net/samba420 4.20.8_3

net/samba4*: fix lmdb breakage

PR:		299660
Reported by:	Matthew Wener <matthew@wener.org>
Sponsored by:	Klara, Inc.

databases/lmdb: allow to install both 0.x and 1.x together

LMDB 1.0 and the legacy 0.9 ABI cannot be mixed, the datanase format are
incompatibles as well.

Rename or relocate everything databases/lmdb0 installs so that it no
longer overlaps with databases/lmdb:
- the utilities are now mdb_copy0, mdb_dump0, mdb_load0 and mdb_stat0
- the header is include/lmdb0/lmdb.h
- the linker name is liblmdb0.so, the shared object keeps its ABI name
  liblmdb.so.0 so already linked programs are unaffected
- the pkg-config file is lmdb0.pc

A compatibility prefix holding the previous layout is also installed
under ${PREFIX}/lmdb0/ (include/, lib/ and libdata/pkgconfig/) so that
build systems which expect to find lmdb.h and -llmdb relative to a
single directory only need a path change.

Now all ports should migrate to lmdb 1.X and use the lmdb 0.9 port to ease
in the migration path, lmdb, the lmdb 0.x is supposed to get removed at
some point.

Approved by:	mat (portmgr)
Reviewed by:	mat
Differential Revision:	https://reviews.freebsd.org/D60741

*: Fix dependency on lmdb0

databases/lmdb0: Add port for LMDB 0.9.x legacy ABI

LMDB 1.0 introduced an incompatible on-disk format change and subtle
API breakage: applications that compiled cleanly against 1.0 headers
could fail silently at run time. Known affected ports include dns/knot3,
mail/bogofilter, and mail/postfix; the postfix issue has been confirmed
upstream. Linux distributions such as Arch Linux have observed the same
breakage. Samba can also be affected in certain configurations.

Because the regression is not detectable in an -exp build run -- the
postfix failure only manifests at run time, and bogofilter was caught
only because post-build self-tests happen to exercise this path -- we
cannot rely on package builds to validate the 1.0 upgrade.

This commit introduces databases/lmdb0 as a holding port for the 0.9.35
release, pinned to the 0.x branch with PORTSCOUT=limit:^0. and mutually
conflicting with databases/lmdb, which retains 1.0. The two packages
cannot be installed simultaneously, but having lmdb0 available means:

* Ports known to require the 0.9 ABI can declare an explicit dependency
  on databases/lmdb0 until they are validated against 1.0.
* Users with existing databases in the 0.9 format can still access the
  mdb_dump and mdb_load utilities to migrate data before upgrading.
* The package conflict prevents accidental mixing.

All 50 direct dependents of databases/lmdb are redirected to
databases/lmdb0 for now with a PORTREVISION bump, effectively restoring
the tree to the state prior to the LMDB 1.0 update. Once all dependent
ports are validated against LMDB 1.0, they will be moved back to
databases/lmdb and databases/lmdb0 will be removed.

PR:             ports/296530

all: drop support for FreeBSD 13, mips and risc64sf

Reviewed by:            many (*)
Differential Revision:  https://reviews.freebsd.org/D55624
Differential Revision:  https://reviews.freebsd.org/D55642 (merged in from bofh)

many (*)
  acm arrowd brooks cmt dch decke dinoex eduardo fluffy fuz gahr garga
  jbeich joerg jrm kai kenrap martymac matthew mfechner michaelo mizhka
  nobutaka pkubaj se tagattie thj

  Anton Saietskii
  GenericRikka
  Gert Doering
  Jan Bramkamp
  Oleh Hushchenkov
  Oleksandr Kryvulia
  Ralf van der Enden
  Yamagi

  desktop kde python tcltk office

net/samba420: Add patches to fix ndr.h consumers (i.e. SSSD)

This is the same change that was applied to net/samba416 in
fd6a710e199bdba2b2df37a481038e743da895dd

PR:		293566
Approved by:	samba (maintainer timeout)

net/samba420: opt out from Features/fortify.mk

[...]
Checking for freebsd sendfile support                                                           : not found
sendfile support not found but it was requested !
(complete log in /wrkdirs/usr/ports/net/samba420/work/samba-4.20.8/bin/config.log)
===>  Script "configure" failed unexpectedly.
[...]

