From 22b5f21b8e08cf615bda6160adac6c16b7ad1146 Mon Sep 17 00:00:00 2001 From: Tu Truong Date: Fri, 18 May 2012 17:28:29 -0700 Subject: [PATCH] "Inital commit to Gerrit" --- LICENSE | 20 + Makefile.am | 27 + Makefile.in | 632 ++ README | 659 ++ RELNOTES | 3277 +++++++ aclocal.m4 | 897 ++ bind/Makefile | 75 + bind/bind.tar.gz | Bin 0 -> 8462564 bytes bind/version.tmp | 10 + client/Makefile.am | 18 + client/Makefile.in | 562 ++ client/clparse.c | 2235 +++++ client/dhc6.c | 5128 ++++++++++ client/dhclient-script.8 | 234 + client/dhclient.8 | 486 + client/dhclient.c | 4282 +++++++++ client/dhclient.conf | 36 + client/dhclient.conf.5 | 739 ++ client/dhclient.leases.5 | 57 + client/scripts/bsdos | 324 + client/scripts/freebsd | 392 + client/scripts/linux | 318 + client/scripts/macos | 207 + client/scripts/netbsd | 324 + client/scripts/nextstep | 61 + client/scripts/openbsd | 318 + client/scripts/openwrt | 279 + client/scripts/solaris | 203 + common/Makefile.am | 13 + common/Makefile.in | 606 ++ common/alloc.c | 1304 +++ common/bpf.c | 609 ++ common/comapi.c | 922 ++ common/conflex.c | 1527 +++ common/ctrace.c | 295 + common/dhcp-eval.5 | 552 ++ common/dhcp-options.5 | 2141 +++++ common/discover.c | 1867 ++++ common/dispatch.c | 416 + common/dlpi.c | 1416 +++ common/dns.c | 1753 ++++ common/ethernet.c | 93 + common/execute.c | 1152 +++ common/fddi.c | 92 + common/icmp.c | 308 + common/inet.c | 631 ++ common/lpf.c | 470 + common/memory.c | 154 + common/nit.c | 422 + common/ns_name.c | 651 ++ common/options.c | 4079 ++++++++ common/packet.c | 346 + common/parse.c | 5955 ++++++++++++ common/print.c | 1518 +++ common/raw.c | 139 + common/resolv.c | 195 + common/socket.c | 1128 +++ common/tables.c | 1414 +++ common/tests/Makefile.am | 11 + common/tests/Makefile.in | 469 + common/tests/test_alloc.c | 497 + common/tr.c | 331 + common/tree.c | 4462 +++++++++ common/upf.c | 373 + configure | 9978 ++++++++++++++++++++ configure.ac | 590 ++ contrib/3.0b1-lease-convert | 126 + contrib/dhclient-tz-exithook.sh | 179 + contrib/dhcp.spec | 157 + contrib/ldap/README.ldap | 191 + contrib/ldap/dhcp.schema | 462 + contrib/ldap/dhcpd-conf-to-ldap | 760 ++ contrib/ms2isc/Registry.pm | 361 + contrib/ms2isc/ms2isc.pl | 634 ++ contrib/ms2isc/readme.txt | 15 + contrib/sethostname.sh | 29 + contrib/solaris.init | 28 + depcomp | 530 ++ dhcpctl/Makefile.am | 15 + dhcpctl/Makefile.in | 592 ++ dhcpctl/callback.c | 168 + dhcpctl/cltest.c | 179 + dhcpctl/dhcpctl.3 | 493 + dhcpctl/dhcpctl.c | 590 ++ dhcpctl/dhcpctl.h | 125 + dhcpctl/omshell.1 | 334 + dhcpctl/omshell.c | 734 ++ dhcpctl/remote.c | 361 + doc/IANA-arp-parameters | 145 + doc/Makefile | 29 + doc/References.html | 1031 ++ doc/References.txt | 1120 +++ doc/References.xml | 788 ++ doc/api+protocol | 436 + doc/examples/dhclient-dhcpv6.conf | 11 + doc/examples/dhcpd-dhcpv6.conf | 105 + doc/ja_JP.eucJP/dhclient-script.8 | 242 + doc/ja_JP.eucJP/dhclient.8 | 365 + doc/ja_JP.eucJP/dhclient.conf.5 | 625 ++ doc/ja_JP.eucJP/dhclient.leases.5 | 62 + doc/ja_JP.eucJP/dhcp-eval.5 | 488 + doc/ja_JP.eucJP/dhcp-options.5 | 1582 ++++ dst/Makefile.am | 8 + dst/Makefile.in | 440 + dst/base64.c | 326 + dst/dst_api.c | 1089 +++ dst/dst_internal.h | 171 + dst/dst_support.c | 465 + dst/hmac_link.c | 496 + dst/md5.h | 123 + dst/md5_dgst.c | 396 + dst/md5_locl.h | 211 + dst/prandom.c | 957 ++ includes/Makefile.am | 11 + includes/Makefile.in | 404 + includes/arpa/nameser.h | 467 + includes/arpa/nameser_compat.h | 183 + includes/cdefs.h | 60 + includes/config.h.in | 265 + includes/ctrace.h | 77 + includes/dhcp.h | 202 + includes/dhcp6.h | 213 + includes/dhcpd.h | 3555 +++++++ includes/dhctoken.h | 372 + includes/failover.h | 400 + includes/heap.h | 163 + includes/inet.h | 85 + includes/isc-dhcp/dst.h | 142 + includes/minires.h | 43 + includes/netinet/if_ether.h | 66 + includes/netinet/ip.h | 163 + includes/netinet/ip_icmp.h | 182 + includes/netinet/udp.h | 70 + includes/omapip/alloc.h | 111 + includes/omapip/buffer.h | 83 + includes/omapip/convert.h | 52 + includes/omapip/hash.h | 167 + includes/omapip/isclib.h | 122 + includes/omapip/omapip.h | 621 ++ includes/omapip/omapip_p.h | 306 + includes/omapip/result.h | 120 + includes/omapip/trace.h | 115 + includes/osdep.h | 293 + includes/site.h | 229 + includes/statement.h | 110 + includes/t_api.h | 103 + includes/tree.h | 355 + install-sh | 323 + missing | 360 + omapip/Makefile.am | 14 + omapip/Makefile.in | 530 ++ omapip/alloc.c | 1169 +++ omapip/array.c | 162 + omapip/auth.c | 284 + omapip/buffer.c | 723 ++ omapip/connection.c | 1109 +++ omapip/convert.c | 185 + omapip/dispatch.c | 912 ++ omapip/errwarn.c | 364 + omapip/generic.c | 305 + omapip/handle.c | 310 + omapip/hash.c | 566 ++ omapip/inet_addr.c | 147 + omapip/isclib.c | 219 + omapip/iscprint.c | 539 ++ omapip/listener.c | 478 + omapip/message.c | 768 ++ omapip/omapi.3 | 247 + omapip/protocol.c | 1314 +++ omapip/result.c | 86 + omapip/support.c | 852 ++ omapip/test.c | 111 + omapip/toisc.c | 217 + omapip/trace.c | 716 ++ packaging/11-dhclient | 37 + packaging/56dhclient | 61 + packaging/README.dhclient.d | 47 + packaging/dhclient-script | 779 ++ packaging/dhcp-4.2.0-PPP.patch | 150 + packaging/dhcp-4.2.0-UseMulticast.patch | 229 + packaging/dhcp-4.2.0-add_timeout_when_NULL.patch | 14 + .../dhcp-4.2.0-default-requested-options.patch | 44 + .../dhcp-4.2.0-dhclient-decline-backoff.patch | 63 + packaging/dhcp-4.2.0-errwarn-message.patch | 30 + packaging/dhcp-4.2.0-garbage-chars.patch | 12 + packaging/dhcp-4.2.0-honor-expired.patch | 49 + packaging/dhcp-4.2.0-inherit-leases.patch | 34 + packaging/dhcp-4.2.0-logpid.patch | 12 + packaging/dhcp-4.2.0-missing-ipv6-not-fatal.patch | 40 + packaging/dhcp-4.2.0-noprefixavail.patch | 140 + packaging/dhcp-4.2.0-paths.patch | 45 + packaging/dhcp-4.2.0-release-by-ifup.patch | 85 + packaging/dhcp-4.2.0-unicast-bootp.patch | 99 + packaging/dhcp-4.2.1-64_bit_lease_parse.patch | 94 + packaging/dhcp-4.2.1-manpages.patch | 264 + packaging/dhcp-4.2.1-retransmission.patch | 48 + packaging/dhcp-4.2.1-sendDecline.patch | 231 + packaging/dhcp-4.2.2-CLOEXEC.patch | 423 + packaging/dhcp-4.2.2-capability.patch | 226 + packaging/dhcp-4.2.2-dhclient-usage.patch | 14 + packaging/dhcp-4.2.2-gpxe-cid.patch | 132 + packaging/dhcp-4.2.2-improved-xid.patch | 138 + packaging/dhcp-4.2.2-lpf-ib.patch | 538 ++ packaging/dhcp-4.2.2-remove-bind.patch | 149 + packaging/dhcp-4.2.2-sharedlib.patch | 119 + packaging/dhcp-4.2.2-systemtap.patch | 809 ++ packaging/dhcp-4.2.2-xen-checksum.patch | 249 + packaging/dhcp-4.2.3-P2-getifaddrs.patch | 429 + packaging/dhcp-4.2.3-P2-log_perror.patch | 11 + ...2-rfc5970-dhcpv6-options-for-network-boot.patch | 89 + packaging/dhcp-4.2.3-P2-send_release.patch | 23 + packaging/dhcp-4.2.3-dhclient-decline-onetry.patch | 27 + packaging/dhcp-4.2.3-options.patch | 391 + packaging/dhcp-4.2.3-paranoia.patch | 49 + ...hcp-4.2.3-rfc3442-classless-static-routes.patch | 405 + packaging/dhcp.changes | 5 + packaging/dhcp.spec | 604 ++ packaging/dhcpd.service | 10 + packaging/dhcpd6.service | 10 + packaging/dhcrelay.service | 10 + relay/Makefile.am | 9 + relay/Makefile.in | 471 + relay/dhcrelay.8 | 258 + relay/dhcrelay.c | 1679 ++++ server/Makefile.am | 16 + server/Makefile.in | 818 ++ server/bootp.c | 422 + server/class.c | 308 + server/confpars.c | 5504 +++++++++++ server/db.c | 1180 +++ server/ddns.c | 1835 ++++ server/dhcp.c | 4474 +++++++++ server/dhcpd.8 | 805 ++ server/dhcpd.c | 1504 +++ server/dhcpd.conf | 104 + server/dhcpd.conf.5 | 3012 ++++++ server/dhcpd.leases.5 | 291 + server/dhcpleasequery.c | 1268 +++ server/dhcpv6.c | 6056 ++++++++++++ server/failover.c | 6391 +++++++++++++ server/ldap.c | 2004 ++++ server/ldap_casa.c | 159 + server/mdb.c | 2989 ++++++ server/mdb6.c | 2548 +++++ server/omapi.c | 2584 +++++ server/salloc.c | 254 + server/stables.c | 510 + tests/DHCPv6/000-badmsgtype.pl | 164 + tests/DHCPv6/010-solicit-noclientid.pl | 212 + tests/DHCPv6/011-solicit-serverid.pl | 215 + tests/DHCPv6/020-advertise-mcast.pl | 164 + tests/DHCPv6/030-request-noclientid.pl | 212 + tests/DHCPv6/031-request-noserverid.pl | 212 + tests/DHCPv6/032-request-badduid.pl | 216 + tests/DHCPv6/110-information-request-ia_na.pl | 212 + tests/DHCPv6/111-information-request-ia_ta.pl | 212 + tests/DHCPv6/112-badduid.pl | 208 + tests/DHCPv6/210-solicit-nohost.pl | 212 + tests/DHCPv6/211-solicit-opt-in-na.pl | 218 + .../DHCPv6/212-solicit-opt-in-na-norapidcommit.pl | 218 + tests/DHCPv6/280-release-nohost.pl | 175 + tests/DHCPv6/281-release-bad-address.pl | 187 + tests/DHCPv6/282-release-no-address.pl | 183 + tests/DHCPv6/283-release.pl | 189 + tests/DHCPv6/290-decline-nohost.pl | 175 + tests/DHCPv6/291-decline-bad-address.pl | 187 + tests/DHCPv6/292-decline-no-address.pl | 183 + tests/DHCPv6/293-decline.pl | 189 + tests/DHCPv6/README | 62 + tests/DHCPv6/dhcp_client.pm | 454 + tests/DHCPv6/stubcli-opt-in-na.pl | 217 + tests/DHCPv6/stubcli.pl | 212 + tests/DHCPv6/test-a.conf | 67 + tests/DHCPv6/test-b.conf | 60 + tests/HOWTO-unit-test | 153 + tests/Makefile.am | 33 + tests/Makefile.in | 421 + tests/failover/dhcp-1.cf | 154 + tests/failover/dhcp-2.cf | 152 + tests/failover/new-failover | 28 + tests/t_api.c | 824 ++ tests/t_api_dhcp.c | 44 + tests/unit_test_sample.c | 25 + util/bindvar.sh | 35 + 284 files changed, 174377 insertions(+) create mode 100644 LICENSE create mode 100644 Makefile.am create mode 100644 Makefile.in create mode 100644 README create mode 100644 RELNOTES create mode 100644 aclocal.m4 create mode 100644 bind/Makefile create mode 100644 bind/bind.tar.gz create mode 100644 bind/version.tmp create mode 100644 client/Makefile.am create mode 100644 client/Makefile.in create mode 100644 client/clparse.c create mode 100644 client/dhc6.c create mode 100644 client/dhclient-script.8 create mode 100644 client/dhclient.8 create mode 100644 client/dhclient.c create mode 100644 client/dhclient.conf create mode 100644 client/dhclient.conf.5 create mode 100644 client/dhclient.leases.5 create mode 100755 client/scripts/bsdos create mode 100755 client/scripts/freebsd create mode 100755 client/scripts/linux create mode 100755 client/scripts/macos create mode 100755 client/scripts/netbsd create mode 100644 client/scripts/nextstep create mode 100644 client/scripts/openbsd create mode 100755 client/scripts/openwrt create mode 100755 client/scripts/solaris create mode 100644 common/Makefile.am create mode 100644 common/Makefile.in create mode 100644 common/alloc.c create mode 100644 common/bpf.c create mode 100644 common/comapi.c create mode 100644 common/conflex.c create mode 100644 common/ctrace.c create mode 100644 common/dhcp-eval.5 create mode 100644 common/dhcp-options.5 create mode 100644 common/discover.c create mode 100644 common/dispatch.c create mode 100644 common/dlpi.c create mode 100644 common/dns.c create mode 100644 common/ethernet.c create mode 100644 common/execute.c create mode 100644 common/fddi.c create mode 100644 common/icmp.c create mode 100644 common/inet.c create mode 100644 common/lpf.c create mode 100644 common/memory.c create mode 100644 common/nit.c create mode 100644 common/ns_name.c create mode 100644 common/options.c create mode 100644 common/packet.c create mode 100644 common/parse.c create mode 100644 common/print.c create mode 100644 common/raw.c create mode 100644 common/resolv.c create mode 100644 common/socket.c create mode 100644 common/tables.c create mode 100644 common/tests/Makefile.am create mode 100644 common/tests/Makefile.in create mode 100644 common/tests/test_alloc.c create mode 100644 common/tr.c create mode 100644 common/tree.c create mode 100644 common/upf.c create mode 100755 configure create mode 100644 configure.ac create mode 100755 contrib/3.0b1-lease-convert create mode 100644 contrib/dhclient-tz-exithook.sh create mode 100644 contrib/dhcp.spec create mode 100644 contrib/ldap/README.ldap create mode 100644 contrib/ldap/dhcp.schema create mode 100644 contrib/ldap/dhcpd-conf-to-ldap create mode 100644 contrib/ms2isc/Registry.pm create mode 100644 contrib/ms2isc/ms2isc.pl create mode 100644 contrib/ms2isc/readme.txt create mode 100644 contrib/sethostname.sh create mode 100644 contrib/solaris.init create mode 100755 depcomp create mode 100644 dhcpctl/Makefile.am create mode 100644 dhcpctl/Makefile.in create mode 100644 dhcpctl/callback.c create mode 100644 dhcpctl/cltest.c create mode 100644 dhcpctl/dhcpctl.3 create mode 100644 dhcpctl/dhcpctl.c create mode 100644 dhcpctl/dhcpctl.h create mode 100644 dhcpctl/omshell.1 create mode 100644 dhcpctl/omshell.c create mode 100644 dhcpctl/remote.c create mode 100644 doc/IANA-arp-parameters create mode 100644 doc/Makefile