvs/ports/net/samba/distinfo,v
> retrieving revision 1.114
> diff -u -p -r1.114 distinfo
> --- distinfo 20 Feb 2024 19:45:20 - 1.114
> +++ distinfo 8 Apr 2024 16:39:39 -
> @@ -1,2 +1,2 @@
> -SHA256 (samba-4.19.5.tar.gz) = DiQFtM7CnQRZYh9DQKGnSvdx7Hz/7f9DJQytfx+HYF4=
> -SIZE (samba-4.19.5.tar.gz) = 41840159
> +SHA256 (samba-4.19.6.tar.gz) = ZTtSCVVU28IjxjuWr1zfnpjD4EhUnF9WFD07M9zhzvE=
> +SIZE (samba-4.19.6.tar.gz) = 41847853
Re: [-stable UPDATE] samba-4.19.6
Samba bug report: https://bugzilla.samba.org/show_bug.cgi?id=15626
Ian McWilliam
> On 10 Apr 2024, at 12:32 pm, Ian McWilliam wrote:
>
> Hi,
>
> I see issues with macOS not being able to delete files and folders. Copying
> populated folders to the share means that the files and folders copied cannot
> be deleted. This behaviour is not present in 4.19.5 or the 4.20 series.
>
> I need to file a bug report with the samba bug tracker.
>
>
> Ian McWilliam
>
>> On 9 Apr 2024, at 2:54 am, Bjorn Ketelaars wrote:
>>
>> Here is an update to the latest release of the Samba 4.19 release series
>> for -stable. Release notes:
>> https://www.samba.org/samba/history/samba-4.19.6.html
>>
>> Note that -current is on the 4.20 release series.
>>
>> libndr-nbt needs a minor bump because of an addition of a symbol.
>> Lightly run tested on OpenBSD-7.5 amd64.
>>
>> Tests/comments/OKs welcome.
>>
>>
>> Index: Makefile
>> ===
>> RCS file: /cvs/ports/net/samba/Makefile,v
>> retrieving revision 1.343
>> diff -u -p -r1.343 Makefile
>> --- Makefile 20 Feb 2024 19:45:20 - 1.343
>> +++ Makefile 8 Apr 2024 16:39:39 -
>> @@ -1,4 +1,4 @@
>> -VERSION = 4.19.5
>> +VERSION = 4.19.6
>> DISTNAME = samba-${VERSION}
>> EPOCH = 0
>>
>> @@ -17,7 +17,7 @@ SHARED_LIBS = dcerpc 1.1 \
>> ldb 2.3 \
>> ndr 3.1 \
>> ndr-krb5pac 1.3 \
>> -ndr-nbt 2.0 \
>> +ndr-nbt 2.1 \
>> ndr-standard5.0 \
>> netapi 3.3 \
>> samba-credentials 1.4 \
>> Index: distinfo
>> ===
>> RCS file: /cvs/ports/net/samba/distinfo,v
>> retrieving revision 1.114
>> diff -u -p -r1.114 distinfo
>> --- distinfo 20 Feb 2024 19:45:20 - 1.114
>> +++ distinfo 8 Apr 2024 16:39:39 -
>> @@ -1,2 +1,2 @@
>> -SHA256 (samba-4.19.5.tar.gz) = DiQFtM7CnQRZYh9DQKGnSvdx7Hz/7f9DJQytfx+HYF4=
>> -SIZE (samba-4.19.5.tar.gz) = 41840159
>> +SHA256 (samba-4.19.6.tar.gz) = ZTtSCVVU28IjxjuWr1zfnpjD4EhUnF9WFD07M9zhzvE=
>> +SIZE (samba-4.19.6.tar.gz) = 41847853
>
Re: [-stable UPDATE] samba-4.19.6
vfs objects = acl_tdb
is the issue. Not enabling the acl_tbd vfs object allow files and folders to be
deleted again. I suspect this has been broken on OpenBSD for some time as I
have it disabled on all my other samba instances where it was once enabled.
Should we add a note to both state and current readme saying the vfs objects
are essentially broken on OpenBSD?
