Development May 2024

development@lists.ipfire.org

11 participants
32 discussions

[PATCH] Updates to u-boot script for Raspberry Pi 4b devices
by Craig Setera 22 Sep '24

22 Sep '24

Updates to u-boot script for Raspberry Pi 4b devices to properly configure the serial console and to choose the proper boot address to be used on newer board revisions. With these changes in place, I'm able to fully boot into a serial console in u-boot. The serial console configuration was derived from the Grub configuration, while the boot address changes were taken from the IPFire Raspberry 4b documentation page: https://www.ipfire.org/docs/hardware/arm/rpi/four Per the conversation in the forums, I don't know why the boot address changes are required. I was simply trying to automate those changes such that downloaded builds will work out of the box. https://community.ipfire.org/t/hang-with-kernel-starting-on-raspberry-pi/11… NOTE: The use of the different parameter options to the test command to minimize the need for deeply nested conditionals. I did try more bash-shell like syntax, but u-boot didn't seem to like that. The operators used here were found in the u-boot source. Tested-by: Craig Setera <craigjunk(a)setera.org> Signed-off-by: Craig Setera <craigjunk(a)setera.org> --- config/u-boot/boot.cmd | 27 ++++++++++++++++++++++++--- 1 file changed, 24 insertions(+), 3 deletions(-) diff --git a/config/u-boot/boot.cmd b/config/u-boot/boot.cmd index a27996780..eedd5776d 100644 --- a/config/u-boot/boot.cmd +++ b/config/u-boot/boot.cmd @@ -51,7 +51,11 @@ if test "${SERIAL-CONSOLE}" = "ON"; then if test "${fdtfile}" = "broadcom/bcm2837-rpi-3-b.dtb"; then setenv console ttyS1,115200n8; else - setenv console ttyAMA0,115200n8; + if test "${fdtfile}" = "broadcom/bcm2711-rpi-4-b.dtb"; then + setenv console ttyS0,115200n8; + else + setenv console ttyAMA0,115200n8; + fi; fi; fi; else @@ -95,11 +99,28 @@ else setenv ramdisk_addr -; fi; +# +# Handle Raspberry Pi 4 address differences +# https://www.ipfire.org/docs/hardware/arm/rpi/four +# +setenv booti_fdt_addr ${fdt_addr_r}; +if test "${board}" -eq "rpi" -a ${cpu} -eq "armv8" -a "${fdtfile}" -eq "broadcom/bcm2711-rpi-4-b.dtb"; then + # Hardware revision 1.4 + if test ${board_revision} -eq 0xB03114 -o ${board_revision} -eq 0xC03114 -o ${board_revision} -eq 0xD03114; then + setenv booti_fdt_addr ${fdt_addr}; + fi + + # Hardware revision 1.5 + if test ${board_revision} -eq 0xB03115 -o ${board_revision} -eq 0xC03115 -o ${board_revision} -eq 0xD03115; then + setenv booti_fdt_addr ${fdt_addr}; + fi +fi; + bootz ${kernel_addr_r} ${ramdisk_addr} ${fdt_addr_r}; -booti ${kernel_addr_r} ${ramdisk_addr} ${fdt_addr_r}; +booti ${kernel_addr_r} ${ramdisk_addr} ${booti_fdt_addr}; bootz ${kernel_addr_r} - ${fdt_addr_r}; -booti ${kernel_addr_r} - ${fdt_addr_r}; +booti ${kernel_addr_r} - ${booti_fdt_addr}; # Recompile with: # mkimage -C none -A arm -T script -d /boot/boot.cmd /boot/boot.scr -- 2.40.1

2 6

[PATCH] Stop unbound-dhcp-leases-bridge from continually restarting unbound
by Nick Howitt 18 Jun '24

18 Jun '24

Hi all, **** This is a repost of an email incorrectly submitted. **** Please bear with me as I am new to IPFire and not at all used to this style of development, so any guidance would be appreciated. There is a bug, https://bugzilla.ipfire.org/show_bug.cgi?id=13254, where unbound-dhcp-leases-bridge restarts unbound a lot when it is totally unnecessary. It appears to be because when a lease is renewed, the script gets triggered, created a new /etc/unbound/dhcp-leases.conf then restarts Unbound to read the file. Generally this seems to be unnecessary as, with a renewed lease, the old and new /etc/unbound/dhcp-leases.conf files are the same. With 5 leases in that file (one for a machine not active) I am getting 3-4 restarts an hour of Unbound when I have a min/max lease time of 60/120min. Looking at the code, it is fairly easy to fix. The current code creates a temp file then copies it into place then restarts unbound. All I am doing is doing a file comparison before the copy and skipping the restart if the files are the same. There were a couple of gotchas because setting the file attributes and copying the file were done inside the "with" block for generating the temporary file. This meant a file comparison always returned False as the temp file was still open and so never the same is the old file. I moved those two statements outside the "with". This forced me to change the fchmod to chmod. It could be argued that the file copy should not be done if the files are not different, but it would take an extra "if" and you'd have to remember to delete the temp file. If required, I can make that change. Also, one small thing I noticed once is that the old and new dhcp-leases.conf files could occasionally contain the same leases but in a different order. I have been unable to reproduce, but to sidestep it, instead of stepping through the leases variable directly, I sort it and step through that. It should make the resulting file completely deterministic and make the file comparison more effective. My patch is: From 73873d4944944a2f02317a73074a6894726f36f7 Mon Sep 17 00:00:00 2001 From: Nick Howitt <nick(a)howitts.co.uk> Date: Sun, 24 Mar 2024 15:17:19 +0000 Subject: [PATCH] Stop unbound-dhcp-leases-bridge from restarting unbound every time it write dhcp-leases.conf as it is very often unchanged and does not require a restart. --- config/unbound/unbound-dhcp-leases-bridge | 28 +++++++++++++++-------- 1 file changed, 19 insertions(+), 9 deletions(-) diff --git a/config/unbound/unbound-dhcp-leases-bridge b/config/unbound/unbound-dhcp-leases-bridge index e9f022aff..d22772066 100644 --- a/config/unbound/unbound-dhcp-leases-bridge +++ b/config/unbound/unbound-dhcp-leases-bridge @@ -22,6 +22,7 @@ import argparse import datetime import daemon +import filecmp import functools import ipaddress import logging @@ -516,26 +517,35 @@ class UnboundConfigWriter(object): def update_dhcp_leases(self, leases): # Write out all leases - self.write_dhcp_leases(leases) + if self.write_dhcp_leases(leases): - log.debug("Reloading Unbound...") + log.debug("Reloading Unbound...") - # Reload the configuration without dropping the cache - self._control("reload_keep_cache") + # Reload the configuration without dropping the cache + self._control("reload_keep_cache") + + else: + + log.debug("Not reloading Unbound. Leases not changed.") def write_dhcp_leases(self, leases): log.debug("Writing DHCP leases...") with tempfile.NamedTemporaryFile(mode="w", delete=False) as f: - for l in leases: + for l in sorted(leases): for rr in l.rrset: f.write("local-data: \"%s\"\n" % " ".join(rr)) - # Make file readable for everyone - os.fchmod(f.fileno(), stat.S_IRUSR|stat.S_IWUSR|stat.S_IRGRP|stat.S_IROTH) + filecmp.clear_cache() + RequireUnboundReload = not filecmp.cmp(f.name, self.path, shallow=False) + + # Make file readable for everyone + os.chmod(f.name, stat.S_IRUSR|stat.S_IWUSR|stat.S_IRGRP|stat.S_IROTH) + + # Move the file to its destination + os.rename(f.name, self.path) - # Move the file to its destination - os.rename(f.name, self.path) + return RequireUnboundReload def _control(self, *args): command = ["unbound-control"] -- 2.43.0 I have this locally on a branch on my firewall. If it is OK, do I need some sort of rights to push my branch and then how I get it merged? Regards, Nick

3 21

[PATCH 1/3] ovpnmain.cgi: Define OpenSSL configuration globally
by Michael Tremer 11 Jun '24

11 Jun '24

This makes commands shorter and therefore easier to read. Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> --- html/cgi-bin/ovpnmain.cgi | 30 +++++++++++++----------------- 1 file changed, 13 insertions(+), 17 deletions(-) diff --git a/html/cgi-bin/ovpnmain.cgi b/html/cgi-bin/ovpnmain.cgi index c92d0237d..9b8ff5aa5 100755 --- a/html/cgi-bin/ovpnmain.cgi +++ b/html/cgi-bin/ovpnmain.cgi @@ -53,6 +53,9 @@ my %mainsettings = (); &General::readhash("${General::swroot}/main/settings", \%mainsettings); &General::readhash("/srv/web/ipfire/html/themes/ipfire/include/colors.txt", \%color); +# Use a custom OpenSSL configuration file for all operations +$ENV["OPENSSL_CONF"] = "${General::swroot}/ovpn/ca/cacert.pem"; + ### ### Initialize variables ### @@ -1835,8 +1838,7 @@ END unless (exec ('/usr/bin/openssl', 'req', '-x509', '-nodes', '-days', '999999', '-newkey', 'rsa:4096', '-sha512', '-keyout', "${General::swroot}/ovpn/ca/cakey.pem", - '-out', "${General::swroot}/ovpn/ca/cacert.pem", - '-config',"${General::swroot}/ovpn/openssl/ovpn.cnf")) { + '-out', "${General::swroot}/ovpn/ca/cacert.pem")) { $errormessage = "$Lang::tr{'cant start openssl'}: $!"; goto ROOTCERT_ERROR; } @@ -1867,8 +1869,7 @@ END '-newkey', 'rsa:4096', '-keyout', "${General::swroot}/ovpn/certs/serverkey.pem", '-out', "${General::swroot}/ovpn/certs/serverreq.pem", - '-extensions', 'server', - '-config', "${General::swroot}/ovpn/openssl/ovpn.cnf" )) { + '-extensions', 'server')) { $errormessage = "$Lang::tr{'cant start openssl'}: $!"; unlink ("${General::swroot}/ovpn/certs/serverkey.pem"); unlink ("${General::swroot}/ovpn/certs/serverreq.pem"); @@ -1884,8 +1885,7 @@ END '-batch', '-notext', '-in', "${General::swroot}/ovpn/certs/serverreq.pem", '-out', "${General::swroot}/ovpn/certs/servercert.pem", - '-extensions', 'server', - '-config', "${General::swroot}/ovpn/openssl/ovpn.cnf"); + '-extensions', 'server'); if ($?) { $errormessage = "$Lang::tr{'openssl produced an error'}: $?"; unlink ("${General::swroot}/ovpn/ca/cakey.pem"); @@ -1903,8 +1903,7 @@ END # Create an empty CRL # System call is safe, because all arguments are passed as array. system('/usr/bin/openssl', 'ca', '-gencrl', - '-out', "${General::swroot}/ovpn/crls/cacrl.pem", - '-config', "${General::swroot}/ovpn/openssl/ovpn.cnf" ); + '-out', "${General::swroot}/ovpn/crls/cacrl.pem"); if ($?) { $errormessage = "$Lang::tr{'openssl produced an error'}: $?"; unlink ("${General::swroot}/ovpn/certs/serverkey.pem"); @@ -2426,8 +2425,8 @@ else if ($confighash{$cgiparams{'KEY'}}) { # Revoke certificate if certificate was deleted and rewrite the CRL - &General::system("/usr/bin/openssl", "ca", "-revoke", "${General::swroot}/ovpn/certs/$confighash{$cgiparams{'KEY'}}[1]cert.pem", "-config", "${General::swroot}/ovpn/openssl/ovpn.cnf"); - &General::system("/usr/bin/openssl", "ca", "-gencrl", "-out", "${General::swroot}/ovpn/crls/cacrl.pem", "-config", "${General::swroot}/ovpn/openssl/ovpn.cnf"); + &General::system("/usr/bin/openssl", "ca", "-revoke", "${General::swroot}/ovpn/certs/$confighash{$cgiparams{'KEY'}}[1]cert.pem"); + &General::system("/usr/bin/openssl", "ca", "-gencrl", "-out", "${General::swroot}/ovpn/crls/cacrl.pem"); ### # m.a.d net2net @@ -2480,7 +2479,7 @@ else &General::system("/usr/local/bin/openvpnctrl", "-drrd", "$confighash{$cgiparams{'KEY'}}[1]"); delete $confighash{$cgiparams{'KEY'}}; - &General::system("/usr/bin/openssl", "ca", "-gencrl", "-out", "${General::swroot}/ovpn/crls/cacrl.pem", "-config", "${General::swroot}/ovpn/openssl/ovpn.cnf"); + &General::system("/usr/bin/openssl", "ca", "-gencrl", "-out", "${General::swroot}/ovpn/crls/cacrl.pem"); &General::writehasharray("${General::swroot}/ovpn/ovpnconfig", \%confighash); } else { @@ -4052,8 +4051,7 @@ if ($cgiparams{'TYPE'} eq 'net') { system('/usr/bin/openssl', 'ca', '-days', "$cgiparams{'DAYS_VALID'}", '-batch', '-notext', '-in', $filename, - '-out', "${General::swroot}/ovpn/certs/$cgiparams{'NAME'}cert.pem", - '-config',"${General::swroot}/ovpn/openssl/ovpn.cnf"); + '-out', "${General::swroot}/ovpn/certs/$cgiparams{'NAME'}cert.pem"); if ($?) { $errormessage = "$Lang::tr{'openssl produced an error'}: $?"; unlink ($filename); @@ -4265,8 +4263,7 @@ if ($cgiparams{'TYPE'} eq 'net') { unless (exec ('/usr/bin/openssl', 'req', '-nodes', '-newkey', 'rsa:4096', '-keyout', "${General::swroot}/ovpn/certs/$cgiparams{'NAME'}key.pem", - '-out', "${General::swroot}/ovpn/certs/$cgiparams{'NAME'}req.pem", - '-config',"${General::swroot}/ovpn/openssl/ovpn.cnf")) { + '-out', "${General::swroot}/ovpn/certs/$cgiparams{'NAME'}req.pem")) { $errormessage = "$Lang::tr{'cant start openssl'}: $!"; unlink ("${General::swroot}/ovpn/certs/$cgiparams{'NAME'}key.pem"); unlink ("${General::swroot}/ovpn/certs/$cgiparams{'NAME'}req.pem"); @@ -4279,8 +4276,7 @@ if ($cgiparams{'TYPE'} eq 'net') { system('/usr/bin/openssl', 'ca', '-days', "$cgiparams{'DAYS_VALID'}", '-batch', '-notext', '-in', "${General::swroot}/ovpn/certs/$cgiparams{'NAME'}req.pem", - '-out', "${General::swroot}/ovpn/certs/$cgiparams{'NAME'}cert.pem", - '-config',"${General::swroot}/ovpn/openssl/ovpn.cnf"); + '-out', "${General::swroot}/ovpn/certs/$cgiparams{'NAME'}cert.pem"); if ($?) { $errormessage = "$Lang::tr{'openssl produced an error'}: $?"; unlink ("${General::swroot}/ovpn/certs/$cgiparams{'NAME'}key.pem"); -- 2.39.2

