ports/net/samba420, branch main FreeBSD ports tree *: Fix dependency on lmdb0 2026-07-06T19:38:18+00:00 Gleb Popov arrowd@FreeBSD.org 2026-07-06T19:38:13+00:00 7a7dea44149e933dc87f3f116b056e252f1fa2f7 






databases/lmdb0: Add port for LMDB 0.9.x legacy ABI
2026-07-06T15:57:32+00:00

Xin LI
delphij@FreeBSD.org

2026-07-05T16:47:09+00:00

5f9d389f299ac8124a5114c2f014984390b6fd1e

LMDB 1.0 introduced an incompatible on-disk format change and subtle
API breakage: applications that compiled cleanly against 1.0 headers
could fail silently at run time. Known affected ports include dns/knot3,
mail/bogofilter, and mail/postfix; the postfix issue has been confirmed
upstream. Linux distributions such as Arch Linux have observed the same
breakage. Samba can also be affected in certain configurations.

Because the regression is not detectable in an -exp build run -- the
postfix failure only manifests at run time, and bogofilter was caught
only because post-build self-tests happen to exercise this path -- we
cannot rely on package builds to validate the 1.0 upgrade.

This commit introduces databases/lmdb0 as a holding port for the 0.9.35
release, pinned to the 0.x branch with PORTSCOUT=limit:^0. and mutually
conflicting with databases/lmdb, which retains 1.0. The two packages
cannot be installed simultaneously, but having lmdb0 available means:

* Ports known to require the 0.9 ABI can declare an explicit dependency
  on databases/lmdb0 until they are validated against 1.0.
* Users with existing databases in the 0.9 format can still access the
  mdb_dump and mdb_load utilities to migrate data before upgrading.
* The package conflict prevents accidental mixing.

All 50 direct dependents of databases/lmdb are redirected to
databases/lmdb0 for now with a PORTREVISION bump, effectively restoring
the tree to the state prior to the LMDB 1.0 update. Once all dependent
ports are validated against LMDB 1.0, they will be moved back to
databases/lmdb and databases/lmdb0 will be removed.

PR:             ports/296530





LMDB 1.0 introduced an incompatible on-disk format change and subtle
API breakage: applications that compiled cleanly against 1.0 headers
could fail silently at run time. Known affected ports include dns/knot3,
mail/bogofilter, and mail/postfix; the postfix issue has been confirmed
upstream. Linux distributions such as Arch Linux have observed the same
breakage. Samba can also be affected in certain configurations.

Because the regression is not detectable in an -exp build run -- the
postfix failure only manifests at run time, and bogofilter was caught
only because post-build self-tests happen to exercise this path -- we
cannot rely on package builds to validate the 1.0 upgrade.

This commit introduces databases/lmdb0 as a holding port for the 0.9.35
release, pinned to the 0.x branch with PORTSCOUT=limit:^0. and mutually
conflicting with databases/lmdb, which retains 1.0. The two packages
cannot be installed simultaneously, but having lmdb0 available means:

* Ports known to require the 0.9 ABI can declare an explicit dependency
  on databases/lmdb0 until they are validated against 1.0.
* Users with existing databases in the 0.9 format can still access the
  mdb_dump and mdb_load utilities to migrate data before upgrading.
* The package conflict prevents accidental mixing.

All 50 direct dependents of databases/lmdb are redirected to
databases/lmdb0 for now with a PORTREVISION bump, effectively restoring
the tree to the state prior to the LMDB 1.0 update. Once all dependent
ports are validated against LMDB 1.0, they will be moved back to
databases/lmdb and databases/lmdb0 will be removed.

PR:             ports/296530







all: drop support for FreeBSD 13, mips and risc64sf
2026-05-07T21:47:29+00:00

Rene Ladan
rene@FreeBSD.org

2026-03-05T20:06:49+00:00

2a7c0561200c6cf9d0c0252cd4a7ab446eca8e4a

Reviewed by:            many (*)
Differential Revision:  https://reviews.freebsd.org/D55624
Differential Revision:  https://reviews.freebsd.org/D55642 (merged in from bofh)

many (*)
  acm arrowd brooks cmt dch decke dinoex eduardo fluffy fuz gahr garga
  jbeich joerg jrm kai kenrap martymac matthew mfechner michaelo mizhka
  nobutaka pkubaj se tagattie thj