create mode 100644 doc/References.html create mode 100644 doc/References.txt create mode 100644 doc/References.xml create mode 100644 doc/api+protocol create mode 100644 doc/examples/dhclient-dhcpv6.conf create mode 100644 doc/examples/dhcpd-dhcpv6.conf create mode 100644 doc/ja_JP.eucJP/dhclient-script.8 create mode 100644 doc/ja_JP.eucJP/dhclient.8 create mode 100644 doc/ja_JP.eucJP/dhclient.conf.5 create mode 100644 doc/ja_JP.eucJP/dhclient.leases.5 create mode 100644 doc/ja_JP.eucJP/dhcp-eval.5 create mode 100644 doc/ja_JP.eucJP/dhcp-options.5 create mode 100644 dst/Makefile.am create mode 100644 dst/Makefile.in create mode 100644 dst/base64.c create mode 100644 dst/dst_api.c create mode 100644 dst/dst_internal.h create mode 100644 dst/dst_support.c create mode 100644 dst/hmac_link.c create mode 100644 dst/md5.h create mode 100644 dst/md5_dgst.c create mode 100644 dst/md5_locl.h create mode 100644 dst/prandom.c create mode 100644 includes/Makefile.am create mode 100644 includes/Makefile.in create mode 100644 includes/arpa/nameser.h create mode 100644 includes/arpa/nameser_compat.h create mode 100644 includes/cdefs.h create mode 100644 includes/config.h.in create mode 100644 includes/ctrace.h create mode 100644 includes/dhcp.h create mode 100644 includes/dhcp6.h create mode 100644 includes/dhcpd.h create mode 100644 includes/dhctoken.h create mode 100644 includes/failover.h create mode 100644 includes/heap.h create mode 100644 includes/inet.h create mode 100644 includes/isc-dhcp/dst.h create mode 100644 includes/minires.h create mode 100644 includes/netinet/if_ether.h create mode 100644 includes/netinet/ip.h create mode 100644 includes/netinet/ip_icmp.h create mode 100644 includes/netinet/udp.h create mode 100644 includes/omapip/alloc.h create mode 100644 includes/omapip/buffer.h create mode 100644 includes/omapip/convert.h create mode 100644 includes/omapip/hash.h create mode 100644 includes/omapip/isclib.h create mode 100644 includes/omapip/omapip.h create mode 100644 includes/omapip/omapip_p.h create mode 100644 includes/omapip/result.h create mode 100644 includes/omapip/trace.h create mode 100644 includes/osdep.h create mode 100644 includes/site.h create mode 100644 includes/statement.h create mode 100644 includes/t_api.h create mode 100644 includes/tree.h create mode 100755 install-sh create mode 100755 missing create mode 100644 omapip/Makefile.am create mode 100644 omapip/Makefile.in create mode 100644 omapip/alloc.c create mode 100644 omapip/array.c create mode 100644 omapip/auth.c create mode 100644 omapip/buffer.c create mode 100644 omapip/connection.c create mode 100644 omapip/convert.c create mode 100644 omapip/dispatch.c create mode 100644 omapip/errwarn.c create mode 100644 omapip/generic.c create mode 100644 omapip/handle.c create mode 100644 omapip/hash.c create mode 100644 omapip/inet_addr.c create mode 100644 omapip/isclib.c create mode 100644 omapip/iscprint.c create mode 100644 omapip/listener.c create mode 100644 omapip/message.c create mode 100644 omapip/omapi.3 create mode 100644 omapip/protocol.c create mode 100644 omapip/result.c create mode 100644 omapip/support.c create mode 100644 omapip/test.c create mode 100644 omapip/toisc.c create mode 100644 omapip/trace.c create mode 100644 packaging/11-dhclient create mode 100644 packaging/56dhclient create mode 100644 packaging/README.dhclient.d create mode 100644 packaging/dhclient-script create mode 100644 packaging/dhcp-4.2.0-PPP.patch create mode 100644 packaging/dhcp-4.2.0-UseMulticast.patch create mode 100644 packaging/dhcp-4.2.0-add_timeout_when_NULL.patch create mode 100644 packaging/dhcp-4.2.0-default-requested-options.patch create mode 100644 packaging/dhcp-4.2.0-dhclient-decline-backoff.patch create mode 100644 packaging/dhcp-4.2.0-errwarn-message.patch create mode 100644 packaging/dhcp-4.2.0-garbage-chars.patch create mode 100644 packaging/dhcp-4.2.0-honor-expired.patch create mode 100644 packaging/dhcp-4.2.0-inherit-leases.patch create mode 100644 packaging/dhcp-4.2.0-logpid.patch create mode 100644 packaging/dhcp-4.2.0-missing-ipv6-not-fatal.patch create mode 100644 packaging/dhcp-4.2.0-noprefixavail.patch create mode 100644 packaging/dhcp-4.2.0-paths.patch