Pullup ticket #4208 - requested by taca net/samba35: security update Revisions pulled up: - net/samba35/Makefile 1.31 - net/samba35/distinfo 1.16 - net/samba35/patches/patch-af 1.6 - net/samba35/patches/patch-ah 1.3 - net/samba35/patches/patch-ap 1.2 - net/samba35/patches/patch-aq 1.4 - net/samba35/patches/patch-av 1.3 - net/samba35/patches/patch-aw 1.2 - net/samba35/patches/patch-ba 1.2 - net/samba35/patches/patch-bb 1.2 --- Module Name: pkgsrc Committed By: taca Date: Mon Aug 12 02:47:32 UTC 2013 Modified Files: pkgsrc/net/samba35: Makefile distinfo pkgsrc/net/samba35/patches: patch-af patch-ah patch-ap patch-aq patch-av patch-aw patch-ba patch-bb Log Message: Update samba35 to 3.5.22, security release. ============================== Release Notes for Samba 3.5.22 August 05, 2013 ============================== This is a security release in order to address CVE-2013-4124 (Missing integer wrap protection in EA list reading can cause server to loop with DOS). o CVE-2013-4124: All current released versions of Samba are vulnerable to a denial of service on an authenticated or guest connection. A malformed packet can cause the smbd server to loop the CPU performing memory allocations and preventing any further service. A connection to a file share, or a local account is needed to exploit this problem, either authenticated or unauthenticated if guest connections are allowed. This flaw is not exploitable beyond causing the code to loop allocating memory, which may cause the machine to exceed memory limits. Changes since 3.5.21: --------------------- o Jeremy Allison <jra@samba.org> * BUG 10010: CVE-2013-4124: Missing integer wrap protection in EA list reading can cause server to loop with DOS.diff -r1.29 -r1.29.2.1 pkgsrc/net/samba35/Makefile
(tron)
@@ -1,28 +1,27 @@ | @@ -1,28 +1,27 @@ | |||
1 | # $NetBSD: Makefile,v 1.29 2013/06/12 12:35:35 wiz Exp $ | 1 | # $NetBSD: Makefile,v 1.29.2.1 2013/08/12 14:21:30 tron Exp $ | |
2 | 2 | |||
3 | .include "../../net/samba/Makefile.mirrors" | 3 | .include "../../net/samba/Makefile.mirrors" | |
4 | 4 | |||
5 | DISTNAME= samba-${VERSION} | 5 | DISTNAME= samba-${VERSION} | |
6 | PKGREVISION= 2 | |||
7 | CATEGORIES= net | 6 | CATEGORIES= net | |
8 | MASTER_SITES= ${SAMBA_MIRRORS:=stable/} | 7 | MASTER_SITES= ${SAMBA_MIRRORS:=stable/} | |
9 | 8 | |||
10 | MAINTAINER= pkgsrc-users@NetBSD.org | 9 | MAINTAINER= pkgsrc-users@NetBSD.org | |
11 | HOMEPAGE= http://www.samba.org/ | 10 | HOMEPAGE= http://www.samba.org/ | |
12 | COMMENT= SMB/CIFS protocol server suite | 11 | COMMENT= SMB/CIFS protocol server suite | |
13 | LICENSE= gnu-gpl-v3 | 12 | LICENSE= gnu-gpl-v3 | |
14 | 13 | |||
15 | VERSION= 3.5.21 | 14 | VERSION= 3.5.22 | |
16 | CONFLICTS+= ja-samba-[0-9]* pam-smbpass-[0-9]* tdb-[0-9]* winbind-[0-9]* | 15 | CONFLICTS+= ja-samba-[0-9]* pam-smbpass-[0-9]* tdb-[0-9]* winbind-[0-9]* | |
17 | 16 | |||
18 | FILESDIR= ${PKGDIR}/../../net/samba/files | 17 | FILESDIR= ${PKGDIR}/../../net/samba/files | |
19 | DESCR_SRC= ${PKGDIR}/../../net/samba/DESCR | 18 | DESCR_SRC= ${PKGDIR}/../../net/samba/DESCR | |
20 | MESSAGE_SRC= ${PKGDIR}/../../net/samba/MESSAGE | 19 | MESSAGE_SRC= ${PKGDIR}/../../net/samba/MESSAGE | |
21 | WRKSRC= ${WRKDIR}/${DISTNAME}/source3 | 20 | WRKSRC= ${WRKDIR}/${DISTNAME}/source3 | |
22 | BUILD_DEFS+= VARBASE | 21 | BUILD_DEFS+= VARBASE | |
23 | CFLAGS+= -D__stub_utimensat | 22 | CFLAGS+= -D__stub_utimensat | |
