summaryrefslogtreecommitdiff
path: root/usr.sbin
AgeCommit message (Collapse)Author
2017-03-04Make tcpdump show HT protection settings consistently. Previously, nothingStefan Sperling
was displayed if HT protection was disabled. Now it displays as "htprot none". ok sthen@
2017-03-04Send VPLS MAC withdrawals.Renato Westphal
RFC 4762 says that MAC address withdrawal messages can be used to improve convergence time in VPLS networks. This patch makes ldpd send MAC withdrawals whenever a non-pseudowire interface pertaining to a VPLS goes down. The processing of received MAC withdrawals will be implemented later.
2017-03-04Fix parsing of optional tlvs in address messages.Renato Westphal
We were aborting the session upon receipt of MAC Address Withdrawal messages. Now make the parser aware that optional TLVs are possible in address messages.
2017-03-04Implement RFC 5919 (LDP End-of-LIB).Renato Westphal
2017-03-04Implement RFC 6667 (Typed Wildcard FEC for PWid).Renato Westphal
2017-03-04Implement RFC 5918 (Typed Wildcard FEC).Renato Westphal
2017-03-04Implement RFC 5561 (LDP Capabilities).Renato Westphal
This patch per-se doesn't introduce any useful functionality, but prepares the ground for new enhancements to ldpd (i.e. implementation of new RFCs that make use of LDP capabilities).
2017-03-04Implement support for PWid group wildcards.Renato Westphal
This was missing from our original RFC 4447 VPLS implementation. Now ldpd understands group wildcards as mandated by the RFC, but we still don't send them ourselves. I can't see any case in which sending a group wildcard would be useful, but nonetheless this patch provides a function called lde_send_labelwithdraw_pwid_wcard() which is ready to be used in the future anytime we feel like it might be useful.
2017-03-03Fix processing of Label Withdraw messages.Renato Westphal
Whenever we receive a Label Withdraw message with an optional Label TLV, we should check if this label matches the label previously received from this neighbor for this FEC. If they don't match then we shouldn't uninstall the previous label from the kernel. This fixes a misinterpretation from the "Receive Label Withdraw" algorithm described in the A.1.5 section of RFC 5036. Also, simplify the check of pending withdraws in lde_check_release() and lde_check_release_wcard().
2017-03-03The PW Status is an unknown TLV.Renato Westphal
Without this fix, any LDP speaker that doesn't implement RFC 4447 will shut down the session upon receipt of a PWid Label Mapping (unless the use of the PW-Status TLV is disabled via configuration).
2017-03-03Send correct status code on error condition.Renato Westphal
The Unknown TLV status code is reserved for cases where we don't know how to process a given TLV and its Unknown TLV bit is not set. In the case of Address Messages, the Address List TLV is mandatory and should appear before any optional TLV in the message. If that doesn't happen the correct status notification to send is "Missing Message Parameters" (non-fatal error). Also, add a missing htons when creating an Address List TLV. Since the value of TLV_TYPE_ADDRLIST is 0x0101 this missing htons wasn't noticed earlier.
2017-03-03Create helper functions to log sent/received messages.Renato Westphal
2017-03-03Provide more detailed output when logging notification messages.Renato Westphal
2017-03-03Kill send_notification_nbr().Renato Westphal
Be more clever and trigger the PDU SENT event inside send_notification() when tcp->nbr is set. This way we can eliminate send_notification_nbr() and always use send_notification() instead.
2017-03-03Minor tweaks.Renato Westphal
2017-03-03Allow to run on a non-default rdomain.Renato Westphal
OK claudio@
2017-03-03Allow to specify an alternate control socket.Renato Westphal
This is required to run multiple instances of ldpd. OK claudio@
2017-03-03Internally libssl uses 16k buffer, the libevent TLS wrapper usesAlexander Bluhm
4k read buffer. This can hang ldapd(8). Setting both to 16k improves the situation. report Seiya Kawashima; feedback Robert Klein; test and OK gsoares@
2017-03-03Remove a "=over 4" after the corresponding "=back" has been removedAlexander Bluhm
in the previous commit. Makes pod2man compile again.
2017-03-03spring cleanup, remove sysctl from doc, and finally gc some older annotationsMarc Espie
which don't even exist in the PackingElement hierarchy anymore.
