Commit Graph

42 Commits

Author SHA1 Message Date
Bian Naimeng
4a89e4c608 samba: upgrade to 4.1.12
Signed-off-by: Bian Naimeng <biannm@cn.fujitsu.com>
2015-08-24 14:03:54 +02:00
Roy Li
9ac5713b2f samba: upgrade to 3.6.25
upgrade to fix a CVE defect: CVE-2015-0240
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-0240

Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-05-11 10:27:28 +02:00
Martin Jansa
c75c4dd138 Revert "samba: disable service by default"
This reverts commit 20a624928c.

There is ongoing discussion about this one on oe-devel ML:
http://lists.openembedded.org/pipermail/openembedded-devel/2015-March/100899.html

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-04-13 12:55:46 +02:00
Andreas Oberritter
ebf7b522cf samba: move daemons into their own package
Create a package samba-base, which contains everything
needed to just run the daemons (nmbd, smbd).

Excerpt from buildhistory (mips32):

-87280  KiB samba
+13968  KiB samba-base

Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-04-13 12:55:25 +02:00
Andreas Müller
e1be8ba2b8 samba: add mirrors
Samba server is down currently so add mirrors. Both were short tested
by wget.

Signed-off-by: Andreas Müller <schnitzeltony@googlemail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-02-12 19:35:40 +01:00
Chong.Lu@windriver.com
20a624928c samba: disable service by default
Disable smb, nmb, winbind service by default.

Signed-off-by: Chong Lu <Chong.Lu@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-02-12 19:31:53 +01:00
Chong.Lu@windriver.com
d4af902af7 samba: fix error messages when startup samba service
This solves the following error messages when startup samba:

  Unable to open new log file '/var/log/samba/log.smbd': No such file or directory

Signed-off-by: Chong Lu <Chong.Lu@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-11-24 11:58:30 +01:00
Chong.Lu@windriver.com
42e1f31341 samba: add winbind.service to winbind package
This solves the following warning:

lib32-samba-3.6.24: lib32-samba: Files/directories were installed but not shipped
  /lib/systemd/system/winbind.service [installed-vs-shipped]

Signed-off-by: Chong Lu <Chong.Lu@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-11-24 11:58:30 +01:00
Jackie Huang
67d5c9e377 samba: make build deterministic by adding PACKAGECONFIG for valgrind
* No configure option for valgrind, use the ac_cv_header_*
* The PACKAGECONFIG for valgrind is disabled by default

Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-11-07 15:05:05 +01:00
Chong.Lu@windriver.com
91939fda6b samba: add systemd service file
Add systemd service for samba.

Signed-off-by: Chong Lu <Chong.Lu@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-10-16 07:00:59 +02:00
Kang Kai
9566158249 samba: upgrade to 3.6.24
Upgrade samba to latest 3.6.x version.

* remove PR
* remove backport CVE patches
* update 4 patches: documentation.patch, documentation2.patch, undefined-symbols.patch
  and bug_387266_upstream_4104_mention-kerberos-in-smbspool-manpage.patch

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-08-23 13:18:06 +02:00
Robert Yang
f3cfd1b833 meta-oe: fix no newline at end of file
Add a '\n' to the last line of the file to fix:

No newline at end of file

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-07-15 14:57:26 +02:00
Chong.Lu@windriver.com
304a68732d samba: fix dependency issue about talloc
Check whether to enable external talloc by PACKAGECONFIG.

Signed-off-by: Chong Lu <Chong.Lu@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-07-15 14:53:55 +02:00
Chong.Lu@windriver.com
18e196f16e samba: Security Advisory - CVE-2013-4475
Samba 3.x before 3.6.20, 4.0.x before 4.0.11, and 4.1.x before 4.1.1,
when vfs_streams_depot or vfs_streams_xattr is enabled, allows remote
attackers to bypass intended file restrictions by leveraging ACL
differences between a file and an associated alternate data stream
(ADS).

