summaryrefslogtreecommitdiffstats
path: root/usr.sbin
Commit message (Collapse)AuthorAgeFilesLines
* Implement support for RPCSEC_GSS authentication to both the NFS clientdfr2008-11-037-40/+903
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | and server. This replaces the RPC implementation of the NFS client and server with the newer RPC implementation originally developed (actually ported from the userland sunrpc code) to support the NFS Lock Manager. I have tested this code extensively and I believe it is stable and that performance is at least equal to the legacy RPC implementation. The NFS code currently contains support for both the new RPC implementation and the older legacy implementation inherited from the original NFS codebase. The default is to use the new implementation - add the NFS_LEGACYRPC option to fall back to the old code. When I merge this support back to RELENG_7, I will probably change this so that users have to 'opt in' to get the new code. To use RPCSEC_GSS on either client or server, you must build a kernel which includes the KGSSAPI option and the crypto device. On the userland side, you must build at least a new libc, mountd, mount_nfs and gssd. You must install new versions of /etc/rc.d/gssd and /etc/rc.d/nfsd and add 'gssd_enable=YES' to /etc/rc.conf. As long as gssd is running, you should be able to mount an NFS filesystem from a server that requires RPCSEC_GSS authentication. The mount itself can happen without any kerberos credentials but all access to the filesystem will be denied unless the accessing user has a valid ticket file in the standard place (/tmp/krb5cc_<uid>). There is currently no support for situations where the ticket file is in a different place, such as when the user logged in via SSH and has delegated credentials from that login. This restriction is also present in Solaris and Linux. In theory, we could improve this in future, possibly using Brooks Davis' implementation of variant symlinks. Supporting RPCSEC_GSS on a server is nearly as simple. You must create service creds for the server in the form 'nfs/<fqdn>@<REALM>' and install them in /etc/krb5.keytab. The standard heimdal utility ktutil makes this fairly easy. After the service creds have been created, you can add a '-sec=krb5' option to /etc/exports and restart both mountd and nfsd. The only other difference an administrator should notice is that nfsd doesn't fork to create service threads any more. In normal operation, there will be two nfsd processes, one in userland waiting for TCP connections and one in the kernel handling requests. The latter process will create as many kthreads as required - these should be visible via 'top -H'. The code has some support for varying the number of service threads according to load but initially at least, nfsd uses a fixed number of threads according to the value supplied to its '-n' option. Sponsored by: Isilon Systems MFC after: 1 month
* Clamp the values of t_column to 5 digits in `pstat -t' and `show all ttys'.ed2008-11-011-1/+1
| | | | | | | | We often run into these very high column numbers when we run curses applications, because they don't print any newlines. This messes up the table output of `pstat -t'. If these numbers get really high, they aren't of any use to the reader anyway. Convert them to `99999' when they run out of bounds.
* - Whenever a password/shell is changed via rpc.yppasswdd, the daemon leavesrafan2008-10-301-0/+4
| | | | | | | | | | | | | one zombie process because it does not do the cleanup. For a long running NIS/YP server, it will have lots of zombie processes on it. Fix that by ignoring the SIGCHLD signal since we don't really care about the exit status in this case. PR: bin/91980 Reported by: Arjan van der Velde <dj_noresult at hotmail.com> Submitted by: Jui-Nan Lin" <jnlin at csie.nctu.edu.tw> Reviewed by: delphij MFC after: 1 month
* We do not have a libkse anymore and Mk/bsd.* does not knowbz2008-10-271-1/+1
| | | | about LIBKSE anymore, so s,MK_LIBKSE,MK_LIBPTHREAD,.
* Slightly adjust code logic: we allocate a "size"ed length of memory, notdelphij2008-10-231-5/+5
| | | | size+1. Use strlcpy() to avoid using - 1 as length for strncpy().
* Use strlcpy() before strlen() instead of strncpy().delphij2008-10-231-1/+1
|
* Since we are going to strlen() on the string, it is supposed to bedelphij2008-10-231-1/+1
| | | | NUL-terminated, so use strlcpy() instead of strncpy() here.
* Replace malloc() + memset() with calloc. This corrects a misuse ofdelphij2008-10-233-20/+10
| | | | memset() as a side effect.
* Turns out its not a good idea to assume the packages that might bekensmith2008-10-221-4/+11
| | | | | | | | | selected from the "dists" are all on the current volume. Looks like xorg won't fit on disc1 for 6.4-REL. Iterate through media volumes for packages that wind up being selected from the dists section in addition to the ones that get selected from the packages menu. MFC after: 2 days
* Add HDA multimedia subclass.mav2008-10-211-0/+1
|
* Add "SD host controller" subclass name.mav2008-10-211-0/+1
|
* - Use static for usage()delphij2008-10-171-3/+5
| | | | | | - Include necessary header files. setfib(1) should pass WARNS=6 with this changes.
