Commit Graph

3622 Commits

Author SHA1 Message Date
Mark Murray
daf509c612 The PAM module pam_krb5 does not have "session" capabilities.
Don't give examples of such use, this is bogus.
2003-04-30 21:57:54 +00:00
Mark Murray
20a83c49ba Make the defaults for Kerberos 5 a little more up-to-date. 2003-04-30 20:58:49 +00:00
Mark Murray
7a4511d4cc Change the name of the kadmind binary to match reality, now that
KerberosIV is no longer an issue.
2003-04-30 20:42:41 +00:00
Mike Makonnen
7256f99c75 This script should require mountcritremote, since that is the last
script at which a filesystem will be mounted in FreeBSD. Without this
the script was being inserted later in the boot than necessary.

Approved by:	markm (mentor) (implicit)
Reviewed by:	dougb
Noticed by:	Andrzej ToboÅa <san@wilk.2a.pl>
2003-04-30 07:12:09 +00:00
Mike Makonnen
3d9556ddc0 This particular debugging statement is very verbose, making the rest
of the debug output hard to follow. Comment it out. It's commented out
in NetBSD's version as well.

Approved by:	markm (mentor)(implicit)
2003-04-30 03:03:47 +00:00
Mike Makonnen
c56836728a o Make the 'Ip-filter module loaded' messages informational
o Make 'No ipnat rules' a warning
o Remove unecessary ' ..'

Approved by:	markm (implicit)
2003-04-30 02:54:17 +00:00
Mike Makonnen
f686a8e864 Running the script with restart or manually stopping and starting
it doesn't work because the start_cmd doesn't enable ipfilter if
it is currently disabled.

Approved by:	markm (mentor) (implicit)
Submitted by:	Michael Lyngbøl <lyngbol@bifrost.lyngbol.dk>
PR:		conf/46103
2003-04-30 02:19:38 +00:00
Warner Losh
52aef7c6a8 We need pccard start too. 2003-04-29 15:32:02 +00:00
John W. De Boskey
fd08d16bc2 new netstart
atm should be correct but is commented out pending appropriate testing.

Submitted by:	mtm
2003-04-29 12:26:37 +00:00
John W. De Boskey
18ba26f0b8 Add rc.subr (found during new /etc/netstart testing) 2003-04-29 12:08:43 +00:00
Matthew N. Dodd
0f0e5707b9 Add entries for Multicast DNS. 2003-04-29 09:54:06 +00:00
Doug Barton
ff50165760 Move the mktemp invocation inside motd_start to avoid creating temp
files when uptdate_motd and clear_tmp_enable are both NO.

Submitted by:	Alex Deiter <tiamat@komi.mts.ru>
2003-04-29 06:56:40 +00:00
Doug Barton
4bc6a70cad Add a dire warning about the impending demise of the old rc system.
Suggested by:	scottl
2003-04-27 07:08:07 +00:00
Warner Losh
e50dfdc9ab xten isn't needed after tw is gone.
Approved by: re@ (scottl)
2003-04-27 05:49:53 +00:00
Warner Losh
9fe74c43d0 xten user no longer needed. 2003-04-27 05:45:29 +00:00
Mike Makonnen
20350cadb9 Use $ipnat_program instead of the hardcoded path, which was wron
anyways.

Approved by:	markm (mentor) (implicit)
Submitted by:	leafy <leafy@leafy.idv.tw>
2003-04-24 18:14:52 +00:00
Dag-Erling Smørgrav
b418f48cba Add nullok to the pam_unix line. 2003-04-24 12:22:42 +00:00
Mike Makonnen
f6b6e5ea40 o Add support for running /etc/rc.early
o Re-run through /etc/sysctl.conf a second time just before we set
  the securelevel.

Approved by:	markm (mentor) (implicit)
Reviewed by:	dougb
2003-04-24 08:27:29 +00:00
Mike Makonnen
8cf06adbcb Make ipfilter, ipnat, ipmon, and ipfs behave more like the old rc.
o group them together so they run one right after another
	o use the NetBSD supplied ipfs script instead of tacking
	  it on to the end of ipnat
	o Load the ipl module in ipnat and ipfilter, if it's not already
	  loaded
	o In ipmon and ipnat show a warning if neither ipfilter nor
	  ipnat is enabled or the ipl module is not loaded, and exit

Approved by:	markm (mentor) (implicit)
Tested by:	leafy <leafy@leafy.idv.tw>
2003-04-24 08:20:47 +00:00
Makoto Matsushita
7172e3d4bf Set appropriate tag "fsck" to logger(1) for background fsck messages.
PR:		51174
Submitted by:	Alex Popa <razor@ldc.ro>
2003-04-23 15:38:02 +00:00
Dag-Erling Smørgrav
5b9cb0c3eb Make sure debug.log only gets debugging messages. 2003-04-23 13:08:31 +00:00
Mike Makonnen
67b53e9721 Run interface specific scripts for dhcp interfaces too.
This is how it has always been done (before and after rc.d) but
I somehow failed to include it when I broke up network1.

Submitted by:	bmah
Approved by:	markm (mentor)(implicit)
2003-04-20 19:14:16 +00:00
Robert Watson
6408bdf60f Remove the 'te' label elements from the default configuration, since we
no longer plan on shipping a TE MAC module independent from SEBSD.