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-4475

Signed-off-by: Yue Tao <Yue.Tao@windriver.com>
Signed-off-by: Chong Lu <Chong.Lu@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-06-21 19:22:25 +02:00
Chong.Lu@windriver.com
69e765c464 samba: Security Advisory - CVE-2013-4124
Integer overflow in the read_nttrans_ea_list function in nttrans.c in
smbd in Samba 3.x before 3.5.22, 3.6.x before 3.6.17, and 4.x before
4.0.8 allows remote attackers to cause a denial of service (memory
consumption) via a malformed packet.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-4124

Signed-off-by: Yue Tao <Yue.Tao@windriver.com>
Signed-off-by: Chong Lu <Chong.Lu@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-06-21 19:22:25 +02:00
Chong.Lu@windriver.com
fe32c95ab0 samba: fix two CVEs CVE-2013-0213 CVE-2013-0214
Signed-off-by: Yue Tao <Yue.Tao@windriver.com>
Signed-off-by: Chong Lu <Chong.Lu@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-06-21 19:22:24 +02:00
Chong.Lu@windriver.com
65ac416470 samba: fix parsing linemarkers in preprocessor output
When PIDL calls out to C preprocessor to expand IDL files
and parse the output, it filters out linemarkers and line control
information as described in http://gcc.gnu.org/onlinedocs/cpp/Preprocessor-Output.html
and http://gcc.gnu.org/onlinedocs/cpp/Line-Control.html#Line-Control

With gcc 4.8 stdc-predef.h is included automatically and linemarker for the
file has extended flags that PIDL couldn't parse ('system header that needs to
be extern "C" protected for C++')

Signed-off-by: Yue Tao <Yue.Tao@windriver.com>
Signed-off-by: Chong Lu <Chong.Lu@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-06-21 19:22:24 +02:00
Chong.Lu@windriver.com
3d5d8c6d0f samba: Security Advisory - CVE-2013-4496
Samba 3.x before 3.6.23, 4.0.x before 4.0.16, and 4.1.x before 4.1.6
does not enforce the password-guessing protection mechanism for all
interfaces, which makes it easier for remote attackers to obtain access
via brute-force ChangePasswordUser2 (1) SAMR or (2) RAP attempts.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-4496

Signed-off-by: Yue Tao <Yue.Tao@windriver.com>
Signed-off-by: Chong Lu <Chong.Lu@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-06-21 19:22:24 +02:00
Khem Raj
bf7f793ace bonnie++, lmbench, obex-data-server, samba, sg3-utils: Do not do out-of-tree builds
These recipes are not ready yet

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-05-03 20:47:01 +02:00
Jate Sujjavanich
84d2791e40 samba: Add talloc PACKAGECONFIG
* fix DEPENDS which was triggering rebuild

Use PACKAGECONFIG to properly provide the option for libtalloc

Signed-off-by: Jate Sujjavanich <jatedev@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-04-20 13:14:56 +02:00
Ming Liu
79a0ab9670 samba: add PACKAGECONFIG for libunwind
Also add --enable-libunwind option for samba source3, otherwise, it will
be auto-detected from sysroot, which will lead implicit results.

Signed-off-by: Ming Liu <ming.liu@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-02-01 08:51:04 +01:00
Andrei Gherzan
7661ede2d5 samba: Fix unrecognised with-libdir options
Remove with-libdir as there is no such option and set libdir with --libdir.

Change-Id: Ida67c0c92d19ccc339f16c504055daa8c0d7208a
Signed-off-by: Andrei Gherzan <andrei@gherzan.ro>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-01-10 12:20:18 +01:00
Martin Jansa
492e409d62 samba: add packageconfig for fam
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2013-07-30 11:17:13 +02:00
Martin Jansa
337b1bac68 samba: add dependency on zlib popt, PACKAGECONFIG for pam
* zlib, popt are autodetected or used in bundled versions
* pam is autodetected if available

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2013-07-20 17:04:54 +02:00
Martin Jansa
73c191ca11 samba: use more specific LICENSE
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2013-07-20 17:04:54 +02:00
Jonathan Liu
82f7bdc63e samba: remove /var/lock and /var/run from package
The /var/lock and /var/run directories are already created by
base-files.