24 | 23 | |||
25 | .include "../../mk/bsd.prefs.mk" | 24 | .include "../../mk/bsd.prefs.mk" | |
26 | 25 | |||
27 | PKG_SYSCONFSUBDIR= samba | 26 | PKG_SYSCONFSUBDIR= samba | |
28 | SAMBA_ETCDIR?= ${PKG_SYSCONFDIR} | 27 | SAMBA_ETCDIR?= ${PKG_SYSCONFDIR} |
@@ -1,34 +1,34 @@ | @@ -1,34 +1,34 @@ | |||
1 | $NetBSD: distinfo,v 1.15 2013/01/30 11:41:44 taca Exp $ | 1 | $NetBSD: distinfo,v 1.15.4.1 2013/08/12 14:21:30 tron Exp $ | |
2 | 2 | |||
3 | SHA1 (samba-3.5.21.tar.gz) = 4da59c901fe76040201e5a861687580e93a44ddb | 3 | SHA1 (samba-3.5.22.tar.gz) = 6c807dc64c0cd02bd560c4cfc5fe485964777e49 | |
4 | RMD160 (samba-3.5.21.tar.gz) = 6bfa7876f55791bb927d6032987b9c88e658d38e | 4 | RMD160 (samba-3.5.22.tar.gz) = ed8d8f9c5c1123334773fa9d47dca1e32ce54b6b | |
5 | Size (samba-3.5.21.tar.gz) = 35377315 bytes | 5 | Size (samba-3.5.22.tar.gz) = 35385144 bytes | |
6 | SHA1 (patch-aa) = 6c8497adce78e8b1dea2a0402d4a980b67b57b8e | 6 | SHA1 (patch-aa) = 6c8497adce78e8b1dea2a0402d4a980b67b57b8e | |
7 | SHA1 (patch-ab) = 0372ff2e3caca866dacd6ed25ae1d02e34a5b567 | 7 | SHA1 (patch-ab) = 0372ff2e3caca866dacd6ed25ae1d02e34a5b567 | |
8 | SHA1 (patch-ac) = 5b1c0fdb781cb75f81af71ed2695144d4a35e032 | 8 | SHA1 (patch-ac) = 5b1c0fdb781cb75f81af71ed2695144d4a35e032 | |
9 | SHA1 (patch-ad) = 447aaf4ea4cc98f0ccd5a3a22e1ffec0e69a3971 | 9 | SHA1 (patch-ad) = 447aaf4ea4cc98f0ccd5a3a22e1ffec0e69a3971 | |
10 | SHA1 (patch-ae) = 6698c698dc64c0f3df159157d182eae6aaa70958 | 10 | SHA1 (patch-ae) = 6698c698dc64c0f3df159157d182eae6aaa70958 | |
11 | SHA1 (patch-af) = 247c745717eb6eeadec258b88aa5df9f09d6769c | 11 | SHA1 (patch-af) = b01d199b3ec87074b3fda4edc4dae89ea051e2e9 | |
12 | SHA1 (patch-ag) = 92fd576c4b05a913051925e461cde9f5a2f2d6bf | 12 | SHA1 (patch-ag) = 92fd576c4b05a913051925e461cde9f5a2f2d6bf | |
13 | SHA1 (patch-ah) = 6142078efec4263124aa793108c43eef0ce61da4 | 13 | SHA1 (patch-ah) = 048843723a1e0de89b2bed1569157902fed94484 | |
14 | SHA1 (patch-ai) = 0a12dcfabcab7986968493d5f06701d06c3d5386 | 14 | SHA1 (patch-ai) = 0a12dcfabcab7986968493d5f06701d06c3d5386 | |
15 | SHA1 (patch-aj) = aecf98cf53e6bf6890e0fc9a40e6936df5f20a1a | 15 | SHA1 (patch-aj) = aecf98cf53e6bf6890e0fc9a40e6936df5f20a1a | |
16 | SHA1 (patch-ak) = cb51a96310eb7dde14351e4f12b68ce8d52c92c3 | 16 | SHA1 (patch-ak) = cb51a96310eb7dde14351e4f12b68ce8d52c92c3 | |
17 | SHA1 (patch-al) = f347808c376922da057256d3614a34b556721a66 | 17 | SHA1 (patch-al) = f347808c376922da057256d3614a34b556721a66 | |
18 | SHA1 (patch-am) = 13744f8a5cce3016c37002079eba3c47077e8d6d | 18 | SHA1 (patch-am) = 13744f8a5cce3016c37002079eba3c47077e8d6d | |
19 | SHA1 (patch-an) = a9b31b791d979a1062006bbe55375aaab69210a1 | 19 | SHA1 (patch-an) = a9b31b791d979a1062006bbe55375aaab69210a1 | |
20 | SHA1 (patch-ao) = bc31d3003bdaad141652daff2e0b6b3cafcee8c1 | 20 | SHA1 (patch-ao) = bc31d3003bdaad141652daff2e0b6b3cafcee8c1 | |
21 | SHA1 (patch-ap) = 3a47d212b1c29a6b3c46b83903c4f011c28a8c3c | 21 | SHA1 (patch-ap) = 9aeb4b039b300d31b214662f285ed58ea9a90bb8 | |
22 | SHA1 (patch-aq) = c3d1a3045364bebaa6c90967837907bd1de0964b | 22 | SHA1 (patch-aq) = 153e4746e0f196828f119b8a50eed6081311e9f3 | |
23 | SHA1 (patch-ar) = 5213b0a3d95d106939c2e268a8538c5e2901079a | 23 | SHA1 (patch-ar) = 5213b0a3d95d106939c2e268a8538c5e2901079a | |
24 | SHA1 (patch-as) = a9fcb1813d55d598bf1226cf004de85701c93e61 | 24 | SHA1 (patch-as) = a9fcb1813d55d598bf1226cf004de85701c93e61 | |
