[pkgsrc/trunk]: pkgsrc/net/samba4 Update to 4.6.2

[ryoon <ryoon%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/06d3936b1666
branches:  trunk
changeset: 360799:06d3936b1666
user:      ryoon <ryoon%pkgsrc.org@localhost>
date:      Sat Apr 08 08:56:27 2017 +0000

description:
Update to 4.6.2

* Use internal heimdal

Changelog:
Changes since 4.6.1:
--------------------

o  Jeremy Allison <jra%samba.org@localhost>
   * BUG 12721: Fix regression with "follow symlinks = no".

Changes since 4.6.0:
--------------------

o  Jeremy Allison <jra%samba.org@localhost>
   * BUG 12496: CVE-2017-2619: Symlink race permits opening files outside share
     directory.

o  Ralph Boehme <slow%samba.org@localhost>
   * BUG 12496: CVE-2017-2619: Symlink race permits opening files outside share
     directory.

CHANGES SINCE 4.6.0rc4
======================

o  Jeremy Allison <jra%samba.org@localhost>
   * BUG 12592: Fix several issues found by covscan.
   * BUG 12608: s3: smbd: Restart reading the incoming SMB2 fd when the send
     queue is drained.

o  Ralph Boehme <slow%samba.org@localhost>
   * BUG 12427: vfs_fruit doesn't work with fruit:metadata=stream.
   * BUG 12526: vfs_fruit: Only veto AppleDouble files if "fruit:resource" is
     set to "file".
   * BUG 12604: vfs_fruit: Enabling AAPL extensions must be a global switch.

o  Volker Lendecke <vl%samba.org@localhost>
   * BUG 12612: Re-enable token groups fallback.

o  Stefan Metzmacher <metze%samba.org@localhost>
   * BUG 9048: Samba4 ldap error codes.
   * BUG 12557: gensec:spnego: Add debug message for the failed principal.
   * BUG 12605: s3:winbindd: Fix endless forest trust scan.
   * BUG 12612: winbindd: Find the domain based on the sid within
     wb_lookupusergroups_send().

o  Andreas Schneider <asn%samba.org@localhost>
   * BUG 12557: s3:librpc: Handle gss_min in gse_get_client_auth_token()
     correctly.
   * BUG 12582: idmap_hash: Add a deprecation message, improve the idmap_hash
     manpage.
   * BUG 12592: Fix several issues found by covscan.

o  Martin Schwenke <martin%meltin.net@localhost>
   * BUG 12592: ctdb-logging: CID 1396883 Dereference null return value
     (NULL_RETURNS).


CHANGES SINCE 4.6.0rc3
======================

o  Jeremy Allison <jra%samba.org@localhost>
   * BUG 12545: s3: rpc_server/mdssvc: Add attribute "kMDItemContentType".
   * BUG 12572: s3: smbd: Don't loop infinitely on bad-symlink resolution.

o  Ralph Boehme <slow%samba.org@localhost>
   * BUG 12490: vfs_fruit: Correct Netatalk metadata xattr on FreeBSD.
   * BUG 12536: s3/smbd: Check for invalid access_mask
     smbd_calculate_access_mask().
   * BUG 12591: vfs_streams_xattr: use fsp, not base_fsp.

o  Amitay Isaacs <amitay%gmail.com@localhost>
   * BUG 12580: ctdb-common: Fix use-after-free error in comm_fd_handler().
   * BUG 12595: build: Fix generation of CTDB manpages while creating tarball.

o  Bryan Mason <bmason%redhat.com@localhost>
   * BUG 12575: Modify smbspool_krb5_wrapper to just fall through to smbspool if
     AUTH_INFO_REQUIRED is not set or is not "negotiate".