Ian McWilliam
> On 10 Apr 2024, at 8:23 pm, Ian McWilliam wrote:
>
> Samba bug report: https://bugzilla.samba.org/show_bug.cgi?id=15626
>
>
> Ian McWilliam
>
>
>> On 10 Apr 2024, at 12:32 pm, Ian McWilliam wrote:
>>
>> Hi,
>>
>> I see issues with macOS not being able to delete files and folders. Copying
>> populated folders to the share means that the files and folders copied
>> cannot be deleted. This behaviour is not present in 4.19.5 or the 4.20
>> series.
>>
>> I need to file a bug report with the samba bug tracker.
>>
>>
>> Ian McWilliam
>>
>>> On 9 Apr 2024, at 2:54 am, Bjorn Ketelaars wrote:
>>>
>>> Here is an update to the latest release of the Samba 4.19 release series
>>> for -stable. Release notes:
>>> https://www.samba.org/samba/history/samba-4.19.6.html
>>>
>>> Note that -current is on the 4.20 release series.
>>>
>>> libndr-nbt needs a minor bump because of an addition of a symbol.
>>> Lightly run tested on OpenBSD-7.5 amd64.
>>>
>>> Tests/comments/OKs welcome.
>>>
>>>
>>> Index: Makefile
>>> ===
>>> RCS file: /cvs/ports/net/samba/Makefile,v
>>> retrieving revision 1.343
>>> diff -u -p -r1.343 Makefile
>>> --- Makefile20 Feb 2024 19:45:20 - 1.343
>>> +++ Makefile8 Apr 2024 16:39:39 -
>>> @@ -1,4 +1,4 @@
>>> -VERSION = 4.19.5
>>> +VERSION = 4.19.6
>>> DISTNAME = samba-${VERSION}
>>> EPOCH = 0
>>>
>>> @@ -17,7 +17,7 @@ SHARED_LIBS = dcerpc 1.1 \
>>> ldb 2.3 \
>>> ndr 3.1 \
>>> ndr-krb5pac 1.3 \
>>> - ndr-nbt 2.0 \
>>> + ndr-nbt 2.1 \
>>> ndr-standard5.0 \
>>> netapi 3.3 \
>>> samba-credentials 1.4 \
>>> Index: distinfo
>>> ===
>>> RCS file: /cvs/ports/net/samba/distinfo,v
>>> retrieving revision 1.114
>>> diff -u -p -r1.114 distinfo
>>> --- distinfo20 Feb 2024 19:45:20 - 1.114
>>> +++ distinfo8 Apr 2024 16:39:39 -
>>> @@ -1,2 +1,2 @@
>>> -SHA256 (samba-4.19.5.tar.gz) = DiQFtM7CnQRZYh9DQKGnSvdx7Hz/7f9DJQytfx+HYF4=
>>> -SIZE (samba-4.19.5.tar.gz) = 41840159
>>> +SHA256 (samba-4.19.6.tar.gz) = ZTtSCVVU28IjxjuWr1zfnpjD4EhUnF9WFD07M9zhzvE=
>>> +SIZE (samba-4.19.6.tar.gz) = 41847853
>>
>
Re: [-stable UPDATE] samba-4.19.6
> On 23 Apr 2024, at 8:53 am, J Doe wrote: > > On 2024-04-15 01:28, Ian McWilliam wrote: > >> vfs objects = acl_tdb >> >> is the issue. Not enabling the acl_tbd vfs object allow files and folders to >> be deleted again. I suspect this has been broken on OpenBSD for some time as >> I have it disabled on all my other samba instances where it was once enabled. >> >> Should we add a note to both state and current readme saying the vfs objects >> are essentially broken on OpenBSD? >> >> >> Ian McWilliam > > Hi Ian, > > Does this apply to *all* VFS objects with Samba 4.19.6 ? > > I have a server configured with several VFS objects to provide a share > for some Apple iOS/macOS clients. In the config file I have: > >/etc/samba/smb.conf >. . . >vfs objects = catia fruit streams_xattr xattr_tdb > > ...after this I configure some of the VFS objects (ie: fruit: etc.). > > I had *thought* this was being honoured by Samba as I did not seeing any > error output regarding the VFS objects ... but has Samba been silently > ignoring them ? > > Thanks, > > - J Hi, On Mac kristamari-w1:~/Desktop>touch test.txt kristamari-w1:~/Desktop>xattr -w com.test.org hello test.txt kristamari-w1:~/Desktop>ls -al@ test.txt -rw-r--r--@ 1 ianm staff 0 23 Apr 10:33 test.txt com.apple.macl 72 com.test.org5 kristamari-w1:~/Desktop>xattr -l test.txt com.apple.macl: com.test.org: hello vfs objects = Mount samba share Copy file to share kristamari-w1:~/Desktop>ls -al@ /Volumes/ianm/test.txt -rwx-- 1 ianm staff 0 23 Apr 10:33 /Volumes/ianm/test.txt vfs objects = xattr_tdb acl_xattr restart samba remount volume Copy file from mac to share kristamari-w1:~/Desktop>ls -al@ /Volumes/ianm/test.txt -rwx--@ 1 ianm staff 0 23 Apr 10:33 /Volumes/ianm/test.txt com.apple.macl 72 com.test.org5 kristamari-w1:~/Desktop>xattr -l /Volumes/ianm/test.txt com.apple.macl: com.test.org: hello So it appears that xattr_tdb is storing extended attributes. Ian McWilliam
Re: UPDATE net/samba-4.20.1
Hi,
Thanks for the update.