create mode 100644 packaging/dhcp-4.2.0-release-by-ifup.patch create mode 100644 packaging/dhcp-4.2.0-unicast-bootp.patch create mode 100644 packaging/dhcp-4.2.1-64_bit_lease_parse.patch create mode 100644 packaging/dhcp-4.2.1-manpages.patch create mode 100644 packaging/dhcp-4.2.1-retransmission.patch create mode 100644 packaging/dhcp-4.2.1-sendDecline.patch create mode 100644 packaging/dhcp-4.2.2-CLOEXEC.patch create mode 100644 packaging/dhcp-4.2.2-capability.patch create mode 100644 packaging/dhcp-4.2.2-dhclient-usage.patch create mode 100644 packaging/dhcp-4.2.2-gpxe-cid.patch create mode 100644 packaging/dhcp-4.2.2-improved-xid.patch create mode 100644 packaging/dhcp-4.2.2-lpf-ib.patch create mode 100644 packaging/dhcp-4.2.2-remove-bind.patch create mode 100644 packaging/dhcp-4.2.2-sharedlib.patch create mode 100644 packaging/dhcp-4.2.2-systemtap.patch create mode 100644 packaging/dhcp-4.2.2-xen-checksum.patch create mode 100644 packaging/dhcp-4.2.3-P2-getifaddrs.patch create mode 100644 packaging/dhcp-4.2.3-P2-log_perror.patch create mode 100644 packaging/dhcp-4.2.3-P2-rfc5970-dhcpv6-options-for-network-boot.patch create mode 100644 packaging/dhcp-4.2.3-P2-send_release.patch create mode 100644 packaging/dhcp-4.2.3-dhclient-decline-onetry.patch create mode 100644 packaging/dhcp-4.2.3-options.patch create mode 100644 packaging/dhcp-4.2.3-paranoia.patch create mode 100644 packaging/dhcp-4.2.3-rfc3442-classless-static-routes.patch create mode 100644 packaging/dhcp.changes create mode 100644 packaging/dhcp.spec create mode 100644 packaging/dhcpd.service create mode 100644 packaging/dhcpd6.service create mode 100644 packaging/dhcrelay.service create mode 100644 relay/Makefile.am create mode 100644 relay/Makefile.in create mode 100644 relay/dhcrelay.8 create mode 100644 relay/dhcrelay.c create mode 100644 server/Makefile.am create mode 100644 server/Makefile.in create mode 100644 server/bootp.c create mode 100644 server/class.c create mode 100644 server/confpars.c create mode 100644 server/db.c create mode 100644 server/ddns.c create mode 100644 server/dhcp.c create mode 100644 server/dhcpd.8 create mode 100644 server/dhcpd.c create mode 100644 server/dhcpd.conf create mode 100644 server/dhcpd.conf.5 create mode 100644 server/dhcpd.leases.5 create mode 100644 server/dhcpleasequery.c create mode 100644 server/dhcpv6.c create mode 100644 server/failover.c create mode 100644 server/ldap.c create mode 100644 server/ldap_casa.c create mode 100644 server/mdb.c create mode 100644 server/mdb6.c create mode 100644 server/omapi.c create mode 100644 server/salloc.c create mode 100644 server/stables.c create mode 100644 tests/DHCPv6/000-badmsgtype.pl create mode 100644 tests/DHCPv6/010-solicit-noclientid.pl create mode 100644 tests/DHCPv6/011-solicit-serverid.pl create mode 100644 tests/DHCPv6/020-advertise-mcast.pl create mode 100644 tests/DHCPv6/030-request-noclientid.pl create mode 100644 tests/DHCPv6/031-request-noserverid.pl create mode 100644 tests/DHCPv6/032-request-badduid.pl create mode 100644 tests/DHCPv6/110-information-request-ia_na.pl create mode 100644 tests/DHCPv6/111-information-request-ia_ta.pl create mode 100644 tests/DHCPv6/112-badduid.pl create mode 100644 tests/DHCPv6/210-solicit-nohost.pl create mode 100644 tests/DHCPv6/211-solicit-opt-in-na.pl create mode 100644 tests/DHCPv6/212-solicit-opt-in-na-norapidcommit.pl create mode 100644 tests/DHCPv6/280-release-nohost.pl create mode 100644 tests/DHCPv6/281-release-bad-address.pl create mode 100644 tests/DHCPv6/282-release-no-address.pl create mode 100644 tests/DHCPv6/283-release.pl create mode 100644 tests/DHCPv6/290-decline-nohost.pl create mode 100644 tests/DHCPv6/291-decline-bad-address.pl create mode 100644 tests/DHCPv6/292-decline-no-address.pl create mode 100644 tests/DHCPv6/293-decline.pl create mode 100644 tests/DHCPv6/README create mode 100644 tests/DHCPv6/dhcp_client.pm create mode 100644 tests/DHCPv6/stubcli-opt-in-na.pl create mode 100644 tests/DHCPv6/stubcli.pl create mode 100644 tests/DHCPv6/test-a.conf create mode 100644 tests/DHCPv6/test-b.conf create mode 100644 tests/HOWTO-unit-test create mode 100644 tests/Makefile.am create mode 100644 tests/Makefile.in create mode 