o  Stefan Metzmacher <metze%samba.org@localhost>
   * BUG 11830: s3:winbindd: Try a NETLOGON connection with noauth over NCACN_NP
     against trusted domains.
   * BUG 12262: 'net ads testjoin' and smb access fails after winbindd changed the
     trust password.
   * BUG 12585: librpc/rpc: fix regression in
     NT_STATUS_RPC_ENUM_VALUE_OUT_OF_RANGE error mapping.
   * BUG 12586: netlogon_creds_cli_LogonSamLogon doesn't work without
     netr_LogonSamLogonEx.
   * BUG 12587: winbindd child segfaults on connect to an NT4 domain.
   * BUG 12588: s3:winbindd: Make sure cm_prepare_connection() only returns OK
     with a valid tree connect.
   * BUG 12598: winbindd (as member) requires kerberos against trusted ad domain,
     while it shouldn't.
   * BUG 12601: Backport pytalloc_GenericObject_reference() related changes to
     4.6.

o  Garming Sam <garming%catalyst.net.nz@localhost>
   * BUG 12600: dbchecker: Stop ignoring linked cases where both objects are
     alive.

o  Andreas Schneider <asn%samba.org@localhost>
   * BUG 12571: s3-vfs: Only walk the directory once in open_and_sort_dir().

o  Martin Schwenke <martin%meltin.net@localhost>
   * BUG 12589: CTDB statd-callout does not cause grace period when
     CTDB_NFS_CALLOUT="".
   * BUG 12595: ctdb-build: Fix RPM build.


CHANGES SINCE 4.6.0rc2
======================

o  Jeremy Allison <jra%samba.org@localhost>
   * BUG 12499: s3: vfs: dirsort doesn't handle opendir of "." correctly.
   * BUG 12546: s3: VFS: vfs_streams_xattr.c: Make streams_xattr_open() store
     the same path as streams_xattr_recheck().
   * BUG 12531: Make vfs_shadow_copy2 cope with server changing directories.

o  Andrew Bartlett <abartlet%samba.org@localhost>
   * BUG 12543: samba-tool: Correct handling of default value for use_ntvfs and
     use_xattrs.
   * BUG 12573: Samba < 4.7 does not know about compatibleFeatures and
     requiredFeatures.
   * BUG 12577: 'samba-tool dbcheck' gives errors on one-way links after a
     rename.

o  Ralph Boehme <slow%samba.org@localhost>
   * BUG 12184: s3/rpc_server: Shared rpc modules loading.
   * BUG 12520: Ensure global "smb encrypt = off" is effective.
   * BUG 12524: s3/rpc_server: Move rpc_modules.c to its own subsystem.
   * BUG 12541: vfs_fruit: checks wrong AAPL config state and so always uses
     readdirattr.

o  Volker Lendecke <vl%samba.org@localhost>
   * BUG 12551: smbd: Fix "map acl inherit" = yes.

o  Stefan Metzmacher <metze%samba.org@localhost>
   * BUG 12398: Replication with DRSUAPI_DRS_CRITICAL_ONLY and
     DRSUAPI_DRS_GET_ANC results in WERR_DS_DRA_MISSING_PARENT S
   * BUG 12540: s3:smbd: allow "server min protocol = SMB3_00" to go via "SMB
     2.???" negprot.

o  John Mulligan <jmulligan%nasuni.com@localhost>
   * BUG 12542: docs: Improve description of "unix_primary_group" parameter in
     idmap_ad manpage.

o  Andreas Schneider <asn%samba.org@localhost>
   * BUG 12552: waf: Do not install the unit test binary for krb5samba.

o  Amitay Isaacs <amitay%gmail.com@localhost>
   * BUG 12547: ctdb-build: Install CTDB tests correctly from toplevel.
   * BUG 12549: ctdb-common: ioctl(.. FIONREAD ..) returns an int value.

o  Garming Sam <garming%catalyst.net.nz@localhost>
   * BUG 12577: 'samba-tool dbcheck' gives errors on one-way links after a
     rename.

o  Uri Simchoni <uri%samba.org@localhost>
   * BUG 12529: waf: Backport finding of pkg-config.