Obtained from:	TrustedBSD Project
Sponsored by:	DARPA, Network Associates Laboratories
2003-04-20 03:09:35 +00:00
Mike Makonnen
cd3b264dfd Spell ${_jail} correctly
Submitted by: Shizuka Kudo <shizukakudo_99@yahoo.com>
Approved by:	markm (mentor) (implicit)
2003-04-19 07:50:32 +00:00
Mike Makonnen
23cecb19f0 The changes to rc.d/network1 will not get merged in by
mergemaster if it does not appear in the list of files to install.
2003-04-19 01:56:44 +00:00
Mike Makonnen
459e7c4314 o Hook the new files up to the build.
o Make sure all the scripts reference rc.d/netif and not rc.d/network1

Approved by:	markm (mentor)
2003-04-18 17:55:05 +00:00
Mike Makonnen
6167ee89ee Make use of the dhclient script. This will bring up/down dhcp
interfaces.

Approved by:	markm (mentor)
2003-04-18 17:53:02 +00:00
Mike Makonnen
8b3695ab45 Break out and rewrite the network setup scripts.
o /etc/network.subr contains common subroutines used for seting
	  up network interfaces
	o rc.d/hostname sets the hostname if not already set
	o rc.d/nisdomain sets the nis domain *after* rpcbind but
	  before the yp* daemons. This fixes issues with temporary
	  hangs when looking up informaion in nis before it's ready.
	o rc.d/netif brings network interfaces (minus dhcp)  up.
	o rc.d/network1 has been disabled and will be retired before
	  RELENG_5. It will be replaced by rc.d/netif

Approved by:	markm (mentor)
2003-04-18 17:51:54 +00:00
Gregory Neil Shapiro
3e59cfb104 The sendmail binary now has a reasonable default for MaxMimeHeaderLength
built in.  No need to set it here.

MFC after:	1 week
2003-04-18 01:25:41 +00:00
Mike Makonnen
61c79e443b Fix typo (and make it more explicit/self-documenting).
Noticed by:	gshapiro
2003-04-16 16:44:00 +00:00
Mike Makonnen
600b20796f Add new knobs for controlling jails in rc.d and document them.
Approved by:	makrm (mentor)
2003-04-16 16:29:51 +00:00
Mike Makonnen
676f8a41dd o Add a script to start jails on boot.
o Hook it up to the build

Approved by:	markm (mentor)
Submitted by:	Clement Laforet <sheepkiller@cultdeadsheep.org> (modified)
Prodded by:	mike
2003-04-16 16:27:23 +00:00
Takeshi Shibagaki
2ae05d4b0e Add NTT-ME SS-LAN CARD MN128. This card entry has been
committed into NEWCARD.
2003-04-10 17:16:01 +00:00
Dag-Erling Smørgrav
4845d27e63 Introduce debug.log which gets debug.* (most of this would otherwise go
to the great bit-bucket in the sky)
2003-04-08 16:14:02 +00:00
Yaroslav Tykhiy
fec51ab5fc Stop logging ``authpriv'' messages to the world-readable file
/var/log/messages.  Such messages are for the eyes of authorized
personnel only.

PR:		conf/48170
Discussed in:	freebsd-security
MFC after:	2 weeks
2003-04-03 18:37:49 +00:00
Ruslan Ermilov
70861b840c Drop the silly notion that fd* entries have both a' and b'
partitions; this does nothing except upsetting disklabel(8).
2003-04-02 20:16:02 +00:00
Ruslan Ermilov
cc76558ad4 Make disktab(5) MI (repo-copied from etc.i386/disktab). 2003-04-02 20:13:59 +00:00
John Baldwin
711c2e1de2 Remove 220.backup-distfile since it has been deleted.
Reported by:	mdodd
Pointy hat to:	jhb
2003-04-01 20:32:01 +00:00
John Baldwin
3165d2ea56 Complete removal of 320.rdist by removing its entry from periodic.conf and
removing the related 220.backup-distfile script and associatd periodic.conf
entry.

Discussed with:	obrien
2003-04-01 17:45:27 +00:00
Mike Makonnen
1d89dde13e Make the 'restart' command work. Otherwise, it would successfully
stop ipfw, but not enable it again.

Aesthetic changes
	o Use positve logic (instead of negative)
	o create a 'stop' function, rather than putting the
	  commands in the stop_cmd variable.

Submitted by:	des
Approved by:	markm (mentor) (implicit)
2003-03-30 15:52:18 +00:00
David E. O'Brien
1b79399c2b 320.rdist is OBE as we don't have rdist in the base system any more. 2003-03-29 03:28:28 +00:00
David E. O'Brien
d19c3acb44 This is OBE as we don't have rdist in the base system any longer. 2003-03-29 03:27:49 +00:00
Maxim Sobolev
5edf954aad Add pc-card from ARCHOS CD-224E cdrom.
MFC after:	1 week
2003-03-28 11:12:52 +00:00
Tom Rhodes
bb5de30ab4 Update the handbook printing section URL so that it points to the
correct location.
2003-03-25 18:03:11 +00:00
Gregory Neil Shapiro
436a3d96d7 Fix formatting (spaces -> tab)
MFC after:	1 week
2003-03-25 00:54:05 +00:00
Ruslan Ermilov
5efb531d6c Directories for Russian manpages. 2003-03-24 09:39:09 +00:00
Hajimu UMEMOTO
667b217aa3 add missing `ipf -s'.
Submitted by:	Mark Huizer <xaa+freebsd@timewasters.nl>
2003-03-22 14:53:23 +00:00
Crist J. Clark
abb4bd6cde Attach the kldxref script to the build/install. 2003-03-17 23:20:48 +00:00
Crist J. Clark
5d75ba3db9 A new rc-ng script to build linker.hints files with kldxref(8)
automatically at boot time. Associated rc.conf(5) knobs and
documentation are included.
2003-03-17 23:15:53 +00:00
Doug Barton
52bf43dc11 Make it more clear how to disable keybell, and where its options are found.
PR:		conf/41772
2003-03-15 08:14:42 +00:00