Commit graph

13 commits

Author SHA1 Message Date
tonnerre
3d1f9265d2 Update OpenAFS to version 1.4.6, fixing CVE-2007-6599 (and nothing else). 2008-07-13 19:10:41 +00:00
gendalia
a9fb92f278 Updated OpenAFS to 1.4.5. conditionalized several of the options.
Fixed a couple of files, in theory should work on NetBSD 3.x & 4.x, and
i386 & amd64 now.

OpenAFS Release Notes - Version 1.4.5
_________________________________________________________________
All systems:
- fileserver address tracking is improved to avoid potentially merging
  unrelated hosts.
- Documentation updates.
- namei fileserver now does fsync()s in background batches for performance
  improvements.
- Kerberos ticket support corrected in bundled Kerberos 4 utilities on 64
  bit platforms.
- fileserver includes limited per-host thread quota support to avoid
  resource starvation.
- fileserver deals with more types of damaged volumes without asserting.
- vos validates dumpfiles before attempting restores.
- vos clone will no longer potentially delete the parent volume.
- Client no longer permits empty UUID to be created.
- fs uuid command for checking, regenerating UUID added.
- Updates for gcc 4.2.
- fileserver treats w (write) permission as granting read lock permission
  in addition to write.
2007-10-27 09:11:10 +00:00
gendalia
44a4820529 Update OpenAFS from 1.4.1 to 1.4.4.
Changes:
* Security bugfix:
- SetUID is no longer honored for the local cell by default. The
   "fs setcellstatus" command must be issued for any cell the system
   administrator wishes to allow setuid files in.
>From 1.4.3:
All unix systems:
- Fix Universal AFS Error mapping when the local OS does not define some
   errors.
- Avoid byte range locking for java when it means to ask for a whole file
   lock but uses a -1 length.
- Reinit resolver library on afsdb failure.
All systems:
- Make rxdebug be less aggressive when retransmitting.
- Allow unix domain socket for fileserver-volserver communication.
- Fix server fake address support when NetRestrict is being used.
- Fix crash when 3.4 jumbograms are part of an Rx connection.
- Fix crashes in pts chown and pts rename.
- Make asetkey buildable with Heimdal.
- Avoid potential orphaned files during vos restore.
- Improve ubik debug logging.
- Add vldb repair tool.
- Avoid potential bosserver process list corruption.
- Revert to previous fileserver startup attachment order.

>From 1.4.2:
All systems:
* Volume dump parsing code in the volserver has better error checking.
* salvager has improved damaged volume handling on namei fileservers.
* fileserver has size validity checks for when large file support is
   disabled.
* fileserver avoids potentially multiply adding a host to its hash table.
* rxkad client private data storage is allocated dynamically on ticket size.
* Handle universal error code translation for file locking.
* fileserver needs to swap callback connections on a client IP change.
* fileserver host package revised to reduce lock contention.
* Rx has been fixed to count hard acks, thus opening the congestion window.
* All servers support bound Rx sockets (on one interface).
* namei fileserver no longer use lockf() to avoid range locking issues.
* most binaries now support the -version switch.
* backup suite fixes for 64 bit platforms.
* volserver avoids holding holds during volume purges.
* volserver avoids losing files on namei during vos zap.

> Since 1.4.1:
All systems:
  * Fix rx usage of WSAStartup/WSACleanup
  * Fix the code that writes the backconnectionhostnames value
    to ensure that the data buffer is written with the correct
    length.
  * Do not panic if the maximum number of volume entries are in use
    and one of them can be recycled.
  * Add a missing lock that was lost during the pullup
    of patchs for 1.4.1c
  * Fix the pthread library so that it can be loaded
    and unloaded safely by an application.
2007-03-21 04:29:29 +00:00
gendalia
aca179b23f Update to OpenAFS 1.4.1 from 1.4.0.
Changes from 1.4.0:
All systems:

- Several race conditions in the host tracking and handling in the fileserver
  which could cause inconsistent behavior and crashes have been fixed.

- A fileserver bug where a reference to a volume could be leaked and later
  cause a deadlock as a result of a bulk status call

- Reference counting of fileserver objects in unsigned 32 bit integers
  instead of signed 16 bit integers.

- Avoid type mismatches when handling time values (betweemn 32 bit and 64 bit
  variables).

- Fix a memory leak during multilevel packet queue handling.

- Audit log output had been updated to include FIDs for newly created files.

- asetkey is now included to ease Kerberos 5 integration for server
  administrators.

- A new fileserver statistics collection including callback statistics was
  added.

