summaryrefslogtreecommitdiff
path: root/usr.sbin
AgeCommit message (Collapse)Author
2010-10-02somewhat complicated optimization: avoid reading the whole plist fileMarc Espie
when we're only looking for update-info. Means Ustar must deal with "partial" files. Occasionnally a huge win, such as skipping 95% of the kdebase or texlive plist when they don't need updating. I've been running with this for a few weeks now...
2010-10-02don't try to read bogus stuff, we already errored out on itMarc Espie
2010-10-02whitespaceMarc Espie
2010-10-01adapt to API changes in OpenSSL-1.0.0aDamien Miller
2010-10-01update to openssl-1.0.0aDamien Miller
2010-10-01fix more nsd-zonec referencesJakob Schlyter
2010-10-01fix reference to nsd-zonec; from Kirill BychkovJakob Schlyter
2010-10-01Reword a commentClaudio Jeker
2010-10-01use "Point-to-Point" for consistency.Igor Sobrado
ok jmc@
2010-10-01tweak previous;Jason McIntyre
2010-09-30Add jsg@ to the AUTHORS section of ikectl; he wrote the CA/PKI part.Reyk Floeter
2010-09-30Add some examples about using the CA commands to create and install theReyk Floeter
CA and peers certificates. With input from mikeb@
2010-09-30Only 6 elements of mib are used so do allocate 6 not 7.Claudio Jeker
2010-09-27IP_PIPEX mistakenly was applied to the 1723/tcp socket. Apply the optionYASUOKA Masahiko
to the gre socket.
2010-09-26Allow mod_headers to handle RequestHeader directives known from apache2,Sebastian Reitenbach
and update documentation accordingly. Patch mostly based on an old patch from Martin Algesten he posted 2002 in apache bugzilla entry: 10772 OK, pyr@
2010-09-26correct the path of npppd, and use modp1024 on the sample ipsec.confYASUOKA Masahiko
because iPhone doesn't support modp2048.
2010-09-25spacing, no binary changes.Igor Sobrado
2010-09-25spacing, no binary changes.Igor Sobrado
2010-09-25fix typos in documentation and log_debug() function.Igor Sobrado
ok claudio@
2010-09-25zap trailing whitespace;Jason McIntyre
2010-09-25Print the checksum sum as a simple fingerprint of the LSDB.Claudio Jeker
OK dlg@
2010-09-25When counting the lsa also build the sum of the ls_checksums. This can beClaudio Jeker
used to quickly verify if two LSDBs are in sync. Other systems do the same. OK dlg@
2010-09-25use a consistent argument name in both synopsis and usage; argumentIgor Sobrado
name choosed with help from dlg@ ok claudio@
2010-09-24Add support pipex for L2TP call and L2TP on IPv6.YASUOKA Masahiko
- pipex requires unique session-id in protocol, so session-id generation algorithm has been changed. - change to fit the new PIPEX ioctl. ok dlg@
2010-09-24hook iscsid and iscsictl into the build.David Gwynne
2010-09-24basic manpage for iscsictl. we wont do an iscsi.conf manpage until theDavid Gwynne
syntax has settled down.
2010-09-24basic manpageDavid Gwynne
poked by claudio@. repeatedly.
2010-09-24another useless and noisy debug messageClaudio Jeker
2010-09-24add missing .Ar;Jason McIntyre
2010-09-24Set TCP_NODELAY since we want the request to be sent ASAP.Claudio Jeker
OK dlg@
2010-09-24Remvoe some debug messages that are not needed.Claudio Jeker
2010-09-24add -s option. ok martinh@lum
2010-09-24Import iscsictl -- the control tool for iscsid.Claudio Jeker
Currently only discovery and reload work. OK dlg@, matthew@, deraadt@
2010-09-24iSCSI Initiatior daemon using vscsi(4).Claudio Jeker
Currently implements the absolute minimum of the protocol to make it work against targets. Many things still in flux but we're annoyed to work outside of the tree. Commited from a source tree on an iSCSI disk served via iscsid but it is not yet production ready. OK dlg@, matthew@, deraadt@
2010-09-24npppd didn't setup a PIPEX session if MPPE is not required by config andYASUOKA Masahiko
CCP is failed to be opened because the peer doesn't support MPPE. Fixed to setup a PIPEX on such case.
