Samba4 is an attempt to implement an Active Directory compatible Domain
Controller.
In short, you can join a WinNT, Win2000, WinXP or Win 2003 - 2016 member
server to a Samba4 domain, and it will behave much as it does in AD,
including Kerberos domain logins where applicable.
===> The following configuration options are available for samba416-4.16.11_12:
ADS=on: Active Directory client(implies LDAP)
AD_DC=on: Active Directory Domain Controller(implies PYTHON3)
CLUSTER=off: Clustering support
CUPS=off: CUPS printing system support
DOCS=on: Build and/or install documentation
FAM=on: File Alteration Monitor
GPGME=off: GpgME support
LDAP=on: LDAP client
MANDOC=off: Build manpages from DOCBOOK templates
PROFILE=on: Profiling data
PYTHON3=on: Python 3.x bindings or support
QUOTAS=on: Disk quota support
SYSLOG=on: Syslog logging support
UTMP=on: UTMP accounting
====> VFS modules
FRUIT=on: MacOSX and TimeMachine support
GLUSTERFS=off: GlusterFS support
====> GSSAPI Security API support: you have to select exactly one of them
GSSAPI_BUILTIN=on: GSSAPI support via bundled Heimdal
GSSAPI_MIT=off: GSSAPI support via security/krb5
====> Zero configuration networking: you have to select exactly one of them
ZEROCONF_NONE=off: Zeroconf support is absent
AVAHI=on: Zeroconf support via Avahi
MDNSRESPONDER=off: Zeroconf support via mDNSResponder
===> Use 'make config' to modify these settings
databases/lmdb0: Add port for LMDB 0.9.x legacy ABI
LMDB 1.0 introduced an incompatible on-disk format change and subtle
API breakage: applications that compiled cleanly against 1.0 headers
could fail silently at run time. Known affected ports include dns/knot3,
mail/bogofilter, and mail/postfix; the postfix issue has been confirmed
upstream. Linux distributions such as Arch Linux have observed the same
breakage. Samba can also be affected in certain configurations.
Because the regression is not detectable in an -exp build run -- the
postfix failure only manifests at run time, and bogofilter was caught
only because post-build self-tests happen to exercise this path -- we
cannot rely on package builds to validate the 1.0 upgrade.
This commit introduces databases/lmdb0 as a holding port for the 0.9.35
(Only the first 15 lines of the commit message are shown above )
net/samba416: Fix build with newer Python
PyEval_CallObjectWithKeywords() has been deprecated since Python 3.9 and
was removed in Python 3.13. Add an upstream patch that replaces it with
PyObject_Call() and bump the upper Python version limit to 3.14.
Reviewed by: kiwi
Differential Revision: https://reviews.freebsd.org/D57713
all: drop support for FreeBSD 13, mips and risc64sf
Reviewed by: many (*)
Differential Revision: https://reviews.freebsd.org/D55624
Differential Revision: https://reviews.freebsd.org/D55642 (merged in from bofh)
many (*)
acm arrowd brooks cmt dch decke dinoex eduardo fluffy fuz gahr garga
jbeich joerg jrm kai kenrap martymac matthew mfechner michaelo mizhka
nobutaka pkubaj se tagattie thj
Anton Saietskii
GenericRikka
Gert Doering
Jan Bramkamp
Oleh Hushchenkov
Oleksandr Kryvulia
Ralf van der Enden
Yamagi
desktop kde python tcltk office
net/samba416: opt out from Features/fortify.mk
[...]
sendfile support not found but it was requested !
(complete log in
/wrkdirs/usr/ports/net/samba416/work-default/samba-4.16.11/bin/config.log)
===> Script "configure" failed unexpectedly.
[...]
PR: 292388
treewide: Remove references to USES= fam and move to LIB_DEPENDS
Only a handful of ports in tree uses this helper which
used to make a switch between devel/fam and devel/gamin more
convenient. With devel/fam going away there's no need to maintain
this any further for a handful of ports.
Approved by: blanket
net/samba416: Deprecate without expiration date
This is meant to give notice to Samba users that 4.16 is not supported
anymore. There are still some ports depending on Samba 4.16 and we need
to start porting them to newer versions soon.
PR: 281312
net/samba416: Limit Python to max 3.11 because of distutils
Samba 4.16 still requires distutils which have been removed in Python 3.12.
Explicitly limit supported Python versions.
