summaryrefslogtreecommitdiff
path: root/usr.sbin
AgeCommit message (Collapse)Author
2010-09-24fix a overflow found by parfaitJonathan Gray
ok jakob@
2010-09-23tweak the mclgeti algorithm to behave better under load.David Gwynne
instead of letting hardware rings grow on every interrupt, restrict it so it can only grow once per softclock tick. we can only punish the rings on softclock ticks, so it make sense to only grow on softclock tick boundaries too. the rings are now punished after >1 lost softclock tick rather than >2. mclgeti is now more aggressive at detecting livelock. the rings get punished by an 8th, rather than by half. we now allow the rings to be punished again even if the system is already considered in livelock. without this diff a livelocked system will have its rx ring sizes scale up and down very rapidly, while holding the rings low for too long. this affected throughput significantly. discussed and tested heavily at j2k10. there are still some games with softnet we can play, but this is a good first step. "put it in" and ok deraadt@ ok claudio@ krw@ henning@ mcbride@ if we find out that it sucks we can pull it out again later. till then we'll run with it and see how it goes.
2010-09-23Add the same license text to these files as the rest of npppd.Jonathan Gray
ok yasuoka@
2010-09-23remove support for talking to the zebra routing socket whichJonathan Gray
was not enabled, we use a kernel routing socket for such things. ok yasuoka@ claudio@
2010-09-22unify MS-CHAP implementation to sbin/iked/chap_ms.[ch].YASUOKA Masahiko
copy sbin/iked/chap_ms.[ch] and fixed chap.c and eap.c to compile with it.
2010-09-22make the arguments match the format string in usageJonathan Gray
ok yasuoka@
2010-09-21when a packet has had addresses and/or ports rewritten, show the originalHenning Brauer
addresses/ports too. ok ryan dlg
2010-09-21Warn if schema file can't be opened.Martin Hedenfal
2010-09-21temporary hack to raise snaplen for pflog so that pflog header, ip headerHenning Brauer
and protocol header actually fit in the common cases. stays until canacar tells us how to do it right ;) ok dlg ryan
2010-09-20Implement support for bsdauth authentication via simple binds, not onlyMartin Hedenfal
SASL. This works by prefixing the userPassword attribute with {BSDAUTH}, followed by the (bsd) username. For example: userPassword: {BSDAUTH}username Idea by william@. Tested by william@.
2010-09-20fix-up the sysORTable by using the same name (sensorsMIBObjects) as usedStuart Henderson
in the MIB, rather than a different spelling (sensorMIBObjects). ok martinh@
2010-09-20Use strvis to encode octet strings in -DDEBUG mode.Martin Hedenfal
Makes my terminal happier when debugging.
2010-09-20- fix a regression caused by latest commit (long story made short: do notGilles Chehade
attempt to expand the local delivery buffer when relaying mail, it was kind of ok before but no longer is) - use the same buffer for local deliveries to files and commands tested by jmc@ and I
2010-09-20Return error on GET requests without an instance identifier, both forMartin Hedenfal
tables and scalar values. Fixes system/6468 by not calling table get functions with an unexpectedly short OID. Also fixes system/6071. Scalar variables without an instance specified now returns a noSuchInstance error. GetNext requests correctly returns the .0 instance. This means you can no longer rely on $ snmpget -v2c -c public localhost SNMPv2-MIB::sysDescr returning the .0 instance. You need to specify it explicitly: $ snmpget -v2c -c public localhost SNMPv2-MIB::sysDescr.0 Also return proper SNMPv2 errors per varbind instead of a noSuchName error status, unless SNMPv1 was specified in the request. An earlier version of this diff tested by Remi Laurent, thanks.
2010-09-20ber_scanf_elements "i" format expects a long long pointer.Martin Hedenfal
2010-09-20Allow output of null values with a context class. This is used in SNMPv2 toMartin Hedenfal
return an error exception value for a varbind result ("noSuchObject[0] IMPLICIT NULL" in rfc1905).
2010-09-20according to ingo, it isn;t a problem to have empty [BDS]q macros, soJason McIntyre
revert that part of yesterday's diffs;
2010-09-20Update instructions for testing npppd and pipex. The instructions wasYASUOKA Masahiko
out-of-date-ed after my privilege separation work at n2k10.
2010-09-19more wacky macro fixing;Jason McIntyre
2010-09-14document atime/mtimeMarc Espie
2010-09-14set separate fields for atime/mtime in file entry, use them while creating.Marc Espie
allows user to undef them, and thus not to set utimes. Use that to not set utimes for pkginfo. fixes kili@'s bug in a nicer way wrt Ustar interface...
2010-09-13Reduce the output of MPLS information without removing information.Claudio Jeker
This gives a more compact output.