100644 tests/failover/dhcp-1.cf create mode 100644 tests/failover/dhcp-2.cf create mode 100755 tests/failover/new-failover create mode 100644 tests/t_api.c create mode 100644 tests/t_api_dhcp.c create mode 100644 tests/unit_test_sample.c create mode 100644 util/bindvar.sh diff --git a/LICENSE b/LICENSE new file mode 100644 index 0000000..242473e --- /dev/null +++ b/LICENSE @@ -0,0 +1,20 @@ +# Copyright (c) 2004-2012 by Internet Systems Consortium, Inc. ("ISC") +# Copyright (c) 1995-2003 by Internet Software Consortium +# +# Permission to use, copy, modify, and distribute this software for any +# purpose with or without fee is hereby granted, provided that the above +# copyright notice and this permission notice appear in all copies. +# +# THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES +# WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF +# MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR +# ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES +# WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN +# ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT +# OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. +# +# Internet Systems Consortium, Inc. +# 950 Charter Street +# Redwood City, CA 94063 +# +# https://www.isc.org/ diff --git a/Makefile.am b/Makefile.am new file mode 100644 index 0000000..928d926 --- /dev/null +++ b/Makefile.am @@ -0,0 +1,27 @@ +# +# automake adds dependencies that we don't like, so we explicitly remove them +# +Makefile: + +# +# We have a lot of files that we want shipped with the distribution. +# +EXTRA_DIST = RELNOTES LICENSE \ + contrib/3.0b1-lease-convert contrib/dhclient-tz-exithook.sh \ + contrib/dhcp.spec contrib/sethostname.sh contrib/solaris.init \ + contrib/ms2isc/Registry.pm contrib/ms2isc/ms2isc.pl \ + contrib/ms2isc/readme.txt contrib/ldap/dhcpd-conf-to-ldap \ + contrib/ldap/dhcp.schema contrib/ldap/README.ldap \ + doc/IANA-arp-parameters doc/Makefile doc/References.html \ + doc/References.txt doc/References.xml doc/api+protocol \ + doc/ja_JP.eucJP/dhclient-script.8 doc/ja_JP.eucJP/dhclient.8 \ + doc/ja_JP.eucJP/dhclient.conf.5 doc/ja_JP.eucJP/dhclient.leases.5 \ + doc/ja_JP.eucJP/dhcp-eval.5 doc/ja_JP.eucJP/dhcp-options.5 \ + doc/examples/dhclient-dhcpv6.conf doc/examples/dhcpd-dhcpv6.conf \ + util/bindvar.sh \ + bind/Makefile bind/bind.tar.gz bind/version.tmp + +SUBDIRS = bind includes tests common dst omapip client dhcpctl relay server + +nobase_include_HEADERS = dhcpctl/dhcpctl.h + diff --git a/Makefile.in b/Makefile.in new file mode 100644 index 0000000..4268589 --- /dev/null +++ b/Makefile.in @@ -0,0 +1,632 @@ +# Makefile.in generated by automake 1.10.1 from Makefile.am. +# @configure_input@ + +# Copyright (C) 1994, 1995, 1996, 1997, 1998, 1999, 2000, 2001, 2002, +# 2003, 2004, 2005, 2006, 2007, 2008 Free Software Foundation, Inc. +# This Makefile.in is free software; the Free Software Foundation +# gives unlimited permission to copy and/or distribute it, +# with or without modifications, as long as this notice is preserved. + +# This program is distributed in the hope that it will be useful, +# but WITHOUT ANY WARRANTY, to the extent permitted by law; without +# even the implied warranty of MERCHANTABILITY or FITNESS FOR A +# PARTICULAR PURPOSE. + +@SET_MAKE@ + +VPATH = @srcdir@ +pkgdatadir = $(datadir)/@PACKAGE@ +pkglibdir = $(libdir)/@PACKAGE@ +pkgincludedir = $(includedir)/@PACKAGE@ +am__cd = CDPATH="$${ZSH_VERSION+.}$(PATH_SEPARATOR)" && cd +install_sh_DATA = $(install_sh) -c -m 644 +install_sh_PROGRAM = $(install_sh) -c +install_sh_SCRIPT = $(install_sh) -c +INSTALL_HEADER = $(INSTALL_DATA) +transform = $(program_transform_name) +NORMAL_INSTALL = : +PRE_INSTALL = : +POST_INSTALL = : +NORMAL_UNINSTALL = : +PRE_UNINSTALL = : +POST_UNINSTALL = : +subdir = . +DIST_COMMON = README $(am__configure_deps) $(nobase_include_HEADERS) \ + $(srcdir)/Makefile.am $(srcdir)/Makefile.in \ + $(top_srcdir)/configure depcomp install-sh missing +ACLOCAL_M4 = $(top_srcdir)/aclocal.m4 +am__aclocal_m4_deps = $(top_srcdir)/configure.ac +am__configure_deps = $(am__aclocal_m4_deps) $(CONFIGURE_DEPENDENCIES) \ + $(ACLOCAL_M4) +am__CONFIG_DISTCLEAN_FILES = config.status config.cache config.log \ + configure.lineno config.status.lineno +mkinstalldirs = $(install_sh) -d +CONFIG_HEADER = $(top_builddir)/includes/config.h +CONFIG_CLEAN_FILES = +SOURCES = +DIST_SOURCES = +RECURSIVE_TARGETS = all-recursive check-recursive dvi-recursive \ + html-recursive info-recursive install-data-recursive \ + install-dvi-recursive install-exec-recursive \ + install-html-recursive install-info-recursive \ + install-pdf-recursive install-ps-recursive install-recursive \ + installcheck-recursive installdirs-recursive pdf-recursive \ + ps-recursive uninstall-recursive +am__vpath_adj_setup = srcdirstrip=`echo "$(srcdir)" | sed 's|.