25 | SHA1 (patch-at) = dcfbe79496065559380e5713a758816e538e728b | 25 | SHA1 (patch-at) = dcfbe79496065559380e5713a758816e538e728b | |
26 | SHA1 (patch-au) = f94b27a5792acfa3742b4c07b23b3395b73eba84 | 26 | SHA1 (patch-au) = f94b27a5792acfa3742b4c07b23b3395b73eba84 | |
27 | SHA1 (patch-av) = fccde3e48f2b3de3b1adfaa488a67c57696d1a83 | 27 | SHA1 (patch-av) = 3c1ae1bc10b3fd4551e1b3a8b8290e4dd93ef730 | |
28 | SHA1 (patch-aw) = 36cb31313cdbd1e4670f33924371df5ed3390420 | 28 | SHA1 (patch-aw) = ebd83ff1c3b7827654a27ea1cf99cf58aa15f29a | |
29 | SHA1 (patch-ba) = 87799a62831b45e6cde8c36fbafbc08596411f98 | 29 | SHA1 (patch-ba) = 0206145c2973f5a78cbae33a3905c288399af864 | |
30 | SHA1 (patch-bb) = 6283ffa8781d0c069f81e80704a018028e6b2b50 | 30 | SHA1 (patch-bb) = 26a055d036ed3620681f5d043fcb564d17d16628 | |
31 | SHA1 (patch-bc) = 857e2400c8852f3c878f8d82857e80f214be2aea | 31 | SHA1 (patch-bc) = 857e2400c8852f3c878f8d82857e80f214be2aea | |
32 | SHA1 (patch-bd) = b78324305bbf67fa4a7dd627e0af1618d2bf7b47 | 32 | SHA1 (patch-bd) = b78324305bbf67fa4a7dd627e0af1618d2bf7b47 | |
33 | SHA1 (patch-be) = 2b298e596f2f57a595b83619ba68f6ad95febaaa | 33 | SHA1 (patch-be) = 2b298e596f2f57a595b83619ba68f6ad95febaaa | |
34 | SHA1 (patch-bf) = 9511567bfe9b579ae0a1c85483e7fe3ad4866973 | 34 | SHA1 (patch-bf) = 9511567bfe9b579ae0a1c85483e7fe3ad4866973 |
@@ -1,51 +1,51 @@ | @@ -1,51 +1,51 @@ | |||
1 | $NetBSD: patch-af,v 1.5 2012/12/17 12:01:35 taca Exp $ | 1 | $NetBSD: patch-af,v 1.5.6.1 2013/08/12 14:21:30 tron Exp $ | |
2 | 2 | |||
3 | Patch to join an Active Directory from | 3 | Patch to join an Active Directory from | |
4 | http://www.ogris.de/samba/unix-active-directory.html. | 4 | http://www.ogris.de/samba/unix-active-directory.html. | |
5 | 5 | |||
6 | --- configure.orig 2012-09-21 08:32:29.000000000 +0000 | 6 | --- configure.orig 2013-07-24 19:08:24.000000000 +0000 | |
7 | +++ configure | 7 | +++ configure | |
8 | @@ -18255,6 +18255,7 @@ $as_echo "#define DARWINOS 1" >>confdefs | 8 | @@ -18294,6 +18294,7 @@ $as_echo "#define DARWINOS 1" >>confdefs | |
9 | 9 | |||
10 | BLDSHARED="true" | 10 | BLDSHARED="true" | |
11 | LDSHFLAGS="-dynamiclib -flat_namespace -undefined suppress" | 11 | LDSHFLAGS="-dynamiclib -flat_namespace -undefined suppress" | |
12 | + SONAMEFLAG="-install_name \$(LIBDIR)/" | 12 | + SONAMEFLAG="-install_name \$(LIBDIR)/" | |
13 | CFLAGS="$CFLAGS -fno-common" | 13 | CFLAGS="$CFLAGS -fno-common" | |
14 | SHLD="\${CC}" | 14 | SHLD="\${CC}" | |
15 | SHLIBEXT="dylib" | 15 | SHLIBEXT="dylib" | |
16 | @@ -18291,7 +18292,7 @@ fi | 16 | @@ -18330,7 +18331,7 @@ fi | |
17 | $as_echo "$BLDSHARED" >&6; } | 17 | $as_echo "$BLDSHARED" >&6; } | |
18 | 18 | |||
19 | saved_before_as_needed_ldflags="$LDFLAGS" | 19 | saved_before_as_needed_ldflags="$LDFLAGS" | |
20 | -for flags in "-Wl,--as-needed" "-Wl,-z,ignore" "-z ignore" ; do | 20 | -for flags in "-Wl,--as-needed" "-Wl,-z,ignore" "-z ignore" ; do | |
21 | +for flags in "-Wl,-z,ignore" "-z ignore" ; do | 21 | +for flags in "-Wl,-z,ignore" "-z ignore" ; do | |
22 | saved_ldflags="$LDFLAGS" | 22 | saved_ldflags="$LDFLAGS" | |
23 | { $as_echo "$as_me:${as_lineno-$LINENO}: checking if $flags works" >&5 | 23 | { $as_echo "$as_me:${as_lineno-$LINENO}: checking if $flags works" >&5 | |
24 | $as_echo_n "checking if $flags works... " >&6; } | 24 | $as_echo_n "checking if $flags works... " >&6; } | |