2 18

First patch series for the roadmap item "Get rid of CONFIG_TYPE in the network config"
by Jonatan Schlag 03 Jun '24

03 Jun '24

Hi list, This is the first patch series for the roadmap item: https://www.ipfire.org/docs/roadmap/get-rid-of-configtype-in-network-config . This patch series introduces a bash testing library and a function readhash, which we will use in every bash script which needs to read our config files. As this patch set is already massive, I thought it might be better to discuss the function first before I introduce it in every script. Otherwise, we would talk about 50 patches and not 21. This amount would be somehow not reviewable. If this patch series get merged, fine. If you want to wait for all the patches also fine, but as told, this will get a huge patch set. Patches in this series are: [PATCH 01/21] test: Add bash lib for colors [PATCH 02/21] tests: Add bash lib [PATCH 03/21] tests/lib.sh: Add function [PATCH 04/21] tests/lib.sh: Add check if variable exists to [PATCH 05/21] tests/lib.sh: Add logging functions [PATCH 06/21] tests/lib.sh: adjust to pytest logging style [PATCH 07/21] tests/lib.sh: Fix check if array is defined [PATCH 08/21] test_that_key_in_arry_has_value: Check if the key is [PATCH 09/21] tests/lib.sh: Use namref to access an array [PATCH 10/21] test_that_key_in_arry_has_value: Check if a key in an [PATCH 11/21] tests: Add function to test the ouput of a bash [PATCH 12/21] initscript functions: add readhash [PATCH 13/21] initscript fkt: ignore blank lines in readhash [PATCH 14/21] test: Add functions test_that_array_is_defined [PATCH 15/21] tests: Add functions test_that_array_doesnt_have_key [PATCH 16/21] initscripts fkt: Ignore comments in readhash [PATCH 17/21] initscripts fkt: ignore invalid keys in readhash [PATCH 18/21] initscripts fkt: readhash should only parse lines with [PATCH 19/21] initscripts fkt: Check for invalid values in readhash [PATCH 20/21] initscripts fkt: keep readhash compatible with older [PATCH 21/21] initscripts fkt: Fix shebang Greetings Jonatan

2 37

[PATCH] monit: Update to 5.34.0
by Matthias Fischer 31 May '24

31 May '24

Changelog is rather long, for details see: https://mmonit.com/monit/changes/ Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> --- lfs/monit | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/lfs/monit b/lfs/monit index 6b3eecd4f..0d71cb465 100644 --- a/lfs/monit +++ b/lfs/monit @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2023 IPFire Team <info(a)ipfire.org> # +# Copyright (C) 2007-2024 IPFire Team <info(a)ipfire.org> # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,7 +24,7 @@ include Config -VER = 5.33.0 +VER = 5.34.0 SUMMARY = Utility for monitoring services on a Unix system THISAPP = monit-$(VER) @@ -33,7 +33,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = monit -PAK_VER = 22 +PAK_VER = 23 DEPS = @@ -47,7 +47,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 770474f010067fe6388622e764a0d032495589dad24873dabd87ab0aa8edcff34d7a014a72c1c05aaa47104b12daf3dc542aa1d2d823d267814c9b5fd139e747 +$(DL_FILE)_BLAKE2 = e49e271f981d76b5d1f71818b7e6e1b1a2de56d8b1f856931c9abec053358dc6557e58fe3c37c5af9cf0f4e2c667ead5cff2ac96c6d8a2c70155cf301c6ffb44 install : $(TARGET) -- 2.34.1

2 1

[PATCH] nut: Update to version 2.8.2
by Adolf Belka 29 May '24

29 May '24

- Update from version 2.8.1 to 2.8.2 - Update of rootfile - Changelog 2.8.2 - Fix fallout of development in NUT v2.8.0 and/or v2.8.1: * dstate machinery: a segmentation fault (null pointer dereference) was possible with `INSTCMD` processing of commands without parameters nor `TRACKING` identifier. [#2155] * USB bus number detection for libusb-1.0 builds was overly zealous and wrongly considered zero values as an error. [#2198] * `upsmon` recognition of `CAL` state could linger after the calibration activity was completed by the hardware, which led to mis-processing of shutdown triggers. Also, notification was added to report "finished calibration". [issue #2168, PR #2169] * `upsmon` recognition of `OFF` state as a trigger for FSD (forced shut down) criticality considered also the input line state, which may be an independently evolving circumstance. [issue #2278, PR #2279] * `upsmon` support for `POLLFAIL_LOG_THROTTLE_MAX` did not neuter the applied setting when live-reloading configuration, so commenting it away in `upsmon.conf` did not have the effect of resetting the logging frequency to default. It also did not reset the counters to certainly follow the new configuration for existing faults. [issue #2207, PR #2209] * `upsmon` support for `POLLFAIL_LOG_THROTTLE_MAX` had an off-by-one error (e.g. reporting "Data stale" or "Driver not connected" every 30 sec with `POLLFAIL_LOG_THROTTLE_MAX 5` and `POLLFREQ 5` settings). [#2207] * Drivers running with non-default user account (e.g. with `user=root` in their configuration) failed to apply group ownership and permissions to their Unix socket file for interaction with the local data server. [#2185, #2096] * Dispatcher script `scripts/python/app/NUT-Monitor` referenced `py3qt3` instead of the correct `py3qt5`. It also tries to check both `py2gtk2` and `py3qt5` implementations verbosely, even if one is not installed. [#2199, #2201] * Set the `DesktopFileName` in `scripts/python/app/NUT-Monitor-py3qt5`, this binds the application with the desktop file and allow the Open Desktop compatible implementation to display the proper icon and application name. [#2205] * Original recipe for `apc_modbus` strictly required USB support even if building NUT without it. [#2262] * Builds requested with a specific C/C++ language standard revision via `CFLAGS` and `CXXFLAGS` should again be honoured. [PR #2306] * Allow requesting detailed debug builds (with disabled optimizations for binaries to best match the source code) for supported compilers using `configure` script option `--with-debuginfo`. Note that default autoconf behavior usually embeds moderate optimizations and debug information on its own. [PR #2310] * A fix applied among clean-ups between NUT v2.7.4 and v2.8.0 releases backfired for `usbhid-ups` subdriver `belkin-hid` which in practice relied on the broken older behavior; more details in its entry below. [PR #2371] - nut-usbinfo.pl, nut-scanner and libnutscan: * Library API version for `libnutscan` was bumped from 2.2.0 to 2.5.0 during evolution of this NUT release. * USB VendorID:ProductID support list files generated by the script for different OS frameworks now include a comment with other possibly compatible driver names, where the respective file format allows for comments. * Added the concept of `alt_driver_names` in `nutscan_device_t` structure for ability to suggest a comment with other possibly compatible driver names in configuration snippets generated by `nut-scanner`; practical support implemented for USB connected drivers. * Added the concept of commented-away suggested option values `comment_tag` and a method to `nutscan_add_commented_option_to_device()`, instead of hacks in prepared config data which broke some use-cases. [#2221] * Command-line option `-U` for USB scan can now be specified several times to increase the detail level about hardware link to the device (this was previously always suggested, but may be not reliable if USB enumeration gets changed over time). [#2221] * Added generation of FreeBSD/pfSense quirks for USB devices supported by NUT (may get installed to `$datadir` e.g. `/usr/local/share/nut` and need to be pasted into your `/boot/loader.conf.local`). [#2159] * nut-scanner now avoids creating ambiguous `nutdevN` device section names when called separately to scan different media buses (one at a time). Now the "bus" name would be embedded (e.g. non-colliding `nutdev-usb1` and `nutdev-snmp1`). [#2247] * nut-scanner can now discover NUT simulated devices (`.dev` and `.seq` files) located in your sysconfig directory, and prepare configuration sections with the simulation driver (currently `dummy-ups`). [#2246] * nut-scanner now reports `dummy-ups` as driver when scanning NUT "bus" with Old or Avahi method. [#2236, #2245] - upsd: Fixed conditions for "no listening interface available" diagnosis to check how many listeners we succeeded with, not whether the first one succeeded or not. If not all requested (non-localhost) listeners were available, default to fail the daemon start-up attempt; support for an `ALLOW_NOT_ALL_LISTENERS` setting was added to control this behavior. [#723] - NUT CI improvements: * Added publishing recipes for PyNUT client bindings for NUT, so it ends up in the link:https://pypi.org/project/PyNUTClient[PyPI repository]. [#2158] * Added support for new `ccache` namespace concept, where possible. [#2256] * Fixed an issue for builds configured `--without-usb`. [#2263] * Added a fallback for `libgd` discovery (for CGI etc. builds). [#2287] * Made `aspell` TeX module detection more reliable. [#2206] * Fixed recipes for completely out-of-tree builds to pass with documentation generation and checking on all tested "make" implementations. [#2318] * Various other recipe and documentation clean-up efforts. [#2284, #2269, #2261] - main driver core codebase: * Help users of drivers that can be built to support optionally USB and other media (like `nutdrv_qx` built for serial-only support), and built in fact without USB support but used for USB devices, with some more information to make troubleshooting easier. [issue #2259, PR #2260] * Driver programs with debug tracing support via `-D` CLI option and/or the `NUT_DEBUG_LEVEL` environment variable now check those earlier in their life-time, so that initialization routine can be debugged. [#2259] * Multiple USB-capable drivers got options to customize `usb_config_index` `usb_hid_rep_index`, `usb_hid_desc_index`, `usb_hid_ep_in` and `usb_hid_ep_out` hardware connection settings via `ups.conf` options. This is treated as experimental, not all code paths may be actually using such values from `struct usb_communication_subdriver_t` rather than hard-coded defaults. Discovery of correct values is up to the user at the moment (using `lsusb`, internet search, luck...) [#2149] - nut-driver-enumerator (NDE) service/script: * The optional daemon mode (primarily useful for systems which monitor a large and dynamic population of power devices) was enhanced with a `--daemon-after` variant which parses the configuration once before daemonization and this has a chance to fail while not forked off, as well as to allow only completing the service unit initialization when everything is actually ready to work (so further dependencies can start at the proper time). [#682] * Also applied other optimizations to the script implementation. [#682] - powerpanel text driver now handles status responses in any format and should support most devices. [#2156] - tripplite_usb driver now allows any device to match if a particular Unit ID was not specified in `ups.conf`. [PR #2297, issues #2282 and #2258] - snmp-ups driver: * added support for Eaton EMP002 sensor for ATS16 NM2 sub-driver. [#2286] * mapping table updates for apc-mib sub-driver. [#2264] - usbhid-ups driver: * `arduino-hid` subdriver was enhanced from "initial bare bones" experimental set of mapped data points to support some 20 more mappings to make it more useful as an UPS driver, not just a controller developer sandbox. [#2188] * `cps-hid` subdriver now supports devices branded as Cyber Energy and built by cooperation with Cyber Power Systems. [#2312] * `belkin-hid` subdriver now supports Liebert PSI5 devices which have a different numeric reading scale than earlier handled models. [issue #2271, PR #2272, PR #2369] Generally the wrong-scale processing was addressed, including a regression in NUT v2.8.0 which led to zero values in voltage data points which NUT v2.7.4 reported well [#2371] * The `onlinedischarge` configuration flag name was too ambiguous and got deprecated (will be supported but no longer promoted by documentation), introducing `onlinedischarge_onbattery` as the meaningful alias. [#2213] * Logged notifications about `OL+DISCHRG` state should now be throttled (see the driver manual page for more details) [#2214, #2215]: - If `battery.charge` is available, make the message when entering the state and then only if the charge differs from that when we posted the earlier message (e.g. really discharging) and is under `onlinedischarge_log_throttle_hovercharge` value (defaults to 100%); - Also can throttle to a time frequency configurable by a new option `onlinedischarge_log_throttle_sec`, by default 30 sec if `battery.charge` is not reported by the device (should be frequent by default, in case the UPS-reported state combination does reflect a bad power condition). - nutdrv_qx driver: * Fixed handling of `battery_voltage_reports_one_pack` configuration flag introduced in NUT v2.8.1. [originally by PR #1279; fixed by PR #2324, issue #2325] - Various code and documentation fixes for NSS crypto support. [#2274, #2268] - Laid foundations for the SmartNUT effort (aiming to integrate drivers with some other backends than the networked NUT data server process). - Eaton contributed recipes and scripts used to create the IPP for Unix bundle (aka Eaton IPSS Unix or UPP), a freely available value-added packaging of NUT distributed as the UPS software companion for OSes where their more complex UPS monitoring/management tools had not been ported. This allows for delivery of NUT packages with an interactive installer and some system integration scripts (events, notifications, status, shutdown daemon...), and was contributed to the NUT upstream project by Eaton -- provided "as is" at the moment, and may later serve as foundation or inspiration for new NUT features. [#2288] - nutconf (C++ library and tool to read and manage NUT configuration files) was started in the open by Eaton employees and used in the IPP installer, but the code lingered in a side branch. It was now brushed up to our common best practices and added to the main codebase. As of this import, there are known deficiencies in Windows platform support, as well as some un-awareness about configuration key words which appeared in NUT since 2013. [#2290] - The `tools/gitlog2changelog.py.in` script was revised, in particular to convert section titles (with contributor names coming from Git metadata) into plain ASCII character set, for `dblatex` versions which do not allow diacritics and other kinds of non-trivial characters in sections. This can cause successful builds of `ChangeLog.pdf` file on more platforms, but at expense of a semi-cosmetic difference in those names. [PR #2360, PR #2366] Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- config/rootfiles/packages/nut | 3 ++- lfs/nut | 8 ++++---- 2 files changed, 6 insertions(+), 5 deletions(-) diff --git a/config/rootfiles/packages/nut b/config/rootfiles/packages/nut index 1acab9d51..4d1d17887 100644 --- a/config/rootfiles/packages/nut +++ b/config/rootfiles/packages/nut @@ -39,6 +39,7 @@ usr/bin/mge-utalk usr/bin/microdowell usr/bin/microsol-apc usr/bin/nut-scanner +usr/bin/nutconf usr/bin/nutdrv_atcl_usb usr/bin/nutdrv_qx usr/bin/nutdrv_siemens-sitop @@ -77,7 +78,7 @@ usr/lib/libnutclientstub.so.1.0.1 #usr/lib/libnutscan.la #usr/lib/libnutscan.so usr/lib/libnutscan.so.2 -usr/lib/libnutscan.so.2.0.2 +usr/lib/libnutscan.so.2.0.5 #usr/lib/libupsclient.la #usr/lib/libupsclient.so usr/lib/libupsclient.so.6 diff --git a/lfs/nut b/lfs/nut index ea133b620..732211628 100644 --- a/lfs/nut +++ b/lfs/nut @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2023 IPFire Team <info(a)ipfire.org> # +# Copyright (C) 2007-2024 IPFire Team <info(a)ipfire.org> # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -26,7 +26,7 @@ include Config SUMMARY = Network UPS Tools Core (Uninterruptible Power Supply Monitoring) -VER = 2.8.1 +VER = 2.8.2 THISAPP = nut-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = nut -PAK_VER = 11 +PAK_VER = 12 DEPS = @@ -50,7 +50,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 370a1759beec6eaae6479b5174762b2bc600ca07543aad531cf74e179d8e000b4b3a8dd111c7556eb4fb545ebf8baee24fbb75f6235d03cefe239ba08f042ea5 +$(DL_FILE)_BLAKE2 = 87187293d8acda72c2d807d6f41f2601a318540f63a0ea93782b115402c6b43a0b61ecc710fd6de126d25e59dd4e03681f2b859a87549e9d5f7617ac7b2dad8c install : $(TARGET) -- 2.45.1