Signed-off-by: Jonathan Liu <net147@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2013-07-08 10:36:21 +02:00
Otavio Salvador
bac6da16a0 samba: Add usershare directory to the package
Signed-off-by: Otavio Salvador <otavio@ossystems.com.br>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2013-05-13 10:49:24 +02:00
Martin Jansa
a45830a39b recipes: Unify indentation
* This change is only aesthetic (unlike indentation in Python
  tasks).
* Some recipes were using tabs.
* Some were using 8 spaces.
* Some were using mix or different number of spaces.
* Make them consistently use 4 spaces everywhere.
* Yocto styleguide advises to use tabs (but the only reason to keep
  tabs is the need to update a lot of recipes). Lately this advice
  was also merged into the styleguide on the OE wiki.
* Using 4 spaces in both types of tasks is better because it's less
  error prone when someone is not sure if e.g.
  do_generate_toolchain_file() is Python or shell task and also allows
  to highlight every tab used in .bb, .inc, .bbappend, .bbclass as
  potentially bad (shouldn't be used for indenting of multiline
  variable assignments and cannot be used for Python tasks).
* Don't indent closing quote on multiline variables
  we're quite inconsistent wheater it's first character on line
  under opening quote or under first non-whitespace character in
  previous line.

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Acked-by: Koen Kooi <koen@dominion.thruhere.net>
2013-04-15 16:23:17 +02:00
Andreas Oberritter
f44c52cbae samba: fix install for older samba versions
* Samba 3.0 doesn't build libnss_*.so
* base_sbindir may contain mount.cifs

Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2013-03-12 11:22:40 +01:00
Otavio Salvador
3b214e28bc samba: Split libnss-winbind package
This allows for applications to resolv wins without the winbindd and
sambad.

Change-Id: Iaa86154a59e758b37f28796963e6550ed2d30464
Signed-off-by: Otavio Salvador <otavio@ossystems.com.br>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2013-02-16 05:55:24 +01:00
Andreas Müller
18e56610d4 samba: add new package libwbclient to avoid libsmbclient dragging in samba
To find which dependency dragged in samba in folder image readelf was
performed:

> readelf -d usr/lib/libsmbclient.so

Dynamic section at offset 0x4bfec0 contains 36 entries:
  Tag        Type                         Name/Value
 0x00000001 (NEEDED)                     Shared library: [libc.so.6]
 0x00000001 (NEEDED)                     Shared library: [libtalloc.so.2]
 0x00000001 (NEEDED)                     Shared library: [libtdb.so.1]
 0x00000001 (NEEDED)                     Shared library: [libwbclient.so.0]
 0x00000001 (NEEDED)                     Shared library: [libresolv.so.2]
 0x00000001 (NEEDED)                     Shared library: [libnsl.so.1]
 0x00000001 (NEEDED)                     Shared library: [libdl.so.2]
 0x00000001 (NEEDED)                     Shared library: [librt.so.1]
 0x00000001 (NEEDED)                     Shared library: [libz.so.1]
 0x00000001 (NEEDED)                     Shared library: [libpthread.so.0]
 0x00000001 (NEEDED)                     Shared library: [libgcc_s.so.1]
 0x0000000e (SONAME)                     Library soname: [libsmbclient.so.0]

Signed-off-by: Andreas Müller <schnitzeltony@googlemail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2012-12-27 16:14:22 +01:00
Fahad Usman
a623fd942f samba: disable avahi and build without acl
disable avahi and acl to avoid some random build failures. We do not want
samba to auto-detect the presence of avahi and/or acl, explicitly disabling
or enabling them guarantees a more predictable build process

Signed-off-by: Fahad Usman <fahad_usman@mentor.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2012-12-21 16:45:28 +01:00
Ting Liu
86c8f4503c samba: Fix build on Fedora 17
* Fedora 17 has /bin/perl, this causes samba build to put perl interpreter
  path as /bin/perl But we set perl location for target as /usr/bin/perl

* This mismatch of perl path causes failure of rootfs image creation:
  | error: Failed dependencies:
  | 	/bin/perl is needed by samba-3.6.8-r3.ppce5500