25 | @@ -25255,9 +25256,9 @@ LIBS="-lcrypto $KRB5_LIBS $LIBS" | 25 | @@ -25294,9 +25295,9 @@ LIBS="-lcrypto $KRB5_LIBS $LIBS" | |
26 | 26 | |||
27 | 27 | |||
28 | 28 | |||
29 | - { $as_echo "$as_me:${as_lineno-$LINENO}: checking for des_set_key in -lcrypto" >&5 | 29 | - { $as_echo "$as_me:${as_lineno-$LINENO}: checking for des_set_key in -lcrypto" >&5 | |
30 | -$as_echo_n "checking for des_set_key in -lcrypto... " >&6; } | 30 | -$as_echo_n "checking for des_set_key in -lcrypto... " >&6; } | |
31 | -if ${ac_cv_lib_ext_crypto_des_set_key+:} false; then : | 31 | -if ${ac_cv_lib_ext_crypto_des_set_key+:} false; then : | |
32 | + { $as_echo "$as_me:${as_lineno-$LINENO}: checking for EVP_des_cbc in -lcrypto" >&5 | 32 | + { $as_echo "$as_me:${as_lineno-$LINENO}: checking for EVP_des_cbc in -lcrypto" >&5 | |
33 | +$as_echo_n "checking for EVP_des_cbc in -lcrypto... " >&6; } | 33 | +$as_echo_n "checking for EVP_des_cbc in -lcrypto... " >&6; } | |
34 | +if test "${ac_cv_lib_ext_crypto_EVP_des_cbc+set}" = set; then : | 34 | +if test "${ac_cv_lib_ext_crypto_EVP_des_cbc+set}" = set; then : | |
35 | $as_echo_n "(cached) " >&6 | 35 | $as_echo_n "(cached) " >&6 | |
36 | else | 36 | else | |
37 | cat confdefs.h - <<_ACEOF >conftest.$ac_ext | 37 | cat confdefs.h - <<_ACEOF >conftest.$ac_ext | |
38 | @@ -25269,31 +25270,31 @@ else | 38 | @@ -25308,31 +25309,31 @@ else | |
39 | #ifdef __cplusplus | 39 | #ifdef __cplusplus | |
40 | extern "C" | 40 | extern "C" | |
41 | #endif | 41 | #endif | |
42 | -char des_set_key (); | 42 | -char des_set_key (); | |
43 | +char EVP_des_cbc (); | 43 | +char EVP_des_cbc (); | |
44 | int | 44 | int | |
45 | main () | 45 | main () | |
46 | { | 46 | { | |
47 | -return des_set_key (); | 47 | -return des_set_key (); | |
48 | +return EVP_des_cbc (); | 48 | +return EVP_des_cbc (); | |
49 | ; | 49 | ; | |
50 | return 0; | 50 | return 0; | |
51 | } | 51 | } | |
@@ -65,27 +65,27 @@ http://www.ogris.de/samba/unix-active-di | @@ -65,27 +65,27 @@ http://www.ogris.de/samba/unix-active-di | |||
65 | fi | 65 | fi | |
66 | -{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_ext_crypto_des_set_key" >&5 | 66 | -{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_ext_crypto_des_set_key" >&5 | |
67 | -$as_echo "$ac_cv_lib_ext_crypto_des_set_key" >&6; } | 67 | -$as_echo "$ac_cv_lib_ext_crypto_des_set_key" >&6; } | |
68 | - if test $ac_cv_lib_ext_crypto_des_set_key = yes; then : | 68 | - if test $ac_cv_lib_ext_crypto_des_set_key = yes; then : | |
69 | +{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_ext_crypto_EVP_des_cbc" >&5 | 69 | +{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_ext_crypto_EVP_des_cbc" >&5 | |
70 | +$as_echo "$ac_cv_lib_ext_crypto_EVP_des_cbc" >&6; } | 70 | +$as_echo "$ac_cv_lib_ext_crypto_EVP_des_cbc" >&6; } | |
71 | + if test $ac_cv_lib_ext_crypto_EVP_des_cbc = yes; then : | 71 | + if test $ac_cv_lib_ext_crypto_EVP_des_cbc = yes; then : | |
72 | cat >>confdefs.h <<_ACEOF | 72 | cat >>confdefs.h <<_ACEOF | |
73 | -#define HAVE_DES_SET_KEY 1 | 73 | -#define HAVE_DES_SET_KEY 1 | |
74 | +#define HAVE_EVP_DES_CBC 1 | 74 | +#define HAVE_EVP_DES_CBC 1 | |
75 | _ACEOF | 75 | _ACEOF | |
76 | 76 | |||
77 | fi | 77 | fi | |
78 | @@ -34400,31 +34401,39 @@ case "$host_os" in | 78 | @@ -34441,31 +34442,39 @@ case "$host_os" in | |
79 | NSSSONAMEVERSIONSUFFIX=".2" | 79 | NSSSONAMEVERSIONSUFFIX=".2" | |