1 0

[PATCH v2] samba: Update to version 4.20.1
by Adolf Belka 29 May '24

29 May '24

- This v2 version increments the PAK_VER number - Update from version 4.19.5 to 4.20.1 - Update of rootfile - Changelog 4.20.1 * BUG 15630: dns update debug message is too noisy. * BUG 15635: Do not fail PAC validation for RFC8009 checksums types. * BUG 15605: Improve performance of lookup_groupmem() in idmap_ad. * BUG 15636: Smbcacls incorrectly propagates inheritance with Inherit-Only flag. * BUG 15611: http library doesn't support 'chunked transfer encoding'. * BUG 15600: Provide a systemd service file for the background queue daemon. 4.20.0 The changelog is too large to show here. Details can be found at https://www.samba.org/samba/history/samba-4.20.0.html I did not identify any changes related to how samba is configured in IPFire 4.19.6 * BUG 15527: fd_handle_destructor() panics within an smbd_smb2_close() if vfs_stat_fsp() fails in fd_close(). * BUG 15588: samba-gpupdate: Correctly implement site support. * BUG 15527: fd_handle_destructor() panics within an smbd_smb2_close() if vfs_stat_fsp() fails in fd_close(). * BUG 15588: samba-gpupdate: Correctly implement site support. * BUG 15599: libgpo: Segfault in python bindings. * BUG 15580: Packet marshalling push support missing for CTDB_CONTROL_TCP_CLIENT_DISCONNECTED and CTDB_CONTROL_TCP_CLIENT_PASSED. Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- config/rootfiles/packages/x86_64/samba | 317 +++++++++++++++---------- lfs/samba | 6 +- 2 files changed, 194 insertions(+), 129 deletions(-) diff --git a/config/rootfiles/packages/x86_64/samba b/config/rootfiles/packages/x86_64/samba index 7a44b9cdb..f511e0101 100644 --- a/config/rootfiles/packages/x86_64/samba +++ b/config/rootfiles/packages/x86_64/samba @@ -46,6 +46,7 @@ usr/bin/tdbrestore usr/bin/tdbtool usr/bin/testparm usr/bin/wbinfo +usr/bin/wspsearch #usr/include/samba-4.0 #usr/include/samba-4.0/charset.h #usr/include/samba-4.0/core @@ -109,6 +110,7 @@ usr/bin/wbinfo #usr/include/samba-4.0/samba/version.h #usr/include/samba-4.0/share.h #usr/include/samba-4.0/smb2_lease_struct.h +#usr/include/samba-4.0/smb3posix.h #usr/include/samba-4.0/smb_ldap.h #usr/include/samba-4.0/smbconf.h #usr/include/samba-4.0/smbldap.h @@ -156,8 +158,8 @@ usr/lib/libndr-standard.so usr/lib/libndr-standard.so.0 usr/lib/libndr-standard.so.0.0.1 usr/lib/libndr.so -usr/lib/libndr.so.3 -usr/lib/libndr.so.3.0.1 +usr/lib/libndr.so.4 +usr/lib/libndr.so.4.0.0 usr/lib/libnetapi.so usr/lib/libnetapi.so.1 usr/lib/libnetapi.so.1.0.0 @@ -186,7 +188,7 @@ usr/lib/libsamdb.so.0 usr/lib/libsamdb.so.0.0.1 usr/lib/libsmbclient.so usr/lib/libsmbclient.so.0 -usr/lib/libsmbclient.so.0.7.0 +usr/lib/libsmbclient.so.0.8.0 usr/lib/libsmbconf.so usr/lib/libsmbconf.so.0 usr/lib/libsmbconf.so.0.0.1 @@ -235,6 +237,7 @@ usr/lib/python3.10/site-packages/samba/dcerpc/atsvc.cpython-310-xxxMACHINExxx-li usr/lib/python3.10/site-packages/samba/dcerpc/auth.cpython-310-xxxMACHINExxx-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/base.cpython-310-xxxMACHINExxx-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/claims.cpython-310-xxxMACHINExxx-linux-gnu.so +usr/lib/python3.10/site-packages/samba/dcerpc/conditional_ace.cpython-310-xxxMACHINExxx-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/dcerpc.cpython-310-xxxMACHINExxx-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/dfs.cpython-310-xxxMACHINExxx-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/dns.cpython-310-xxxMACHINExxx-linux-gnu.so @@ -244,6 +247,8 @@ usr/lib/python3.10/site-packages/samba/dcerpc/drsblobs.cpython-310-xxxMACHINExxx usr/lib/python3.10/site-packages/samba/dcerpc/drsuapi.cpython-310-xxxMACHINExxx-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/echo.cpython-310-xxxMACHINExxx-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/epmapper.cpython-310-xxxMACHINExxx-linux-gnu.so +usr/lib/python3.10/site-packages/samba/dcerpc/gkdi.cpython-310-xxxMACHINExxx-linux-gnu.so +usr/lib/python3.10/site-packages/samba/dcerpc/gmsa.cpython-310-xxxMACHINExxx-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/idmap.cpython-310-xxxMACHINExxx-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/initshutdown.cpython-310-xxxMACHINExxx-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/irpc.cpython-310-xxxMACHINExxx-linux-gnu.so @@ -261,6 +266,8 @@ usr/lib/python3.10/site-packages/samba/dcerpc/preg.cpython-310-xxxMACHINExxx-lin usr/lib/python3.10/site-packages/samba/dcerpc/samr.cpython-310-xxxMACHINExxx-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/security.cpython-310-xxxMACHINExxx-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/server_id.cpython-310-xxxMACHINExxx-linux-gnu.so +usr/lib/python3.10/site-packages/samba/dcerpc/smb3posix.cpython-310-xxxMACHINExxx-linux-gnu.so +usr/lib/python3.10/site-packages/samba/dcerpc/smbXsrv.cpython-310-xxxMACHINExxx-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/smb_acl.cpython-310-xxxMACHINExxx-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/spoolss.cpython-310-xxxMACHINExxx-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/srvsvc.cpython-310-xxxMACHINExxx-linux-gnu.so @@ -288,12 +295,14 @@ usr/lib/python3.10/site-packages/samba/forest_update.py usr/lib/python3.10/site-packages/samba/functional_level.py usr/lib/python3.10/site-packages/samba/gensec.cpython-310-xxxMACHINExxx-linux-gnu.so usr/lib/python3.10/site-packages/samba/getopt.py +usr/lib/python3.10/site-packages/samba/gkdi.py usr/lib/python3.10/site-packages/samba/gp usr/lib/python3.10/site-packages/samba/gp/__init__.py usr/lib/python3.10/site-packages/samba/gp/gp_centrify_crontab_ext.py usr/lib/python3.10/site-packages/samba/gp/gp_centrify_sudoers_ext.py usr/lib/python3.10/site-packages/samba/gp/gp_cert_auto_enroll_ext.py usr/lib/python3.10/site-packages/samba/gp/gp_chromium_ext.py +usr/lib/python3.10/site-packages/samba/gp/gp_drive_maps_ext.py usr/lib/python3.10/site-packages/samba/gp/gp_ext_loader.py usr/lib/python3.10/site-packages/samba/gp/gp_firefox_ext.py usr/lib/python3.10/site-packages/samba/gp/gp_firewalld_ext.py @@ -324,6 +333,7 @@ usr/lib/python3.10/site-packages/samba/gp_parse/gp_pol.py usr/lib/python3.10/site-packages/samba/gpo.cpython-310-xxxMACHINExxx-linux-gnu.so usr/lib/python3.10/site-packages/samba/graph.py usr/lib/python3.10/site-packages/samba/hostconfig.py +usr/lib/python3.10/site-packages/samba/hresult.cpython-310-xxxMACHINExxx-linux-gnu.so usr/lib/python3.10/site-packages/samba/idmap.py usr/lib/python3.10/site-packages/samba/join.py #usr/lib/python3.10/site-packages/samba/kcc @@ -381,7 +391,9 @@ usr/lib/python3.10/site-packages/samba/netcmd/domain/models/auth_silo.py usr/lib/python3.10/site-packages/samba/netcmd/domain/models/claim_type.py usr/lib/python3.10/site-packages/samba/netcmd/domain/models/exceptions.py usr/lib/python3.10/site-packages/samba/netcmd/domain/models/fields.py +usr/lib/python3.10/site-packages/samba/netcmd/domain/models/group.py usr/lib/python3.10/site-packages/samba/netcmd/domain/models/model.py +usr/lib/python3.10/site-packages/samba/netcmd/domain/models/query.py usr/lib/python3.10/site-packages/samba/netcmd/domain/models/schema.py usr/lib/python3.10/site-packages/samba/netcmd/domain/models/site.py usr/lib/python3.10/site-packages/samba/netcmd/domain/models/subnet.py @@ -410,12 +422,42 @@ usr/lib/python3.10/site-packages/samba/netcmd/processes.py usr/lib/python3.10/site-packages/samba/netcmd/pso.py usr/lib/python3.10/site-packages/samba/netcmd/rodc.py usr/lib/python3.10/site-packages/samba/netcmd/schema.py +usr/lib/python3.10/site-packages/samba/netcmd/shell.py usr/lib/python3.10/site-packages/samba/netcmd/sites.py usr/lib/python3.10/site-packages/samba/netcmd/spn.py usr/lib/python3.10/site-packages/samba/netcmd/testparm.py -usr/lib/python3.10/site-packages/samba/netcmd/user.py +#usr/lib/python3.10/site-packages/samba/netcmd/user +usr/lib/python3.10/site-packages/samba/netcmd/user/__init__.py +usr/lib/python3.10/site-packages/samba/netcmd/user/add.py +usr/lib/python3.10/site-packages/samba/netcmd/user/add_unix_attrs.py +#usr/lib/python3.10/site-packages/samba/netcmd/user/auth +usr/lib/python3.10/site-packages/samba/netcmd/user/auth/__init__.py +usr/lib/python3.10/site-packages/samba/netcmd/user/auth/policy.py +usr/lib/python3.10/site-packages/samba/netcmd/user/auth/silo.py +usr/lib/python3.10/site-packages/samba/netcmd/user/delete.py +usr/lib/python3.10/site-packages/samba/netcmd/user/disable.py +usr/lib/python3.10/site-packages/samba/netcmd/user/edit.py +usr/lib/python3.10/site-packages/samba/netcmd/user/enable.py +usr/lib/python3.10/site-packages/samba/netcmd/user/getgroups.py +usr/lib/python3.10/site-packages/samba/netcmd/user/list.py +usr/lib/python3.10/site-packages/samba/netcmd/user/move.py +usr/lib/python3.10/site-packages/samba/netcmd/user/password.py +#usr/lib/python3.10/site-packages/samba/netcmd/user/readpasswords +usr/lib/python3.10/site-packages/samba/netcmd/user/readpasswords/__init__.py +usr/lib/python3.10/site-packages/samba/netcmd/user/readpasswords/common.py +usr/lib/python3.10/site-packages/samba/netcmd/user/readpasswords/get_kerberos_ticket.py +usr/lib/python3.10/site-packages/samba/netcmd/user/readpasswords/getpassword.py +usr/lib/python3.10/site-packages/samba/netcmd/user/readpasswords/show.py +usr/lib/python3.10/site-packages/samba/netcmd/user/readpasswords/syncpasswords.py +usr/lib/python3.10/site-packages/samba/netcmd/user/rename.py +usr/lib/python3.10/site-packages/samba/netcmd/user/sensitive.py +usr/lib/python3.10/site-packages/samba/netcmd/user/setexpiry.py +usr/lib/python3.10/site-packages/samba/netcmd/user/setpassword.py +usr/lib/python3.10/site-packages/samba/netcmd/user/setprimarygroup.py +usr/lib/python3.10/site-packages/samba/netcmd/user/unlock.py usr/lib/python3.10/site-packages/samba/netcmd/validators.py usr/lib/python3.10/site-packages/samba/netcmd/visualize.py +usr/lib/python3.10/site-packages/samba/nt_time.py usr/lib/python3.10/site-packages/samba/ntacls.py usr/lib/python3.10/site-packages/samba/ntstatus.cpython-310-xxxMACHINExxx-linux-gnu.so usr/lib/python3.10/site-packages/samba/param.cpython-310-xxxMACHINExxx-linux-gnu.so @@ -471,16 +513,21 @@ usr/lib/python3.10/site-packages/samba/tdb_util.