CHANGES SINCE 4.6.0rc1
======================

o  Amitay Isaacs <amitay%gmail.com@localhost>
   * BUG 12469: CTDB lock helper getting stuck trying to lock a record.
   * BUG 12500: ctdb-common: Fix a bug in packet reading code for generic socket
     I/O.
   * BUG 12510: sock_daemon_test 4 crashes with SEGV.
   * BUG 12513: ctdb-daemon: Remove stale eventd socket.

o  Bj?rn Jacke <bj%sernet.de@localhost>
   * BUG 12535: vfs_default: Unlock the right file in copy chunk.

o  Volker Lendecke <vl%samba.org@localhost>
   * BUG 12509: messaging: Fix dead but not cleaned-up-yet destination sockets.
   * BUG 12538: Backport winbind fixes.

o  Stefan Metzmacher <metze%samba.org@localhost>
   * BUG 12501: s3:winbindd: talloc_steal the extra_data in
     winbindd_list_users_recv().

o  Martin Schwenke <martin%meltin.net@localhost>
   * BUG 12511: ctdb-takeover: Handle case where there are no RELEASE_IPs to
     send.
   * BUG 12512: ctdb-scripts: Fix remaining uses of "ctdb gratiousarp".
   * BUG 12516: ctdb-scripts: /etc/iproute2/rt_tables gets populated with multiple
     'default' entries.

diffstat:

 net/samba4/Makefile                                                  |   15 +-
 net/samba4/PLIST                                                     |  323 +++++++--
 net/samba4/distinfo                                                  |   14 +-
 net/samba4/options.mk                                                |    9 +-
 net/samba4/patches/patch-lib_param_loadparm.h                        |    8 +-
 net/samba4/patches/patch-source3_script_tests_test__smbclient__s3.sh |   13 +-
 6 files changed, 267 insertions(+), 115 deletions(-)

diffs (truncated from 856 to 300 lines):

diff -r dba568cdcaa1 -r 06d3936b1666 net/samba4/Makefile
--- a/net/samba4/Makefile       Sat Apr 08 07:45:29 2017 +0000
+++ b/net/samba4/Makefile       Sat Apr 08 08:56:27 2017 +0000
@@ -1,7 +1,6 @@
-# $NetBSD: Makefile,v 1.27 2017/02/12 06:25:53 ryoon Exp $
+# $NetBSD: Makefile,v 1.28 2017/04/08 08:56:27 ryoon Exp $
 
 DISTNAME=      samba-${VERSION}
-PKGREVISION=   6
 CATEGORIES=    net
 MASTER_SITES=  http://download.samba.org/pub/samba/stable/
 
@@ -12,8 +11,8 @@
 
 DEPENDS+=      ${PYPKGPREFIX}-expat-[0-9]*:../../textproc/py-expat
 
-VERSION=       4.3.11
-CONFLICTS+=    ja-samba-[0-9]* pam-smbpass-[0-9]* tdb-[0-9]* winbind-[0-9]*
+VERSION=       4.6.2
+CONFLICTS+=    ja-samba-[0-9]* tdb-[0-9]* winbind-[0-9]*
 
 BUILD_DEPENDS+=        ${PYPKGPREFIX}-expat-[0-9]*:../../textproc/py-expat
 DEPENDS+=      ${PYPKGPREFIX}-iso8601-[0-9]*:../../time/py-iso8601
@@ -87,10 +86,8 @@
 CONFIGURE_ARGS+=       --with-privileged-socket-dir=${SMB_PRIVSOCKETS}
 CONFIGURE_ARGS+=       --with-configdir=${SMB_CONFIG}
 CONFIGURE_ARGS+=       --with-libiconv=${BUILDLINK_PREFIX.iconv}
-CONFIGURE_ARGS+=       --with-gettext=${BUILDLINK_PREFIX.gettext}
 #CONFIGURE_ARGS+=      --bundled-libraries=com_err
 CONFIGURE_ARGS+=       --enable-gnutls
-CONFIGURE_ARGS+=       --with-system-mitkrb5
 CONFIGURE_ARGS+=       --abi-check-disable
 #CONFIGURE_ARGS+=      --bundled-libraries=!crypto,ldb,ntdb,talloc,tdb,tevent
 .if defined(MAKE_JOBS) && !empty(MAKE_JOBS) && !(defined(MAKE_JOBS_SAFE) && !empty(MAKE_JOBS_SAFE:M[nN][oO]))
@@ -145,7 +142,8 @@
 