80 | WINBIND_NSS_EXTRA_OBJS="../nsswitch/winbind_nss_linux.o" | 80 | WINBIND_NSS_EXTRA_OBJS="../nsswitch/winbind_nss_linux.o" | |
81 | ;; | 81 | ;; | |
82 | - *freebsd[5-9]*) | 82 | - *freebsd[5-9]*) | |
83 | - # FreeBSD winbind client is implemented as a wrapper around | 83 | - # FreeBSD winbind client is implemented as a wrapper around | |
84 | - # the Linux version. | 84 | - # the Linux version. | |
85 | - NSSSONAMEVERSIONSUFFIX=".1" | 85 | - NSSSONAMEVERSIONSUFFIX=".1" | |
86 | - WINBIND_NSS_EXTRA_OBJS="../nsswitch/winbind_nss_freebsd.o \ | 86 | - WINBIND_NSS_EXTRA_OBJS="../nsswitch/winbind_nss_freebsd.o \ | |
87 | - ../nsswitch/winbind_nss_linux.o" | 87 | - ../nsswitch/winbind_nss_linux.o" | |
88 | - WINBIND_NSS="../nsswitch/nss_winbind.$SHLIBEXT" | 88 | - WINBIND_NSS="../nsswitch/nss_winbind.$SHLIBEXT" | |
89 | - WINBIND_WINS_NSS="../nsswitch/nss_wins.$SHLIBEXT" | 89 | - WINBIND_WINS_NSS="../nsswitch/nss_wins.$SHLIBEXT" | |
90 | - ;; | 90 | - ;; | |
91 | - | 91 | - | |
@@ -127,27 +127,27 @@ http://www.ogris.de/samba/unix-active-di | @@ -127,27 +127,27 @@ http://www.ogris.de/samba/unix-active-di | |||
127 | + ../nsswitch/winbind_nss_netbsd.o \ | 127 | + ../nsswitch/winbind_nss_netbsd.o \ | |
128 | + ../nsswitch/winbind_nss_linux.o" | 128 | + ../nsswitch/winbind_nss_linux.o" | |
129 | + WINBIND_NSS="../nsswitch/nss_winbind.$SHLIBEXT" | 129 | + WINBIND_NSS="../nsswitch/nss_winbind.$SHLIBEXT" | |
130 | + WINBIND_WINS_NSS="../nsswitch/nss_wins.$SHLIBEXT" | 130 | + WINBIND_WINS_NSS="../nsswitch/nss_wins.$SHLIBEXT" | |
131 | + else | 131 | + else | |
132 | + HAVE_WINBIND=no | 132 | + HAVE_WINBIND=no | |
133 | + winbind_no_reason=", getpwent_r is missing on $host_os so winbind is unsupported" | 133 | + winbind_no_reason=", getpwent_r is missing on $host_os so winbind is unsupported" | |
134 | + fi | 134 | + fi | |
135 | + ;; | 135 | + ;; | |
136 | + esac | 136 | + esac | |
137 | ;; | 137 | ;; | |
138 | *irix*) | 138 | *irix*) | |
139 | # IRIX has differently named shared libraries | 139 | # IRIX has differently named shared libraries | |
140 | @@ -34622,6 +34631,16 @@ $as_echo "#define HAVE_PASSWD_PW_AGE 1" | 140 | @@ -34663,6 +34672,16 @@ $as_echo "#define HAVE_PASSWD_PW_AGE 1" | |
141 | 141 | |||
142 | fi | 142 | fi | |
143 | 143 | |||
144 | +# NetBSD | 144 | +# NetBSD | |
145 | + | 145 | + | |
146 | +ac_fn_c_check_member "$LINENO" "struct passwd" "pw_class" "ac_cv_member_struct_passwd_pw_class" "#include <pwd.h> | 146 | +ac_fn_c_check_member "$LINENO" "struct passwd" "pw_class" "ac_cv_member_struct_passwd_pw_class" "#include <pwd.h> | |
147 | +" | 147 | +" | |
148 | +if test "x$ac_cv_member_struct_passwd_pw_class" = x""yes; then : | 148 | +if test "x$ac_cv_member_struct_passwd_pw_class" = x""yes; then : | |
149 | + | 149 | + | |
150 | +$as_echo "#define HAVE_PASSWD_PW_CLASS 1" >>confdefs.h | 150 | +$as_echo "#define HAVE_PASSWD_PW_CLASS 1" >>confdefs.h | |
151 | + | 151 | + | |
152 | +fi | 152 | +fi | |
153 | + | 153 | + |
@@ -1,13 +1,13 @@ | @@ -1,13 +1,13 @@ | |||
1 | $NetBSD: patch-ah,v 1.2 2011/06/15 11:45:08 adam Exp $ | 1 | $NetBSD: patch-ah,v 1.2.18.1 2013/08/12 14:21:30 tron Exp $ | |
2 | 2 | |||
3 | --- libsmb/cliconnect.c.orig 2010-12-05 16:06:50.000000000 +0000 | 3 | --- libsmb/cliconnect.c.orig 2013-07-24 18:53:49.000000000 +0000 | |
4 | +++ libsmb/cliconnect.c | 4 | +++ libsmb/cliconnect.c | |
