Samba4 is an attempt to implement an Active Directory compatible Domain
Controller.
In short, you can join a WinNT, Win2000, WinXP or Win 2003 - 2016 member
server to a Samba4 domain, and it will behave much as it does in AD,
including Kerberos domain logins where applicable.
WWW: https://www.samba.org/
===> The following configuration options are available for samba410-4.10.18:
ADS=on: Active Directory client(implies LDAP)
AD_DC=on: Active Directory Domain Controller
AESNI=on: Accelerated AES crypto functions(amd64 only)
CLUSTER=off: Clustering support
CUPS=off: CUPS printing system support
DEVELOPER=off: With developer framework(implies NTVFS)
DOCS=on: Build and/or install documentation
FAM=on: File Alteration Monitor
GPGME=off: GpgME support
LDAP=on: LDAP client
MANDOC=off: Build manpages from DOCBOOK templates
NTVFS=off: Build *DEPRECATED* NTVFS file server
PROFILE=on: Profiling data
QUOTAS=on: Disk quota support
SPOTLIGHT=off: Spotlight server-side search support
SYSLOG=on: Syslog logging support
UTMP=on: UTMP accounting
====> VFS modules
FRUIT=on: MacOSX and TimeMachine support
GLUSTERFS=off: GlusterFS support
====> GSSAPI Security API support: you have to select exactly one of them
GSSAPI_BUILTIN=on: GSSAPI support via bundled Heimdal
GSSAPI_MIT=off: GSSAPI support via security/krb5
====> Zero configuration networking: you have to select exactly one of them
ZEROCONF_NONE=off: Zeroconf support is absent
AVAHI=on: Zeroconf support via Avahi
MDNSRESPONDER=off: Zeroconf support via mDNSResponder
====> DNS frontend: you can only select none or one of them
NSUPDATE=off: Use samba NSUPDATE utility for AD DC
BIND911=off: Use Bind 9.11 as AD DC DNS server frontend
BIND916=off: Use Bind 9.16 as AD DC DNS server frontend
===> Use 'make config' to modify these settings
Ports MUST NOT set WITH_DEBUG.
WITH_DEBUG is a user facing variable. When a user wants to build a port
with debugging symbols enabled, they either set WITH_DEBUG globally, or
WITH_DEBUG_PORTS+=category/port.
Approved by: bapt
With hat: portmgr
Differential Revision: https://reviews.freebsd.org/D23940
net/samba410: disable DEBUG on powerpc64
-O0 breaks assumption that the compiler is optimizing functions, which leads to
unresolved symbols:
ld: error:
/wrkdirs/usr/ports/net/samba410/work/samba-4.10.13/bin/default/source3/libsmbd-base-samba4.so:
undefined reference to __unsafe_string_function_usage_here_NTSTATUS__
DEBUG option probably shouldn't be on by default anyway, but I assume there must
be some reason for it.
Update Samba 4.10 to the 4.10.13 version, which also covers security update in
the 4.10.12.
MFH: 2020Q1
Security: CVE-2019-14902
CVE-2019-14907
CVE-2019-19344
M net/samba410/Makefile
M net/samba410/distinfo
M net/samba410/pkg-plist
It seems that since recently LLD_UNSAFE isn't necessary and actually causes port
to fail to build on 12.0 systems. No version bump as that should address only
failing builds.
Security update for net/samba410
o CVE-2019-10218:
Malicious servers can cause Samba client code to return filenames containing
path separators to calling code.
o CVE-2019-14833:
When the password contains multi-byte (non-ASCII) characters, the check
password script does not receive the full password string.
o CVE-2019-14847:
Users with the "get changes" extended access right can crash the AD DC LDAP
server by requesting an attribute using the range= syntax.
Security: CVE-2019-10218
CVE-2019-14833
CVE-2019-14847
Sponsored by: my wife
Upgrade samba410 port to 4.10.6 version. Fixed vfs_freebsd to match newer
configure test. This release should fix provisioning on UFS2 systems, ZFS
provisioning is still broken...
PR: 239105
Bump PORTREVISION for ports depending on the canonical version of GCC
as defined in Mk/bsd.default-versions.mk which has moved from GCC 8.3
to GCC 9.1 under most circumstances now after revision 507371.
This includes ports
- with USE_GCC=yes or USE_GCC=any,
- with USES=fortran,
- using Mk/bsd.octave.mk which in turn features USES=fortran, and
- with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, everything INDEX-11 shows with a dependency on lang/gcc9 now.
PR: 238330