PR:	292390

treewide: Remove references to USES= fam and move to LIB_DEPENDS

Only a handful of ports in tree uses this helper which
used to make a switch between devel/fam and devel/gamin more
convenient. With devel/fam going away there's no need to maintain
this any further for a handful of ports.

Approved by:	blanket

net/samba420: Deprecate without expiration date

This is meant to give notice to Samba users that 4.20 is not supported
anymore. The default Samba in the tree is 4.16 currently, so removing
4.20 most likely will not be a big task.

PR:	291775

net/samba420: Update to 4.20.8

- Remove files/patch-python_samba_tdb__util.py: it's already included in
  upstream distribution.

Reported by:	Andrej Ebert <andrej@ebert.su>
PR:	287927

net/samba420: Fix recent CVEs

PR:		290329
Security:	https://www.samba.org/samba/security/CVE-2025-10230.html
Security:	https://www.samba.org/samba/security/CVE-2025-9640.html

net/samba420: fix fdescfs handling which causes several issues

Issue from bug 284623: several PANIC errors in log.smbd, similar to:

  [2025/02/02 16:56:09.823293,	0] ../../lib/util/fault.c:193(smb_panic_log)
    PANIC (pid 8625): async open timeout in 4.20.7
  [2025/02/02 16:56:09.827129,	0] ../../lib/util/fault.c:304(log_stack_trace)
    BACKTRACE: 20 stack frames:
     #0 0x3645750f6ec7 <log_stack_trace+0x37> at /usr/local/lib/samba4/private/libgenrand-private-samba.so
     #1 0x3645750f6f9e <smb_panic+0xe> at /usr/local/lib/samba4/private/libgenrand-private-samba.so
     #2 0x36456b707b24 <smbd_exit_server+0x1b4> at /usr/local/lib/samba4/private/libsmbd-base-private-samba.so
     #3 0x36456b707981 <smbd_exit_server+0x11> at /usr/local/lib/samba4/private/libsmbd-base-private-samba.so
     #4 0x364575394bcc <exit_server+0x1c> at /usr/local/lib/samba4/private/libsmbd-shim-private-samba.so
     #5 0x36456b6b2b10 <delete_all_streams> at /usr/local/lib/samba4/private/libsmbd-base-private-samba.so
     #6 0x364575935dff <tevent_common_invoke_timer_handler+0x18f> at /usr/local/lib/libtevent.so.0
     #7 0x364575935fa4 <tevent_common_loop_timer_delay+0x94> at /usr/local/lib/libtevent.so.0
     #8 0x3645759337c5 <tevent_context_same_loop+0xb15> at /usr/local/lib/libtevent.so.0
     #9 0x36457592f36a <_tevent_loop_once+0xea> at /usr/local/lib/libtevent.so.0
     #10 0x36457592f5f2 <tevent_common_loop_wait+0x32> at /usr/local/lib/libtevent.so.0
     #11 0x36456b6cd34b <smbd_process+0x83b> at /usr/local/lib/samba4/private/libsmbd-base-private-samba.so
     #12 0x363d4788f9bd <main+0x42fd> at /usr/local/sbin/smbd
     #13 0x36457593067e <tevent_common_invoke_fd_handler+0x9e> at /usr/local/lib/libtevent.so.0
     #14 0x364575933a44 <tevent_context_same_loop+0xd94> at /usr/local/lib/libtevent.so.0
     #15 0x36457592f36a <_tevent_loop_once+0xea> at /usr/local/lib/libtevent.so.0
     #16 0x36457592f5f2 <tevent_common_loop_wait+0x32> at /usr/local/lib/libtevent.so.0
     #17 0x363d4788df3f <main+0x287f> at /usr/local/sbin/smbd
     #18 0x363d4788cbac <main+0x14ec> at /usr/local/sbin/smbd
     #19 0x36457742ac3a <__libc_start1+0x12a> at /lib/libc.so.7

Issue from bug 286821: accessing Samba shares from macOS clients results
in error dialogs titled: "There was a problem connecting to the server",
with content "The share does not exist on the server. Please check the
share name and then try again".

