Samba4 is an attempt to implement an Active Directory compatible Domain
Controller.
In short, you can join a WinNT, Win2000, WinXP or Win2003 member server
to a Samba4 domain, and it will behave much as it does in AD, including
Kerberos domain logins where applicable.
WWW: http://www.samba.org/
===> The following configuration options are available for samba45-4.5.16_1:
ADS=on: Active Directory client support(implies LDAP)
AD_DC=on: Active Directory Domain Controller support
CUPS=off: CUPS printing system support
DEBUG=on: Build with debugging support
DEVELOPER=off: With development support(implies NTVFS)
DOCS=on: Build and/or install documentation
EXP_MODULES=off: Experimental modules(WANT_EXP_MODULES)
FAM=on: File Alteration Monitor support
LDAP=on: LDAP client support
MANPAGES=off: Build manpages from DOCBOOK templates
NTVFS=off: Build *DEPRECATED* NTVFS file server
QUOTAS=on: Disk quota support
SYSLOG=on: Syslog logging support
UTMP=on: UTMP accounting support
====> Options available for the radio DNS: you can only select none or one of them
NSUPDATE=off: Use samba NSUPDATE utility for AD DC
BIND99=off: Use Bind 9.9 as AD DC DNS server frontend
BIND910=off: Use Bind 9.10 as AD DC DNS server frontend
BIND911=off: Use Bind 9.11 as AD DC DNS server frontend
====> Options available for the radio ZEROCONF: you can only select none or one of them
AVAHI=off: Zeroconf support via Avahi
MDNSRESPONDER=off: Zeroconf support via mDNSResponder
===> Use 'make config' to modify these settings
Security update for samba45, samba46, samba47 ports to address CVE-2018-1050 and
CVE-2018-1057.
As AD DC doesn't work in samba46 and was broken again in samba 4.7.4 - the
attack vector is quite narrow.
Security: CVE-2018-1050
CVE-2018-1057
Sponsored by: iXsystems Inc.
Convert Python ports to FLAVORS.
Ports using USE_PYTHON=distutils are now flavored. They will
automatically get flavors (py27, py34, py35, py36) depending on what
versions they support.
There is also a USE_PYTHON=flavors for ports that do not use distutils
but need FLAVORS to be set. A USE_PYTHON=noflavors can be set if
using distutils but flavors are not wanted.
A new USE_PYTHON=optsuffix that will add PYTHON_PKGNAMESUFFIX has been
added to cope with Python ports that did not have the Python
PKGNAMEPREFIX but are flavored.
USES=python now also exports a PY_FLAVOR variable that contains the
(Only the first 15 lines of the commit message are shown above )
Update Samba4 ports to 4.6.8, 4.5.14 and 4.4.16 respectivelly to address
security flaws:
o CVE-2017-12150 (SMB1/2/3 connections may not require signing where
they should)
o CVE-2017-12151 (SMB3 connections don't keep encryption across DFS
redirects)
o CVE-2017-12163 (Server memory information leak over SMB1)
Security: CVE-2017-12150
CVE-2017-12151
CVE-2017-12163
Samba 4.6.6, 4.5.12 and 4.4.15 Security update for the CVE-2017-11103: Orpheus'
Lyre KDC-REP service name validation in Heimdal
Security: CVE-2017-11103
Urgent upgrade of the Samba 4.[4-6] ports to address RCE in the Samba
code(CVE-2017-7494). All versions starting from 3.5+ are affected.
Security: CVE-2017-7494
Upgrade Samba4[4-6] ports to fix regression with "follow symlinks = no". Remove
dependency from the external p5-Parse-Pidl as it may break provisioning(and
more).
PR: 218255
Few libraries were missing from the plist, breaking AC_DC. Also, apparently,
upstream also forgot to link few libraries with the libsamba-debug-samba4.so,
breaking those as well.