Builds, update and tests fine OK from me
No change ib VFS modules that are already broken.
Ian McWilliam
> On 8 May 2024, at 9:11 pm, Björn Ketelaars
> wrote:
>
> Update to the latest stable release of the Samba 4.20 release series.
> Release notes: https://www.samba.org/samba/history/samba-4.20.1.html
>
> Tests and OKs welcome.
>
>
> diff --git Makefile Makefile
> index da7935b90e0..3b63b2f4f36 100644
> --- Makefile
> +++ Makefile
> @@ -1,7 +1,6 @@
> -VERSION =4.20.0
> +VERSION =4.20.1
> DISTNAME =samba-${VERSION}
> EPOCH = 0
> -REVISION = 1
>
> COMMENT-main =SMB and CIFS client and server for UNIX
> COMMENT-docs =additional documentation and examples for Samba
> diff --git distinfo distinfo
> index a04b322880c..f75d0ea042a 100644
> --- distinfo
> +++ distinfo
> @@ -1,2 +1,2 @@
> -SHA256 (samba-4.20.0.tar.gz) = AmclQlEKxuXQyRwMFNkKtObsOXxwnpUsbaOm4LTVpC8=
> -SIZE (samba-4.20.0.tar.gz) = 42433302
> +SHA256 (samba-4.20.1.tar.gz) = +Tw69SlTQNCBBsfA3PuF5PhQV9/RRYeqiBe+sxr/iPc=
> +SIZE (samba-4.20.1.tar.gz) = 42441898
> diff --git pkg/PLIST-main pkg/PLIST-main
> index f6cf619e1d3..b826066f469 100644
> --- pkg/PLIST-main
> +++ pkg/PLIST-main
> @@ -1163,6 +1163,10 @@
> lib/python${MODPY_VERSION}/site-packages/samba/tests/blackbox/${MODPY_PYCACHE}cl
> lib/python${MODPY_VERSION}/site-packages/samba/tests/blackbox/${MODPY_PYCACHE}claims.${MODPY_PYC_MAGIC_TAG}pyc
> lib/python${MODPY_VERSION}/site-packages/samba/tests/blackbox/${MODPY_PYCACHE}downgradedatabase.${MODPY_PYC_MAGIC_TAG}${MODPY_PYOEXTENSION}
> lib/python${MODPY_VERSION}/site-packages/samba/tests/blackbox/${MODPY_PYCACHE}downgradedatabase.${MODPY_PYC_MAGIC_TAG}pyc
> +lib/python${MODPY_VERSION}/site-packages/samba/tests/blackbox/${MODPY_PYCACHE}http_chunk.${MODPY_PYC_MAGIC_TAG}${MODPY_PYOEXTENSION}
> +lib/python${MODPY_VERSION}/site-packages/samba/tests/blackbox/${MODPY_PYCACHE}http_chunk.${MODPY_PYC_MAGIC_TAG}pyc
> +lib/python${MODPY_VERSION}/site-packages/samba/tests/blackbox/${MODPY_PYCACHE}http_content.${MODPY_PYC_MAGIC_TAG}${MODPY_PYOEXTENSION}
> +lib/python${MODPY_VERSION}/site-packages/samba/tests/blackbox/${MODPY_PYCACHE}http_content.${MODPY_PYC_MAGIC_TAG}pyc
> lib/python${MODPY_VERSION}/site-packages/samba/tests/blackbox/${MODPY_PYCACHE}mdsearch.${MODPY_PYC_MAGIC_TAG}${MODPY_PYOEXTENSION}
> lib/python${MODPY_VERSION}/site-packages/samba/tests/blackbox/${MODPY_PYCACHE}mdsearch.${MODPY_PYC_MAGIC_TAG}pyc
> lib/python${MODPY_VERSION}/site-packages/samba/tests/blackbox/${MODPY_PYCACHE}ndrdump.${MODPY_PYC_MAGIC_TAG}${MODPY_PYOEXTENSION}
> @@ -1199,6 +1203,8 @@
> lib/python${MODPY_VERSION}/site-packages/samba/tests/blackbox/bug13653.py
> lib/python${MODPY_VERSION}/site-packages/samba/tests/blackbox/check_output.py
> lib/python${MODPY_VERSION}/site-packages/samba/tests/blackbox/claims.py
> lib/python${MODPY_VERSION}/site-packages/samba/tests/blackbox/downgradedatabase.py
> +lib/python${MODPY_VERSION}/site-packages/samba/tests/blackbox/http_chunk.py
> +lib/python${MODPY_VERSION}/site-packages/samba/tests/blackbox/http_content.py
> lib/python${MODPY_VERSION}/site-packages/samba/tests/blackbox/mdsearch.py