5 | @@ -2555,7 +2555,7 @@ struct cli_state *get_ipc_connect_master | 5 | @@ -2583,7 +2583,7 @@ struct cli_state *get_ipc_connect_master | |
6 | if (!NT_STATUS_IS_OK(name_resolve_bcast(MSBROWSE, 1, &ip_list, | 6 | if (!NT_STATUS_IS_OK(name_resolve_bcast(MSBROWSE, 1, &ip_list, | |
7 | &count))) { | 7 | &count))) { | |
8 | DEBUG(99, ("No master browsers responded\n")); | 8 | DEBUG(99, ("No master browsers responded\n")); | |
9 | - return False; | 9 | - return False; | |
10 | + return NULL; | 10 | + return NULL; | |
11 | } | 11 | } | |
12 | 12 | |||
13 | for (i = 0; i < count; i++) { | 13 | for (i = 0; i < count; i++) { |
@@ -1,14 +1,14 @@ | @@ -1,14 +1,14 @@ | |||
1 | $NetBSD: patch-av,v 1.2 2011/06/15 11:45:08 adam Exp $ | 1 | $NetBSD: patch-av,v 1.2.18.1 2013/08/12 14:21:30 tron Exp $ | |
2 | 2 | |||
3 | --- smbd/server.c.orig 2010-10-07 16:41:16.000000000 +0000 | 3 | --- smbd/server.c.orig 2013-07-24 18:53:49.000000000 +0000 | |
4 | +++ smbd/server.c | 4 | +++ smbd/server.c | |
5 | @@ -1210,6 +1210,9 @@ extern void build_options(bool screen); | 5 | @@ -1213,6 +1213,9 @@ extern void build_options(bool screen); | |
6 | if (!directory_exist(lp_lockdir())) | 6 | if (!directory_exist(lp_lockdir())) | |
7 | mkdir(lp_lockdir(), 0755); | 7 | mkdir(lp_lockdir(), 0755); | |
8 | 8 | |||
9 | + if (!directory_exist(lp_statedir())) | 9 | + if (!directory_exist(lp_statedir())) | |
10 | + mkdir(lp_statedir(), 0755); | 10 | + mkdir(lp_statedir(), 0755); | |
11 | + | 11 | + | |
12 | if (is_daemon) | 12 | if (is_daemon) | |
13 | pidfile_create("smbd"); | 13 | pidfile_create("smbd"); | |
14 | 14 |
@@ -1,15 +1,15 @@ | @@ -1,15 +1,15 @@ | |||
1 | $NetBSD: patch-ap,v 1.1.1.1 2010/12/06 17:01:23 adam Exp $ | 1 | $NetBSD: patch-ap,v 1.1.1.1.22.1 2013/08/12 14:21:30 tron Exp $ | |
2 | 2 | |||
3 | --- nmbd/nmbd.c.orig 2010-10-07 16:41:16.000000000 +0000 | 3 | --- nmbd/nmbd.c.orig 2013-07-24 18:53:49.000000000 +0000 | |
4 | +++ nmbd/nmbd.c | 4 | +++ nmbd/nmbd.c | |
5 | @@ -916,6 +916,10 @@ static bool open_sockets(bool isdaemon, | 5 | @@ -917,6 +917,10 @@ static bool open_sockets(bool isdaemon, | |
6 | mkdir(lp_lockdir(), 0755); | 6 | mkdir(lp_lockdir(), 0755); | |
7 | } | 7 | } | |
8 | 8 | |||
9 | + if (!directory_exist(lp_statedir())) { | 9 | + if (!directory_exist(lp_statedir())) { | |
10 | + mkdir(lp_statedir(), 0755); | 10 | + mkdir(lp_statedir(), 0755); | |
11 | + } | 11 | + } | |
12 | + | 12 | + | |
13 | pidfile_create("nmbd"); | 13 | pidfile_create("nmbd"); | |
14 | 14 | |||
15 | if (!NT_STATUS_IS_OK(reinit_after_fork(nmbd_messaging_context(), | 15 | if (!NT_STATUS_IS_OK(reinit_after_fork(nmbd_messaging_context(), |
@@ -1,13 +1,13 @@ | @@ -1,13 +1,13 @@ | |||
1 | $NetBSD: patch-aw,v 1.1.1.1 2010/12/06 17:01:23 adam Exp $ | 1 | $NetBSD: patch-aw,v 1.1.1.1.22.1 2013/08/12 14:21:30 tron Exp $ | |
2 | 2 | |||
3 | --- winbindd/winbindd_cache.c.orig 2010-12-05 21:02:29.000000000 +0000 | 3 | --- winbindd/winbindd_cache.c.orig 2013-07-24 18:53:49.000000000 +0000 | |
4 | +++ winbindd/winbindd_cache.c | 4 | +++ winbindd/winbindd_cache.c | |
5 | @@ -4438,7 +4438,7 @@ struct winbindd_tdc_domain * wcache_tdc_ | 5 | @@ -4563,7 +4563,7 @@ struct winbindd_tdc_domain * wcache_tdc_ | |
6 | DEBUG(10,("wcache_tdc_fetch_domain: Searching for domain %s\n", name)); | 6 | DEBUG(10,("wcache_tdc_fetch_domain: Searching for domain %s\n", name)); | |
7 | 7 | |||
8 | if ( !init_wcache() ) { | 8 | if ( !init_wcache() ) { | |
