Russ Allbery [Fri, 13 Feb 2009 02:02:30 +0000 (18:02 -0800)]
General improvements to debconf configuration handling
* General improvements to debconf configuration handling.
- Do not abort the config script if we have no default realm and
dnsdomainname fails. (LP: #274886, #318132)
- Do not abort postinst if we can't resolve any host name for the
cell. Just continue in that case, omitting any configuration for
the local cell. (LP: #322054)
- Correctly set the default for AFS_CRYPT from the existing config.
- The cache size is high, not critical, since we have a default.
- Don't create the client ThisCell if no local cell was specified.
- Improve the leading comment in afs.conf.client. Users can edit it,
but any changes other than the setting values will be lost.
- Remove the openafs-fileserver/bosconfig_moved template, which would
only be shown on upgrades from pre-1.2.0 versions.
- Standardize coding style and always quote strings.
Russ Allbery [Fri, 13 Feb 2009 01:27:03 +0000 (17:27 -0800)]
Don't exit successfully if sourcing the debconf module fails
* Abort the config script rather than exiting successfully if the
debconf shell module is not available. The config script should never
be run in the absence of debconf, so if this fails, something deeper
is wrong and we shouldn't blindly continue.
Russ Allbery [Fri, 13 Feb 2009 01:24:57 +0000 (17:24 -0800)]
Add initial DKMS support and compress module source with bzip2
* Add initial DKMS support via an openafs-modules-dkms package, based on
work by Robert Gerlach. (LP: #288743)
* Compress the source in openafs-modules-source with bzip2 instead of
gzip to reduce the package size.
Russ Allbery [Thu, 12 Feb 2009 21:23:20 +0000 (13:23 -0800)]
First cut at debhelper 7 support
* Update to debhelper compatibility level V7.
- Use dh where possible in debian/rules.
- Use dh_lintian to install Lintian overrides.
- Eliminate the configure target and do all the work in build.
- Do more in the install target and less in binary, matching the
default command stacks in dh.
- Use a debian/clean configuration file to let dh clean do more of the
work rather than using rm commands in debian/rules.
Russ Allbery [Sun, 1 Feb 2009 17:49:25 +0000 (09:49 -0800)]
Make dynroot the default for new installs
* Make dynroot the default for new installations. It works much better
with systems that don't bring up their network until late in the boot
process, such as wireless laptops. (LP: #318605)
Russ Allbery [Mon, 1 Dec 2008 03:01:39 +0000 (19:01 -0800)]
Improve README.modules
* Suggest module-assistant auto-install in README.modules and be clearer
that building one's own kernel is not required. Thanks, Anders
Kaseorg and Lutz Goehring for suggestions. (LP: #295897)
Russ Allbery [Mon, 6 Oct 2008 18:10:23 +0000 (11:10 -0700)]
Mention current packages in libpam-openafs-kaserver description
* Mention libpam-afs-session instead of libpam-openafs-session in the
description of libpam-openafs-kaserver, and mention libpam-krb5 by
name. Thanks, Philipp Kaluza. (Closes: #501308)
* Apply upstream deltas to support 2.6.27 kernels and to stop using
COMMON_KERN_CFLAGS for all 2.6 kernels uniformly, which fixes
problems on amd64 with newer kernels. Thanks, Björn Torkelsson.
(LP: #267504)
Use ARCH in preference to uname -m when building kernel modules
* When building the kernel module, use the setting of the ARCH
environment or make variable, if present, in preference to uname -m to
allow cross-compiles. Thanks, Jose Calhariz. (Closes: #492232)
We only have a param file for a 2.4 kernel, we were building with UCONTEXT
which is stubbed out in glibc for hppa, and builds without UCONTEXT fail.
The binaries we were building before didn't work and no one reported a
bug, indicating no one was attempting to use OpenAFS on hppa.
Undo the move of up.pod in clean to not FTBFS on the second build
Undo the move of up.pod to afs-up.pod in debian/rules clean rather
than just deleting the file and causing the second build to fail.
Thanks, Dominic Hargreaves.
