summaryrefslogtreecommitdiff
path: root/usr.sbin
AgeCommit message (Collapse)Author
2010-09-26Allow mod_headers to handle RequestHeader directives known from apache2,Sebastian Reitenbach
and update documentation accordingly. Patch mostly based on an old patch from Martin Algesten he posted 2002 in apache bugzilla entry: 10772 OK, pyr@
2010-09-26correct the path of npppd, and use modp1024 on the sample ipsec.confYASUOKA Masahiko
because iPhone doesn't support modp2048.
2010-09-25spacing, no binary changes.Igor Sobrado
2010-09-25spacing, no binary changes.Igor Sobrado
2010-09-25fix typos in documentation and log_debug() function.Igor Sobrado
ok claudio@
2010-09-25zap trailing whitespace;Jason McIntyre
2010-09-25Print the checksum sum as a simple fingerprint of the LSDB.Claudio Jeker
OK dlg@
2010-09-25When counting the lsa also build the sum of the ls_checksums. This can beClaudio Jeker
used to quickly verify if two LSDBs are in sync. Other systems do the same. OK dlg@
2010-09-25use a consistent argument name in both synopsis and usage; argumentIgor Sobrado
name choosed with help from dlg@ ok claudio@
2010-09-24Add support pipex for L2TP call and L2TP on IPv6.YASUOKA Masahiko
- pipex requires unique session-id in protocol, so session-id generation algorithm has been changed. - change to fit the new PIPEX ioctl. ok dlg@
2010-09-24hook iscsid and iscsictl into the build.David Gwynne
2010-09-24basic manpage for iscsictl. we wont do an iscsi.conf manpage until theDavid Gwynne
syntax has settled down.
2010-09-24basic manpageDavid Gwynne
poked by claudio@. repeatedly.
2010-09-24another useless and noisy debug messageClaudio Jeker
2010-09-24add missing .Ar;Jason McIntyre
2010-09-24Set TCP_NODELAY since we want the request to be sent ASAP.Claudio Jeker
OK dlg@
2010-09-24Remvoe some debug messages that are not needed.Claudio Jeker
2010-09-24add -s option. ok martinh@lum
2010-09-24Import iscsictl -- the control tool for iscsid.Claudio Jeker
Currently only discovery and reload work. OK dlg@, matthew@, deraadt@
2010-09-24iSCSI Initiatior daemon using vscsi(4).Claudio Jeker
Currently implements the absolute minimum of the protocol to make it work against targets. Many things still in flux but we're annoyed to work outside of the tree. Commited from a source tree on an iSCSI disk served via iscsid but it is not yet production ready. OK dlg@, matthew@, deraadt@
2010-09-24npppd didn't setup a PIPEX session if MPPE is not required by config andYASUOKA Masahiko
CCP is failed to be opened because the peer doesn't support MPPE. Fixed to setup a PIPEX on such case.
2010-09-24fix a overflow found by parfaitJonathan Gray
ok jakob@
2010-09-23tweak the mclgeti algorithm to behave better under load.David Gwynne
instead of letting hardware rings grow on every interrupt, restrict it so it can only grow once per softclock tick. we can only punish the rings on softclock ticks, so it make sense to only grow on softclock tick boundaries too. the rings are now punished after >1 lost softclock tick rather than >2. mclgeti is now more aggressive at detecting livelock. the rings get punished by an 8th, rather than by half. we now allow the rings to be punished again even if the system is already considered in livelock. without this diff a livelocked system will have its rx ring sizes scale up and down very rapidly, while holding the rings low for too long. this affected throughput significantly. discussed and tested heavily at j2k10. there are still some games with softnet we can play, but this is a good first step. "put it in" and ok deraadt@ ok claudio@ krw@ henning@ mcbride@ if we find out that it sucks we can pull it out again later. till then we'll run with it and see how it goes.
2010-09-23Add the same license text to these files as the rest of npppd.Jonathan Gray
ok yasuoka@
2010-09-23remove support for talking to the zebra routing socket whichJonathan Gray
was not enabled, we use a kernel routing socket for such things. ok yasuoka@ claudio@
2010-09-22unify MS-CHAP implementation to sbin/iked/chap_ms.[ch].YASUOKA Masahiko
copy sbin/iked/chap_ms.[ch] and fixed chap.c and eap.c to compile with it.