9 | - return false; | 9 | - return false; | |
10 | + return NULL; | 10 | + return NULL; | |
11 | } | 11 | } | |
12 | 12 | |||
13 | /* fetch the list */ | 13 | /* fetch the list */ |
@@ -1,46 +1,46 @@ | @@ -1,46 +1,46 @@ | |||
1 | $NetBSD: patch-aq,v 1.3 2011/06/15 11:45:08 adam Exp $ | 1 | $NetBSD: patch-aq,v 1.3.18.1 2013/08/12 14:21:30 tron Exp $ | |
2 | 2 | |||
3 | Add support for passwd expand gecos | 3 | Add support for passwd expand gecos | |
4 | 4 | |||
5 | --- param/loadparm.c.orig 2011-06-14 11:17:28.000000000 +0000 | 5 | --- param/loadparm.c.orig 2013-07-24 18:53:49.000000000 +0000 | |
6 | +++ param/loadparm.c | 6 | +++ param/loadparm.c | |
7 | @@ -310,6 +310,7 @@ struct global { | 7 | @@ -310,6 +310,7 @@ struct global { | |
8 | bool bUnixPasswdSync; | 8 | bool bUnixPasswdSync; | |
9 | bool bPasswdChatDebug; | 9 | bool bPasswdChatDebug; | |
10 | int iPasswdChatTimeout; | 10 | int iPasswdChatTimeout; | |
11 | + bool bPasswdExpandGecos; | 11 | + bool bPasswdExpandGecos; | |
12 | bool bTimestampLogs; | 12 | bool bTimestampLogs; | |
13 | bool bNTSmbSupport; | 13 | bool bNTSmbSupport; | |
14 | bool bNTPipeSupport; | 14 | bool bNTPipeSupport; | |
15 | @@ -1297,6 +1298,15 @@ static struct parm_struct parm_table[] = | 15 | @@ -1297,6 +1298,15 @@ static struct parm_struct parm_table[] = | |
16 | .flags = FLAG_ADVANCED, | 16 | .flags = FLAG_ADVANCED, | |
17 | }, | 17 | }, | |
18 | { | 18 | { | |
19 | + .label = "passwd expand gecos", | 19 | + .label = "passwd expand gecos", | |
20 | + .type = P_BOOL, | 20 | + .type = P_BOOL, | |
21 | + .p_class = P_GLOBAL, | 21 | + .p_class = P_GLOBAL, | |
22 | + .ptr = &Globals.bPasswdExpandGecos, | 22 | + .ptr = &Globals.bPasswdExpandGecos, | |
23 | + .special = NULL, | 23 | + .special = NULL, | |
24 | + .enum_list = NULL, | 24 | + .enum_list = NULL, | |
25 | + .flags = FLAG_ADVANCED, | 25 | + .flags = FLAG_ADVANCED, | |
26 | + }, | 26 | + }, | |
27 | + { | 27 | + { | |
28 | .label = "check password script", | 28 | .label = "check password script", | |
29 | .type = P_STRING, | 29 | .type = P_STRING, | |
30 | .p_class = P_GLOBAL, | 30 | .p_class = P_GLOBAL, | |
31 | @@ -5074,6 +5084,7 @@ static void init_globals(bool first_time | 31 | @@ -5083,6 +5093,7 @@ static void init_globals(bool first_time | |
32 | Globals.bPamPasswordChange = False; | 32 | Globals.bPamPasswordChange = False; | |
33 | Globals.bPasswdChatDebug = False; | 33 | Globals.bPasswdChatDebug = False; | |
34 | Globals.iPasswdChatTimeout = 2; /* 2 second default. */ | 34 | Globals.iPasswdChatTimeout = 2; /* 2 second default. */ | |
35 | + Globals.bPasswdExpandGecos = False; | 35 | + Globals.bPasswdExpandGecos = False; | |
36 | Globals.bNTPipeSupport = True; /* Do NT pipes by default. */ | 36 | Globals.bNTPipeSupport = True; /* Do NT pipes by default. */ | |
37 | Globals.bNTStatusSupport = True; /* Use NT status by default. */ | 37 | Globals.bNTStatusSupport = True; /* Use NT status by default. */ | |
38 | Globals.bStatCache = True; /* use stat cache by default */ | 38 | Globals.bStatCache = True; /* use stat cache by default */ | |
39 | @@ -5528,6 +5539,7 @@ FN_GLOBAL_BOOL(lp_pam_password_change, & | 39 | @@ -5538,6 +5549,7 @@ FN_GLOBAL_BOOL(lp_pam_password_change, & | |
40 | FN_GLOBAL_BOOL(lp_unix_password_sync, &Globals.bUnixPasswdSync) | 40 | FN_GLOBAL_BOOL(lp_unix_password_sync, &Globals.bUnixPasswdSync) | |