* Display usage when pkg_add is called with no arguments.brooks2008-10-171-1/+1
| | | | | | | PR: bin/121093 Submitted by: volker Approved by: portmgr (linimon) MFC after: 3 days
* Adjust default keymaps for Ireland and Channel Islands. They use the UKphilip2008-10-171-0/+4
| | | | | | | | keymap. You can learn some interesting things in the PR database! PR: conf/124411 Submitted by: Doctor Modiford <freebsd -at- modiford.com> MFC after: 3 days
* Package installation is handled by starting off with the list of packageskensmith2008-10-155-9/+69
| | | | | | | | | | | | | | | | | | the user selected and then recursively installing their dependencies, finally installing the ones the user selected after the recursion unwinds. Since users often select "high-level" packages that are on a higher numbered disc for the multi-volume release CDROMS this resulted in excessive disc swapping while installing things like kde, gnome, etc. Cut down on disc swapping by iterating through the disc volumes one at a time if we notice the package set is on multiple volumes. If a package is on a higher volume don't install it yet, but still "process it" so we get its dependencies installed. Because of the way the package sets for releases get assembled we're guaranteed dependencies will be on the same volume or lower. Reviewed by: jhb MFC after: 1 week
* Reduce code duplication: use calloc instead of allocing and memsetdelphij2008-10-1210-92/+38
| | | | | | afterward. Approved by: bushman
* Removing startup banner.bushman2008-10-101-12/+0
|
* - Avoid a spurious error when a command line is specified withoutjkoshy2008-10-072-5/+6
| | | | | any process scope PMCs. - Change the -c '*' option to denote non-halted CPUs.
* - Allow gstat to print values to different kind of outputs.lulf2008-10-072-73/+108
| | | | | | | | - Introduce batch mode, where gstat will collect the numbers, print them, and exit. - Document batch mode in the gstat man page. Submitted by: anders
* - Revert to the pre-r183242 behavior of building sade(8) on sparc64.marius2008-10-051-3/+4
| | | | - Fix whitespace.
* - Add ae(4) to sysinstall devices list.stas2008-10-041-0/+1
| | | | | Approved by: kib (mentor) MFC after: 1 week
* Only build the bsnmpd netgraph module if MK_NETGRAPH_SUPPORT is set.bms2008-10-021-1/+4
|
* - Improve error message given on g_providername call failure.lulf2008-09-301-2/+2
| | | | | | - While there, make error messages consistent with the rest. Approved by: kib (mentor)
* - Build jexec (1) and slstat.antoine2008-09-271-6/+6
| | | | | - style.Makefile Noticed by: Marius (1)
* The previous commit re-introduced sade on platformsmarcel2008-09-261-0/+2
| | | | | where it doesn't work. Re-limit sade to amd64 and i386.
* Add a flag, -T, that tells syslogd to always replace the timestamp ondwmalone2008-09-252-7/+24
| | | | | | | | | | messages from the network. We already replace malformatted timestamps and this option lets us replace timestamps that are correctly formatted but wrong. PR: 120891 Submitted by: Thomas Vogt <thomas@bsdunix.ch> MFC after: 1 week
* Remove spurious duplicated defination of sock.delphij2008-09-241-2/+0
|
* Introduce a hooks layer for the MPSAFE TTY layer.ed2008-09-222-0/+3
| | | | | | | | | | | | | | | | | | | | One of the features that prevented us from fixing some of the TTY consumers to work once again, was an interface that allowed consumers to do the following: - `Sniff' incoming data, which is used by the snp(4) driver. - Take direct control of the input and output paths of a TTY, which is used by ng_tty(4), ppp(4), sl(4), etc. There's no practical advantage in committing a hooks layer without having any consumers. In P4 there is a preliminary port of snp(4) and thompsa@ is busy porting ng_tty(4) to this interface. I already want to have it in the tree, because this may stimulate others to work on the remaining modules. Discussed with: thompsa Obtained from: //depot/projects/mpsafetty/...
* add new build knobs and jigger some existing controls to improvesam2008-09-211-61/+181
| | | | | | | | control over the result of buildworld and installworld; this especially helps packaging systems such as nanobsd Reviewed by: various (posted to arch) MFC after: 1 month
* crunchgen doesn't work yet on mips. So sysinstall can't be built there.imp2008-09-191-1/+1
| | | | omit it like we do for arm.