|.|g'`; +am__vpath_adj = case $$p in \ + $(srcdir)/*) f=`echo "$$p" | sed "s|^$$srcdirstrip/||"`;; \ + *) f=$$p;; \ + esac; +am__strip_dir = `echo $$p | sed -e 's|^.*/||'`; +am__installdirs = "$(DESTDIR)$(includedir)" +nobase_includeHEADERS_INSTALL = $(install_sh_DATA) +HEADERS = $(nobase_include_HEADERS) +RECURSIVE_CLEAN_TARGETS = mostlyclean-recursive clean-recursive \ + distclean-recursive maintainer-clean-recursive +ETAGS = etags +CTAGS = ctags +DIST_SUBDIRS = $(SUBDIRS) +DISTFILES = $(DIST_COMMON) $(DIST_SOURCES) $(TEXINFOS) $(EXTRA_DIST) +distdir = $(PACKAGE)-$(VERSION) +top_distdir = $(distdir) +am__remove_distdir = \ + { test ! -d $(distdir) \ + || { find $(distdir) -type d ! -perm -200 -exec chmod u+w {} ';' \ + && rm -fr $(distdir); }; } +DIST_ARCHIVES = $(distdir).tar.gz +GZIP_ENV = --best +distuninstallcheck_listfiles = find . -type f -print +distcleancheck_listfiles = find . -type f -print +ACLOCAL = @ACLOCAL@ +AMTAR = @AMTAR@ +AUTOCONF = @AUTOCONF@ +AUTOHEADER = @AUTOHEADER@ +AUTOMAKE = @AUTOMAKE@ +AWK = @AWK@ +CC = @CC@ +CCDEPMODE = @CCDEPMODE@ +CFLAGS = @CFLAGS@ +CPP = @CPP@ +CPPFLAGS = @CPPFLAGS@ +CYGPATH_W = @CYGPATH_W@ +DEFS = @DEFS@ +DEPDIR = @DEPDIR@ +ECHO_C = @ECHO_C@ +ECHO_N = @ECHO_N@ +ECHO_T = @ECHO_T@ +EGREP = @EGREP@ +EXEEXT = @EXEEXT@ +GREP = @GREP@ +INSTALL = @INSTALL@ +INSTALL_DATA = @INSTALL_DATA@ +INSTALL_PROGRAM = @INSTALL_PROGRAM@ +INSTALL_SCRIPT = @INSTALL_SCRIPT@ +INSTALL_STRIP_PROGRAM = @INSTALL_STRIP_PROGRAM@ +LDAP_CFLAGS = @LDAP_CFLAGS@ +LDFLAGS = @LDFLAGS@ +LIBOBJS = @LIBOBJS@ +LIBS = @LIBS@ +LTLIBOBJS = @LTLIBOBJS@ +MAINT = @MAINT@ +MAKEINFO = @MAKEINFO@ +MKDIR_P = @MKDIR_P@ +OBJEXT = @OBJEXT@ +PACKAGE = @PACKAGE@ +PACKAGE_BUGREPORT = @PACKAGE_BUGREPORT@ +PACKAGE_NAME = @PACKAGE_NAME@ +PACKAGE_STRING = @PACKAGE_STRING@ +PACKAGE_TARNAME = @PACKAGE_TARNAME@ +PACKAGE_URL = @PACKAGE_URL@ +PACKAGE_VERSION = @PACKAGE_VERSION@ +PATH_SEPARATOR = @PATH_SEPARATOR@ +RANLIB = @RANLIB@ +SET_MAKE = @SET_MAKE@ +SHELL = @SHELL@ +STRIP = @STRIP@ +VERSION = @VERSION@ +abs_builddir = @abs_builddir@ +abs_srcdir = @abs_srcdir@ +abs_top_builddir = @abs_top_builddir@ +abs_top_srcdir = @abs_top_srcdir@ +ac_ct_CC = @ac_ct_CC@ +ac_prefix_program = @ac_prefix_program@ +am__include = @am__include@ +am__leading_dot = @am__leading_dot@ +am__quote = @am__quote@ +am__tar = @am__tar@ +am__untar = @am__untar@ +bindir = @bindir@ +build_alias = @build_alias@ +builddir = @builddir@ +byte_order = @byte_order@ +datadir = @datadir@ +datarootdir = @datarootdir@ +docdir = @docdir@ +dvidir = @dvidir@ +exec_prefix = @exec_prefix@ +host_alias = @host_alias@ +htmldir = @htmldir@ +includedir = @includedir@ +infodir = @infodir@ +install_sh = @install_sh@ +libdir = @libdir@ +libexecdir = @libexecdir@ +localedir = @localedir@ +localstatedir = @localstatedir@ +mandir = @mandir@ +mkdir_p = @mkdir_p@ +oldincludedir = @oldincludedir@ +pdfdir = @pdfdir@ +prefix = @prefix@ +program_transform_name = @program_transform_name@ +psdir = @psdir@ +sbindir = @sbindir@ +sharedstatedir = @sharedstatedir@ +srcdir = @srcdir@ +sysconfdir = @sysconfdir@ +target_alias = @target_alias@ +top_build_prefix = @top_build_prefix@ +top_builddir = @top_builddir@ +top_srcdir = @top_srcdir@ + +# +# We have a lot of files that we want shipped with the distribution. +# +EXTRA_DIST = RELNOTES LICENSE \ + contrib/3.0b1-lease-convert contrib/dhclient-tz-exithook.sh \ + contrib/dhcp.spec contrib/sethostname.sh contrib/solaris.init \ + contrib/ms2isc/Registry.pm contrib/ms2isc/ms2isc.pl \ + contrib/ms2isc/readme.txt contrib/ldap/dhcpd-conf-to-ldap \ + contrib/ldap/dhcp.schema