* When determining the AFS sysname for kernel module builds, add
explicit cases for 2.6 kernels for all architectures that support them
(everything except non-64-bit sparc_linux). Fixes build problems with
ia64 and probably other architectures. Thanks to Ippokratis Pandis
for the debugging help. (Closes: #411818)
The missing aclocal looks like it also caused the failures on SPARC,
since it meant we missed the change that forced SPARC to use the right
thread flags.
* Build-depend on Automake since we run aclocal during the build. Not
having aclocal caused local patches to osconf.m4 to not be effective,
leading to the wrong compiler flags for shared libraries. Thanks to
Frank Lichtenheld for the report. (Closes: #416398)
Russ Allbery [Tue, 27 Mar 2007 01:54:30 +0000 (01:54 +0000)]
* Remove the rx_Init calls in the PAM module. The internal counters
that had to be initialized that way have been removed.
* Now that we're running regen.sh as part of the build process, only
patch the Autoconf source files and not the generated output to make
the diff easier to audit.
Russ Allbery [Tue, 27 Mar 2007 01:14:32 +0000 (01:14 +0000)]
* New upstream release. (Closes: #415699)
- Support newer Linux kernels. (Closes: #409797, #410120)
- Add aklog fallbacks for null realms to support the referral
capability in MIT Kerberos 1.6 and later. (Closes: #410314)
Russ Allbery [Mon, 19 Mar 2007 21:06:14 +0000 (21:06 +0000)]
* SECURITY: Apply upstream patch to disable setuid status on all cells
by default. Prior versions of AFS defaulted to honoring setuid bits
in the local cell, but since unauthenticated file access in AFS is
unencrypted, an attacker could forge packets from an AFS file server
to synthesize a setuid binary in AFS.
Russ Allbery [Sun, 18 Mar 2007 02:03:08 +0000 (02:03 +0000)]
* Apply upstream fix to show reasonable free space numbers for AFS in
df. Without this fix, some programs which use df to check free space
may think that directories in AFS are full and prevent the user from
attempting to write files. (Closes: #415294)
Russ Allbery [Thu, 15 Mar 2007 01:34:20 +0000 (01:34 +0000)]
* Apply upstream fix to use a single high-numbered group for the PAG on
2.6 kernels and sort the group properly. Fixes AFS-caused group
ordering problems that could lead the kernel to ignore some group
membership for users. (Closes: #414911)
Russ Allbery [Mon, 6 Nov 2006 04:23:33 +0000 (04:23 +0000)]
* Document (at least partially) AFS's mapping of Kerberos v5 principal
names to Kerberos v4 format in the aklog man page. Thanks, Daniel
J. Priem. (Closes: #394832)
* Document that aklog -setpag may not always work.
Russ Allbery [Wed, 4 Oct 2006 18:52:39 +0000 (18:52 +0000)]
* The UTS_RELEASE string is no longer found in linux/version.h in
2.6.18, so fall back on looking in config/kernel.release. Thanks to
Marcus Watts for the patch.
OpenAFS strips everything except for the fileserver and volserver, so
for right now only provide debugging information for those two binaries.
Document the new debugging support in README.Debian.
Russ Allbery [Thu, 15 Jun 2006 14:21:48 +0000 (14:21 +0000)]
r2165@windlord: eagle | 2006-06-07 12:56:09 -0700
* Use a better method of optionally running make distclean.
* Add build-arch and build-indep targets, just in case.
Russ Allbery [Thu, 15 Jun 2006 14:21:36 +0000 (14:21 +0000)]
r2164@windlord: eagle | 2006-06-07 12:52:30 -0700
* Regenerate the man pages on build since the pre-generated ones were
done with a very old version of pod2man.
Russ Allbery [Thu, 15 Jun 2006 14:21:13 +0000 (14:21 +0000)]
r2162@windlord: eagle | 2006-06-07 12:09:03 -0700
* Update debconf templates to follow the best practice recommendations
from the Developer's Reference.
Russ Allbery [Thu, 15 Jun 2006 14:20:59 +0000 (14:20 +0000)]
r2161@windlord: eagle | 2006-06-07 12:01:55 -0700
* When creating a new file server in afs-newcell, use a set of tuning
flags from Harald Barth rather than relying on the defaults. This
doesn't help with general bos create; long term, the defaults need to
be fixed.
* Add a note in README.servers about fileserver tuning options.
Russ Allbery [Thu, 15 Jun 2006 14:20:34 +0000 (14:20 +0000)]
r2159@windlord: eagle | 2006-06-07 11:27:08 -0700
* Include all of AFS's local XDR implementation in the build for
shlibafsrpc, fixing problems with undefined symbols in the PAM module
on AMD64.
* Exit successfully in the openafs-client init script if no module is
installed, since otherwise openafs-client will fail to install until
one builds a module. This restores previous accidental behavior due
to a bug in debhelper. (Closes: #362695)
Russ Allbery [Wed, 29 Mar 2006 20:56:10 +0000 (20:56 +0000)]
* Since 2.6 is the supported kernel for etch, build the userspace with
a sysname of *_linux26 where supported. This only affects the sys
command. (Using livesys instead is better.) (Closes: #358118)
Russ Allbery [Wed, 29 Mar 2006 04:29:43 +0000 (04:29 +0000)]
* Subsume openafs-krb5 into this source package.
- Acknowledge NMU. (Closes: #304933)
- Update to the OpenAFS aklog and asetkey. (Closes: #196094)
- Backport asetkey from upstream CVS.
- Include ka-forwarder from the old migration toolkit.
Russ Allbery [Thu, 9 Feb 2006 04:51:23 +0000 (04:51 +0000)]
* Document the need to restart ptserver and vlserver on the existing
database servers when adding a new one. Thanks, Niklas Edmundsson.
(Closes: #349659)
Russ Allbery [Tue, 27 Dec 2005 00:23:42 +0000 (00:23 +0000)]
* Call kernel-version correctly from prep-modules, which fixes build
issues with manually-built kernels. (Closes: #344851)
Also always trust the KVERS determined by the Makefile in prep-modules
if available, since otherwise we end up with broken packages when the
makefile installs the module assuming one package name and the control
file tries to build a package with a different name.
Clean up a few remaining remnants of @sys handling when building kernel
modules. Since the kernel module build never runs any sort of install
target, this shouldn't be needed.
Russ Allbery [Thu, 22 Dec 2005 02:54:56 +0000 (02:54 +0000)]
* Apply upstream patch from Chas Williams to be more careful about what
dentry is used in renames, avoiding a kernel fault when renaming
dentries accessed through multiple paths (such as RO and RW).
Russ Allbery [Wed, 21 Dec 2005 20:00:05 +0000 (20:00 +0000)]
* Include volinfo, not voldump in openafs-fileserver.
* Use make install into debian/tmp rather than make dest. make dest is
mostly for Transarc compatibility and make install looks more like a
typical package and makes it easier to evaluate differences in FHS
location between upstream and Debian. As a side effect, there's no
need to mess with the @sys link. (Closes: #165909)
* Install more files with dh_install rather than install commands in
debian/rules so that *.install shows a more complete picture of what
goes into each package.
* Don't ignore make distclean errors.
Russ Allbery [Wed, 21 Dec 2005 04:17:23 +0000 (04:17 +0000)]
* Stop unconditionally forcing the compiler to cc or gcc in configure,
allowing, among other things, building the kernel module with a
compiler other than the default system compiler. (Closes: #338306)