2010-09-24fix a overflow found by parfaitJonathan Gray
ok jakob@
2010-09-23tweak the mclgeti algorithm to behave better under load.David Gwynne
instead of letting hardware rings grow on every interrupt, restrict it so it can only grow once per softclock tick. we can only punish the rings on softclock ticks, so it make sense to only grow on softclock tick boundaries too. the rings are now punished after >1 lost softclock tick rather than >2. mclgeti is now more aggressive at detecting livelock. the rings get punished by an 8th, rather than by half. we now allow the rings to be punished again even if the system is already considered in livelock. without this diff a livelocked system will have its rx ring sizes scale up and down very rapidly, while holding the rings low for too long. this affected throughput significantly. discussed and tested heavily at j2k10. there are still some games with softnet we can play, but this is a good first step. "put it in" and ok deraadt@ ok claudio@ krw@ henning@ mcbride@ if we find out that it sucks we can pull it out again later. till then we'll run with it and see how it goes.
2010-09-23Add the same license text to these files as the rest of npppd.Jonathan Gray
ok yasuoka@
2010-09-23remove support for talking to the zebra routing socket whichJonathan Gray
was not enabled, we use a kernel routing socket for such things. ok yasuoka@ claudio@
2010-09-22unify MS-CHAP implementation to sbin/iked/chap_ms.[ch].YASUOKA Masahiko
copy sbin/iked/chap_ms.[ch] and fixed chap.c and eap.c to compile with it.
2010-09-22make the arguments match the format string in usageJonathan Gray
ok yasuoka@
2010-09-21when a packet has had addresses and/or ports rewritten, show the originalHenning Brauer
addresses/ports too. ok ryan dlg
2010-09-21Warn if schema file can't be opened.Martin Hedenfal
2010-09-21temporary hack to raise snaplen for pflog so that pflog header, ip headerHenning Brauer
and protocol header actually fit in the common cases. stays until canacar tells us how to do it right ;) ok dlg ryan
2010-09-20Implement support for bsdauth authentication via simple binds, not onlyMartin Hedenfal
SASL. This works by prefixing the userPassword attribute with {BSDAUTH}, followed by the (bsd) username. For example: userPassword: {BSDAUTH}username Idea by william@. Tested by william@.
2010-09-20fix-up the sysORTable by using the same name (sensorsMIBObjects) as usedStuart Henderson
in the MIB, rather than a different spelling (sensorMIBObjects). ok martinh@
2010-09-20Use strvis to encode octet strings in -DDEBUG mode.Martin Hedenfal
Makes my terminal happier when debugging.
2010-09-20- fix a regression caused by latest commit (long story made short: do notGilles Chehade
attempt to expand the local delivery buffer when relaying mail, it was kind of ok before but no longer is) - use the same buffer for local deliveries to files and commands tested by jmc@ and I
2010-09-20Return error on GET requests without an instance identifier, both forMartin Hedenfal
tables and scalar values. Fixes system/6468 by not calling table get functions with an unexpectedly short OID. Also fixes system/6071. Scalar variables without an instance specified now returns a noSuchInstance error. GetNext requests correctly returns the .0 instance. This means you can no longer rely on $ snmpget -v2c -c public localhost SNMPv2-MIB::sysDescr returning the .0 instance. You need to specify it explicitly: $ snmpget -v2c -c public localhost SNMPv2-MIB::sysDescr.0 Also return proper SNMPv2 errors per varbind instead of a noSuchName error status, unless SNMPv1 was specified in the request. An earlier version of this diff tested by Remi Laurent, thanks.
2010-09-20ber_scanf_elements "i" format expects a long long pointer.Martin Hedenfal
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-27 14:08:18 +0000