2010-09-12oga@ spotted a bug in lka_expand() which caused it to miscalculate theGilles Chehade
length of its expand buffer. this commit introduces a new lka_expand() that has been simplified, that fixes the bug and that is more robust. callers of lka_expand() can now determine that it has failed and throw the recipient at session time. lka_expand() rewrite by oga@, changes around it by me, tested on a few different setups but no feedback from tech@ so ... let me know if it's breaking something for you
2010-09-10RFC2247 -> RFC 2247;Jason McIntyre
2010-09-09nessesary -> necessary.Miod Vallat
2010-09-08when I fixed the ruleset matching on rules that had more than one conditionGilles Chehade
by expanding them to several rules, I forgot to copy the tags to the expanded rules. this commit unbreaks matching rules by tag. documentation follows shortly ... spotted and fixed by me a while ago, jacekm@ timeout
2010-09-08had planned to commit the change after oga@ and I are done with littleGilles Chehade
changes to lka_expand() but it looks like a bit more work :-)
2010-09-08add support for sender expansion in smtpd.conf:Gilles Chehade
%U for sender localpart %D for sender domainpart diff sent to tech@ by Gregory Edigarov <greg@bestnet.kharkov.ua>, timeout by jacekm@, ok by me
2010-09-08we do dns resolutions in a separate process because we don't have an asyncGilles Chehade
resolver. if we run scarce on resources and we cannot fork a separate dns process or we cannot socketpair() tell the caller that we have a temporary failure rather than issueing a fatal(). message will stay in queue and be rescheduled later ... bug reported and bugfix tested by Sacha El Masry <lists@devilray.eu>
2010-09-07fix a formatting issue for -E;Jason McIntyre
2010-09-06Only run the nbr_idtimer() when this side is acting as master (establishingClaudio Jeker
the tcp session). Calling nbr_act_session_establish() on slave systems can crash ldpd because active events are reinitialized. OK michele@
2010-09-06The nbr_reset_*() timer fucntions are the same as the nbr_start_* function.Claudio Jeker
So replace the few calls to the reset function with nbr_start_*(). OK michele@
2010-09-05Add an ioctl to figure out the non-sticky bits in PCI BARs used for determiningMark Kettenis
the size of those BARs. Make pcidump use this new ioctl to print the size of PCI BARs. ok deraadt@, miod@
2010-09-05Unbreak the tree. Bad tedu, no cookie.Mark Kettenis
2010-09-04move some things around to make intentions clear. not really a functionalTed Unangst
change. ok claudio
2010-09-03Need syntax.c to build the schema parser. Sorry for that.Martin Hedenfal
2010-09-03add an EXIT STATUS section for /usr/sbin;Jason McIntyre
2010-09-03Resolve matching rules from superior attribute types at schema load timeMartin Hedenfal
instead of when each attribute is validated.
2010-09-03Implement attribute syntaxes from RFC4517. This adds validation to the mostMartin Hedenfal
common attribute types. Specialized attribute types like Delivery Method or Teletex Terminal Identifier are recognized for completeness, but not validated.
2010-09-02NBR_STA_SESSION, NBR_STA_UP, and NBR_STA_ACTIVE represent all the sameClaudio Jeker
group of states (all but NBR_STA_DOWN). Clean up this confusion and remove NBR_STA_UP and NBR_STA_ACTIVE. OK michele@
2010-09-02remove trailing spaces and tabs from source code; no binary changesIgor Sobrado
(verified by both sthen@ and me). ok sthen@; "just commit it" claudio@
2010-09-02remove trailing spaces and tabs; no binary change.Igor Sobrado
written with help from henning@, who suggested ensuring that there are no changes in the digests for object files, thanks! ok henning@
2010-09-01Add missing leading string quote character in attribute type description.Martin Hedenfal
Caused syntax errors when parsing schema from the subschema.
2010-09-01Move generic imsg/libevent glue to a separate file.Martin Hedenfal
with eric@ at c2k10
2010-09-01Oracle has re-licensed sunrpc under a three-clause BSD license.Todd C. Miller
Update our sources appropriately. OK deraadt@ jsg@
2010-09-01s/lfib/fib/ for more consistency with the other routing ctl tools.Claudio Jeker
While I also made the code more consistent the most noticable change is the rename of the commandline arguments for fib coupling and viewing. OK michele@
2010-09-01s/lfib/fib/ for more consitency with the other routing daemons.Claudio Jeker
This started manly because of ldpctl beeing inconsistent and me misstyping lfib almost every time. OK michele@
2010-09-01Do not use FP arithmetic. Variation on a diff from Mike Belopuhov some time ago.Martin Hedenfal
2010-08-30Use uid_t instead of u_long for comparing database keys in the usracctMatthew Dempsky
summary database. Fixed in NetBSD, and pointed out on ICB by deraadt@.
2010-08-29remove unused variableCharles Longeau
ok jsg@ krw@