> lib/python${MODPY_VERSION}/site-packages/samba/tests/blackbox/ndrdump.py
> lib/python${MODPY_VERSION}/site-packages/samba/tests/blackbox/netads_dns.py
MariaBD 10.0.27 OpenBSD_6_0 update
The latest update to MariaDB in OpenBSD_6_0 stable tree fails to build. Need to remove one patch file. ===> Extracting for mariadb-10.0.27 ===> Patching for mariadb-10.0.27 Ignoring previously applied (or reversed) patch. 1 out of 1 hunks ignored--saving rejects to storage/innobase/include/os0sync.h.rej ***> patch-storage_innobase_include_os0sync_h did not apply cleanly *** Error 1 in . (/usr/ports/infrastructure/mk/bsd.port.mk:2596 '/usr/ports/pobj/mariadb-10.0.27/.patch_done': @if cd /usr/ports/databases/m...) *** Error 1 in . (/usr/ports/infrastructure/mk/bsd.port.mk:1891 '/usr/packages/amd64/all/mariadb-client-10.0.27v1.tgz') *** Error 1 in . (/usr/ports/infrastructure/mk/bsd.port.mk:2416 '_internal-package') *** Error 1 in /usr/ports/databases/mariadb (/usr/ports/infrastructure/mk/bsd.port.mk:2396 'package') Ian McWilliam Index: patches/patch-storage_innobase_include_os0sync_h === RCS file: patches/patch-storage_innobase_include_os0sync_h diff -N patches/patch-storage_innobase_include_os0sync_h --- patches/patch-storage_innobase_include_os0sync_h4 May 2016 07:37:22 - 1.4 +++ /dev/null 1 Jan 1970 00:00:00 - @@ -1,17 +0,0 @@ -$OpenBSD: patch-storage_innobase_include_os0sync_h,v 1.4 2016/05/04 07:37:22 sthen Exp $ - -InnoDB attempted to verify if __sync_lock_test_and_set() is available by -checking IB_STRONG_MEMORY_MODEL. This macro has nothing to do with availability -of __sync_lock_test_and_set(), the right one is HAVE_ATOMIC_BUILTINS. - storage/innobase/include/os0sync.h.origMon May 2 06:19:43 2016 -+++ storage/innobase/include/os0sync.h Mon May 2 06:20:19 2016 -@@ -466,7 +466,7 @@ amount to decrement. */ - # define os_atomic_decrement_uint64(ptr, amount) \ - os_atomic_decrement(ptr, amount) - --# if defined(IB_STRONG_MEMORY_MODEL) -+# if defined(HAVE_ATOMIC_BUILTINS) - - /** Do an atomic test and set. - @param[in,out]ptr Memory location to set to non-zero
Re: Samba as DC on OpenBSD 6.0 is unusable :(
Have you tried vfs objects = xattr_tdb This will use a tdb database for storing extended attributes. Ian McWilliam From: owner-po...@openbsd.org [owner-po...@openbsd.org] on behalf of Jeremie Courreges-Anglas [j...@wxcvbn.org] Sent: Friday, 9 September 2016 7:01 AM To: kasak Cc: ports@openbsd.org Subject: Re: Samba as DC on OpenBSD 6.0 is unusable :( samba port maintainer here, kasak writes: > Maybe I am doing something wrong ? > > I have tried to provision domain and got error that samba was compiled > without acl support. > > On some forums I found advice to use "--use-ntvfs" option when provisioning. > > But it appeared that samba-tool doesn't know about this option: > > $ doas samba-tool domain provision --use-ntvfs > Usage: samba-tool domain provision [options] > > samba-tool domain provision: error: no such option: --use-ntvfs > > I think this option was deprecated in new versions of samba, but i was > not