Russ Allbery [Mon, 30 Jun 2008 20:32:18 +0000 (13:32 -0700)]
Don't try to use UCONTEXT on hppa/parisc
glibc doesn't implement the ucontext functions on hppa/parisc, so don't
try to use them. This probably means that OpenAFS user space is broken
on hppa right now. That's not a surprise, given that we don't have a
2.6 kernel param file either.
Russ Allbery [Sat, 28 Jun 2008 06:52:31 +0000 (23:52 -0700)]
Ship fewer debug symbols
Don't include debug symbols for /sbin, /usr/bin, and /usr/sbin binaries or
PAM modules in openafs-dbg, just the servers in /usr/lib/openafs, since
those are the most likely cases where backtraces are important and a 10MB
debug symbol package seems like overkill.
Russ Allbery [Sat, 28 Jun 2008 06:25:50 +0000 (23:25 -0700)]
Add lpia as an alias for i386
Enable support for lpia by making it synonymous with i386. This means
that lpia systems will get a sysname of i386_linux26, which isn't ideal
but should at least work.
Russ Allbery [Sat, 28 Jun 2008 06:01:22 +0000 (23:01 -0700)]
Exit successfully in init script if openafs isn't in modules.dep
If the openafs module isn't listed in modules.dep, exit with a zero
status from the init script even if modprobe fails. Otherwise, if a
module package and openafs-client are installed at the same time and
openafs-client is set up before the module package, the init script can
find the module, fail the modprobe (because the dependency map hasn't
yet been updated), and fail the whole installation. Exiting with a zero
status still doesn't get OpenAFS started, but at least it doesn't leave
the system in a partly installed state. Thanks to Durk Strooisma for the
analysis.
Russ Allbery [Sat, 28 Jun 2008 05:44:23 +0000 (22:44 -0700)]
Stop using quilt to manage patches
Remove the remaining patches that are managed through branches. Drop
the build-dependency on quilt and don't run it during the build. Don't
remove the afs-up man page in the clean target since it's done with Git
now (although this will be reverted in a moment).
Russ Allbery [Sat, 28 Jun 2008 05:37:45 +0000 (22:37 -0700)]
Add a man page for klog.krb5
Apply quilt patch klog-krb5-man-page: Man page for the
Kerberos v5 version of klog. Pulled from upstream delta
STABLE14-install-and-document-klog-krb5-20080627.
Russ Allbery [Sat, 28 Jun 2008 05:07:44 +0000 (22:07 -0700)]
Allow multiple local realms in krb.conf
Apply quilt patch multiple-local-realms: Enable listing multiple realms
in the server krb.conf file. Up to four realms may be treated as local
in that fashion for authorization purposes (instead of the single realm
supported without this patch).
This upstream patch is in the 1.5 series but not in 1.4. However, it
has been working in production at Stanford University for some time.
Russ Allbery [Sat, 28 Jun 2008 05:05:53 +0000 (22:05 -0700)]
Expose prototypes for the ktc_* functions
Apply quilt patch ktc-prototypes: Expose prototypes for the ktc_*
functions on platforms other than Windows. Fixed upstream in a different
way, but only on the 1.5 branch.
Russ Allbery [Sat, 28 Jun 2008 05:03:20 +0000 (22:03 -0700)]
Find core files properly on Linux
Linux always appends the PID to core dumps from threaded processes, so
search the directory for core dumps instead of assuming a particular
name. Suitable upstream.
Russ Allbery [Sat, 28 Jun 2008 05:01:19 +0000 (22:01 -0700)]
Build with UCONTEXT on all Linux platforms
The new glibc doesn't work with the old context code due to mangling
done in the library (the interface AFS was using wasn't a supported or
stable one). Switch to UCONTEXT for all Linux platforms, which stands
a better chance of working (but may or may not actually work).
Russ Allbery [Sat, 28 Jun 2008 04:58:01 +0000 (21:58 -0700)]
No longer reference the old Admin Reference
Apply quilt patch no-admin-reference: The Admin Reference has now been
completely replaced by the man pages, so don't refer to it since we'll no
longer bother to install it. It should be simply removed upstream.