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/__init__.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/bug13653.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/check_output.py +usr/lib/python3.10/site-packages/samba/tests/blackbox/claims.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/downgradedatabase.py +usr/lib/python3.10/site-packages/samba/tests/blackbox/http_chunk.py +usr/lib/python3.10/site-packages/samba/tests/blackbox/http_content.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/mdsearch.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/ndrdump.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/netads_dns.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/netads_json.py +usr/lib/python3.10/site-packages/samba/tests/blackbox/rpcd_witness_samba_only.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/samba_dnsupdate.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/smbcacls.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/smbcacls_basic.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/smbcacls_dfs_propagate_inherit.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/smbcacls_propagate_inhertance.py +#usr/lib/python3.10/site-packages/samba/tests/blackbox/smbcacls_save_restore.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/smbcontrol.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/smbcontrol_process.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/traffic_learner.py @@ -489,6 +536,9 @@ usr/lib/python3.10/site-packages/samba/tdb_util.py #usr/lib/python3.10/site-packages/samba/tests/common.py #usr/lib/python3.10/site-packages/samba/tests/complex_expressions.py #usr/lib/python3.10/site-packages/samba/tests/compression.py +#usr/lib/python3.10/site-packages/samba/tests/conditional_ace_assembler.py +#usr/lib/python3.10/site-packages/samba/tests/conditional_ace_bytes.py +#usr/lib/python3.10/site-packages/samba/tests/conditional_ace_claims.py #usr/lib/python3.10/site-packages/samba/tests/core.py #usr/lib/python3.10/site-packages/samba/tests/cred_opt.py #usr/lib/python3.10/site-packages/samba/tests/credentials.py @@ -541,6 +591,7 @@ usr/lib/python3.10/site-packages/samba/tdb_util.py #usr/lib/python3.10/site-packages/samba/tests/gensec.py #usr/lib/python3.10/site-packages/samba/tests/get_opt.py #usr/lib/python3.10/site-packages/samba/tests/getdcname.py +#usr/lib/python3.10/site-packages/samba/tests/gkdi.py #usr/lib/python3.10/site-packages/samba/tests/glue.py #usr/lib/python3.10/site-packages/samba/tests/gpo.py #usr/lib/python3.10/site-packages/samba/tests/gpo_member.py @@ -563,14 +614,17 @@ usr/lib/python3.10/site-packages/samba/tdb_util.py #usr/lib/python3.10/site-packages/samba/tests/krb5/claims_in_pac.py #usr/lib/python3.10/site-packages/samba/tests/krb5/claims_tests.py #usr/lib/python3.10/site-packages/samba/tests/krb5/compatability_tests.py +#usr/lib/python3.10/site-packages/samba/tests/krb5/conditional_ace_tests.py #usr/lib/python3.10/site-packages/samba/tests/krb5/device_tests.py #usr/lib/python3.10/site-packages/samba/tests/krb5/etype_tests.py #usr/lib/python3.10/site-packages/samba/tests/krb5/fast_tests.py +#usr/lib/python3.10/site-packages/samba/tests/krb5/gkdi_tests.py #usr/lib/python3.10/site-packages/samba/tests/krb5/group_tests.py #usr/lib/python3.10/site-packages/samba/tests/krb5/kcrypto.py #usr/lib/python3.10/site-packages/samba/tests/krb5/kdc_base_test.py #usr/lib/python3.10/site-packages/samba/tests/krb5/kdc_tests.py #usr/lib/python3.10/site-packages/samba/tests/krb5/kdc_tgs_tests.py +#usr/lib/python3.10/site-packages/samba/tests/krb5/kdc_tgt_tests.py #usr/lib/python3.10/site-packages/samba/tests/krb5/kpasswd_tests.py #usr/lib/python3.10/site-packages/samba/tests/krb5/lockout_tests.py #usr/lib/python3.10/site-packages/samba/tests/krb5/ms_kile_client_principal_lookup_tests.py @@ -581,6 +635,7 @@ usr/lib/python3.10/site-packages/samba/tdb_util.py #usr/lib/python3.10/site-packages/samba/tests/krb5/raw_testcase.py #usr/lib/python3.10/site-packages/samba/tests/krb5/rfc4120_constants.py #usr/lib/python3.10/site-packages/samba/tests/krb5/rfc4120_pyasn1.py +#usr/lib/python3.10/site-packages/samba/tests/krb5/rfc4120_pyasn1_generated.py #usr/lib/python3.10/site-packages/samba/tests/krb5/rodc_tests.py #usr/lib/python3.10/site-packages/samba/tests/krb5/s4u_tests.py #usr/lib/python3.10/site-packages/samba/tests/krb5/salt_tests.py @@ -605,7 +660,10 @@ usr/lib/python3.10/site-packages/samba/tdb_util.py #usr/lib/python3.10/site-packages/samba/tests/logfiles.py #usr/lib/python3.10/site-packages/samba/tests/lsa_string.py #usr/lib/python3.10/site-packages/samba/tests/messaging.py -#usr/lib/python3.10/site-packages/samba/tests/ndr.py +#usr/lib/python3.10/site-packages/samba/tests/ndr +#usr/lib/python3.10/site-packages/samba/tests/ndr/gkdi.py +#usr/lib/python3.10/site-packages/samba/tests/ndr/gmsa.py +#usr/lib/python3.10/site-packages/samba/tests/ndr/wbint.py #usr/lib/python3.10/site-packages/samba/tests/net_join.py #usr/lib/python3.10/site-packages/samba/tests/net_join_no_spnego.py #usr/lib/python3.10/site-packages/samba/tests/netbios.py @@ -654,7 +712,6 @@ usr/lib/python3.10/site-packages/samba/tdb_util.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/contact.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/demote.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/dnscmd.py -#usr/lib/python3.10/site-packages/samba/tests/samba_tool/domain_auth_base.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/domain_auth_policy.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/domain_auth_silo.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/domain_claim.py @@ -680,10 +737,15 @@ usr/lib/python3.10/site-packages/samba/tdb_util.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/provision_userPassword_crypt.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/rodc.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/schema.py +#usr/lib/python3.10/site-packages/samba/tests/samba_tool/silo_base.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/sites.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/timecmd.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/user.py +#usr/lib/python3.10/site-packages/samba/tests/samba_tool/user_auth_policy.py +#usr/lib/python3.10/site-packages/samba/tests/samba_tool/user_auth_silo.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/user_check_password_script.py +#usr/lib/python3.10/site-packages/samba/tests/samba_tool/user_get_kerberos_ticket.py +#usr/lib/python3.10/site-packages/samba/tests/samba_tool/user_getpassword_gmsa.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/user_virtualCryptSHA.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/user_virtualCryptSHA_base.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/user_virtualCryptSHA_gpg.py @@ -695,7 +757,9 @@ usr/lib/python3.10/site-packages/samba/tdb_util.py #usr/lib/python3.10/site-packages/samba/tests/samdb.py #usr/lib/python3.10/site-packages/samba/tests/samdb_api.py #usr/lib/python3.10/site-packages/samba/tests/sddl.py +#usr/lib/python3.10/site-packages/samba/tests/sddl_conditional_ace.py #usr/lib/python3.10/site-packages/samba/tests/security.py +#usr/lib/python3.10/site-packages/samba/tests/security_descriptors.py #usr/lib/python3.10/site-packages/samba/tests/segfault.py #usr/lib/python3.10/site-packages/samba/tests/sid_strings.py #usr/lib/python3.10/site-packages/samba/tests/smb-notify.py @@ -711,6 +775,7 @@ usr/lib/python3.10/site-packages/samba/tdb_util.py #usr/lib/python3.10/site-packages/samba/tests/strings.py #usr/lib/python3.10/site-packages/samba/tests/subunitrun.py #usr/lib/python3.10/site-packages/samba/tests/tdb_util.py +#usr/lib/python3.10/site-packages/samba/tests/token_factory.py #usr/lib/python3.10/site-packages/samba/tests/upgrade.py #usr/lib/python3.10/site-packages/samba/tests/upgradeprovision.py #usr/lib/python3.10/site-packages/samba/tests/upgradeprovisionneeddc.py @@ -750,126 +815,126 @@ usr/lib/samba/ldb/sample.so usr/lib/samba/ldb/server_sort.so usr/lib/samba/ldb/skel.so usr/lib/samba/ldb/tdb.so -usr/lib/samba/libCHARSET3-samba4.so -usr/lib/samba/libLIBWBCLIENT-OLD-samba4.so -usr/lib/samba/libMESSAGING-SEND-samba4.so -usr/lib/samba/libMESSAGING-samba4.so -usr/lib/samba/libREG-FULL-samba4.so -usr/lib/samba/libRPC-SERVER-LOOP-samba4.so -usr/lib/samba/libRPC-WORKER-samba4.so -usr/lib/samba/libaddns-samba4.so -usr/lib/samba/libads-samba4.so -usr/lib/samba/libasn1-samba4.so -usr/lib/samba/libasn1util-samba4.so -usr/lib/samba/libauth-samba4.so -usr/lib/samba/libauth-unix-token-samba4.so -usr/lib/samba/libauth4-samba4.so -usr/lib/samba/libauthkrb5-samba4.so -usr/lib/samba/libcli-cldap-samba4.so -usr/lib/samba/libcli-ldap-common-samba4.so -usr/lib/samba/libcli-ldap-samba4.so -usr/lib/samba/libcli-nbt-samba4.so -usr/lib/samba/libcli-smb-common-samba4.so -usr/lib/samba/libcli-spoolss-samba4.so -usr/lib/samba/libcliauth-samba4.so -usr/lib/samba/libclidns-samba4.so -usr/lib/samba/libcluster-samba4.so -usr/lib/samba/libcmdline-contexts-samba4.so -usr/lib/samba/libcmdline-samba4.so -usr/lib/samba/libcmocka-samba4.so -usr/lib/samba/libcom-err-samba4.so -usr/lib/samba/libcommon-auth-samba4.so -usr/lib/samba/libdbwrap-samba4.so -usr/lib/samba/libdcerpc-pkt-auth-samba4.so -usr/lib/samba/libdcerpc-samba-samba4.so -usr/lib/samba/libdcerpc-samba4.so -usr/lib/samba/libdnsserver-common-samba4.so -usr/lib/samba/libdsdb-module-samba4.so -usr/lib/samba/libevents-samba4.so -usr/lib/samba/libflag-mapping-samba4.so -usr/lib/samba/libgenrand-samba4.so -usr/lib/samba/libgensec-samba4.so -usr/lib/samba/libgpext-samba4.so -usr/lib/samba/libgpo-samba4.so -usr/lib/samba/libgse-samba4.so -usr/lib/samba/libgss-preauth-samba4.so -usr/lib/samba/libgssapi-samba4.so -usr/lib/samba/libhcrypto-samba4.so -usr/lib/samba/libhdb-samba4.so -usr/lib/samba/libheimbase-samba4.so -usr/lib/samba/libheimntlm-samba4.so -usr/lib/samba/libhttp-samba4.so -usr/lib/samba/libhx509-samba4.so -usr/lib/samba/libidmap-samba4.so -usr/lib/samba/libinterfaces-samba4.so -usr/lib/samba/libiov-buf-samba4.so -usr/lib/samba/libkdc-samba4.so -usr/lib/samba/libkrb5-samba4.so -usr/lib/samba/libkrb5samba-samba4.so -usr/lib/samba/libldb-cmdline-samba4.so -usr/lib/samba/libldb-key-value-samba4.so -usr/lib/samba/libldb-samba4.so -usr/lib/samba/libldb-tdb-err-map-samba4.so -usr/lib/samba/libldb-tdb-int-samba4.so -usr/lib/samba/libldbsamba-samba4.so -usr/lib/samba/liblibcli-lsa3-samba4.so -usr/lib/samba/liblibcli-netlogon3-samba4.so -usr/lib/samba/liblibsmb-samba4.so -usr/lib/samba/libmessages-dgm-samba4.so -usr/lib/samba/libmessages-util-samba4.so -usr/lib/samba/libmscat-samba4.so -usr/lib/samba/libmsghdr-samba4.so -usr/lib/samba/libmsrpc3-samba4.so -usr/lib/samba/libndr-samba-samba4.so -usr/lib/samba/libndr-samba4.so -usr/lib/samba/libnet-keytab-samba4.so -usr/lib/samba/libnetif-samba4.so -usr/lib/samba/libnpa-tstream-samba4.so -usr/lib/samba/libnss-info-samba4.so -usr/lib/samba/libposix-eadb-samba4.so -usr/lib/samba/libprinter-driver-samba4.so -usr/lib/samba/libprinting-migrate-samba4.so -usr/lib/samba/libpyldb-util.cpython-310-x86-64-linux-gnu-samba4.so -usr/lib/samba/libpytalloc-util.cpython-310-x86-64-linux-gnu-samba4.so -usr/lib/samba/libregistry-samba4.so -usr/lib/samba/libreplace-samba4.so -usr/lib/samba/libroken-samba4.so -usr/lib/samba/libsamba-cluster-support-samba4.so -usr/lib/samba/libsamba-debug-samba4.so -usr/lib/samba/libsamba-modules-samba4.so -usr/lib/samba/libsamba-net.cpython-310-x86-64-linux-gnu-samba4.so -usr/lib/samba/libsamba-python.cpython-310-x86-64-linux-gnu-samba4.so -usr/lib/samba/libsamba-security-samba4.so -usr/lib/samba/libsamba-sockets-samba4.so -usr/lib/samba/libsamba3-util-samba4.so -usr/lib/samba/libsamdb-common-samba4.so -usr/lib/samba/libsecrets3-samba4.so -usr/lib/samba/libserver-id-db-samba4.so -usr/lib/samba/libserver-role-samba4.so -usr/lib/samba/libshares-samba4.so -usr/lib/samba/libsmb-transport-samba4.so -usr/lib/samba/libsmbclient-raw-samba4.so -usr/lib/samba/libsmbd-base-samba4.so -usr/lib/samba/libsmbd-shim-samba4.so -usr/lib/samba/libsmbldaphelper-samba4.so -usr/lib/samba/libsmbpasswdparser-samba4.so -usr/lib/samba/libsocket-blocking-samba4.so -usr/lib/samba/libstable-sort-samba4.so -usr/lib/samba/libsys-rw-samba4.so -usr/lib/samba/libtalloc-report-printf-samba4.so -usr/lib/samba/libtalloc-report-samba4.so -usr/lib/samba/libtalloc-samba4.so -usr/lib/samba/libtdb-samba4.so -usr/lib/samba/libtdb-wrap-samba4.so -usr/lib/samba/libtevent-samba4.so -usr/lib/samba/libtime-basic-samba4.so -usr/lib/samba/libtorture-samba4.so -usr/lib/samba/libtrusts-util-samba4.so -usr/lib/samba/libutil-reg-samba4.so -usr/lib/samba/libutil-setid-samba4.so -usr/lib/samba/libutil-tdb-samba4.so -usr/lib/samba/libwind-samba4.so -usr/lib/samba/libxattr-tdb-samba4.so +usr/lib/samba/libCHARSET3-private-samba.so +usr/lib/samba/libLIBWBCLIENT-OLD-private-samba.so +usr/lib/samba/libMESSAGING-SEND-private-samba.so +usr/lib/samba/libMESSAGING-private-samba.so +usr/lib/samba/libREG-FULL-private-samba.so +usr/lib/samba/libRPC-SERVER-LOOP-private-samba.so +usr/lib/samba/libRPC-WORKER-private-samba.so +usr/lib/samba/libaddns-private-samba.so +usr/lib/samba/libads-private-samba.so +usr/lib/samba/libasn1-private-samba.so +usr/lib/samba/libasn1util-private-samba.so +usr/lib/samba/libauth-private-samba.so +usr/lib/samba/libauth-unix-token-private-samba.so +usr/lib/samba/libauth4-private-samba.so +usr/lib/samba/libauthkrb5-private-samba.so +usr/lib/samba/libcli-cldap-private-samba.so +usr/lib/samba/libcli-ldap-common-private-samba.so +usr/lib/samba/libcli-ldap-private-samba.so +usr/lib/samba/libcli-nbt-private-samba.so +usr/lib/samba/libcli-smb-common-private-samba.so +usr/lib/samba/libcli-spoolss-private-samba.so +usr/lib/samba/libcliauth-private-samba.so +usr/lib/samba/libclidns-private-samba.so +usr/lib/samba/libcluster-private-samba.so +usr/lib/samba/libcmdline-contexts-private-samba.so +usr/lib/samba/libcmdline-private-samba.so +usr/lib/samba/libcmocka-private-samba.so +usr/lib/samba/libcom-err-private-samba.so +usr/lib/samba/libcommon-auth-private-samba.so +usr/lib/samba/libdbwrap-private-samba.so +usr/lib/samba/libdcerpc-pkt-auth-private-samba.so +usr/lib/samba/libdcerpc-samba-private-samba.so +usr/lib/samba/libdcerpc-samba4-private-samba.so +usr/lib/samba/libdnsserver-common-private-samba.so +usr/lib/samba/libdsdb-module-private-samba.so +usr/lib/samba/libevents-private-samba.so +usr/lib/samba/libflag-mapping-private-samba.so +usr/lib/samba/libgenrand-private-samba.so +usr/lib/samba/libgensec-private-samba.so +usr/lib/samba/libgpext-private-samba.so +usr/lib/samba/libgpo-private-samba.so +usr/lib/samba/libgse-private-samba.so +usr/lib/samba/libgss-preauth-private-samba.so +usr/lib/samba/libgssapi-private-samba.so +usr/lib/samba/libhcrypto-private-samba.so +usr/lib/samba/libhdb-private-samba.so +usr/lib/samba/libheimbase-private-samba.so +usr/lib/samba/libheimntlm-private-samba.so +usr/lib/samba/libhttp-private-samba.so +usr/lib/samba/libhx509-private-samba.so +usr/lib/samba/libidmap-private-samba.so +usr/lib/samba/libinterfaces-private-samba.so +usr/lib/samba/libiov-buf-private-samba.so +usr/lib/samba/libkdc-private-samba.so +usr/lib/samba/libkrb5-private-samba.so +usr/lib/samba/libkrb5samba-private-samba.so +usr/lib/samba/libldb-cmdline-private-samba.so +usr/lib/samba/libldb-key-value-private-samba.so +usr/lib/samba/libldb-private-samba.so +usr/lib/samba/libldb-tdb-err-map-private-samba.so +usr/lib/samba/libldb-tdb-int-private-samba.so +usr/lib/samba/libldbsamba-private-samba.so +usr/lib/samba/liblibcli-lsa3-private-samba.so +usr/lib/samba/liblibcli-netlogon3-private-samba.so +usr/lib/samba/liblibsmb-private-samba.so +usr/lib/samba/libmessages-dgm-private-samba.so +usr/lib/samba/libmessages-util-private-samba.so +usr/lib/samba/libmscat-private-samba.so +usr/lib/samba/libmsghdr-private-samba.so +usr/lib/samba/libmsrpc3-private-samba.so +usr/lib/samba/libndr-samba-private-samba.so +usr/lib/samba/libndr-samba4-private-samba.so +usr/lib/samba/libnet-keytab-private-samba.so +usr/lib/samba/libnetif-private-samba.so +usr/lib/samba/libnpa-tstream-private-samba.so +usr/lib/samba/libnss-info-private-samba.so +usr/lib/samba/libposix-eadb-private-samba.so +usr/lib/samba/libprinter-driver-private-samba.so +usr/lib/samba/libprinting-migrate-private-samba.so +usr/lib/samba/libpyldb-util.cpython-310-x86-64-linux-gnu-private-samba.so +usr/lib/samba/libpytalloc-util.cpython-310-x86-64-linux-gnu-private-samba.so +usr/lib/samba/libregistry-private-samba.so +usr/lib/samba/libreplace-private-samba.so +usr/lib/samba/libroken-private-samba.so +usr/lib/samba/libsamba-cluster-support-private-samba.so +usr/lib/samba/libsamba-debug-private-samba.so +usr/lib/samba/libsamba-modules-private-samba.so +usr/lib/samba/libsamba-net.cpython-310-x86-64-linux-gnu-private-samba.so +usr/lib/samba/libsamba-python.cpython-310-x86-64-linux-gnu-private-samba.so +usr/lib/samba/libsamba-security-private-samba.so +usr/lib/samba/libsamba-sockets-private-samba.so +usr/lib/samba/libsamba3-util-private-samba.so +usr/lib/samba/libsamdb-common-private-samba.so +usr/lib/samba/libsecrets3-private-samba.so +usr/lib/samba/libserver-id-db-private-samba.so +usr/lib/samba/libserver-role-private-samba.so +usr/lib/samba/libshares-private-samba.so +usr/lib/samba/libsmb-transport-private-samba.so +usr/lib/samba/libsmbclient-raw-private-samba.so +usr/lib/samba/libsmbd-base-private-samba.so +usr/lib/samba/libsmbd-shim-private-samba.so +usr/lib/samba/libsmbldaphelper-private-samba.so +usr/lib/samba/libsmbpasswdparser-private-samba.so +usr/lib/samba/libsocket-blocking-private-samba.so +usr/lib/samba/libstable-sort-private-samba.so +usr/lib/samba/libsys-rw-private-samba.so +usr/lib/samba/libtalloc-private-samba.so +usr/lib/samba/libtalloc-report-printf-private-samba.so +usr/lib/samba/libtalloc-report-private-samba.so +usr/lib/samba/libtdb-private-samba.so +usr/lib/samba/libtdb-wrap-private-samba.so +usr/lib/samba/libtevent-private-samba.so +usr/lib/samba/libtime-basic-private-samba.so +usr/lib/samba/libtorture-private-samba.so +usr/lib/samba/libtrusts-util-private-samba.so +usr/lib/samba/libutil-reg-private-samba.so +usr/lib/samba/libutil-setid-private-samba.so +usr/lib/samba/libutil-tdb-private-samba.so +usr/lib/samba/libwind-private-samba.so +usr/lib/samba/libxattr-tdb-private-samba.so usr/lib/samba/nss_info usr/lib/samba/nss_info/hash.so usr/lib/samba/nss_info/rfc2307.so diff --git a/lfs/samba b/lfs/samba index df7811313..ec6ef832a 100644 --- a/lfs/samba +++ b/lfs/samba @@ -24,7 +24,7 @@ include Config -VER = 4.19.5 +VER = 4.20.1 SUMMARY = A SMB/CIFS File, Print, and Authentication Server THISAPP = samba-$(VER) @@ -33,7 +33,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = samba -PAK_VER = 100 +PAK_VER = 101 DEPS = avahi cups perl-Parse-Yapp perl-JSON wsdd @@ -47,7 +47,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 0f0081380ad459cca914e5e4cf505a4783ce97f0fb8c0471a6e558c747c16b0b327e545358265f365599c3807540985bcddb68aa67d14136cee4dbcb5158090c +$(DL_FILE)_BLAKE2 = 5516b3d74705ee829971119d9931ccd339aaa857647dc46e40fda96f65ec5ba695db107f91075a46e1a7135cfdcc0a56ee67aa3475649b314260be03e4e44657 install : $(TARGET) -- 2.45.1