The problems are caused by fdescfs handling:
* patch 0028-s3-lib-system-add-FreeBSD-proc_fd_pattern.patch was how
  Timur solved the fd problem for Samba 4.19 (mounting fdescfs nodup
  under /var/run/samba4/fd);
* if only this had been accepted upstream, we would not have had this
  problem in 4.20... :(
* in any case this code is now unused in 4.20, where Samba went even
  more Linux-only;
* patch 0101-FreeBSD-add-fdescfs-paths-workaround.patch was a naive
  tentative to solve the same problem for 4.20, apparently without
  taking into account what had been done before; it's broken by design,
  brokenly implementated and it simply doesn't work.

Apply a patch by Andrea Venturoli <ml@netfence.it>, which drops the 0101
patch, and modifies the older 0028 patch to revive what Timur had done.

PR:		284623, 286821
Tested by:	O. Hartmann <ohartmann@walstatt.org> and others
Approved by:	samba (0mp)
MFH:		2025Q3

net/samba420: Fix generated README.FreeBSD

Fix the substitution variable (AC_DC -> AD_DC)

Approved by:	arrowd

net/samba420: Add support for MIT KRB5 in base

FreeBSD 15 will ship with MIT KRB5 in base. Detect this accordingly.

PR:             287597
exp-run by:     antoine

net/samba420: Fix pkg-plist for bundled talloc

Move share/man/man3/samba-talloc.3.gz to
%%MANPAGES%%%%SAMBA4_BUNDLED_TALLOC%% category in pkg-plist.
Building with BUNDLED_TALLOC set and MANPAGES unset currently breaks
at the packaging step with the following:

    ===>  Building packages for samba420-4.20.7_7
    ===>   Building samba420-4.20.7_7
    pkg-static: Unable to access file /tmp/_ports/usr/ports/net/samba420/work/stage/usr/local/share/man/man3/samba-talloc.3.gz:No such file or directory
    *** Error code 1

PR:		288198
Sponsored by:	Klara, Inc.

net/samba420: Fix missing build dependency of bison

Bison is no longer an optional dependency in Samba 4.20,
so enable it by default. The bison dependency comes from
the Windows Search support implemented in Samba 4.20.

PR:	285180
Approved by:	0mp (mentor)
Sponsored by:	Klara, Inc.
Differential Revision:	https://reviews.freebsd.org/D51104

*/*: Bump security/gpgme consumers

security/gpgme: Update to 2.0.0

Upstream has split most of the bindings out into separate projects with
this release, so the child ports that were previously providing various
bindings are now autonomous and have new origins. The python bindings
should have been called py-gpg for many years now, since 'gpg' is the
actual module name, so this also corrects that issue.

security/gpgme-cpp -> security/gpgmepp
security/gpgme-qt -> security/qgpgme
security/py-gpgme -> security/py-gpg

gpgmepp and qgpgme have been converted to CMake. py-gpg is now a "fun"
autotools and FreeBSD ports system hybrid. Gpgme, itself, still uses
autotools, but with much less parenting (patching) to do for its
emancipated children.

Adjust several ports to fix API incompatibility with upstream patches
and with some of my own. Adjust all consumers to use the new port
origins of the former child ports.

https://dev.gnupg.org/T7673

python.mk: rename PYTHON_EXT_SUFFIX to PYTHON_TAG, document, etc

EXT_SUFFIX, according to PEP 3149, refers to the full tag and
extension for compiled extension module objects, eg .cpython-311.so,
.cpython-313t.so, etc. We do not use the correct semantic meaning,
and this usage becomes ambiguous and confusing when tags do not
match between bytecode and compiled extension module objects.

Rename our PYTHON_EXT_SUFFIX to PYTHON_TAG to align with PEP 3147's
specification of a magic tag, which consists of implementation name
and shorthand version only. This is meant for bytecode and other
files containing this tag in their filename that do not depend on
a specific Python ABI for the same version. Chase all existing
consumers.