* Bring the usage message in sync with the manual page.jkoshy2008-09-191-1/+2
|
* Add an example illustrating the use sleep(1) for performing timedjkoshy2008-09-191-2/+7
| | | | measurements.
* - remove superfluous worddanger2008-09-151-2/+2
| | | | | | PR: docs/127401 Submitted by: Mick Charles Beaver <mick@cs.wisc.edu> MFC after: 1 week
* Don't rely on private RPC data structures when there is a perfectly gooddfr2008-09-151-22/+4
| | | | public API.
* Make `quot -a' work when we've got slashes in the device name.ed2008-09-141-10/+2
| | | | | | | | | | | | | A very long time ago we had raw device nodes. quot(8) was supposed to use these when running `quot -a'. For some reason the code got once changed to strip the device name until it reaches the last slash. This is not reliable, because this means /dev/mirror/foo will be stripped to /dev/foo. This bug also exists on RELENG_7 and RELENG_6, but I think I'll just merge them back somewhere after the upcoming releases. There's no rush. MFC after: 2 months
* Make mlxcontrol work with more than one system drive:sepotvin2008-09-122-4/+6
| | | | | | | | | | | | | - When searching for the next system drive, return the next one instead of always returning the first one. - Plug fd lead and make sure that the MLX_NEXT_CHILD ioctl is called on the controller fd, not the disk's one. While there, fix a cut-n-pase error in a warning. Reviewed by: jhb Approved by: kan (mentor) MFC after: 1 month
* Sweep this man page a bit:danger2008-09-111-15/+25
| | | | | | | | - new sentence = new line - use .Dq macro to quote words - some minor rewording MFC after: 2 weeks
* Makefile.inc already defines OPENSSL if crypto is available/wanted.roberto2008-09-111-1/+1
| | | | | | PR: bin/127296 Submitted by: oliver MFC after: 3 days
* Fix the device name spacing.adrian2008-09-111-5/+5
| | | | | | | | The old logic padded the device name out but assumed the unit number was one digit long; this fails for things like SATA devices which (for me) begin at ad10. Assemble the full device name in a temporary buffer and then calcluate padding based on that string.
* Beginning of overhaul of fwcontrol:sbruno2008-09-102-125/+384
| | | | | | | | | | | | | | | | | | - Documentation of send_phy_config() - cleanup of malloc's() and added error checking throughout - new capability to iterate over multiple firewire buses - update usage() display - cleanup command line parsing to allow out of order switches - cleanup command line parsing to allow multiple switches per invocation - cleanup grammar of man page a bit - add some ranges to the man page to indicate what values are valid Since fwcontrol's code is the same across 6/7/head this can be applied to all branches after the MFC period. Reviewed by: Dieter freebsd@sopwith.solgatos.com Approved by: mentor Scott scottl@samsco.org MFC after: 60 days
* - Fix regression with GETMEMkmacy2008-09-101-7/+4
| | | | | | | | - Remove gratuitous bswap macros - check for rev 3 with t3b Obtained from: Chelsio Inc. MFC after: 3 days
* Use %d to print numfibsmatteo2008-09-071-1/+1
| | | | MFC after: 1 day
* - Make use of the new and g_device_path utility function in libgeom to avoidlulf2008-09-071-33/+23
| | | | | | | | | duplication of code in fdisk and boot0cfg. Also make use of g_providername to fix an issue with fdisk and boot0cfg not using the correct provider when writing the MBR. Reviewed by: phk Approved by: pjd (mentor)
* Introduce crunchide to the ELF e_machine MIPS values.obrien2008-09-031-0/+8
|
* style nit: indent continuation lines correctly, use style(9) styleimp2008-09-031-15/+16
| | | | if() statement.
* minor style(9) police: sort getopt options alphabetically. Theimp2008-09-031-9/+9
| | | | | semi-logical segregation of 'b' and 'h' doesn't seem to make sense and makes it harder to read.
* Add support for t3c to cxgbtoolkmacy2008-09-021-0/+3119
| | | | Obtained from: Chelsio Inc.
* Allow again compilation w/o GNU readline. There are conditionals inroberto2008-09-021-3/+3
| | | | | | {ntpdc,ntpq}/Makefile. Submitted by: Ben Kelly <bkelly@vadev.org>
* Remove extraneous NULL pointer check - the pointer is guaranteed to be non-NULL.obrien2008-09-011-2/+1
|
* use bigger local variable to calculate free spaceticso2008-09-011-1/+1
| | | | int overflows at 1T free space
OpenPOWER on IntegriCloud