Russ Allbery [Sat, 28 Jun 2008 04:56:03 +0000 (21:56 -0700)]
Allow overriding the default compiler and merge SPARC
Apply quilt patch compiler-flags: Use $CC for the compiler instead of
forcing cc or gcc. The corresponding upstream fix is waiting for work
to separate the kernel compiler from the userspace compilter, since $CC
should only be used for the latter on other platforms.
Also combines the sparc sysnames together, which is suitable upstream.
Russ Allbery [Sat, 28 Jun 2008 04:50:38 +0000 (21:50 -0700)]
Tweak the expected configuration directory permissions
Apply quilt patch bos-permissions: Expect the server directory to be
mode 0700 since that's where the AFS KeyFile is stored. Allow the
local directory to be mode 0755, since there's no reason for it to be
more restrictive.
Allowing the server directory to be mode 0700 causes problems upstream if
people symlink the client configuration to the server directory, which is
recommended by some documentation, so this is not applied upstream.
Russ Allbery [Sat, 28 Jun 2008 04:47:18 +0000 (21:47 -0700)]
Re-add upstream skip of PAM builds on amd64_linux24
We always build the userspace code on amd64 as amd64_linux26, so this
check is now harmless. Re-add the check to match upstream and reduce
unnecessary differences.
Russ Allbery [Sat, 28 Jun 2008 04:43:32 +0000 (21:43 -0700)]
Ugly hack to build the PAM modules PIC
Apply quilt patch pam-build: Apply an incredibly ugly hack to build the
PAM modules against the shared objects generated for the shared libraries.
Not suitable upstream in its current form. The right upstream solution is
to standardize the shared library ABI and install it with a real SONAME,
and then link the PAM modules against it. It may be that we'll drop
kaserver support and stop building the PAM modules before we get to that,
though.
Russ Allbery [Sat, 28 Jun 2008 04:32:08 +0000 (21:32 -0700)]
Name the kernel module openafs instead of libafs
Apply quilt patch module-name: Build the kernel module as openafs.ko
instead of libafs.ko. This should really be done upstream as well, but it
poses backwards compatibility problems and it's always been called libafs
on other platforms, so it's controversial.
This implementation of the idea produces warnings and needs some
improvement.
Russ Allbery [Sat, 28 Jun 2008 04:26:13 +0000 (21:26 -0700)]
Fix the path for fstrace message catalogs
Apply quilt patch fstrace-paths: fstrace uses the NLS functions to
do message translation and needs a message catalog installed. The
default paths are rather broken. Patch the source to look for it in
/usr/share/openafs instead. Not suitable upstream with the hard-coded
paths, but something more sophisticated would be appropriate.
Russ Allbery [Sat, 28 Jun 2008 04:23:05 +0000 (21:23 -0700)]
Use the correct PTS database path in pt_util
Apply quilt patch paths: Patch pt_util to use the correct Debian patch for
the Protection Server database. The correct fix would be to use the
standard functions to find the database path.
Russ Allbery [Sat, 28 Jun 2008 04:21:30 +0000 (21:21 -0700)]
Rename the up man page to afs-up, matching our renaming
Apply quilt patch afs-up-rename: Update the up man page to say afs-up
instead, matching our renaming of the command, and rename it in the
source tree so that the generated man page will have the correct name.
Russ Allbery [Sat, 28 Jun 2008 04:17:53 +0000 (21:17 -0700)]
Remove Makefile references to removed upstream files
Apply quilt patch dfsg: Patch upstream Makefiles to remove references to
files that had to be removed from the source package for DFSG freeness
reasons.
Russ Allbery [Sat, 28 Jun 2008 04:12:54 +0000 (21:12 -0700)]
Fix permissions in the upstream tree
Mark various upstream files executable that are executable in the upstream
tarballs but weren't in the Subversion repository, probably due to missing
properties somewhere along the line.
projects / packages / o / openafs.git / log