 SUBST_CLASSES+=                paths
 SUBST_MESSAGE.paths=   Fixing paths.
-SUBST_FILES.paths=     ${WRKDIR}/adduser.sh ${WRKDIR}/deluser.sh
+SUBST_FILES.paths=     ${WRKDIR}/adduser.sh ${WRKDIR}/deluser.sh scripts/findsmb.in
+SUBST_FILES.paths+=    source3/script/findsmb.in
 SUBST_STAGE.paths=     post-patch
 SUBST_SED.paths+=      -e 's,@AWK@,${AWK},g'
 SUBST_SED.paths+=      -e 's,@CAT@,${CAT},g'
@@ -153,6 +151,7 @@
 SUBST_SED.paths+=      -e 's,@RM@,${RM},g'
 SUBST_SED.paths+=      -e 's,@PWD_MKDB@,${PWD_MKDB},g'
 SUBST_SED.paths+=      -e 's,@SH@,${SH},g'
+SUBST_SED.paths+=      -e 's,@PERL@,${PERL5},g'
 
 SUBST_CLASSES+=                logpath
 SUBST_MESSAGE.logpath= Fixing log path.
@@ -202,6 +201,4 @@
 .include "../../devel/readline/buildlink3.mk"
 .include "../../devel/zlib/buildlink3.mk"
 .include "../../security/gnutls/buildlink3.mk"
-BUILDLINK_API_DEPENDS.mit-krb5+=       mit-krb5>=1.9.0
-.include "../../security/mit-krb5/buildlink3.mk"
 .include "../../mk/bsd.pkg.mk"
diff -r dba568cdcaa1 -r 06d3936b1666 net/samba4/PLIST
--- a/net/samba4/PLIST  Sat Apr 08 07:45:29 2017 +0000
+++ b/net/samba4/PLIST  Sat Apr 08 08:56:27 2017 +0000
@@ -1,7 +1,8 @@
-@comment $NetBSD: PLIST,v 1.10 2016/08/15 12:05:24 richard Exp $
+@comment $NetBSD: PLIST,v 1.11 2017/04/08 08:56:27 ryoon Exp $
 bin/cifsdd
 bin/dbwrap_tool
 bin/eventlogadm
+bin/findsmb
 bin/gentest
 bin/ldbadd
 bin/ldbdel
@@ -11,6 +12,7 @@
 bin/ldbsearch
 bin/locktest
 bin/masktest
+bin/mvxattr
 bin/ndrdump
 bin/net
 bin/nmblookup
@@ -24,6 +26,7 @@
 bin/regshell
 bin/regtree
 bin/rpcclient
+bin/samba-tool
 bin/sharesec
 bin/smbcacls
 bin/smbclient
@@ -33,7 +36,6 @@
 bin/smbpasswd
 bin/smbspool
 bin/smbstatus
-bin/smbta-util
 bin/smbtar
 bin/smbtorture
 bin/smbtree
@@ -51,29 +53,22 @@
 include/core/werror.h
 include/credentials.h
 include/dcerpc.h
-include/dlinklist.h
+include/dcerpc_server.h
 include/domain_credentials.h
 include/gen_ndr/atsvc.h
 include/gen_ndr/auth.h
 include/gen_ndr/dcerpc.h
 include/gen_ndr/drsblobs.h
 include/gen_ndr/drsuapi.h
-include/gen_ndr/epmapper.h
 include/gen_ndr/krb5pac.h
 include/gen_ndr/lsa.h
-include/gen_ndr/mgmt.h
 include/gen_ndr/misc.h
 include/gen_ndr/nbt.h
 include/gen_ndr/ndr_atsvc.h
-include/gen_ndr/ndr_atsvc_c.h
 include/gen_ndr/ndr_dcerpc.h
 include/gen_ndr/ndr_drsblobs.h