  Anton Saietskii
  GenericRikka
  Gert Doering
  Jan Bramkamp
  Oleh Hushchenkov
  Oleksandr Kryvulia
  Ralf van der Enden
  Yamagi

  desktop kde python tcltk office





Reviewed by:            many (*)
Differential Revision:  https://reviews.freebsd.org/D55624
Differential Revision:  https://reviews.freebsd.org/D55642 (merged in from bofh)

many (*)
  acm arrowd brooks cmt dch decke dinoex eduardo fluffy fuz gahr garga
  jbeich joerg jrm kai kenrap martymac matthew mfechner michaelo mizhka
  nobutaka pkubaj se tagattie thj

  Anton Saietskii
  GenericRikka
  Gert Doering
  Jan Bramkamp
  Oleh Hushchenkov
  Oleksandr Kryvulia
  Ralf van der Enden
  Yamagi

  desktop kde python tcltk office







net/samba420: Add patches to fix ndr.h consumers (i.e. SSSD)
2026-03-20T15:11:31+00:00

Gleb Popov
arrowd@FreeBSD.org

2026-03-05T19:23:29+00:00

bc1bc4b7ec224b5a2411deb5f9fd6d6262b99741

This is the same change that was applied to net/samba416 in
fd6a710e199bdba2b2df37a481038e743da895dd

PR:		293566
Approved by:	samba (maintainer timeout)





This is the same change that was applied to net/samba416 in
fd6a710e199bdba2b2df37a481038e743da895dd

PR:		293566
Approved by:	samba (maintainer timeout)







net/samba420: opt out from Features/fortify.mk
2026-02-26T19:58:35+00:00

Evgenii Khramtsov
2khramtsov@gmail.com

2026-01-12T10:41:20+00:00

b513719c8cf79f08de8e396458000feb01302f1b

[...]
Checking for freebsd sendfile support                                                           : not found
sendfile support not found but it was requested !
(complete log in /wrkdirs/usr/ports/net/samba420/work/samba-4.20.8/bin/config.log)
===>  Script "configure" failed unexpectedly.
[...]

PR:	292390





[...]
Checking for freebsd sendfile support                                                           : not found
sendfile support not found but it was requested !
(complete log in /wrkdirs/usr/ports/net/samba420/work/samba-4.20.8/bin/config.log)
===>  Script "configure" failed unexpectedly.
[...]

PR:	292390







treewide: Remove references to USES= fam and move to LIB_DEPENDS
2026-01-13T00:12:09+00:00

Daniel Engberg
diizzy@FreeBSD.org

2026-01-11T17:57:24+00:00

97f98ba45c954c94d741439cfcf66d5e5059e3e4

Only a handful of ports in tree uses this helper which
used to make a switch between devel/fam and devel/gamin more
convenient. With devel/fam going away there's no need to maintain
this any further for a handful of ports.

Approved by:	blanket





Only a handful of ports in tree uses this helper which
used to make a switch between devel/fam and devel/gamin more
convenient. With devel/fam going away there's no need to maintain
this any further for a handful of ports.

Approved by:	blanket







net/samba420: Deprecate without expiration date
2025-12-18T14:30:24+00:00

Mateusz Piotrowski
0mp@FreeBSD.org

2025-12-18T14:09:47+00:00

f2ced994582d30fe4d664f0762b2bc348619b4d3

This is meant to give notice to Samba users that 4.20 is not supported
anymore. The default Samba in the tree is 4.16 currently, so removing
4.20 most likely will not be a big task.

PR:	291775





This is meant to give notice to Samba users that 4.20 is not supported
anymore. The default Samba in the tree is 4.16 currently, so removing
4.20 most likely will not be a big task.

PR:	291775







net/samba420: Update to 4.20.8
2025-12-18T14:30:23+00:00

Mateusz Piotrowski
0mp@FreeBSD.org

2025-12-18T13:58:01+00:00

f333946f460e8e910afda9b04b2b93af00eae2f8

- Remove files/patch-python_samba_tdb__util.py: it's already included in
  upstream distribution.

Reported by:	Andrej Ebert <andrej@ebert.su>
PR:	287927





- Remove files/patch-python_samba_tdb__util.py: it's already included in
  upstream distribution.