PR: 289224
Reviewed by: 0mp
Approved by: otis (mentor), samba (0mp)
Differential Revision: https://reviews.freebsd.org/D52331
security/gpgme: Update to 2.0.0
Upstream has split most of the bindings out into separate projects with
this release, so the child ports that were previously providing various
bindings are now autonomous and have new origins. The python bindings
should have been called py-gpg for many years now, since 'gpg' is the
actual module name, so this also corrects that issue.
security/gpgme-cpp -> security/gpgmepp
security/gpgme-qt -> security/qgpgme
security/py-gpgme -> security/py-gpg
gpgmepp and qgpgme have been converted to CMake. py-gpg is now a "fun"
autotools and FreeBSD ports system hybrid. Gpgme, itself, still uses
autotools, but with much less parenting (patching) to do for its
emancipated children.
Adjust several ports to fix API incompatibility with upstream patches
and with some of my own. Adjust all consumers to use the new port
origins of the former child ports.
https://dev.gnupg.org/T7673
python.mk: rename PYTHON_EXT_SUFFIX to PYTHON_TAG, document, etc
EXT_SUFFIX, according to PEP 3149, refers to the full tag and
extension for compiled extension module objects, eg .cpython-311.so,
.cpython-313t.so, etc. We do not use the correct semantic meaning,
and this usage becomes ambiguous and confusing when tags do not
match between bytecode and compiled extension module objects.
Rename our PYTHON_EXT_SUFFIX to PYTHON_TAG to align with PEP 3147's
specification of a magic tag, which consists of implementation name
and shorthand version only. This is meant for bytecode and other
files containing this tag in their filename that do not depend on
a specific Python ABI for the same version. Chase all existing
consumers.
(Only the first 15 lines of the commit message are shown above )
gnome: remove tracker2
Tracker2 has long ago been replaced by tracker3 which is also gone now
and replaced by tinysparql.
Tracker2 is creating some complication for many ports (including
grilo-plugins) when installed, considering it not supported anymore,
just remove it instead of fighting it in each related port
net/samba416: Mark flavor externalldb as BROKEN
databases/ldb25 is not built with Python support by default, which is
required for the externalldb to build correctly. We are going to be
deprecating net/samba416 soon, so let's not introduce unnecessary
instabilities by enabling Python support in databases/ldb25 by default.
Interested parties building their own packages can still set TRYBROKEN
for this flavor and carry on.
For Samba 4.19, we have transitioned to the unbundled model anyway, so
net/samba416 is the only Samba version to be available the externalldb
flavor.
PR: 276835
Reported by: pkg-fallout
Approved by: samba (0mp)
Sponsored by: Klara, Inc.
net/samba416: Add externalldb flavor
Why do we need the externalldb flavor? Compiling tools like
security/sssd-devel with Kerberos support often requires a standalone
ldb as a dependency. By adding a externalldb flavor, ports can depend on
a flavor of Samba that does not depend on its bundled version of ldb.
PR: 276835
Approved by: portmgr (maintainer timeout, 2+ weeks)
Sponsored by: Klara, Inc.
Co-authored-by: Mateusz Piotrowski <0mp@FreeBSD.org>
net/samba416: Patch to prevent abnormal smbd abort
Update a call to memcpy() because readdir() only guarantees memory up to
result+result->d_reclen is readable. Under certain conditions,
result+sizeof(struct dirent) landed in unmapped memory.
Most of the legwork to pinpoint the problem, as well as a solution
similar to the one applied here, was submitted by uratan@miomio.jp.
Martin Simmons <martin@lispworks.com> contributed to understanding the
problem and wrote a useful test case.
PR: 275597
Approved by: maintainer timeout
Sponsored by: The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D43171
*/*: Sunset 12.4-RELEASE/12-STABLE from ports tree
- Remove all references to defunct ARCH arm
- Remove all references to defunct ARCH sparc64
- Remove x11-drivers/xf86-video-sunffb which requires defunct sparc64
ARCH
- Remove sysutils/afbinit requires defunct sparc64 ARCH
- Remove all references to bktr driver
- Remove all references to defunct FreeBSD_12
- Remove all references to OSVERSION/OSREL corresponding to 12
- Remove conditionals in Mk/Uses/cabal.mk
- Remove sparc reference from Mk/Uses/qt-dist.mk
- Remove BROKEN_sparc64/NOT_FOR_ARCH=sparc64
- Remove BROKEN_FreeBSD_12* from:
- Remove OpenSSL patches from:
- Remove conditional flags for OSVERSION >= 1300000 to fixed flags.
Also move conditional flags for non sparc64/arm ARCH to fixed flags.