 include/gen_ndr/ndr_drsuapi.h
-include/gen_ndr/ndr_epmapper.h
-include/gen_ndr/ndr_epmapper_c.h
 include/gen_ndr/ndr_krb5pac.h
-include/gen_ndr/ndr_mgmt.h
-include/gen_ndr/ndr_mgmt_c.h
 include/gen_ndr/ndr_misc.h
 include/gen_ndr/ndr_nbt.h
 include/gen_ndr/ndr_samr.h
@@ -85,11 +80,6 @@
 include/gen_ndr/security.h
 include/gen_ndr/server_id.h
 include/gen_ndr/svcctl.h
-include/gensec.h
-include/ldap-util.h
-include/ldap_errors.h
-include/ldap_message.h
-include/ldap_ndr.h
 include/ldb_wrap.h
 include/libsmbclient.h
 include/lookup_sid.h
@@ -98,49 +88,24 @@
 include/ndr/ndr_dcerpc.h
 include/ndr/ndr_drsblobs.h
 include/ndr/ndr_drsuapi.h
+include/ndr/ndr_krb5pac.h
 include/ndr/ndr_nbt.h
 include/ndr/ndr_svcctl.h
 include/netapi.h
 include/param.h
 include/passdb.h
 include/policy.h
-include/pytalloc.h
-include/read_smb.h
-include/registry.h
-include/roles.h
 include/rpc_common.h
 include/samba/session.h
 include/samba/version.h
-include/samba_util.h
 include/share.h
-include/smb2.h
-include/smb2_constants.h
-include/smb2_create_blob.h
-include/smb2_lease.h
 include/smb2_lease_struct.h
-include/smb2_signing.h
-include/smb_cli.h
-include/smb_cliraw.h
-include/smb_common.h
-include/smb_composite.h
-include/smb_constants.h
 ${PLIST.ldap}include/smb_ldap.h
-include/smb_raw.h
-include/smb_raw_interfaces.h
-include/smb_raw_signing.h
-include/smb_raw_trans2.h
-include/smb_request.h
-include/smb_seal.h
-include/smb_signing.h
-include/smb_unix_ext.h
-include/smb_util.h
 include/smbconf.h
 ${PLIST.ldap}include/smbldap.h
 include/tdr.h
-include/torture.h
 include/tsocket.h
 include/tsocket_internal.h
-include/tstream_smbXcli_np.h
 include/util/attr.h
 include/util/blocking.h
 include/util/byteorder.h
@@ -160,24 +125,20 @@
 include/util/tevent_unix.h
 include/util/tevent_werror.h
 include/util/time.h
-include/util/xfile.h
 include/util_ldb.h
 include/wbclient.h
-lib/libdcerpc-atsvc.so
-lib/libdcerpc-atsvc.so.0
-lib/libdcerpc-atsvc.so.0.0.1
 lib/libdcerpc-binding.so
 lib/libdcerpc-binding.so.0
 lib/libdcerpc-binding.so.0.0.1
 lib/libdcerpc-samr.so
 lib/libdcerpc-samr.so.0
 lib/libdcerpc-samr.so.0.0.1
+lib/libdcerpc-server.so
+lib/libdcerpc-server.so.0
+lib/libdcerpc-server.so.0.0.1
 lib/libdcerpc.so
 lib/libdcerpc.so.0
 lib/libdcerpc.so.0.0.1
-lib/libgensec.so
-lib/libgensec.so.0
-lib/libgensec.so.0.0.1