- man pages are now generated.
2006-04-29 05:48:25 +00:00
gendalia
d93405976c add patch to deal with statvfs not being in 2.1.
(NetBSD Version 299000000, not 200040000
2005-11-04 07:20:32 +00:00
gendalia
62f2db7cb2 Update openafs to release 1.4.0.
The OpenAFS Gatekeepers are pleased to announce the release of version
1.4.0 of OpenAFS. This version incorporates hundreds of enhancements
and improvements since the 1.2 series. Many bugs and programming
inefficiencies (some of which have been present since IBM's donation
of AFS to the open source community) have been eliminated, resulting
in a much more stable product. Improvements for Windows users are
particularly dramatic.

OpenAFS 1.4.0 also represents a significant step forward for Kerberos 5
integration.  This release allows Kerberos 5 KDCs including Microsoft
Active Directory to be the source of AFS client authentication.

Changes under UNIX (tm) and *nix Operating Systems
- --------------------------------------------------
Increased Performance and Stability:

The addition of pthreaded servers and thread optimizations in the
RPC and RX libraries provide increased performance over the 1.2
release.  Cache chunk locking has been refined, and native operating
system vnodes on Linux and MacOS X are now supported. Support for files
larger than two Gigabytes in the AFS file system is now available to
operating systems providing native support for large files.  ntp,
rlogind, rsh and other unnecessary and potentially insecure services
have been removed.

Increased Server Efficiency in Handling Mobile Clients:

Use of multi-host probing has been improved, reducing the time a
server needs to timeout clients no longer accessible on the network.
Server load is reduced by new functionality allowing servers to queue
callback notifications for unreachable clients until the client contacts
the server.

Improved Administration:

Audit logs are available for all servers augmenting existing server
monitoring and debugging tools.  All logs can be output to named pipes
allowing organizations to deploy custom filters.  Groups of groups
(a.k.a. Supergroups) can now be created on the protection server
providing additional flexibility in the administration of user access.
The Kerberos 5 authentication tool, aklog, is now distributed as part
of OpenAFS.

Other New Features:

The new "vos copy" command allows an administrator to create a new
volume and copy the contents of an existing volume in one step.  This
eliminates the need to perform a "vos dump" followed by a "vos restore".

The "vos convertROtoRW" command allows an administrator to convert an
existing RO replica into a new RW site in the event the current RW site
is down.

The -vattachpar file server option reduces file server startup time by
instructing the file server to attach volumes from multiple vice
partitions in parallel.
2005-11-02 14:42:38 +00:00
adam
d380d210b2 PLIST corrected, disable debug, enable pkgsrc optimisation 2005-08-11 08:48:04 +00:00
gendalia
8a10a5282f Update OpenAFS to 1.3.87.
For UNIX, 1.3.87 is the latest version in the 1.4 release cycle.
It includes several Linux client fixes as well as portability changes.

For UNIX, 1.3.86 is the latest version in the 1.4 release cycle.
It includes several Linux client fixes as well as portability changes.

http://openafs.org/frameset/dl/openafs/1.3.87/ChangeLog
2005-08-10 19:14:16 +00:00
gendalia
260bf38c0c Update openafs to 1.3.85.
For UNIX, 1.3.85 is the latest version in the 1.4 release cycle.
Notable recent improvements are included in Linux 2.4 client support,
several race condition fixes in the fileserver, and audit logging for all
servers on all platforms.
2005-07-12 20:11:42 +00:00
gendalia
219ac34d5d Update OpenAFS to 1.3.84. They applied all the patches we were using, so
we can remove them.  Also set up the data directories in ${VARBASE} properly.

For UNIX, 1.3.84 is the latest version in the 1.4 release cycle.
Notable recent improvements are included in Linux 2.6 client support.
A bug affecting all kernel modules which was present in the released
1.3.83 is also fixed.
2005-06-06 17:08:20 +00:00
gendalia
9a67fe83c3 I really do need the checksum for my new patch 2005-05-27 16:44:01 +00:00
gendalia
b11b80a337 Update OpenAFS to 1.3.82, add PAM support to the package, and add patches
to OpenAFS for NetBSD PAM support.

OpenAFS release announcement information (Unix):
For UNIX, 1.3.82 is the latest version in the 1.4 release cycle.
Notable recent improvements are included in AIX 5 client support, Linux
2.6 client support, and Rx free packet handling in the fileserver.

Known remaining issues involve "dangling vnodes" at unmount time with the MacOS
10.3 client, a possible SMP MacOS 10.3 client issue, and a possible
largefile issue on Linux.
2005-05-25 22:09:39 +00:00
agc
a45f46212e Initial import of openafs-1.3.81 into the packages collection.
AFS is a distributed filesystem product, pioneered at Carnegie
	Mellon University and supported and developed as a product by
	Transarc Corporation (now IBM Pittsburgh Labs).  It offers a
	client-server architecture for file sharing, providing
	location independence, scalability and transparent migration
	capabilities for data.  IBM branched the source of the AFS
	product, and made a copy of the source available for community
	development and maintenance.  They called the release OpenAFS.
2005-05-03 19:30:40 +00:00