1 0

[PATCH] samba: Update to version 4.20.1
by Adolf Belka 29 May '24

29 May '24

- Update from version 4.19.5 to 4.20.1 - Update of rootfile - Changelog 4.20.1 * BUG 15630: dns update debug message is too noisy. * BUG 15635: Do not fail PAC validation for RFC8009 checksums types. * BUG 15605: Improve performance of lookup_groupmem() in idmap_ad. * BUG 15636: Smbcacls incorrectly propagates inheritance with Inherit-Only flag. * BUG 15611: http library doesn't support 'chunked transfer encoding'. * BUG 15600: Provide a systemd service file for the background queue daemon. 4.20.0 The changelog is too large to show here. Details can be found at https://www.samba.org/samba/history/samba-4.20.0.html I did not identify any changes related to how samba is configured in IPFire 4.19.6 * BUG 15527: fd_handle_destructor() panics within an smbd_smb2_close() if vfs_stat_fsp() fails in fd_close(). * BUG 15588: samba-gpupdate: Correctly implement site support. * BUG 15527: fd_handle_destructor() panics within an smbd_smb2_close() if vfs_stat_fsp() fails in fd_close(). * BUG 15588: samba-gpupdate: Correctly implement site support. * BUG 15599: libgpo: Segfault in python bindings. * BUG 15580: Packet marshalling push support missing for CTDB_CONTROL_TCP_CLIENT_DISCONNECTED and CTDB_CONTROL_TCP_CLIENT_PASSED. Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- config/rootfiles/packages/x86_64/samba | 317 +++++++++++++++---------- lfs/samba | 4 +- 2 files changed, 193 insertions(+), 128 deletions(-) diff --git a/config/rootfiles/packages/x86_64/samba b/config/rootfiles/packages/x86_64/samba index 7a44b9cdb..f511e0101 100644 --- a/config/rootfiles/packages/x86_64/samba +++ b/config/rootfiles/packages/x86_64/samba @@ -46,6 +46,7 @@ usr/bin/tdbrestore usr/bin/tdbtool usr/bin/testparm usr/bin/wbinfo +usr/bin/wspsearch #usr/include/samba-4.0 #usr/include/samba-4.0/charset.h #usr/include/samba-4.0/core @@ -109,6 +110,7 @@ usr/bin/wbinfo #usr/include/samba-4.0/samba/version.h #usr/include/samba-4.0/share.h #usr/include/samba-4.0/smb2_lease_struct.h +#usr/include/samba-4.0/smb3posix.h #usr/include/samba-4.0/smb_ldap.h #usr/include/samba-4.0/smbconf.h #usr/include/samba-4.0/smbldap.h @@ -156,8 +158,8 @@ usr/lib/libndr-standard.so usr/lib/libndr-standard.so.0 usr/lib/libndr-standard.so.0.0.1 usr/lib/libndr.so -usr/lib/libndr.so.3 -usr/lib/libndr.so.3.0.1 +usr/lib/libndr.so.4 +usr/lib/libndr.so.4.0.0 usr/lib/libnetapi.so usr/lib/libnetapi.so.1 usr/lib/libnetapi.so.1.0.0 @@ -186,7 +188,7 @@ usr/lib/libsamdb.so.0 usr/lib/libsamdb.so.0.0.1 usr/lib/libsmbclient.so usr/lib/libsmbclient.so.0 -usr/lib/libsmbclient.so.0.7.0 +usr/lib/libsmbclient.so.0.8.0 usr/lib/libsmbconf.so usr/lib/libsmbconf.so.0 usr/lib/libsmbconf.so.0.0.1 @@ -235,6 +237,7 @@ usr/lib/python3.10/site-packages/samba/dcerpc/atsvc.cpython-310-xxxMACHINExxx-li usr/lib/python3.10/site-packages/samba/dcerpc/auth.cpython-310-xxxMACHINExxx-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/base.cpython-310-xxxMACHINExxx-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/claims.cpython-310-xxxMACHINExxx-linux-gnu.so +usr/lib/python3.10/site-packages/samba/dcerpc/conditional_ace.cpython-310-xxxMACHINExxx-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/dcerpc.cpython-310-xxxMACHINExxx-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/dfs.cpython-310-xxxMACHINExxx-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/dns.cpython-310-xxxMACHINExxx-linux-gnu.so @@ -244,6 +247,8 @@ usr/lib/python3.10/site-packages/samba/dcerpc/drsblobs.cpython-310-xxxMACHINExxx usr/lib/python3.10/site-packages/samba/dcerpc/drsuapi.cpython-310-xxxMACHINExxx-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/echo.cpython-310-xxxMACHINExxx-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/epmapper.cpython-310-xxxMACHINExxx-linux-gnu.so +usr/lib/python3.10/site-packages/samba/dcerpc/gkdi.cpython-310-xxxMACHINExxx-linux-gnu.so +usr/lib/python3.10/site-packages/samba/dcerpc/gmsa.cpython-310-xxxMACHINExxx-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/idmap.cpython-310-xxxMACHINExxx-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/initshutdown.cpython-310-xxxMACHINExxx-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/irpc.cpython-310-xxxMACHINExxx-linux-gnu.so @@ -261,6 +266,8 @@ usr/lib/python3.10/site-packages/samba/dcerpc/preg.cpython-310-xxxMACHINExxx-lin usr/lib/python3.10/site-packages/samba/dcerpc/samr.cpython-310-xxxMACHINExxx-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/security.cpython-310-xxxMACHINExxx-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/server_id.cpython-310-xxxMACHINExxx-linux-gnu.so +usr/lib/python3.10/site-packages/samba/dcerpc/smb3posix.cpython-310-xxxMACHINExxx-linux-gnu.so +usr/lib/python3.10/site-packages/samba/dcerpc/smbXsrv.cpython-310-xxxMACHINExxx-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/smb_acl.cpython-310-xxxMACHINExxx-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/spoolss.cpython-310-xxxMACHINExxx-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/srvsvc.cpython-310-xxxMACHINExxx-linux-gnu.so @@ -288,12 +295,14 @@ usr/lib/python3.10/site-packages/samba/forest_update.py usr/lib/python3.10/site-packages/samba/functional_level.py usr/lib/python3.10/site-packages/samba/gensec.cpython-310-xxxMACHINExxx-linux-gnu.so usr/lib/python3.10/site-packages/samba/getopt.py +usr/lib/python3.10/site-packages/samba/gkdi.py usr/lib/python3.10/site-packages/samba/gp usr/lib/python3.10/site-packages/samba/gp/__init__.py usr/lib/python3.10/site-packages/samba/gp/gp_centrify_crontab_ext.py usr/lib/python3.10/site-packages/samba/gp/gp_centrify_sudoers_ext.py usr/lib/python3.10/site-packages/samba/gp/gp_cert_auto_enroll_ext.py usr/lib/python3.10/site-packages/samba/gp/gp_chromium_ext.py +usr/lib/python3.10/site-packages/samba/gp/gp_drive_maps_ext.py usr/lib/python3.10/site-packages/samba/gp/gp_ext_loader.py usr/lib/python3.10/site-packages/samba/gp/gp_firefox_ext.py usr/lib/python3.10/site-packages/samba/gp/gp_firewalld_ext.py @@ -324,6 +333,7 @@ usr/lib/python3.10/site-packages/samba/gp_parse/gp_pol.py usr/lib/python3.10/site-packages/samba/gpo.cpython-310-xxxMACHINExxx-linux-gnu.so usr/lib/python3.10/site-packages/samba/graph.py usr/lib/python3.10/site-packages/samba/hostconfig.py +usr/lib/python3.10/site-packages/samba/hresult.cpython-310-xxxMACHINExxx-linux-gnu.so usr/lib/python3.10/site-packages/samba/idmap.py usr/lib/python3.10/site-packages/samba/join.py #usr/lib/python3.10/site-packages/samba/kcc @@ -381,7 +391,9 @@ usr/lib/python3.10/site-packages/samba/netcmd/domain/models/auth_silo.py usr/lib/python3.10/site-packages/samba/netcmd/domain/models/claim_type.py usr/lib/python3.10/site-packages/samba/netcmd/domain/models/exceptions.py usr/lib/python3.10/site-packages/samba/netcmd/domain/models/fields.py +usr/lib/python3.10/site-packages/samba/netcmd/domain/models/group.py usr/lib/python3.10/site-packages/samba/netcmd/domain/models/model.py +usr/lib/python3.10/site-packages/samba/netcmd/domain/models/query.py usr/lib/python3.10/site-packages/samba/netcmd/domain/models/schema.py usr/lib/python3.10/site-packages/samba/netcmd/domain/models/site.py usr/lib/python3.10/site-packages/samba/netcmd/domain/models/subnet.py @@ -410,12 +422,42 @@ usr/lib/python3.10/site-packages/samba/netcmd/processes.py usr/lib/python3.10/site-packages/samba/netcmd/pso.py usr/lib/python3.10/site-packages/samba/netcmd/rodc.py usr/lib/python3.10/site-packages/samba/netcmd/schema.py +usr/lib/python3.10/site-packages/samba/netcmd/shell.py usr/lib/python3.10/site-packages/samba/netcmd/sites.py usr/lib/python3.10/site-packages/samba/netcmd/spn.py usr/lib/python3.10/site-packages/samba/netcmd/testparm.py -usr/lib/python3.10/site-packages/samba/netcmd/user.py +#usr/lib/python3.10/site-packages/samba/netcmd/user +usr/lib/python3.10/site-packages/samba/netcmd/user/__init__.py +usr/lib/python3.10/site-packages/samba/netcmd/user/add.py +usr/lib/python3.10/site-packages/samba/netcmd/user/add_unix_attrs.py +#usr/lib/python3.10/site-packages/samba/netcmd/user/auth +usr/lib/python3.10/site-packages/samba/netcmd/user/auth/__init__.py +usr/lib/python3.10/site-packages/samba/netcmd/user/auth/policy.py +usr/lib/python3.10/site-packages/samba/netcmd/user/auth/silo.py +usr/lib/python3.10/site-packages/samba/netcmd/user/delete.py +usr/lib/python3.10/site-packages/samba/netcmd/user/disable.py +usr/lib/python3.10/site-packages/samba/netcmd/user/edit.py +usr/lib/python3.10/site-packages/samba/netcmd/user/enable.py +usr/lib/python3.10/site-packages/samba/netcmd/user/getgroups.py +usr/lib/python3.10/site-packages/samba/netcmd/user/list.py +usr/lib/python3.10/site-packages/samba/netcmd/user/move.py +usr/lib/python3.10/site-packages/samba/netcmd/user/password.py +#usr/lib/python3.10/site-packages/samba/netcmd/user/readpasswords +usr/lib/python3.10/site-packages/samba/netcmd/user/readpasswords/__init__.py +usr/lib/python3.10/site-packages/samba/netcmd/user/readpasswords/common.py +usr/lib/python3.10/site-packages/samba/netcmd/user/readpasswords/get_kerberos_ticket.py +usr/lib/python3.10/site-packages/samba/netcmd/user/readpasswords/getpassword.py +usr/lib/python3.10/site-packages/samba/netcmd/user/readpasswords/show.py +usr/lib/python3.10/site-packages/samba/netcmd/user/readpasswords/syncpasswords.py +usr/lib/python3.10/site-packages/samba/netcmd/user/rename.py +usr/lib/python3.10/site-packages/samba/netcmd/user/sensitive.py +usr/lib/python3.10/site-packages/samba/netcmd/user/setexpiry.py +usr/lib/python3.10/site-packages/samba/netcmd/user/setpassword.py +usr/lib/python3.10/site-packages/samba/netcmd/user/setprimarygroup.py +usr/lib/python3.10/site-packages/samba/netcmd/user/unlock.py usr/lib/python3.10/site-packages/samba/netcmd/validators.py usr/lib/python3.10/site-packages/samba/netcmd/visualize.py +usr/lib/python3.10/site-packages/samba/nt_time.py usr/lib/python3.10/site-packages/samba/ntacls.py usr/lib/python3.10/site-packages/samba/ntstatus.cpython-310-xxxMACHINExxx-linux-gnu.so usr/lib/python3.10/site-packages/samba/param.cpython-310-xxxMACHINExxx-linux-gnu.so @@ -471,16 +513,21 @@ usr/lib/python3.10/site-packages/samba/tdb_util.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/__init__.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/bug13653.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/check_output.py +usr/lib/python3.10/site-packages/samba/tests/blackbox/claims.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/downgradedatabase.py +usr/lib/python3.10/site-packages/samba/tests/blackbox/http_chunk.py +usr/lib/python3.10/site-packages/samba/tests/blackbox/http_content.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/mdsearch.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/ndrdump.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/netads_dns.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/netads_json.py +usr/lib/python3.10/site-packages/samba/tests/blackbox/rpcd_witness_samba_only.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/samba_dnsupdate.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/smbcacls.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/smbcacls_basic.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/smbcacls_dfs_propagate_inherit.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/smbcacls_propagate_inhertance.py +#usr/lib/python3.10/site-packages/samba/tests/blackbox/smbcacls_save_restore.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/smbcontrol.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/smbcontrol_process.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/traffic_learner.py @@ -489,6 +536,9 @@ usr/lib/python3.10/site-packages/samba/tdb_util.py #usr/lib/python3.10/site-packages/samba/tests/common.py #usr/lib/python3.10/site-packages/samba/tests/complex_expressions.py #usr/lib/python3.10/site-packages/samba/tests/compression.py +#usr/lib/python3.10/site-packages/samba/tests/conditional_ace_assembler.py +#usr/lib/python3.10/site-packages/samba/tests/conditional_ace_bytes.py +#usr/lib/python3.10/site-packages/samba/tests/conditional_ace_claims.py #usr/lib/python3.10/site-packages/samba/tests/core.py #usr/lib/python3.10/site-packages/samba/tests/cred_opt.py #usr/lib/python3.10/site-packages/samba/tests/credentials.py @@ -541,6 +591,7 @@ usr/lib/python3.10/site-packages/samba/tdb_util.py #usr/lib/python3.10/site-packages/samba/tests/gensec.py #usr/lib/python3.10/site-packages/samba/tests/get_opt.py #usr/lib/python3.10/site-packages/samba/tests/getdcname.py +#usr/lib/python3.10/site-packages/samba/tests/gkdi.py #usr/lib/python3.10/site-packages/samba/tests/glue.py #usr/lib/python3.10/site-packages/samba/tests/gpo.py #usr/lib/python3.10/site-packages/samba/tests/gpo_member.py @@ -563,14 +614,17 @@ usr/lib/python3.10/site-packages/samba/tdb_util.py #usr/lib/python3.10/site-packages/samba/tests/krb5/claims_in_pac.py #usr/lib/python3.10/site-packages/samba/tests/krb5/claims_tests.py #usr/lib/python3.10/site-packages/samba/tests/krb5/compatability_tests.py +#usr/lib/python3.10/site-packages/samba/tests/krb5/conditional_ace_tests.py #usr/lib/python3.10/site-packages/samba/tests/krb5/device_tests.py #usr/lib/python3.10/site-packages/samba/tests/krb5/etype_tests.py #usr/lib/python3.10/site-packages/samba/tests/krb5/fast_tests.py +#usr/lib/python3.10/site-packages/samba/tests/krb5/gkdi_tests.py #usr/lib/python3.10/site-packages/samba/tests/krb5/group_tests.py #usr/lib/python3.10/site-packages/samba/tests/krb5/kcrypto.py #usr/lib/python3.10/site-packages/samba/tests/krb5/kdc_base_test.py #usr/lib/python3.10/site-packages/samba/tests/krb5/kdc_tests.py #usr/lib/python3.10/site-packages/samba/tests/krb5/kdc_tgs_tests.py +#usr/lib/python3.10/site-packages/samba/tests/krb5/kdc_tgt_tests.py #usr/lib/python3.10/site-packages/samba/tests/krb5/kpasswd_tests.py #usr/lib/python3.10/site-packages/samba/tests/krb5/lockout_tests.py #usr/lib/python3.10/site-packages/samba/tests/krb5/ms_kile_client_principal_lookup_tests.py @@ -581,6 +635,7 @@ usr/lib/python3.10/site-packages/samba/tdb_util.py #usr/lib/python3.10/site-packages/samba/tests/krb5/raw_testcase.py #usr/lib/python3.10/site-packages/samba/tests/krb5/rfc4120_constants.py #usr/lib/python3.10/site-packages/samba/tests/krb5/rfc4120_pyasn1.py +#usr/lib/python3.10/site-packages/samba/tests/krb5/rfc4120_pyasn1_generated.py #usr/lib/python3.10/site-packages/samba/tests/krb5/rodc_tests.py #usr/lib/python3.10/site-packages/samba/tests/krb5/s4u_tests.py #usr/lib/python3.10/site-packages/samba/tests/krb5/salt_tests.py @@ -605,7 +660,10 @@ usr/lib/python3.10/site-packages/samba/tdb_util.py #usr/lib/python3.10/site-packages/samba/tests/logfiles.py #usr/lib/python3.10/site-packages/samba/tests/lsa_string.py #usr/lib/python3.10/site-packages/samba/tests/messaging.py -#usr/lib/python3.10/site-packages/samba/tests/ndr.py +#usr/lib/python3.10/site-packages/samba/tests/ndr +#usr/lib/python3.10/site-packages/samba/tests/ndr/gkdi.py +#usr/lib/python3.10/site-packages/samba/tests/ndr/gmsa.py +#usr/lib/python3.10/site-packages/samba/tests/ndr/wbint.py #usr/lib/python3.10/site-packages/samba/tests/net_join.py #usr/lib/python3.10/site-packages/samba/tests/net_join_no_spnego.py #usr/lib/python3.10/site-packages/samba/tests/netbios.py @@ -654,7 +712,6 @@ usr/lib/python3.10/site-packages/samba/tdb_util.