2017-03-03pass @sysctl into old stuffMarc Espie
okay sthen@
2017-03-03Undefined behavior: Variable 'user' was used as parameter andReyk Floeter
destination in snprintf(). Use a temporary variable instead. Found and OK by jsg@
2017-03-02Fix breakage of md5 authentication.Renato Westphal
The previous commit (rev 1.47) added a missing htonl in pfkey_send() but didn't add a corresponding ntohl in pfkey_reply(). This patch fixes this. Found the hard way by benno@, who also suggested the rename of spip to spi. OK benno@ claudio@ henning@
2017-03-02Add "locked lladdr" option to prevent VMs from spoofing MAC addresses.Reyk Floeter
This is especially useful when multiple VMs share a switch, the implementation is independent from the underlying switch or bridge. no objections mlarkin@
2017-03-01Rename start_vm_complete to vm_start_complete for consistency.Reyk Floeter
2017-03-01unbreak vmctl build by renaming a function that now conflicts withMike Larkin
something from vmd.h . Temporary fix until the original committer can fix it the way he desires.
2017-03-01Split vmm.c into two files: vm.c for the VM child, vmm.c for the parentReyk Floeter
As discussed with mlarkin@, it makes it easier to maintain the file. OK mlarkin@
2017-03-01Remove pkg.conf leftover.Robert Peichaer
OK espie@
2017-03-01tweak previous; ok reykJason McIntyre
2017-03-01scrape most of the config frameworkMarc Espie
okay aja@, rpe@
2017-03-01Add "owner" option to set a user/group ownership for pre-configured VMsReyk Floeter
This allows matching users to start or stop VMs that they "own" and to access the console accordingly. OK mlarkin@
2017-03-01*nargv[] holds an array of pointers, so it should beGleydson Soares
terminated by a null pointer. ok rzalamena@ reyk@
2017-03-01add missing rcsidGleydson Soares
2017-03-01move up getpid() and getpwnam(LDAP USER) checksGleydson Soares
to fail earlier and also make them consistent with other daemons. while here: - fix getpwnam(LDAPD_USER) errx() - no need to skip_chroot ok jmatthew@
2017-02-28Make object-in-archive-used identification portable to lld: use --tracePhilip Guenther
instead of -M and transform the output to a common /path/to/archive.a(object.o) syntax. problem noted by jsg@ ok kettenis@ jsg@
2017-02-28Sort vm.conf(5) config options alphabeticallyReyk Floeter
OK mlarkin@
2017-02-28Use fmt_scaled(3) in vmctl status output to print curmem/maxmemReyk Floeter
This matches the accepted input in vmctl start and vm.conf that supports using M, G, T etc. instead of a hardcoded MB. It also allows to shrink the column size as the unit will be scaled automatically. OK mlarkin@
2017-02-27update an example in the relayd.conf manpage, that was not convertedSebastian Benoit
to the new syntax 2 years ago. Found by Michael W. Lucas, thanks! ok tb@
2017-02-27Remove support for pkg.conf in light of the consolidation towardsRobert Peichaer
a single configuration file for the OpenBSD repository location. The pkg_* tools now use installurl(5) to find the package repository. NOTE: /etc/installurl only contains a single URL pointing to a mirror. Use the PKG_PATH environment variable to specify more than one package repository. prodded by and OK deraadt@ aja@
2017-02-27Replace openpty(3) with local function that uses pre-opened /dev/ptm fdReyk Floeter
This allows more flexibility for upcoming changes and better pledge. We also didn't use half of the features of libutil's openpty function. Additionally, make sure that the ttys are closed correctly on shutdown. OK gilles@
2017-02-27framework for some performance stats as a -V... option (like how muchMarc Espie
of a package you actually downloaded, or how many packages you touch) okay aja@
2017-02-27Add size checks for imsg received over the control socket.Reyk Floeter
Additionally, make sure that vmd never fatal()s when receiving an invalid imsg from an arbitrary user over the control socket. OK gilles@
2017-02-27Print the DNSSEC OKAY flag as "DO", like in upstream tcpdumpJeremie Courreges-Anglas
ok florian@
2017-02-26Use mkdir -p instead of install -d to create the obj/util directory.Theo Buehler
The latter defaults to 755, which doesn't play nicely with BUILDUSER. Problem reported by jmc and Jan Stary; tested by myself and jmc. ok ajacoutot
2017-02-26build pcidump on arm64Jonathan Gray
2017-02-25pledge stdio before parsing the http responseBob Beck
ok tb@
2017-02-24Implement fork+exec modelGleydson Soares
OK jmatthew@
2017-02-22print a formatted errx() string instead of segfault,Gleydson Soares
by checking argc correctly. ok guenther@
2017-02-22No need to use SIOCGIFRDOMAIN anymore.Renato Westphal
2017-02-22Allow specifying an alternate socket path.Renato Westphal