2010-09-22make the arguments match the format string in usageJonathan Gray
ok yasuoka@
2010-09-21when a packet has had addresses and/or ports rewritten, show the originalHenning Brauer
addresses/ports too. ok ryan dlg
2010-09-21Warn if schema file can't be opened.Martin Hedenfal
2010-09-21temporary hack to raise snaplen for pflog so that pflog header, ip headerHenning Brauer
and protocol header actually fit in the common cases. stays until canacar tells us how to do it right ;) ok dlg ryan
2010-09-20Implement support for bsdauth authentication via simple binds, not onlyMartin Hedenfal
SASL. This works by prefixing the userPassword attribute with {BSDAUTH}, followed by the (bsd) username. For example: userPassword: {BSDAUTH}username Idea by william@. Tested by william@.
2010-09-20fix-up the sysORTable by using the same name (sensorsMIBObjects) as usedStuart Henderson
in the MIB, rather than a different spelling (sensorMIBObjects). ok martinh@
2010-09-20Use strvis to encode octet strings in -DDEBUG mode.Martin Hedenfal
Makes my terminal happier when debugging.
2010-09-20- fix a regression caused by latest commit (long story made short: do notGilles Chehade
attempt to expand the local delivery buffer when relaying mail, it was kind of ok before but no longer is) - use the same buffer for local deliveries to files and commands tested by jmc@ and I
2010-09-20Return error on GET requests without an instance identifier, both forMartin Hedenfal
tables and scalar values. Fixes system/6468 by not calling table get functions with an unexpectedly short OID. Also fixes system/6071. Scalar variables without an instance specified now returns a noSuchInstance error. GetNext requests correctly returns the .0 instance. This means you can no longer rely on $ snmpget -v2c -c public localhost SNMPv2-MIB::sysDescr returning the .0 instance. You need to specify it explicitly: $ snmpget -v2c -c public localhost SNMPv2-MIB::sysDescr.0 Also return proper SNMPv2 errors per varbind instead of a noSuchName error status, unless SNMPv1 was specified in the request. An earlier version of this diff tested by Remi Laurent, thanks.
2010-09-20ber_scanf_elements "i" format expects a long long pointer.Martin Hedenfal
2010-09-20Allow output of null values with a context class. This is used in SNMPv2 toMartin Hedenfal
return an error exception value for a varbind result ("noSuchObject[0] IMPLICIT NULL" in rfc1905).
2010-09-20according to ingo, it isn;t a problem to have empty [BDS]q macros, soJason McIntyre
revert that part of yesterday's diffs;
2010-09-20Update instructions for testing npppd and pipex. The instructions wasYASUOKA Masahiko
out-of-date-ed after my privilege separation work at n2k10.
2010-09-19more wacky macro fixing;Jason McIntyre
2010-09-14document atime/mtimeMarc Espie
2010-09-14set separate fields for atime/mtime in file entry, use them while creating.Marc Espie
allows user to undef them, and thus not to set utimes. Use that to not set utimes for pkginfo. fixes kili@'s bug in a nicer way wrt Ustar interface...
2010-09-13Reduce the output of MPLS information without removing information.Claudio Jeker
This gives a more compact output.
2010-09-12oga@ spotted a bug in lka_expand() which caused it to miscalculate theGilles Chehade
length of its expand buffer. this commit introduces a new lka_expand() that has been simplified, that fixes the bug and that is more robust. callers of lka_expand() can now determine that it has failed and throw the recipient at session time. lka_expand() rewrite by oga@, changes around it by me, tested on a few different setups but no feedback from tech@ so ... let me know if it's breaking something for you
2010-09-10RFC2247 -> RFC 2247;Jason McIntyre
2010-09-09nessesary -> necessary.Miod Vallat
2010-09-08when I fixed the ruleset matching on rules that had more than one conditionGilles Chehade
by expanding them to several rules, I forgot to copy the tags to the expanded rules. this commit unbreaks matching rules by tag. documentation follows shortly ... spotted and fixed by me a while ago, jacekm@ timeout
2010-09-08had planned to commit the change after oga@ and I are done with littleGilles Chehade
changes to lka_expand() but it looks like a bit more work :-)
2010-09-08add support for sender expansion in smtpd.conf:Gilles Chehade
%U for sender localpart %D for sender domainpart diff sent to tech@ by Gregory Edigarov <greg@bestnet.kharkov.ua>, timeout by jacekm@, ok by me
2010-09-08we do dns resolutions in a separate process because we don't have an asyncGilles Chehade
resolver. if we run scarce on resources and we cannot fork a separate dns process or we cannot socketpair() tell the caller that we have a temporary failure rather than issueing a fatal(). message will stay in queue and be rescheduled later ... bug reported and bugfix tested by Sacha El Masry <lists@devilray.eu>
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-12 13:44:35 +0000