Samba4 is an attempt to implement an Active Directory compatible Domain
Controller.
In short, you can join a WinNT, Win2000, WinXP or Win2003 member server
to a Samba4 domain, and it will behave much as it does in AD, including
Kerberos domain logins where applicable.
WWW: http://www.samba.org/
===> The following configuration options are available for samba44-4.4.16_2:
ACL_SUPPORT=on: File system ACL support
ADS=on: Active Directory client support
AD_DC=on: Active Directory Domain Controller support
CUPS=off: CUPS printing system support
DEBUG=on: Build with debugging support
DEVELOPER=off: With development support
DNSUPDATE=on: Dynamic DNS update (require ADS)
DOCS=on: Build and/or install documentation
EXP_MODULES=off: Experimental modules
FAM=on: File Alteration Monitor support
LDAP=on: LDAP client support
MANPAGES=off: Build manpages from DOCBOOK templates
PTHREADPOOL=on: Pthread pool
QUOTAS=on: Disk quota support
SYSLOG=on: Syslog logging support
UTMP=on: UTMP accounting support
====> Options available for the radio DNS: you can only select none or one of them
NSUPDATE=off: Use samba NSUPDATE utility for AD DC
BIND99=off: Use bind99 as AD DC DNS server frontend
BIND910=off: Use bind910 as AD DC DNS server frontend
BIND911=off: Use bind911 as AD DC DNS server frontend
====> Options available for the radio ZEROCONF: you can only select none or one of them
AVAHI=off: Zeroconf support via Avahi
MDNSRESPONDER=off: Zeroconf support via mDNSResponder
===> Use 'make config' to modify these settings
Remove expired ports:
2017-09-21 net/samba44: unsupported upstream
2018-03-25 mail/sisyphus: Never built
2018-03-25 www/fira-webfont: Unused with no apparent use case
2018-03-25 www/dummyflash: Unused, unmaintained, and obsolete
2018-03-25 devel/guikachu: Broken for more than 9 months
Convert Python ports to FLAVORS.
Ports using USE_PYTHON=distutils are now flavored. They will
automatically get flavors (py27, py34, py35, py36) depending on what
versions they support.
There is also a USE_PYTHON=flavors for ports that do not use distutils
but need FLAVORS to be set. A USE_PYTHON=noflavors can be set if
using distutils but flavors are not wanted.
A new USE_PYTHON=optsuffix that will add PYTHON_PKGNAMESUFFIX has been
added to cope with Python ports that did not have the Python
PKGNAMEPREFIX but are flavored.
USES=python now also exports a PY_FLAVOR variable that contains the
(Only the first 15 lines of the commit message are shown above )
Update Samba4 ports to 4.6.8, 4.5.14 and 4.4.16 respectivelly to address
security flaws:
o CVE-2017-12150 (SMB1/2/3 connections may not require signing where
they should)
o CVE-2017-12151 (SMB3 connections don't keep encryption across DFS
redirects)
o CVE-2017-12163 (Server memory information leak over SMB1)
Security: CVE-2017-12150
CVE-2017-12151
CVE-2017-12163
Samba 4.6.6, 4.5.12 and 4.4.15 Security update for the CVE-2017-11103: Orpheus'
Lyre KDC-REP service name validation in Heimdal
Security: CVE-2017-11103
Urgent upgrade of the Samba 4.[4-6] ports to address RCE in the Samba
code(CVE-2017-7494). All versions starting from 3.5+ are affected.
Security: CVE-2017-7494
Upgrade Samba4[4-6] ports to fix regression with "follow symlinks = no". Remove
dependency from the external p5-Parse-Pidl as it may break provisioning(and
more).
PR: 218255
Remove WANT_OPENLDAP_SASL from a few ports as it prevents users from easily
installing a desktop environment and samba.
WANT_OPENLDAP_SASL must not be used in invidual ports Makefiles.
Note: there is a wip to rewrite the handling of openldap in ports
With hat: portmgr
Reviewed by: mat
MFH: 2017Q1
Differential Revision: https://reviews.freebsd.org/D9083
* Upgrade net/samba43 and net/samba44 to address multiple vulnerabilities
* Switch port to use net/openldap24-sasl-client as some authorization methods
don't work with plain openldap24-client.
* Changed namespace used by vfs_fruit to be compatiable with net/netatalk3.
* Removed old DNS crypto patch, as it SEEMS it was superseded by recent code
changes. Please, notify me if you see that internal DNS
doesn't handle signed requests properly anymore.
Security: CVE-2016-2123
CVE-2016-2125
CVE-2016-2126
Do not redefine DEBUG_DESC when its meaning more or less matches the default
option description. Those ports where it meant something more specific were
left untouched.
Cleanup $() variables in ports Makefiles.
Mostly replace with ${}, but sometime, replace with $$() because it is
what was intended in the first place. (I think.)
Sponsored by: Absolight
Update Samba 4.2, 4.3 and 4.4 to the lates version to address CVE-2016-2119
(Client side SMB2/3 required signing can be downgraded).
Security: CVE-2016-2119