able to find information about it. No idea what went wrong in the last updates. IIUC it's just a matter of fixing domain provisioning, which used to work fine. I'll take a look at this soon(tm). > So, is it really possible to use OpenBSD as a DC? Everything is possible, but our lack of ACLs and extended attributes make OpenBSD a poor choice for samba, even if upstream supports backends that don't suffer these limitations. From my POV, net/samba is here first for simple file sharing and client libraries support. -- jca | PGP : 0x1524E7EE / 5135 92C1 AD36 5293 2BDF DDCC 0DFA 74AE 1524 E7EE
Re: Samba as DC on OpenBSD 6.0 is unusable :(
Revision 1.219 / (download) - annotate - [select for diffs], Tue Apr 12
17:42:09 2016 UTC (4 months, 3 weeks ago) by jca
Update to samba-4.3.6
i386 build by danj@, ok sthen@
The changelog between 4.1.23 and 4.3.6 is too big to be described here.
The point of updating now is that 4.1.x won't receive updates for the
freshly published security advisories. samba-4.3.8 will follow.
--without-acl-support \
Was introduced in the 4.3.6 update just before the big Samba security update for
CVE-2015-5370 (Multiple errors in DCE-RPC code)
CVE-2016-2110 (Man in the middle attacks possible with NTLMSSP)
CVE-2016-2111 (NETLOGON Spoofing Vulnerability)
CVE-2016-2112 (LDAP client and server don't enforce integrity)
CVE-2016-2113 (Missing TLS certificate validation)
CVE-2016-2114 ("server signing = mandatory" not enforced)
CVE-2016-2115 (SMB IPC traffic is not integrity protected)
CVE-2016-2118 (SAMR and LSA man in the middle attacks possible)
Now to work out the implications of re-enabling it.
Ian McWilliam
From: owner-po...@openbsd.org [owner-po...@openbsd.org] on behalf of kasak
[ka...@kasakoff.net]
Sent: Friday, 9 September 2016 3:54 PM
Cc: ports@openbsd.org
Subject: Re: Samba as DC on OpenBSD 6.0 is unusable :(
09.09.2016 02:48, Ian McWilliam пишет:
> Have you tried
>
> vfs objects = xattr_tdb
>
> This will use a tdb database for storing extended attributes.
>
>
> Ian McWilliam
>
>
> From: owner-po...@openbsd.org [owner-po...@openbsd.org] on behalf of Jeremie
> Courreges-Anglas [j...@wxcvbn.org]
> Sent: Friday, 9 September 2016 7:01 AM
> To: kasak
> Cc: ports@openbsd.org
> Subject: Re: Samba as DC on OpenBSD 6.0 is unusable :(
>
> samba port maintainer here,
>
> kasak writes:
>
>> Maybe I am doing something wrong ?
>>
>> I have tried to provision domain and got error that samba was compiled
>> without acl support.
>>
>> On some forums I found advice to use "--use-ntvfs" option when provisioning.
>>
>> But it appeared that samba-tool doesn't know about this option:
>>
>> $ doas samba-tool domain provision --use-ntvfs
>> Usage: samba-tool domain provision [options]
>>
>> samba-tool domain provision: error: no such option: --use-ntvfs
>>
>> I think this option was deprecated in new versions of samba, but i was
>> not able to find information about it.
> No idea what went wrong in the last updates. IIUC it's just a matter of
> fixing domain provisioning, which used to work fine. I'll take a look
> at this soon(tm).