Introduce PYTHON_SOABI to align with PEP 3149's specification of a
tag, which consists of implementation name, shorthand version and
any ABI flags present (this and PYTHON_TAG are identical without
ABI flags). This is meant for compiled extension module objects and
other files that depend on a specific Python ABI for the same
version.

Add documentation for these variables that our PYTHON_EXT_SUFFIX
never had.

PR: 274671
Event: Kitchener-Waterloo Hackathon 202506

net/samba420: Unbreak samba 4.20

This fix the 0100 patch to make file creation working. The
patch has been updated to not alter too much the patch, to
make it working.

This make now samba 4.20 working even if it has only be tested
on Windows and MacOS with basic functionality.

PR:	284623
Approved by:	0mp (mentor)
Approved by:	samba (kiwi)
Sponsored by:	Klara, Inc.
Differential Revision:	https://reviews.freebsd.org/D50778

net/samba4{19,20}: Rework manpages handling

* Rename option MANDOC to MANPAGES to match with other ports and
  Mk/bsd.options.desc.mk.
* Remove outdated, incorrect, precompiled manpages from ${FILESDIR}/files/man.
* Properly disable manpages generation since XSLTPROC was set to true(1) WAF
  always assumed xsltproc(1) to work and if any automatic dependency pulled in
  textproc/docbook-xsl, manpages were generated even if explicitly disabled.

PR:		281415
Approved by:	jrm (mentor), mikael, 0mp
Differential Revision:	https://reviews.freebsd.org/D49299

*: Bump revisions after dbus update

PR:		285253
Reported by:	Martin Birgmeier <d8zNeCFG@aon.at>

net/samba*: fix plist after removal of SPOTLIGHT option

gnome: remove tracker2

Tracker2 has long ago been replaced by tracker3 which is also gone now
and replaced by tinysparql.

Tracker2 is creating some complication for many ports (including
grilo-plugins) when installed, considering it not supported anymore,
just remove it instead of fighting it in each related port

net/samba4{19,20}: "samba-tool domain backup offline" hangs

PR:		250906
Tested by:	ml@netfence.it
Approved by:	otis (mentor), kiwi, vvd, allanjude
MFH:		2025Q1
Differential Revision:	https://reviews.freebsd.org/D49044

*/*: Fix conflict of PKGNAME

* Fix conflict of PKGNAME by adding PKGNAMESUFFIX to the ports below
  - databases/tdb1410
  - devel/talloc242
  - devel/tevent016
* Set CONFLICTS_INSTALL between different versions of each port.
* Update dependencies of databases/ldb29 and net/samba420 to reflect
  change of PKGNAME.
* Bump PORTREVISION of modified ports.

Reviewed by:	0mp, kiwi
Differential Revision:	https://reviews.freebsd.org/D48826

net/samba420: net/samba419: Fix plist for ad_dc replication

PR:		284473
PR:		281672
Reported by:    Oljas Kuzembaev <oljas@oml.su>
Approved by:    0mp (mentor)
Approved by:    samba (0mp, kiwi)
Differential Revision:	https://reviews.freebsd.org/D48828

net/samba420: Fix plist when PYTHON3 options is enabled.

PR:		284505
Reported by:	shellingfield@icloud.com

net/samba420: Fix plist library

PR:		284473
Reported by:	Oljas Kuzembaev <oljas@oml.su>
Approved by:	0mp (mentor)
Approved by:	samba (0mp, kiwi)
Differential Revision:	https://reviews.freebsd.org/D48739

net/samba420: Update 4.20

Changelog:	https://wiki.samba.org/index.php/Release_Planning_for_Samba_4.20

PR:             280533
Sponsored by:   Klara, Inc.
Approved by:    0mp (mentor)
Approved by:    samba (0mp, kiwi)
Co-authored-by:	Xavier Beaudouin <kiwi@FreeBSD.org>

net/samba420: Repocopy from net/samba419

PR:		280533
Sponsored by:	Klara, Inc.
Approved by:	0mp (mentor)
Approved by:	samba (0mp, kiwi)