 lib/libndr-krb5pac.so
 lib/libndr-krb5pac.so.0
 lib/libndr-krb5pac.so.0.0.1
@@ -189,22 +150,21 @@
 lib/libndr-standard.so.0.0.1
 lib/libndr.so
 lib/libndr.so.0
-lib/libndr.so.0.0.5
+lib/libndr.so.0.0.8
 lib/libnetapi.so
 lib/libnetapi.so.0
 lib/libnss_winbind.so
-lib/libregistry.so
-lib/libregistry.so.0
-lib/libregistry.so.0.0.1
 lib/libsamba-credentials.so
 lib/libsamba-credentials.so.0
 lib/libsamba-credentials.so.0.0.1
+lib/libsamba-errors.so
+lib/libsamba-errors.so.1
 lib/libsamba-hostconfig.so
 lib/libsamba-hostconfig.so.0
 lib/libsamba-hostconfig.so.0.0.1
 lib/libsamba-passdb.so
 lib/libsamba-passdb.so.0
-lib/libsamba-passdb.so.0.24.1
+lib/libsamba-passdb.so.0.26.0
 lib/libsamba-policy.so
 lib/libsamba-policy.so.0
 lib/libsamba-policy.so.0.0.1
@@ -214,9 +174,6 @@
 lib/libsamdb.so
 lib/libsamdb.so.0
 lib/libsamdb.so.0.0.1
-lib/libsmbclient-raw.so
-lib/libsmbclient-raw.so.0
-lib/libsmbclient-raw.so.0.0.1
 lib/libsmbclient.so
 lib/libsmbclient.so.0
 lib/libsmbclient.so.0.2.3
@@ -227,12 +184,9 @@
 lib/libtevent-util.so
 lib/libtevent-util.so.0
 lib/libtevent-util.so.0.0.1
-lib/libtorture.so
-lib/libtorture.so.0
-lib/libtorture.so.0.0.1
 lib/libwbclient.so
 lib/libwbclient.so.0
-lib/libwbclient.so.0.12
+lib/libwbclient.so.0.13
 ${PERL5_SUB_INSTALLVENDORLIB}/Parse/Pidl.pm
 ${PERL5_SUB_INSTALLVENDORLIB}/Parse/Pidl/CUtil.pm
 ${PERL5_SUB_INSTALLVENDORLIB}/Parse/Pidl/Compat.pm
@@ -260,24 +214,21 @@
 ${PERL5_SUB_INSTALLVENDORLIB}/Parse/Pidl/Wireshark/NDR.pm
 ${PERL5_SUB_INSTALLVENDORLIB}/Parse/Yapp/Driver.pm
 lib/pkgconfig/dcerpc.pc
-lib/pkgconfig/dcerpc_atsvc.pc
 lib/pkgconfig/dcerpc_samr.pc
-lib/pkgconfig/gensec.pc
+lib/pkgconfig/dcerpc_server.pc
 lib/pkgconfig/ndr.pc
 lib/pkgconfig/ndr_krb5pac.pc
 lib/pkgconfig/ndr_nbt.pc
 lib/pkgconfig/ndr_standard.pc
 lib/pkgconfig/netapi.pc
-lib/pkgconfig/registry.pc
 lib/pkgconfig/samba-credentials.pc
 lib/pkgconfig/samba-hostconfig.pc
 lib/pkgconfig/samba-policy.pc
 lib/pkgconfig/samba-util.pc
 lib/pkgconfig/samdb.pc
-lib/pkgconfig/smbclient-raw.pc
 lib/pkgconfig/smbclient.pc
-lib/pkgconfig/torture.pc
 lib/pkgconfig/wbclient.pc
+${PYSITELIB}/_ldb_text.py
 ${PYSITELIB}/_tdb_text.py
 ${PYSITELIB}/_tevent.so
 ${PYSITELIB}/ldb.so
@@ -322,9 +273,11 @@
 ${PYSITELIB}/samba/dcerpc/winreg.so
 ${PYSITELIB}/samba/dcerpc/wkssvc.so
 ${PYSITELIB}/samba/dcerpc/xattr.so