>
>> So, is it really possible to use OpenBSD as a DC?
> Everything is possible, but our lack of ACLs and extended attributes
> make OpenBSD a poor choice for samba, even if upstream supports backends
> that don't suffer these limitations. From my POV, net/samba is here
> first for simple file sharing and client libraries support.
>
> --
> jca | PGP : 0x1524E7EE / 5135 92C1 AD36 5293 2BDF DDCC 0DFA 74AE 1524 E7EE
>
It did not help
Update: Samba 3.6.6 OPENBSD_5_1
Update Samba to 3.6.6. Bugfix release. List of bug fixes is long. http://www.samba.org/samba/history/samba-3.6.6.html Major enhancements in Samba 3.6.6 include: o Fix possible memory leaks in the Samba master process (bug #8970). o Fix uninitialized memory read in talloc_free(). o Fix joining of XP Pro workstations to 3.6 DCs (bug #8373). This is against OPENBSD_5_1 stable branch. Ian McWilliam samba-3.6.6-OPENBSD_5_1.diff Description: Binary data
Update: Samba 3.6.6 current
Update Samba to 3.6.6. Bugfix release. List of bug fixes is long. http://www.samba.org/samba/history/samba-3.6.6.html Major enhancements in Samba 3.6.6 include: o Fix possible memory leaks in the Samba master process (bug #8970). o Fix uninitialized memory read in talloc_free(). o Fix joining of XP Pro workstations to 3.6 DCs (bug #8373). This is against current. Ian McWilliam samba-3.6.6-current.diff Description: Binary data
Re: x11/openmotif: don't kill Motif.rules
On 6/08/2012 4:18 PM, Matthieu Herrb wrote: On Sun, Aug 05, 2012 at 02:00:13PM +, Christian Weisgerber wrote: Matthieu Herrb wrote: Fix: Drop the @sample lines. Having two versions of Motif.rules in different places isn't great, but having an indeterminate version (xenocara, openmotif, none) in /usr/X11R6/lib/X11/config is worse. I can kill the xenocara version instead, if it helps building openmotif based ports to have the version provided by openmotif installed. I have no idea if anything actually uses this. I think we would have seen errors if a port required a specific version. More generally I'd like to slowly kill imake in xenocara. Either by providing an alternative build system for ports still using imake, or by moving imake and its config out to ports. Makes sense. And for those who like Motif and imake, there a new porting project possible: CDE which got a new free license: http://sourceforge.net/projects/cdesktopenv/ :-) Wow, that takes me back to my Digital Unix / Tru64 admin days... Yes folks, that's how our Alpha workstation labs at UWS used to look like. Doubt very much if I go back to that now days though ;-) Ian McWilliam
UPDATE: samba 3.6.7 - current
An update for samba to version 3.6.7 for current. As usual lots of bug fixes. http://www.samba.org/samba/history/samba-3.6.7.html Major enhancements in Samba 3.6.7 include: Fix resolving our own "Domain Local" groups (bug #9052). Fix migrating printers while upgrading from 3.5.x (bug #9026). Make sure you apply the diff with patch -E 2 patches removed, 1 added. Ian McWilliam samba-3.6.7-current.diff Description: Binary data
UPDATE: samba 3.6.7 OPENBSD_5_2 branch
An update for samba to version 3.6.7 for 5.2 stable branch. As usual lots of bug fixes. http://www.samba.org/samba/history/samba-3.6.7.html Major enhancements in Samba 3.6.7 include: Fix resolving our own "Domain Local" groups (bug #9052). Fix migrating printers while upgrading from 3.5.x (bug #9026). Ian McWilliam samba-3.6.7-OPENBSD_5_2.diff Description: Binary data
UPDATE: samba 3.6.7 - current TAKE 2
Take 2 - forgot to cvs add. Doh! An update for samba to version 3.6.7 for current. As usual lots of bug fixes. http://www.samba.org/samba/history/samba-3.6.7.html Major enhancements in Samba 3.6.7 include: Fix resolving our own "Domain Local" groups (bug #9052). Fix migrating printers while upgrading from 3.5.x (bug #9026). Make sure you apply the diff with patch -E 2 patches removed, 1 added. Ian McWilliam samba-3.6.7-current.diff Description: Binary data
