Since 4.9.3, Samba AD-DC with MIT Kerberos will refuse to build unless
--with-experimental-mit-ad-dc is provided to the configure command.
The mandatory requirement was introduced in response to a report that
a user in a Samba AD domain can crash the KDC when Samba is built in
the non-default MIT Kerberos configuration:
https://www.samba.org/samba/security/CVE-2018-16853.html
This requirement was introduced in Samba commit
c5370a4349.
Signed-off-by: Val Kulkov <val.kulkov@gmail.com>
* fix launcher.sh installation for client, bridge
* link libreadline as static for host helper (hamcorebuilder)
Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
python3's lib2to3 would fail in silence if python3 and its packages are installed as compiled .pyc files. Root cause is, in Lib/lib2to3/refactor.py, the function get_all_fix_names only searches '.py' fix names.
Signed-off-by: Nj Hsiong <nj.hsiong@gmail.com>
* enhance the query function to search in adblock backups as well,
to get back the set of blocking lists sources for a certain domain
* add "Latest DNS Queries" report to commandline version as well
(already in LuCI)
* made the tld compression (the error handling) more robust,
remove the needless 'adb_forcesrt' option
* removed abandoned 'feodo' list source
* updated readme
Signed-off-by: Dirk Brenken <dev@brenken.org>
The change has been compile-tested against the following vanilla kernels
- linux-3.18.130.tar.xz
- linux-4.14.90.tar.xz
- linux-4.19.9.tar.xz
- linux-4.9.146.tar.xz
Run tested with QEMU malta/be with kernel 4.9.146
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
Drop the config knobs '*_address' and introduce '*_interface'
and '*_ipv6' instead.
'*_interface' takes an openwrt interface name ('loopback', 'lan',
'wan' etc), from which the primary IP is used to listen on. If
the matching '*_ipv6' is set to '1', the IPv6 adress will be used,
IPv4 elsewise.
procd interface triggers are now combined with this, so if a listen
interface is not yet configured when the init script is executed, the
process start is defered, and the trigger takes care of that once
the interfaces are ready.
Signed-off-by: Andre Heider <a.heider@gmail.com>
Radicale 2.x adds support for many new clients,
bug-fixes, etc so add v2 of this application.
We do it as a separate package for those not
ready to switch (it's not an straight inplace
upgrade from 1.x).
We do however CONFLICT with 1.x as they can't
be run side-by-side on the same host (without
containers for somesuch).
Signed-off-by: Daniel F. Dickinson <cshored@thecshore.com>
classpath builds with -Wextra and, unless configured with
--disable-werror, -Werror. Since GCC 7 added -Wimplicit-fallthrough=3
to -Wextra we need to make it not an error for code that doesn't use
__attribute__((fallthrough)) yet.
Signed-off-by: Daniel Santos <daniel.santos@pobox.com>
It was a semi-popular request a while back that I put off for a while.
Here's a quick doc.
I'll update it later as things change and I don't forget.
It also lets other people update if something is wrong.
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
This is not supported by letsencrypt, so issuing the certificate will fail.
Instead, add 3072 bits as an intermediate option.
Signed-off-by: Toke Høiland-Jørgensen <toke@redhat.com>
As pointed out by @andersk, acme.sh already supports ECC certificates, and
they can be set manually in the uci file, just not in Luci. Fix this by
changing the key size selector into a listbox, and adding ECC certs as
options.
Fixes#7825.
Signed-off-by: Toke Høiland-Jørgensen <toke@redhat.com>
Under certain circumstances nutshutdown was causing a forced
shutdown of the UPS even though killpower was not indicated.
Prevent that. Also clarify the logic for powering off server
by avoiding && || chains.
Signed-off-by: Daniel F. Dickinson <cshored@thecshore.com>
Nikos Mavrogiannopoulos
Val Kulkov
Hannu Nyman
Andy Walsh
Rosen Penev
Dirk Brenken
Nj Hsiong
Yousong Zhou
Andre Heider
Christian Lachner
Daniel F. Dickinson
Jianhui Zhao
Daniel Santos
Michael Heimpold
Leonid Esman
Jan Pavlinec
Alexandru Ardelean
Bruno Randolf
Toke Høiland-Jørgensen
Saverio Proto
Krystian Kozak