Reviewed by: brooks, jbeich, rene, salvadore
Differential Revision: https://reviews.freebsd.org/D42068
net/samba416: Fix build with lld 17
Building net/samba416 with lld 17 results in the following link errors:
runner ['cc', '-Wl,--as-needed',
'-Wl,--version-script=/wrkdirs/share/dim/ports/net/samba413/work/samba-4.13.17/bin/default/lib/replace/replace.vscript',
'-shared', 'lib/replace/replace.c.2.o', 'lib/replace/strptime.c.2.o',
'lib/replace/cwrap.c.2.o', 'lib/replace/xattr.c.2.o',
'-o/wrkdirs/share/dim/ports/net/samba413/work/samba-4.13.17/bin/default/lib/replace/libreplace-samba4.so',
'-Wl,-Bstatic', '-Wl,-Bdynamic', '-L/usr/local/lib', '-L/usr/local/lib',
'-fstack-protector-strong', '-L/usr/local/lib', '-Wl,-z,relro,-z,now',
'-Wl,-no-undefined', '-Wl,--export-dynamic']
ld: error: version script assignment of 'local' to symbol '_end' failed: symbol
not defined
ld: error: version script assignment of 'local' to symbol '__bss_start' failed:
symbol not defined
ld: error: version script assignment of 'local' to symbol '_edata' failed:
symbol not defined
cc: error: linker command failed with exit code 1 (use -v to see invocation)
Since the linker version scripts are generated dynamically, suppress
errors with lld >= 17 due to these undefined symbols.
Same patch from 8bc0f1e by dim@ to unbreak build on FreeBSD 15.
This is required as the DEFAULT version of sambe is being switched.
Approved by: portmgr (blanket)
all: remove explicit versions in USES=python for "3.x+"
The logic in USES=python will automatically convert this to 3.8+ by
itself.
Adjust two ports that only had Python 3.7 mentioned but build fine
on Python 3.8 too.
finance/quickfix: mark BROKEN with PYTHON
libtool: compile: c++ -DHAVE_CONFIG_H -I. -I../.. -I -I. -I.. -I../.. -I../C++
-DLIBICONV_PLUG -DPYTHON_MAJOR_VERSION=3 -Wno-unused-variable
-Wno-maybe-uninitialized -O2 -pipe -DLIBICONV_PLUG -fstack-protector-strong
-fno-strict-aliasing -DLIBICONV_PLUG -Wall -ansi
-Wno-unused-command-line-argument -Wpointer-arith -Wwrite-strings
-Wno-overloaded-virtual -Wno-deprecated-declarations -Wno-deprecated -std=c++0x
-MT _quickfix_la-QuickfixPython.lo -MD -MP -MF
.deps/_quickfix_la-QuickfixPython.Tpo -c QuickfixPython.cpp -fPIC -DPIC -o
.libs/_quickfix_la-QuickfixPython.o
warning: unknown warning option '-Wno-maybe-uninitialized'; did you mean
'-Wno-uninitialized'? [-Wunknown-warning-option]
QuickfixPython.cpp:175:11: fatal error: 'Python.h' file not found
^~~~~~~~~~
1 warning and 1 error generated.
Reviewed by: portmgr, vishwin, yuri
Differential Revision: <https://reviews.freebsd.org/D40568>
Mk/**ldap.mk: Convert USE_LDAP to USES=ldap
Convert the USE_LDAP=yes to USES=ldap and adds the following features:
- Adds the argument USES=ldap:server to add openldap2{4|5|6}-server as
RUN_DEPENDS
- Adds the argument USES=ldap<version> and replaces WANT_OPENLDAP_VER
- Adds OPENLDAP versions in bsd.default-versions.mk
- Adds USE_OPENLDAP/WANT_OPENLDAP_VER in Mk/bsd.sanity.mk
- Changes consumers to use the features
Reviewed by: delphij
Approved by: portmgr
Differential Revision: https://reviews.freebsd.org/D38233
net/samba416: Security update for the recent Heimdal/KRB5 related
vulnerabilities.
Security: CVE-2022-38023
CVE-2022-37966
CVE-2022-37967
CVE-2022-45141
net/samba416: New port for Samba 4.16
This is an initial attempt to add Samba to the FreeBSD after major
rewrite of the VFS code in the upstream.
Most of the port development is now carried in:
https://gitlab.com/samba-freebsd
Due to the way how new Samba VFS code is written there is a constrain
that Samba 4.14+ can run only on FreeBSD 13.1+, as it requires support
of the `nodup` option for the `fdesc` file system, as well as it's
presence in the system in general.
https://gitlab.com/samba-freebsd/-/wikis/The-New-VFS
I'd like to thank CyberSecure Pty Ltd. company for their supoort of
the port development and Andrew Walker from iXsystems Inc. for the
patches he created and made available for the Samba4 on TrueNAS.
PR: 263874