41 | FN_GLOBAL_BOOL(lp_passwd_chat_debug, &Globals.bPasswdChatDebug) | 41 | FN_GLOBAL_BOOL(lp_passwd_chat_debug, &Globals.bPasswdChatDebug) | |
42 | FN_GLOBAL_INTEGER(lp_passwd_chat_timeout, &Globals.iPasswdChatTimeout) | 42 | FN_GLOBAL_INTEGER(lp_passwd_chat_timeout, &Globals.iPasswdChatTimeout) | |
43 | +FN_GLOBAL_BOOL(lp_passwd_expand_gecos, &Globals.bPasswdExpandGecos) | 43 | +FN_GLOBAL_BOOL(lp_passwd_expand_gecos, &Globals.bPasswdExpandGecos) | |
44 | FN_GLOBAL_BOOL(lp_nt_pipe_support, &Globals.bNTPipeSupport) | 44 | FN_GLOBAL_BOOL(lp_nt_pipe_support, &Globals.bNTPipeSupport) | |
45 | FN_GLOBAL_BOOL(lp_nt_status_support, &Globals.bNTStatusSupport) | 45 | FN_GLOBAL_BOOL(lp_nt_status_support, &Globals.bNTStatusSupport) | |
46 | FN_GLOBAL_BOOL(lp_stat_cache, &Globals.bStatCache) | 46 | FN_GLOBAL_BOOL(lp_stat_cache, &Globals.bStatCache) |
@@ -1,16 +1,16 @@ | @@ -1,16 +1,16 @@ | |||
1 | $NetBSD: patch-ba,v 1.1 2011/10/11 20:30:00 jmcneill Exp $ | 1 | $NetBSD: patch-ba,v 1.1.14.1 2013/08/12 14:21:30 tron Exp $ | |
2 | 2 | |||
3 | --- configure.in.orig 2011-08-03 18:24:05.000000000 +0000 | 3 | --- configure.in.orig 2013-07-24 18:53:49.000000000 +0000 | |
4 | +++ configure.in | 4 | +++ configure.in | |
5 | @@ -6239,6 +6239,11 @@ AC_CHECK_MEMBER(struct passwd.pw_age, | 5 | @@ -6244,6 +6244,11 @@ AC_CHECK_MEMBER(struct passwd.pw_age, | |
6 | AC_DEFINE(HAVE_PASSWD_PW_AGE, 1, [Defined if struct passwd has pw_age field]),, | 6 | AC_DEFINE(HAVE_PASSWD_PW_AGE, 1, [Defined if struct passwd has pw_age field]),, | |
7 | [#include <pwd.h>]) | 7 | [#include <pwd.h>]) | |
8 | 8 | |||
9 | +# NetBSD | 9 | +# NetBSD | |
10 | +AC_CHECK_MEMBER(struct passwd.pw_class, | 10 | +AC_CHECK_MEMBER(struct passwd.pw_class, | |
11 | + AC_DEFINE(HAVE_PASSWD_PW_CLASS, 1, [Defined if struct passwd has pw_class field]),, | 11 | + AC_DEFINE(HAVE_PASSWD_PW_CLASS, 1, [Defined if struct passwd has pw_class field]),, | |
12 | + [#include <pwd.h>]) | 12 | + [#include <pwd.h>]) | |
13 | + | 13 | + | |
14 | # AIX 4.3.x and 5.1 do not have as many members in | 14 | # AIX 4.3.x and 5.1 do not have as many members in | |
15 | # struct secmethod_table as AIX 5.2 | 15 | # struct secmethod_table as AIX 5.2 | |
16 | AC_CHECK_MEMBERS([struct secmethod_table.method_attrlist], , , | 16 | AC_CHECK_MEMBERS([struct secmethod_table.method_attrlist], , , |
@@ -1,14 +1,14 @@ | @@ -1,14 +1,14 @@ | |||
1 | $NetBSD: patch-bb,v 1.1 2011/10/11 20:30:00 jmcneill Exp $ | 1 | $NetBSD: patch-bb,v 1.1.14.1 2013/08/12 14:21:30 tron Exp $ | |
2 | 2 | |||
3 | --- include/config.h.in.orig 2011-08-03 18:25:13.000000000 +0000 | 3 | --- include/config.h.in.orig 2013-07-24 19:08:23.000000000 +0000 | |
4 | +++ include/config.h.in | 4 | +++ include/config.h.in | |
5 | @@ -1688,6 +1688,9 @@ | 5 | @@ -1694,6 +1694,9 @@ | |
6 | /* Defined if struct passwd has pw_age field */ | 6 | /* Defined if struct passwd has pw_age field */ | |
7 | #undef HAVE_PASSWD_PW_AGE | 7 | #undef HAVE_PASSWD_PW_AGE | |
8 | 8 | |||
9 | +/* Defined if struct passwd has pw_class field */ | 9 | +/* Defined if struct passwd has pw_class field */ | |
10 | +#undef HAVE_PASSWD_PW_CLASS | 10 | +#undef HAVE_PASSWD_PW_CLASS | |
11 | + | 11 | + | |
12 | /* Defined if struct passwd has pw_comment field */ | 12 | /* Defined if struct passwd has pw_comment field */ | |
13 | #undef HAVE_PASSWD_PW_COMMENT | 13 | #undef HAVE_PASSWD_PW_COMMENT | |
14 | 14 |