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/contact.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/demote.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/dnscmd.py -#usr/lib/python3.10/site-packages/samba/tests/samba_tool/domain_auth_base.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/domain_auth_policy.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/domain_auth_silo.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/domain_claim.py @@ -680,10 +737,15 @@ usr/lib/python3.10/site-packages/samba/tdb_util.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/provision_userPassword_crypt.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/rodc.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/schema.py +#usr/lib/python3.10/site-packages/samba/tests/samba_tool/silo_base.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/sites.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/timecmd.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/user.py +#usr/lib/python3.10/site-packages/samba/tests/samba_tool/user_auth_policy.py +#usr/lib/python3.10/site-packages/samba/tests/samba_tool/user_auth_silo.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/user_check_password_script.py +#usr/lib/python3.10/site-packages/samba/tests/samba_tool/user_get_kerberos_ticket.py +#usr/lib/python3.10/site-packages/samba/tests/samba_tool/user_getpassword_gmsa.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/user_virtualCryptSHA.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/user_virtualCryptSHA_base.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/user_virtualCryptSHA_gpg.py @@ -695,7 +757,9 @@ usr/lib/python3.10/site-packages/samba/tdb_util.py #usr/lib/python3.10/site-packages/samba/tests/samdb.py #usr/lib/python3.10/site-packages/samba/tests/samdb_api.py #usr/lib/python3.10/site-packages/samba/tests/sddl.py +#usr/lib/python3.10/site-packages/samba/tests/sddl_conditional_ace.py #usr/lib/python3.10/site-packages/samba/tests/security.py +#usr/lib/python3.10/site-packages/samba/tests/security_descriptors.py #usr/lib/python3.10/site-packages/samba/tests/segfault.py #usr/lib/python3.10/site-packages/samba/tests/sid_strings.py #usr/lib/python3.10/site-packages/samba/tests/smb-notify.py @@ -711,6 +775,7 @@ usr/lib/python3.10/site-packages/samba/tdb_util.py #usr/lib/python3.10/site-packages/samba/tests/strings.py #usr/lib/python3.10/site-packages/samba/tests/subunitrun.py #usr/lib/python3.10/site-packages/samba/tests/tdb_util.py +#usr/lib/python3.10/site-packages/samba/tests/token_factory.py #usr/lib/python3.10/site-packages/samba/tests/upgrade.py #usr/lib/python3.10/site-packages/samba/tests/upgradeprovision.py #usr/lib/python3.10/site-packages/samba/tests/upgradeprovisionneeddc.py @@ -750,126 +815,126 @@ usr/lib/samba/ldb/sample.so usr/lib/samba/ldb/server_sort.so usr/lib/samba/ldb/skel.so usr/lib/samba/ldb/tdb.so -usr/lib/samba/libCHARSET3-samba4.so -usr/lib/samba/libLIBWBCLIENT-OLD-samba4.so -usr/lib/samba/libMESSAGING-SEND-samba4.so -usr/lib/samba/libMESSAGING-samba4.so -usr/lib/samba/libREG-FULL-samba4.so -usr/lib/samba/libRPC-SERVER-LOOP-samba4.so -usr/lib/samba/libRPC-WORKER-samba4.so -usr/lib/samba/libaddns-samba4.so -usr/lib/samba/libads-samba4.so -usr/lib/samba/libasn1-samba4.so -usr/lib/samba/libasn1util-samba4.so -usr/lib/samba/libauth-samba4.so -usr/lib/samba/libauth-unix-token-samba4.so -usr/lib/samba/libauth4-samba4.so -usr/lib/samba/libauthkrb5-samba4.so -usr/lib/samba/libcli-cldap-samba4.so -usr/lib/samba/libcli-ldap-common-samba4.so -usr/lib/samba/libcli-ldap-samba4.so -usr/lib/samba/libcli-nbt-samba4.so -usr/lib/samba/libcli-smb-common-samba4.so -usr/lib/samba/libcli-spoolss-samba4.so -usr/lib/samba/libcliauth-samba4.so -usr/lib/samba/libclidns-samba4.so -usr/lib/samba/libcluster-samba4.so -usr/lib/samba/libcmdline-contexts-samba4.so -usr/lib/samba/libcmdline-samba4.so -usr/lib/samba/libcmocka-samba4.so -usr/lib/samba/libcom-err-samba4.so -usr/lib/samba/libcommon-auth-samba4.so -usr/lib/samba/libdbwrap-samba4.so -usr/lib/samba/libdcerpc-pkt-auth-samba4.so -usr/lib/samba/libdcerpc-samba-samba4.so -usr/lib/samba/libdcerpc-samba4.so -usr/lib/samba/libdnsserver-common-samba4.so -usr/lib/samba/libdsdb-module-samba4.so -usr/lib/samba/libevents-samba4.so -usr/lib/samba/libflag-mapping-samba4.so -usr/lib/samba/libgenrand-samba4.so -usr/lib/samba/libgensec-samba4.so -usr/lib/samba/libgpext-samba4.so -usr/lib/samba/libgpo-samba4.so -usr/lib/samba/libgse-samba4.so -usr/lib/samba/libgss-preauth-samba4.so -usr/lib/samba/libgssapi-samba4.so -usr/lib/samba/libhcrypto-samba4.so -usr/lib/samba/libhdb-samba4.so -usr/lib/samba/libheimbase-samba4.so -usr/lib/samba/libheimntlm-samba4.so -usr/lib/samba/libhttp-samba4.so -usr/lib/samba/libhx509-samba4.so -usr/lib/samba/libidmap-samba4.so -usr/lib/samba/libinterfaces-samba4.so -usr/lib/samba/libiov-buf-samba4.so -usr/lib/samba/libkdc-samba4.so -usr/lib/samba/libkrb5-samba4.so -usr/lib/samba/libkrb5samba-samba4.so -usr/lib/samba/libldb-cmdline-samba4.so -usr/lib/samba/libldb-key-value-samba4.so -usr/lib/samba/libldb-samba4.so -usr/lib/samba/libldb-tdb-err-map-samba4.so -usr/lib/samba/libldb-tdb-int-samba4.so -usr/lib/samba/libldbsamba-samba4.so -usr/lib/samba/liblibcli-lsa3-samba4.so -usr/lib/samba/liblibcli-netlogon3-samba4.so -usr/lib/samba/liblibsmb-samba4.so -usr/lib/samba/libmessages-dgm-samba4.so -usr/lib/samba/libmessages-util-samba4.so -usr/lib/samba/libmscat-samba4.so -usr/lib/samba/libmsghdr-samba4.so -usr/lib/samba/libmsrpc3-samba4.so -usr/lib/samba/libndr-samba-samba4.so -usr/lib/samba/libndr-samba4.so -usr/lib/samba/libnet-keytab-samba4.so -usr/lib/samba/libnetif-samba4.so -usr/lib/samba/libnpa-tstream-samba4.so -usr/lib/samba/libnss-info-samba4.so -usr/lib/samba/libposix-eadb-samba4.so -usr/lib/samba/libprinter-driver-samba4.so -usr/lib/samba/libprinting-migrate-samba4.so -usr/lib/samba/libpyldb-util.cpython-310-x86-64-linux-gnu-samba4.so -usr/lib/samba/libpytalloc-util.cpython-310-x86-64-linux-gnu-samba4.so -usr/lib/samba/libregistry-samba4.so -usr/lib/samba/libreplace-samba4.so -usr/lib/samba/libroken-samba4.so -usr/lib/samba/libsamba-cluster-support-samba4.so -usr/lib/samba/libsamba-debug-samba4.so -usr/lib/samba/libsamba-modules-samba4.so -usr/lib/samba/libsamba-net.cpython-310-x86-64-linux-gnu-samba4.so -usr/lib/samba/libsamba-python.cpython-310-x86-64-linux-gnu-samba4.so -usr/lib/samba/libsamba-security-samba4.so -usr/lib/samba/libsamba-sockets-samba4.so -usr/lib/samba/libsamba3-util-samba4.so -usr/lib/samba/libsamdb-common-samba4.so -usr/lib/samba/libsecrets3-samba4.so -usr/lib/samba/libserver-id-db-samba4.so -usr/lib/samba/libserver-role-samba4.so -usr/lib/samba/libshares-samba4.so -usr/lib/samba/libsmb-transport-samba4.so -usr/lib/samba/libsmbclient-raw-samba4.so -usr/lib/samba/libsmbd-base-samba4.so -usr/lib/samba/libsmbd-shim-samba4.so -usr/lib/samba/libsmbldaphelper-samba4.so -usr/lib/samba/libsmbpasswdparser-samba4.so -usr/lib/samba/libsocket-blocking-samba4.so -usr/lib/samba/libstable-sort-samba4.so -usr/lib/samba/libsys-rw-samba4.so -usr/lib/samba/libtalloc-report-printf-samba4.so -usr/lib/samba/libtalloc-report-samba4.so -usr/lib/samba/libtalloc-samba4.so -usr/lib/samba/libtdb-samba4.so -usr/lib/samba/libtdb-wrap-samba4.so -usr/lib/samba/libtevent-samba4.so -usr/lib/samba/libtime-basic-samba4.so -usr/lib/samba/libtorture-samba4.so -usr/lib/samba/libtrusts-util-samba4.so -usr/lib/samba/libutil-reg-samba4.so -usr/lib/samba/libutil-setid-samba4.so -usr/lib/samba/libutil-tdb-samba4.so -usr/lib/samba/libwind-samba4.so -usr/lib/samba/libxattr-tdb-samba4.so +usr/lib/samba/libCHARSET3-private-samba.so +usr/lib/samba/libLIBWBCLIENT-OLD-private-samba.so +usr/lib/samba/libMESSAGING-SEND-private-samba.so +usr/lib/samba/libMESSAGING-private-samba.so +usr/lib/samba/libREG-FULL-private-samba.so +usr/lib/samba/libRPC-SERVER-LOOP-private-samba.so +usr/lib/samba/libRPC-WORKER-private-samba.so +usr/lib/samba/libaddns-private-samba.so +usr/lib/samba/libads-private-samba.so +usr/lib/samba/libasn1-private-samba.so +usr/lib/samba/libasn1util-private-samba.so +usr/lib/samba/libauth-private-samba.so +usr/lib/samba/libauth-unix-token-private-samba.so +usr/lib/samba/libauth4-private-samba.so +usr/lib/samba/libauthkrb5-private-samba.so +usr/lib/samba/libcli-cldap-private-samba.so +usr/lib/samba/libcli-ldap-common-private-samba.so +usr/lib/samba/libcli-ldap-private-samba.so +usr/lib/samba/libcli-nbt-private-samba.so +usr/lib/samba/libcli-smb-common-private-samba.so +usr/lib/samba/libcli-spoolss-private-samba.so +usr/lib/samba/libcliauth-private-samba.so +usr/lib/samba/libclidns-private-samba.so +usr/lib/samba/libcluster-private-samba.so +usr/lib/samba/libcmdline-contexts-private-samba.so +usr/lib/samba/libcmdline-private-samba.so +usr/lib/samba/libcmocka-private-samba.so +usr/lib/samba/libcom-err-private-samba.so +usr/lib/samba/libcommon-auth-private-samba.so +usr/lib/samba/libdbwrap-private-samba.so +usr/lib/samba/libdcerpc-pkt-auth-private-samba.so +usr/lib/samba/libdcerpc-samba-private-samba.so +usr/lib/samba/libdcerpc-samba4-private-samba.so +usr/lib/samba/libdnsserver-common-private-samba.so +usr/lib/samba/libdsdb-module-private-samba.so +usr/lib/samba/libevents-private-samba.so +usr/lib/samba/libflag-mapping-private-samba.so +usr/lib/samba/libgenrand-private-samba.so +usr/lib/samba/libgensec-private-samba.so +usr/lib/samba/libgpext-private-samba.so +usr/lib/samba/libgpo-private-samba.so +usr/lib/samba/libgse-private-samba.so +usr/lib/samba/libgss-preauth-private-samba.so +usr/lib/samba/libgssapi-private-samba.so +usr/lib/samba/libhcrypto-private-samba.so +usr/lib/samba/libhdb-private-samba.so +usr/lib/samba/libheimbase-private-samba.so +usr/lib/samba/libheimntlm-private-samba.so +usr/lib/samba/libhttp-private-samba.so +usr/lib/samba/libhx509-private-samba.so +usr/lib/samba/libidmap-private-samba.so +usr/lib/samba/libinterfaces-private-samba.so +usr/lib/samba/libiov-buf-private-samba.so +usr/lib/samba/libkdc-private-samba.so +usr/lib/samba/libkrb5-private-samba.so +usr/lib/samba/libkrb5samba-private-samba.so +usr/lib/samba/libldb-cmdline-private-samba.so +usr/lib/samba/libldb-key-value-private-samba.so +usr/lib/samba/libldb-private-samba.so +usr/lib/samba/libldb-tdb-err-map-private-samba.so +usr/lib/samba/libldb-tdb-int-private-samba.so +usr/lib/samba/libldbsamba-private-samba.so +usr/lib/samba/liblibcli-lsa3-private-samba.so +usr/lib/samba/liblibcli-netlogon3-private-samba.so +usr/lib/samba/liblibsmb-private-samba.so +usr/lib/samba/libmessages-dgm-private-samba.so +usr/lib/samba/libmessages-util-private-samba.so +usr/lib/samba/libmscat-private-samba.so +usr/lib/samba/libmsghdr-private-samba.so +usr/lib/samba/libmsrpc3-private-samba.so +usr/lib/samba/libndr-samba-private-samba.so +usr/lib/samba/libndr-samba4-private-samba.so +usr/lib/samba/libnet-keytab-private-samba.so +usr/lib/samba/libnetif-private-samba.so +usr/lib/samba/libnpa-tstream-private-samba.so +usr/lib/samba/libnss-info-private-samba.so +usr/lib/samba/libposix-eadb-private-samba.so +usr/lib/samba/libprinter-driver-private-samba.so +usr/lib/samba/libprinting-migrate-private-samba.so +usr/lib/samba/libpyldb-util.cpython-310-x86-64-linux-gnu-private-samba.so +usr/lib/samba/libpytalloc-util.cpython-310-x86-64-linux-gnu-private-samba.so +usr/lib/samba/libregistry-private-samba.so +usr/lib/samba/libreplace-private-samba.so +usr/lib/samba/libroken-private-samba.so +usr/lib/samba/libsamba-cluster-support-private-samba.so +usr/lib/samba/libsamba-debug-private-samba.so +usr/lib/samba/libsamba-modules-private-samba.so +usr/lib/samba/libsamba-net.cpython-310-x86-64-linux-gnu-private-samba.so +usr/lib/samba/libsamba-python.cpython-310-x86-64-linux-gnu-private-samba.so +usr/lib/samba/libsamba-security-private-samba.so +usr/lib/samba/libsamba-sockets-private-samba.so +usr/lib/samba/libsamba3-util-private-samba.so +usr/lib/samba/libsamdb-common-private-samba.so +usr/lib/samba/libsecrets3-private-samba.so +usr/lib/samba/libserver-id-db-private-samba.so +usr/lib/samba/libserver-role-private-samba.so +usr/lib/samba/libshares-private-samba.so +usr/lib/samba/libsmb-transport-private-samba.so +usr/lib/samba/libsmbclient-raw-private-samba.so +usr/lib/samba/libsmbd-base-private-samba.so +usr/lib/samba/libsmbd-shim-private-samba.so +usr/lib/samba/libsmbldaphelper-private-samba.so +usr/lib/samba/libsmbpasswdparser-private-samba.so +usr/lib/samba/libsocket-blocking-private-samba.so +usr/lib/samba/libstable-sort-private-samba.so +usr/lib/samba/libsys-rw-private-samba.so +usr/lib/samba/libtalloc-private-samba.so +usr/lib/samba/libtalloc-report-printf-private-samba.so +usr/lib/samba/libtalloc-report-private-samba.so +usr/lib/samba/libtdb-private-samba.so +usr/lib/samba/libtdb-wrap-private-samba.so +usr/lib/samba/libtevent-private-samba.so +usr/lib/samba/libtime-basic-private-samba.so +usr/lib/samba/libtorture-private-samba.so +usr/lib/samba/libtrusts-util-private-samba.so +usr/lib/samba/libutil-reg-private-samba.so +usr/lib/samba/libutil-setid-private-samba.so +usr/lib/samba/libutil-tdb-private-samba.so +usr/lib/samba/libwind-private-samba.so +usr/lib/samba/libxattr-tdb-private-samba.so usr/lib/samba/nss_info usr/lib/samba/nss_info/hash.so usr/lib/samba/nss_info/rfc2307.so diff --git a/lfs/samba b/lfs/samba index df7811313..f9da3e209 100644 --- a/lfs/samba +++ b/lfs/samba @@ -24,7 +24,7 @@ include Config -VER = 4.19.5 +VER = 4.20.1 SUMMARY = A SMB/CIFS File, Print, and Authentication Server THISAPP = samba-$(VER) @@ -47,7 +47,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 0f0081380ad459cca914e5e4cf505a4783ce97f0fb8c0471a6e558c747c16b0b327e545358265f365599c3807540985bcddb68aa67d14136cee4dbcb5158090c +$(DL_FILE)_BLAKE2 = 5516b3d74705ee829971119d9931ccd339aaa857647dc46e40fda96f65ec5ba695db107f91075a46e1a7135cfdcc0a56ee67aa3475649b314260be03e4e44657 install : $(TARGET) -- 2.45.1

