summaryrefslogtreecommitdiff
path: root/usr.sbin
AgeCommit message (Collapse)Author
2010-06-05empty plist is bad too.Marc Espie
2010-06-05Install a default ldapd.conf, and standard schema files in /etc/ldap.Martin Hedenfal
ok deraadt@
2010-06-05last pieceMarc Espie
2010-06-05move files after a discussion with Theo.Marc Espie
2010-06-05tweak previous;Jason McIntyre
2010-06-05modern syntaxMarc Espie
2010-06-05roughly halfway through dependencies check (really need to handleMarc Espie
wantlib so that depends closures work...) also handle destdir, more or less.
2010-06-05Minimize changes against the ber.c in snmpd and ypldap. This also fixes anMartin Hedenfal
erroneous protocol error return in ldap_extended(), which prevented StartTLS from working.
2010-06-05usage line and error out if pkg foo.Marc Espie
2010-06-05use lock_db(unshared), since we may tweak thingsMarc Espie
2010-06-05new command pkg_fsck, very incomplete for now. Runs only very basic checks.Marc Espie
2010-06-05add working cartwheelMarc Espie
2010-06-05be more specific as to what we keep. Less flicker in workingMarc Espie
2010-06-05interface tweaks:Marc Espie
- allow mtree to create more diverse data structures. - new "working" method, for when progressmeter should show that something is going on, but doesn't actually have an actual % to show, so show cartwheels. e.g., progress->working(1024); (actual counter will be /= argument, so that it does move a bit slower).
2010-06-05move use to common partMarc Espie
2010-06-05have subst return a handle to written fileMarc Espie
2010-06-05Move ask_list() method to $state object like it's done for confirm(), soLandry Breuil
that it can be overriden. Change callers accordingly. ok espie@
2010-06-05+diffMarc Espie
2010-06-05document front-end changesMarc Espie
2010-06-04centralize checking of packagenames. Avoid grabbing pkgnames that won'tMarc Espie
have a version number. This gets rid of: Can't call method "v" on an undefined value at /usr/libdata/perl5/OpenBSD/PackageName.pm line 310.
2010-06-04add ->spec to Conflict and use the same check as for depend during pkg_create.Marc Espie
2010-06-04Install the cert as well as the keys and make certs worldJonathan Gray
readable as suggested by reyk@
2010-06-04move code around, so that commands can be used as modules.Marc Espie
pkg becomes the start hub, which does nothing except require the correct module. Saner code wrt Add/Delete, and more sharing.
2010-06-04Use correct imsg type in error reply.Jacek Masiulaniec
2010-06-04It is actually possible to dump IPv6 tables with "dump table" and notClaudio Jeker
"dump table-mp" but this is only possible if the session and the prefixes are from the same address family. Evil little hackery (especially the IPv6 nexthop encoding) but seems to work according to libbgpdump.
2010-06-03Instead of doing a poor mans offsetof() implementation change the codeClaudio Jeker
to use an end pointer to compare against. Looks less scary and makes gcc4 happy. OK henning@
2010-06-03enable ldapd and ldapctl in the buildMartin Hedenfal
ok deraadt@
2010-06-03Fix compilation on gcc2. Check a return value from malloc while at it.Martin Hedenfal
"that compiles!" deraadt@
2010-06-03Open database files before chrooting, and use an absolute path toMartin Hedenfal
the database files, instead of relying on the chrooted-to path. This breaks compaction as the ldape process can't re-open the database files. This is being worked on. ok gilles@
2010-06-03Import iked, a new implementation of the IKEv2 protocol.Reyk Floeter
iked(8) is an automatic keying daemon for IPsec, like isakmpd(8), that IPsec creates flows and SAs automatically. Unlike isakmpd, iked(8) implements the newer IKEv2 protocol instead of IKEv1/ISAKMP. The daemon is still work-in-progress and not enabled in the builds, but is already able to establish IKEv2 sessions with some other IKEv2 implementations as a responder. with lots of help and debugging by jsg@ ok deraadt@
2010-06-03Import iked, a new implementation of the IKEv2 protocol.Reyk Floeter
iked(8) is an automatic keying daemon for IPsec, like isakmpd(8), that IPsec creates flows and SAs automatically. Unlike isakmpd, iked(8) implements the newer IKEv2 protocol instead of IKEv1/ISAKMP. The daemon is still work-in-progress and not enabled in the builds, but is already able to establish IKEv2 sessions with some other IKEv2 implementations as a responder. with lots of help and debugging by jsg@ ok deraadt@
2010-06-03Don't hardcode /bin/ksh in the example, but use "loginShell" instead.Antoine Jacoutot
ok pyr@
2010-06-03The is no md5 authentication in OSPFv3. Remove some leftovers fromAlexander Bluhm
the ospf6d packet lenght calculation. ok claudio@ stsp@
2010-06-02fix potential use of uninitialized value, and remove unused variables.Charles Longeau
ok deraadt@
2010-06-02check event_dispatch() return valueCharles Longeau
ok jacekm@
2010-06-02MPLSCTL_ENABLE is gone, no need to check for it. There is also no realClaudio Jeker
reason why ldpd needs to check for ip forwarding so remove that check as well. Reminded by phessler@
2010-06-02fix rcs prefixTheo de Raadt
2010-06-02Start reworking the LDE. Implement a FEC RB tree that can be used for theClaudio Jeker
route table and the per neighbor request and mapping lists. The received and sent mappings are added to the per neighbor RB tree and additionally linked to the route table. This makes lookups, etc. a lot easier. While there flip the neighbor hash list over to a RB tree. OK michele@
2010-06-02remove c++ commentsMartin Hedenfal
ok gilles@
2010-06-01new queue, again; gcc2 compile tested by deraadtJacek Masiulaniec
2010-06-01New queue doesn't compile on gcc2, back out. Spotted by deraadt@Jacek Masiulaniec
2010-06-01close FILE `f' when we leave function fprio_readin(), so it wont get lostzinovik
ok beck@, todd@
2010-06-01namespace_new() leaks `ns' on error path.Martin Hedenfal
from zinovik@
2010-06-01With IPv6 OSPF a single LSA can get larger than the MTU. As aAlexander Bluhm
workaround it is better to drop this LSA with a log entry instead of sending emtpy update packets in a burst. As link LSAs cannot be split, the propper solution might be IPv6 fragments. See also RFC5340 Section 4.4.3.8 and Appendix A.1. ok stsp@
2010-06-01Schedule newly arrived mail immediately, ie. place it at the beginningJacek Masiulaniec
of the list of next items to try, or near the beginning if the schedule contains expired mail, which is of highest priority.
2010-06-01Include birth time in smtpctl show queue raw.Jacek Masiulaniec
2010-06-01Add NULL pointer check after calloc.Alexander Bluhm
ok claudio@ stsp@
2010-06-01It's lasttry + 1 because I initially thought passing identical birthJacek Masiulaniec
and lasttry args to queue_retry would make it return birth leading looped scheduling, but that's not true so drop the "+ 1".
2010-06-01Fix error message.Alexander Bluhm
ok claudio@ stsp@
2010-06-01Better errors.Jacek Masiulaniec