* MJ: fixed whitespaces

Signed-off-by: Ting Liu <b28495@freescale.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2012-12-16 21:11:43 +01:00
Marcin Juszkiewicz
1ec00cda95 samba: added gnu-configize for AArch64 support
Signed-off-by: Marcin Juszkiewicz <marcin.juszkiewicz@linaro.org>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2012-12-16 21:11:42 +01:00
Martin Jansa
47e94807f7 samba: remove empty /sbin
* fixes:
samba-3.6.8: samba: Files/directories were installed but not shipped
  /sbin

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2012-12-11 01:52:58 +01:00
Mario Domenech Goulart
69565759b6 samba: split winbind into winbind and libwinbind
Signed-off-by: Mario Domenech Goulart <mario@ossystems.com.br>
Signed-off-by: Koen Kooi <koen@dominion.thruhere.net>
2012-12-04 13:55:57 +01:00
Martin Jansa
7cec8502b3 samba: update waf-as-source.patch to apply
* and Applying patch waf-as-source.patch
  ...
  File buildtools/bin/waf-svn is not empty after patch; not deleting
  ...
  Patch waf-as-source.patch does not apply (enforce with -f)
  I've dropped this chunk and now it builds

* there is also WARNING about unpackaged but empty base_sbindir
  WARNING: QA Issue: samba: Files/directories were installed but not
  shipped
    /sbin
  created by do_install in samba.inc but used only when cifs is built,
  maybe we should remove it from samba.inc now

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2012-11-29 11:03:34 +01:00
Martin Jansa
1571c2c566 samba: update documentation2.patch to apply
* fails here because of non-ASCII characters:
ERROR: Command Error: exit status: 1  Output:
Applying patch documentation2.patch
patching file docs-xml/manpages-3/nmbd.8.xml
patching file docs-xml/manpages-3/samba.7.xml
patching file docs-xml/manpages-3/smb.conf.5.xml
patching file docs-xml/manpages-3/smbd.8.xml
patching file docs-xml/using_samba/appd.xml
patching file docs-xml/using_samba/ch01.xml
patching file docs-xml/using_samba/ch07.xml
patching file docs/htmldocs/manpages/nmbd.8.html
patching file docs/htmldocs/manpages/samba.7.html
patching file docs/htmldocs/manpages/smb.conf.5.html
patching file docs/htmldocs/manpages/smbd.8.html
patching file docs/manpages/nmbd.8
patching file docs/manpages/samba.7
patching file docs/manpages/smb.conf.5
patching file docs/manpages/smbd.8
patching file examples/tridge/smb.conf
patching file swat/lang/tr/help/welcome.html
Hunk #1 FAILED at 40.
Hunk #2 succeeded at 66 with fuzz 2.
1 out of 2 hunks FAILED -- rejects in file swat/lang/tr/help/welcome.html
Patch documentation2.patch does not apply (enforce with -f)
ERROR: Function failed: patch_do_patch
ERROR: Logfile of failure stored in: /OE/jansa-test/shr-core/tmp-eglibc/work/armv4t-oe-linux-gnueabi/samba-3.6.8-r0/temp/log.do_patch.2937

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2012-10-26 13:00:24 +02:00
Otavio Salvador
be304441d8 samba: update to version 3.6.8
Signed-off-by: Koen Kooi <koen@dominion.thruhere.net>
2012-10-24 08:29:45 +02:00
Koen Kooi
bd9ec602b9 samba: blacklist another python entry that leads to host contamination
Signed-off-by: Koen Kooi <koen@dominion.thruhere.net>
2012-01-23 15:53:12 +01:00
Richard Purdie
06ad2a21f2 samba: Force python disabled for now to avoid host contamination
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2011-12-16 08:43:43 +01:00
Koen Kooi
afd7025670 samba 3.5.6: import from OE rev a54456425ea3ce4c7cdfa958cec3ba34539cfeec
Signed-off-by: Koen Kooi <koen@dominion.thruhere.net>
2011-06-13 14:37:53 +02:00