1 1

[PATCH 1/2] vectorscan: Install vectorscan to replace hypersan
by Adolf Belka 29 May '24

29 May '24

- It has been announced that from hyperscan-5.5 onwards the licence for this package will change from BSD tp proprietarty paid for version - This patch submission installs vectorscan whihc was created as a fork from hyperscan andf that is being maintained and has indicated it will suay Open Source - Created new lfs file - Created nbew rootfile. This looks to match the hyperscan rootfile closely - Added vector scan to the make.sh file and removed hyperscan from it. Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- config/rootfiles/common/vectorscan | 13 +++++ lfs/vectorscan | 86 ++++++++++++++++++++++++++++++ make.sh | 2 +- 3 files changed, 100 insertions(+), 1 deletion(-) create mode 100644 config/rootfiles/common/vectorscan create mode 100644 lfs/vectorscan diff --git a/config/rootfiles/common/vectorscan b/config/rootfiles/common/vectorscan new file mode 100644 index 000000000..160dc3ae7 --- /dev/null +++ b/config/rootfiles/common/vectorscan @@ -0,0 +1,13 @@ +#usr/include/hs +#usr/include/hs/hs.h +#usr/include/hs/hs_common.h +#usr/include/hs/hs_compile.h +#usr/include/hs/hs_runtime.h +#usr/include/hs/hs_version.h +#usr/lib/libhs.so +usr/lib/libhs.so.5 +usr/lib/libhs.so.5.4.11 +#usr/lib/libhs_runtime.so +usr/lib/libhs_runtime.so.5 +usr/lib/libhs_runtime.so.5.4.11 +#usr/lib/pkgconfig/libhs.pc diff --git a/lfs/vectorscan b/lfs/vectorscan new file mode 100644 index 000000000..0b60e19c9 --- /dev/null +++ b/lfs/vectorscan @@ -0,0 +1,86 @@ +############################################################################### +# # +# IPFire.org - A linux based firewall # +# Copyright (C) 2007-2024 IPFire Team <info(a)ipfire.org> # +# # +# This program is free software: you can redistribute it and/or modify # +# it under the terms of the GNU General Public License as published by # +# the Free Software Foundation, either version 3 of the License, or # +# (at your option) any later version. # +# # +# This program is distributed in the hope that it will be useful, # +# but WITHOUT ANY WARRANTY; without even the implied warranty of # +# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # +# GNU General Public License for more details. # +# # +# You should have received a copy of the GNU General Public License # +# along with this program. If not, see <http://www.gnu.org/licenses/>. # +# # +############################################################################### + +############################################################################### +# Definitions +############################################################################### + +include Config + +VER = 5.4.11 + +THISAPP = vectorscan-vectorscan-$(VER) +DL_FILE = $(THISAPP).tar.gz +DL_FROM = $(URL_IPFIRE) +DIR_APP = $(DIR_SRC)/$(THISAPP) +TARGET = $(DIR_INFO)/$(THISAPP) + +# The compiler uses a lot of memory to compile hyperscan, hence we reduce +# the total number of processes a little bit to be able to build on +# smaller machines +MAX_PARALLELISM = $(shell echo $$(( $(SYSTEM_MEMORY) / 1024))) + +############################################################################### +# Top-level Rules +############################################################################### + +objects = $(DL_FILE) + +$(DL_FILE) = $(DL_FROM)/$(DL_FILE) + +$(DL_FILE)_BLAKE2 = a8f5a1230af0ddf7d9fb9299769ec1736d37ac3284f6a98b1e650af461206cf459eac35d13a47beb6683786c6529539b2d082edf426e7d4890ed11804c76268b + +install : $(TARGET) + +check : $(patsubst %,$(DIR_CHK)/%,$(objects)) + +download :$(patsubst %,$(DIR_DL)/%,$(objects)) + +b2 : $(subst %,%_BLAKE2,$(objects)) + +############################################################################### +# Downloading, checking, b2sum +############################################################################### + +$(patsubst %,$(DIR_CHK)/%,$(objects)) : + @$(CHECK) + +$(patsubst %,$(DIR_DL)/%,$(objects)) : + @$(LOAD) + +$(subst %,%_BLAKE2,$(objects)) : + @$(B2SUM) + +############################################################################### +# Installation Details +############################################################################### + +$(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) + @$(PREBUILD) + @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar axf $(DIR_DL)/$(DL_FILE) + cd $(DIR_APP) && cmake . \ + -DCMAKE_INSTALL_PREFIX:PATH=/usr \ + -DBUILD_SHARED_LIBS=ON \ + -DCMAKE_BUILD_TYPE=RELEASE \ + -DBUILD_EXAMPLES=OFF + cd $(DIR_APP) && make $(MAKETUNING) + cd $(DIR_APP) && make install + @rm -rf $(DIR_APP) + @$(POSTBUILD) diff --git a/make.sh b/make.sh index a4ba09326..9977e762b 100755 --- a/make.sh +++ b/make.sh @@ -1402,7 +1402,7 @@ buildipfire() { lfsmake2 libhtp lfsmake2 colm lfsmake2 ragel - lfsmake2 hyperscan + lfsmake2 vectorscan lfsmake2 suricata lfsmake2 ids-ruleset-sources lfsmake2 ipblocklist-sources -- 2.44.0

2 6

[PATCH] dhcpcd: Update to version 10.0.8
by Adolf Belka 29 May '24

29 May '24

- Update from version 10.0.6 to 10.0.8 - Update of rootfile not required - Changelog 10.0.8 Fixed compile without ARP Fixed closefrom test for glibc Fixed spelling of ADVERTISEMENT 10.0.7 DHCP: use request_time, fallback_time and ipv4ll_time rather than reboot timeout DHCP6: Wait for IRT to elapse before requesting advertisments DHCPv6: Don't re-INFORM if the RA changes privsep: Reduce fd use dhcpcd: Add support for arp persist defence by @pradeep-brightsign in #273 Move dhcp(v4) packet size check earlier by @pemensik in #295 Define the Azure Endpoint and other site-specific options by @lparkes in #299 add RFC4191 support by @goertzenator in #297 dhcpcd: Respect IPV6_PREFERRED_ONLY flag regardless of state by @taoyl-g in #307 Fix time_offset to be int to match RFC-2132 by @ColinMcInnes in #319 hooks/30-hostname: Exit with 0 if setting hostname is not needed by @bdrung in #320 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- lfs/dhcpcd | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lfs/dhcpcd b/lfs/dhcpcd index 4a2368562..3bac681d8 100644 --- a/lfs/dhcpcd +++ b/lfs/dhcpcd @@ -24,7 +24,7 @@ include Config -VER = 10.0.6 +VER = 10.0.8 THISAPP = dhcpcd-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 4afd08cf7377b2262d33bf3f7ac503e081572a7c1ffd53b285842a92d99d88fae44e7e6384134bbe1eb839001f822fa7fb43718c42f9e8e6d11a05ec66fa2fc6 +$(DL_FILE)_BLAKE2 = 1bf27387c13f192c6216e2f1ecad06bfa82267d5d6e08ddaa123789699fe9154222c33b1aa1f603e65ae8dce510cb24d48e72701494e0793c766e81f024f8bc5 install : $(TARGET) -- 2.44.0

2 3

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

Development May 2024