* update to 4.12.5
* fixes CVE-2020-10730, CVE-2020-10745, CVE-2020-10760, CVE-2020-14303
* add fix-musl_missing__nss_buflen_passwd.patch
* remove fixed tirpc include
* add extra CONFIGURE_VARS (XSLTPROC=false, WAF_NO_PREFORK=1)

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

* add new UCI option "enable_extra_tuning"
* update template
* add config examples for options
* fix some access warnings on samba /var dirs

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

* fix python3 host paths, ensure we use build hostpkg tools

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

* update waf-cross-answers for 4.12.x

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

* add unbundle libunwind, icu patches

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

* update to 4.12.3
* update/remove patches
* disable netbios port 139 on 'DISABLE_NETBIOS' option or missing 'nmbd'

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

This removes Python-related build variants, and adds
PYTHON3_PKG_BUILD:=0 and minor build adjustments (where appropriate),
for non-Python packages. There should be no changes to build output.

This also updates some include paths for python3-package.mk and/or
python3-host.mk to be relative to the package Makefile.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

Fixes #11417

The fix was implemented in commit 710700c and was later removed in
commit c50c583.

Signed-off-by: Daniel Bermond <danielbermond@gmail.com>

* update to 4.11.6
* add new UCI option "allow_legacy_protocols" to section [samba]

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

* use old workaround for broken unbundle pam patch

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

* update to 4.11.4 (python3 version)
* re-enable AD-DC option
* add 'samba_nice' UCI option via "config procd 'extra'"
* restructure buildsteps (don't rely on waf --targets logic)
* move quota option into VFS
* move ACL option into AC-DC
* add more admin-tools
* use rpath_install for libs
* fix rpath + rstrip

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

* fix openwrt/packages#10700
* add suffix to asn1_compile, compile_et to avoid krb5 conflicts
* bundle samba's com_err

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

* update to 4.9.16
* cherry-pick some musl alpine/openembedded patches
* cleanup/remove AD-DC/Winbind options and related code
* build the compile_et via samba4/host

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

* add UCI option 'disable_async_io'
* remove [homes] options

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

* update to 4.9.15
* fixes CVE-2019-10218, CVE-2019-14833, CVE-2019-14847
* update smb.conf.template (aio, sendfile)

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

Fixes CVE-2019-10197

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

* add python2/host dependency

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

Some performance improvements by batching file writes.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

* revert to 4.9.x series (4.10 needs too many unofficial patches and has weird waf bugs)
* cleanup patches
* enable AD_DC build option again

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

* add missing libreadline dep
* remove old patches

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

* update to 4.10.6
* use python3
* disable SERVER_AD_DC option (bugged atm)
* fix init script symlink smb.conf detection
* add new deps (libtasn1, libopenssl)

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

* fixes CVE-2018-16860

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

* update to 4.9.7
* add write_list, read_list UCI support

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

* fixes openwrt/packages#8721

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

Avoid Hetzner hosted servers due to availability (.ru users)
and try to keep availability as good as possible without
sacrificing performance for the majority of users.
Update upstream project download URL

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>

* fix CVE-2019-3870, CVE-2019-3880
* switch to fossies.org as main download (faster)

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

* update to 4.9.5
* use embedded heimdal build
* remove mitkrb5 deps
* add AD-DC tools (samba4kinit samba4kgetcred samba4kpasswd samba4ktutil)
* add eventlogadm to ADMIN tools
* build VFS modules shared
* preserve custom smb.conf after reboots
* add missing lib/samba/? private dirs, even if empty
* handle python-crypto via EXTRA_DEPENDS
* fix CONFIGURE_CMD argument order
* move python install to libs
* remove redundant Config.in selects

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

* add patch for tmsize overflow (https://bugzilla.samba.org/show_bug.cgi?id=13622)
* re-enable netbios by default
(Some users still need netbios and its just a minor size increase 50kb)

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

Since 4.9.3, Samba AD-DC with MIT Kerberos will refuse to build unless
--with-experimental-mit-ad-dc is provided to the configure command.

The mandatory requirement was introduced in response to a report that
a user in a Samba AD domain can crash the KDC when Samba is built in
the non-default MIT Kerberos configuration:
https://www.samba.org/samba/security/CVE-2018-16853.html

This requirement was introduced in Samba commit
c5370a4349.

Signed-off-by: Val Kulkov <val.kulkov@gmail.com>

Fixes following CVEs (4.9.3 and 4.9.4):
CVE-2018-16853, CVE-2018-14629, CVE-2018-16853
CVE-2018-14629, CVE-2018-16841, CVE-2018-16851
CVE-2018-16852, CVE-2018-16853, CVE-2018-16857

Signed-off-by: Deng Qingfang <dengqf6@mail2.sysu.edu.cn>

Update Samba to 4.9.2
Refresh patches

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>

* use kernel fs to get the hostname, drop domainname

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

* busybox does not have 'hostname' by default so replaced it with uci calls

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

* fixes: error 0x80070035
* add triggers to catch hostname changes

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

fixes: nmbd: Stop nmbd network announce storm (bug #13620).

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

* fix a typo in vfs_extd_audit

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

* update to 4.9.0
* move vfs_xattr_tdb to defaults
* add vfs_audit, vfs_extd_audit, vfs_full_audit to AD-DC variant
* disable jansson, libarchive by default, enabled for AD-DC variant
* update waf answers

Noteable smb.conf changes:
* store dos attributes Default changed yes
* ea support Default changed yes

Fixes: Timemachine "The identity of the Backup disk ... has changed since the previous backup."

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

* enable avahi by default, so Linux/Mac Clients can see samba shares
* enable timemachine config support
* fix invalid --builtin-libraries
* default to 'mdns name = mdns' in template

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

* update to 4.8.5
* enable aesni support for x86_64
* add 'unbundle libbsd' patch
* update smb.conf.template (disable spoolss)

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

* remove perl, python host depends
* fixes: CVE-2018-1139, CVE-2018-1140, CVE-2018-10858, CVE-2018-10918, CVE-2018-10919
* remove avahi timemachine service file (4.8 handles this automatically via avahi client-lib)
* fix more optional depends

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

* switch waf build to cross-answer files
* move timemachine related vfs modules to default vfs option

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

* add libgcrypt, libpam to optional libs

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>