Searches without login should now work. You must get asked to click a button.
Port details
samba425Free SMB/CIFS and AD/DC server and client for Unix
4.25.1netΣ=1 Package not present on quarterly.This port was created during this quarter. It will be in the next quarterly branch but not the current one.
Samba4 is an attempt to implement an Active Directory compatible Domain
Controller.
In short, you can join a WinNT, Win2000, WinXP or Win 2003 - 2016 member
server to a Samba4 domain, and it will behave much as it does in AD,
including Kerberos domain logins where applicable.
===> The following configuration options are available for samba425-4.25.1:
ADS=on: Active Directory client
AD_DC=on: Active Directory Domain Controller(implies PYTHON3)
CLUSTER=off: Clustering support
CUPS=off: CUPS printing system support
DOCS=on: Build and/or install documentation
FAM=on: File Alteration Monitor
GPGME=off: GpgME support
LDAP=on: LDAP client
MANPAGES=on: Build and/or install manual pages
PROFILE=on: Profiling data
PYTHON3=on: Python 3.x bindings or support
QUOTAS=on: Disk quota support
SYSLOG=on: Syslog logging support
UTMP=on: UTMP accounting
====> Bundled dependencies
BUNDLED_CMOCKA=off: Bundle cmocka instead of depending on a standalone port
BUNDLED_TALLOC=off: Bundle talloc instead of depending on a standalone port
BUNDLED_TDB=off: Bundle TDB instead of depending on a standalone port
BUNDLED_TEVENT=off: Bundle Tevent instead of depending on a standalone port
====> Testing, debugging, and development
DEVELOPER=off: With developer framework
MEMORY_DEBUG=off: Debug memory allocator
TEST=off: Build and/or run tests
====> VFS modules
FRUIT=on: MacOSX and TimeMachine support
GLUSTERFS=off: GlusterFS support
====> GSSAPI Security API support: you have to select exactly one of them
GSSAPI_BUILTIN=on: GSSAPI support via bundled Heimdal
GSSAPI_MIT=off: GSSAPI support via security/krb5
====> Zero configuration networking: you have to select exactly one of them
AVAHI=on: Zeroconf support via Avahi
MDNSRESPONDER=off: Zeroconf support via mDNSResponder
ZEROCONF_NONE=off: Zeroconf support is absent
====> LMDB version to use: you can only select none or one of them
LMDB0=on: Use LMDB 0.9 library
LMDB1=off: Use LMDB 1.0 library
===> Use 'make config' to modify these settings
net/samba425: update to 4.25.1
* BUG 16274: CTDB: Cannot find device "<iface>@<link>": need to extract real
interface names
* BUG 16200: generate_unique_u64() may not protect against veto_value
* BUG 16261: Rename with ReplaceIfExists to a target differing only in case
creates a duplicate instead of replacing (regression in
* BUG 16263: Samba 4.25.0 fails to build on macOS
* BUG 16258: Python smbconf transaction_start() lacks a talloc stack frame
with CTDB
* BUG 16265: Linux i686 build fails on dynamic_lookup
* BUG 16276: Access control bypass via vfs_ceph_rgw case-insensitive open
(CVE-2026-109411)
* BUG 16287: vfs_acl_xattr crashes on zero-sized flistxattr queries
* BUG 16235: Dynamic interface support in smbd is racy
* BUG 16254: CTDB database operations can be run against incorrect nodes
* BUG 16273: A node can be banned because it tries to run recovery after
losing the cluster lock
* BUG 15857: All backend log should honor global log level "log level = "
* BUG 15324: fruit:time machine max size can only be set to an integer and is
ignored if user sets a float
Reported by: portscout
Sponsored by: Klara, Inc.
Approved by: samba (kiwi)
databases/lmdb: allow to install both 0.x and 1.x together
LMDB 1.0 and the legacy 0.9 ABI cannot be mixed, the datanase format are
incompatibles as well.
Rename or relocate everything databases/lmdb0 installs so that it no
longer overlaps with databases/lmdb:
- the utilities are now mdb_copy0, mdb_dump0, mdb_load0 and mdb_stat0
- the header is include/lmdb0/lmdb.h
- the linker name is liblmdb0.so, the shared object keeps its ABI name
liblmdb.so.0 so already linked programs are unaffected
- the pkg-config file is lmdb0.pc
A compatibility prefix holding the previous layout is also installed
under ${PREFIX}/lmdb0/ (include/, lib/ and libdata/pkgconfig/) so that
build systems which expect to find lmdb.h and -llmdb relative to a
single directory only need a path change.
Now all ports should migrate to lmdb 1.X and use the lmdb 0.9 port to ease
in the migration path, lmdb, the lmdb 0.x is supposed to get removed at
some point.
Approved by: mat (portmgr)
Reviewed by: mat
Differential Revision: https://reviews.freebsd.org/D60741
net/samba425: avoid SIGFPE in streams_xattr_get_ea_value_fsp
As reported in https://bugzilla.samba.org/show_bug.cgi?id=16278,
upstream commit 5fa43440ebd3 ("vfs: Implement larger streams in multiple
xattrs"), results in many signal 8 (SIGFPE) crashes in smbd child
processes on FreeBSD, if the streams_xattr vfs module is loaded.
This is because streams_xattr_get_ea_value_fsp() can divide by zero, if
the "max xattrs per stream" is left at its default value.
Apply the upstream fix to avoid the crashes.
PR: 299446
Obtained from: https://gitlab.com/samba-team/samba/-/commit/21f8b339
MFH: 2026Q4
Approved by: samba (kiwi)
net/samba425: restore missing get_quota vfstest command (cmd_vfs.c)
The combined patch adding a "get_quota" command to vfstest (present
identically in net/samba419, 420, 422, 423, and 424) touches two
files: source3/torture/cmd_vfs.c (the command implementation and its
vfs_commands[] registration) and source3/torture/wscript_build
(installs vfstest instead of building it selftest-only). Only the
wscript_build half survived into samba425 — the cmd_vfs.c half was
dropped.
Restored patch-source3_torture_cmd__vfs.c, adapted (not just copied
verbatim) to the real samba-4.25.0 upstream API: SMB_VFS_GET_QUOTA()
dropped its explicit conn parameter and now takes an fsp directly, and
the file resolution pattern changed from synthetic_smb_fname() to
synthetic_pathref()+smb_fname->fsp (mirroring the sibling
(Only the first 15 lines of the commit message are shown above )
net/samba425: restore missing FreeBSD mDNS/dns_sd support (MDNSRESPONDER)
Same gap identified for net/samba424: three FreeBSD-local patches
providing dns_sd/mDNSResponder support (present identically in
net/samba419, 420, 422, and 423) were missing, gated behind the
non-default MDNSRESPONDER port option (default is AVAHI).
- source3/wscript/wscript_build: restore the --enable-dnssd waf
option (dns_sd.h/DNSServiceRegister detection, WITH_DNSSD_SUPPORT
define, dns_sd library linkage into smbd_base and smbclient).
Regenerated against the real samba-4.25.0 upstream source (which
has diverged from 4.24.7 in these two files, e.g. ceph rgw and
rate-limiting daemon additions) rather than copied verbatim from
samba424.
- source3/smbd/dnsregister.c: restore the FreeNAS-authored mDNS
(Only the first 15 lines of the commit message are shown above )