Reported by:	Andrej Ebert <andrej@ebert.su>
PR:	287927







net/samba420: Fix recent CVEs
2025-10-22T14:43:05+00:00

Andrea Venturoli
freebsd@netfence.it

2025-10-22T14:43:05+00:00

dfe0f7673b604dd813da98c2219c8d0ef3e7b599

PR:		290329
Security:	https://www.samba.org/samba/security/CVE-2025-10230.html
Security:	https://www.samba.org/samba/security/CVE-2025-9640.html





PR:		290329
Security:	https://www.samba.org/samba/security/CVE-2025-10230.html
Security:	https://www.samba.org/samba/security/CVE-2025-9640.html







net/samba420: fix fdescfs handling which causes several issues
2025-08-21T19:01:17+00:00

Dimitry Andric
dim@FreeBSD.org

2025-06-30T12:43:18+00:00

a60d74e32eeedfcec40f37ba6a4e409fe53dbeeb

Issue from bug 284623: several PANIC errors in log.smbd, similar to:

  [2025/02/02 16:56:09.823293,	0] ../../lib/util/fault.c:193(smb_panic_log)
    PANIC (pid 8625): async open timeout in 4.20.7
  [2025/02/02 16:56:09.827129,	0] ../../lib/util/fault.c:304(log_stack_trace)
    BACKTRACE: 20 stack frames:
     #0 0x3645750f6ec7 <log_stack_trace+0x37> at /usr/local/lib/samba4/private/libgenrand-private-samba.so
     #1 0x3645750f6f9e <smb_panic+0xe> at /usr/local/lib/samba4/private/libgenrand-private-samba.so
     #2 0x36456b707b24 <smbd_exit_server+0x1b4> at /usr/local/lib/samba4/private/libsmbd-base-private-samba.so
     #3 0x36456b707981 <smbd_exit_server+0x11> at /usr/local/lib/samba4/private/libsmbd-base-private-samba.so
     #4 0x364575394bcc <exit_server+0x1c> at /usr/local/lib/samba4/private/libsmbd-shim-private-samba.so
     #5 0x36456b6b2b10 <delete_all_streams> at /usr/local/lib/samba4/private/libsmbd-base-private-samba.so
     #6 0x364575935dff <tevent_common_invoke_timer_handler+0x18f> at /usr/local/lib/libtevent.so.0
     #7 0x364575935fa4 <tevent_common_loop_timer_delay+0x94> at /usr/local/lib/libtevent.so.0
     #8 0x3645759337c5 <tevent_context_same_loop+0xb15> at /usr/local/lib/libtevent.so.0
     #9 0x36457592f36a <_tevent_loop_once+0xea> at /usr/local/lib/libtevent.so.0
     #10 0x36457592f5f2 <tevent_common_loop_wait+0x32> at /usr/local/lib/libtevent.so.0
     #11 0x36456b6cd34b <smbd_process+0x83b> at /usr/local/lib/samba4/private/libsmbd-base-private-samba.so
     #12 0x363d4788f9bd <main+0x42fd> at /usr/local/sbin/smbd
     #13 0x36457593067e <tevent_common_invoke_fd_handler+0x9e> at /usr/local/lib/libtevent.so.0
     #14 0x364575933a44 <tevent_context_same_loop+0xd94> at /usr/local/lib/libtevent.so.0
     #15 0x36457592f36a <_tevent_loop_once+0xea> at /usr/local/lib/libtevent.so.0
     #16 0x36457592f5f2 <tevent_common_loop_wait+0x32> at /usr/local/lib/libtevent.so.0
     #17 0x363d4788df3f <main+0x287f> at /usr/local/sbin/smbd
     #18 0x363d4788cbac <main+0x14ec> at /usr/local/sbin/smbd
     #19 0x36457742ac3a <__libc_start1+0x12a> at /lib/libc.so.7

Issue from bug 286821: accessing Samba shares from macOS clients results
in error dialogs titled: "There was a problem connecting to the server",
with content "The share does not exist on the server. Please check the
share name and then try again".

The problems are caused by fdescfs handling:
* patch 0028-s3-lib-system-add-FreeBSD-proc_fd_pattern.patch was how
  Timur solved the fd problem for Samba 4.19 (mounting fdescfs nodup
  under /var/run/samba4/fd);
* if only this had been accepted upstream, we would not have had this
  problem in 4.20... :(
* in any case this code is now unused in 4.20, where Samba went even
  more Linux-only;
* patch 0101-FreeBSD-add-fdescfs-paths-workaround.patch was a naive
  tentative to solve the same problem for 4.20, apparently without
  taking into account what had been done before; it's broken by design,
  brokenly implementated and it simply doesn't work.

Apply a patch by Andrea Venturoli <ml@netfence.it>, which drops the 0101
patch, and modifies the older 0028 patch to revive what Timur had done.

PR:		284623, 286821
Tested by:	O. Hartmann <ohartmann@walstatt.org> and others
Approved by:	samba (0mp)
MFH:		2025Q3





Issue from bug 284623: several PANIC errors in log.smbd, similar to:

  [2025/02/02 16:56:09.823293,	0] ../../lib/util/fault.c:193(smb_panic_log)
    PANIC (pid 8625): async open timeout in 4.20.7
  [2025/02/02 16:56:09.827129,	0] ../../lib/util/fault.c:304(log_stack_trace)
    BACKTRACE: 20 stack frames:
     #0 0x3645750f6ec7 <log_stack_trace+0x37> at /usr/local/lib/samba4/private/libgenrand-private-samba.so
     #1 0x3645750f6f9e <smb_panic+0xe> at /usr/local/lib/samba4/private/libgenrand-private-samba.so
     #2 0x36456b707b24 <smbd_exit_server+0x1b4> at /usr/local/lib/samba4/private/libsmbd-base-private-samba.so
     #3 0x36456b707981 <smbd_exit_server+0x11> at /usr/local/lib/samba4/private/libsmbd-base-private-samba.so
     #4 0x364575394bcc <exit_server+0x1c> at /usr/local/lib/samba4/private/libsmbd-shim-private-samba.so
     #5 0x36456b6b2b10 <delete_all_streams> at /usr/local/lib/samba4/private/libsmbd-base-private-samba.so
     #6 0x364575935dff <tevent_common_invoke_timer_handler+0x18f> at /usr/local/lib/libtevent.so.0
     #7 0x364575935fa4 <tevent_common_loop_timer_delay+0x94> at /usr/local/lib/libtevent.so.0
     #8 0x3645759337c5 <tevent_context_same_loop+0xb15> at /usr/local/lib/libtevent.so.0
     #9 0x36457592f36a <_tevent_loop_once+0xea> at /usr/local/lib/libtevent.so.0
     #10 0x36457592f5f2 <tevent_common_loop_wait+0x32> at /usr/local/lib/libtevent.so.0
     #11 0x36456b6cd34b <smbd_process+0x83b> at /usr/local/lib/samba4/private/libsmbd-base-private-samba.so
     #12 0x363d4788f9bd <main+0x42fd> at /usr/local/sbin/smbd
     #13 0x36457593067e <tevent_common_invoke_fd_handler+0x9e> at /usr/local/lib/libtevent.so.0
     #14 0x364575933a44 <tevent_context_same_loop+0xd94> at /usr/local/lib/libtevent.so.0
     #15 0x36457592f36a <_tevent_loop_once+0xea> at /usr/local/lib/libtevent.so.0
     #16 0x36457592f5f2 <tevent_common_loop_wait+0x32> at /usr/local/lib/libtevent.so.0
     #17 0x363d4788df3f <main+0x287f> at /usr/local/sbin/smbd
     #18 0x363d4788cbac <main+0x14ec> at /usr/local/sbin/smbd
     #19 0x36457742ac3a <__libc_start1+0x12a> at /lib/libc.so.7

Issue from bug 286821: accessing Samba shares from macOS clients results
in error dialogs titled: "There was a problem connecting to the server",
with content "The share does not exist on the server. Please check the
share name and then try again".

The problems are caused by fdescfs handling:
* patch 0028-s3-lib-system-add-FreeBSD-proc_fd_pattern.patch was how
  Timur solved the fd problem for Samba 4.19 (mounting fdescfs nodup
  under /var/run/samba4/fd);
* if only this had been accepted upstream, we would not have had this
  problem in 4.20... :(
* in any case this code is now unused in 4.20, where Samba went even
  more Linux-only;
* patch 0101-FreeBSD-add-fdescfs-paths-workaround.patch was a naive
  tentative to solve the same problem for 4.20, apparently without
  taking into account what had been done before; it's broken by design,
  brokenly implementated and it simply doesn't work.

Apply a patch by Andrea Venturoli <ml@netfence.it>, which drops the 0101
patch, and modifies the older 0028 patch to revive what Timur had done.

PR:		284623, 286821
Tested by:	O. Hartmann <ohartmann@walstatt.org> and others
Approved by:	samba (0mp)
MFH:		2025Q3