contrib/ldap/README.ldap \ + doc/IANA-arp-parameters doc/Makefile doc/References.html \ + doc/References.txt doc/References.xml doc/api+protocol \ + doc/ja_JP.eucJP/dhclient-script.8 doc/ja_JP.eucJP/dhclient.8 \ + doc/ja_JP.eucJP/dhclient.conf.5 doc/ja_JP.eucJP/dhclient.leases.5 \ + doc/ja_JP.eucJP/dhcp-eval.5 doc/ja_JP.eucJP/dhcp-options.5 \ + doc/examples/dhclient-dhcpv6.conf doc/examples/dhcpd-dhcpv6.conf \ + util/bindvar.sh \ + bind/Makefile bind/bind.tar.gz bind/version.tmp + +SUBDIRS = bind includes tests common dst omapip client dhcpctl relay server +nobase_include_HEADERS = dhcpctl/dhcpctl.h +all: all-recursive + +.SUFFIXES: +am--refresh: + @: +$(srcdir)/Makefile.in: @MAINTAINER_MODE_TRUE@ $(srcdir)/Makefile.am $(am__configure_deps) + @for dep in $?; do \ + case '$(am__configure_deps)' in \ + *$$dep*) \ + echo ' cd $(srcdir) && $(AUTOMAKE) --foreign '; \ + cd $(srcdir) && $(AUTOMAKE) --foreign \ + && exit 0; \ + exit 1;; \ + esac; \ + done; \ + echo ' cd $(top_srcdir) && $(AUTOMAKE) --foreign Makefile'; \ + cd $(top_srcdir) && \ + $(AUTOMAKE) --foreign Makefile +.PRECIOUS: Makefile + +$(top_builddir)/config.status: $(top_srcdir)/configure $(CONFIG_STATUS_DEPENDENCIES) + $(SHELL) ./config.status --recheck + +$(top_srcdir)/configure: @MAINTAINER_MODE_TRUE@ $(am__configure_deps) + cd $(srcdir) && $(AUTOCONF) +$(ACLOCAL_M4): @MAINTAINER_MODE_TRUE@ $(am__aclocal_m4_deps) + cd $(srcdir) && $(ACLOCAL) $(ACLOCAL_AMFLAGS) +install-nobase_includeHEADERS: $(nobase_include_HEADERS) + @$(NORMAL_INSTALL) + test -z "$(includedir)" || $(MKDIR_P) "$(DESTDIR)$(includedir)" + @$(am__vpath_adj_setup) \ + list='$(nobase_include_HEADERS)'; for p in $$list; do \ + if test -f "$$p"; then d=; else d="$(srcdir)/"; fi; \ + $(am__vpath_adj) \ + echo " $(nobase_includeHEADERS_INSTALL) '$$d$$p' '$(DESTDIR)$(includedir)/$$f'"; \ + $(nobase_includeHEADERS_INSTALL) "$$d$$p" "$(DESTDIR)$(includedir)/$$f"; \ + done + +uninstall-nobase_includeHEADERS: + @$(NORMAL_UNINSTALL) + @$(am__vpath_adj_setup) \ + list='$(nobase_include_HEADERS)'; for p in $$list; do \ + $(am__vpath_adj) \ + echo " rm -f '$(DESTDIR)$(includedir)/$$f'"; \ + rm -f "$(DESTDIR)$(includedir)/$$f"; \ + done + +# This directory's subdirectories are mostly independent; you can cd +# into them and run `make' without going through this Makefile. +# To change the values of `make' variables: instead of editing Makefiles, +# (1) if the variable is set in `config.status', edit `config.status' +# (which will cause the Makefiles to be regenerated when you run `make'); +# (2) otherwise, pass the desired values on the `make' command line. +$(RECURSIVE_TARGETS): + @failcom='exit 1'; \ + for f in x $$MAKEFLAGS; do \ + case $$f in \ + *=* | --[!k]*);; \ + *k*) failcom='fail=yes';; \ + esac; \ + done; \ + dot_seen=no; \ + target=`echo $@ | sed s/-recursive//`; \ + list='$(SUBDIRS)'; for subdir in $$list; do \ + echo "Making $$target in $$subdir"; \ + if test "$$subdir" = "."; then \ + dot_seen=yes; \ + local_target="$$target-am"; \ + else \ + local_target="$$target"; \ + fi; \ + (cd $$subdir && $(MAKE) $(AM_MAKEFLAGS) $$local_target) \ + || eval $$failcom; \ + done; \ + if test "$$dot_seen" = "no"; then \ + $(MAKE) $(AM_MAKEFLAGS) "$$target-am" || exit 1; \ + fi; test -z "$$fail" + +$(RECURSIVE_CLEAN_TARGETS): + @failcom='exit 1'; \ + for f in x $$MAKEFLAGS; do \ + case $$f in \ + *=* | --[!k]*);; \ + *k*) failcom='fail=yes';; \ + esac; \ + done; \ + dot_seen=no; \ + case "$@" in \ + distclean-* | maintainer-clean-*) list='$(DIST_SUBDIRS)' ;; \ + *) list='$(SUBDIRS)' ;; \ + esac; \ + rev=''; for subdir in $$list; do \ + if test "$$subdir" = "."; then :; else \ + rev="$$subdir $$rev"; \ + fi; \ + done; \ + rev="$$rev ."; \ + target=`echo $@ | sed s/-recursive//`; \ + for subdir in $$rev; do \ + echo "Making $$target in $$subdir"; \ + if test "$$subdir" = "."; then \ + local_target="$$target-am"; \ + else \ + local_target="$$target"; \ + fi; \ + (cd $$subdir && $(MAKE) $(AM_MAKEFLAGS) $$local_target) \ + || eval $$failcom; \ + done && test -z "$$fail" +tags-recursive: + list='$(SUBDIRS)'; for subdir in $$list; do \ + test "$$subdir" = . || (cd $$subdir && $(MAKE) $(AM_MAKEFLAGS) tags); \ + done +ctags-recursive: + list='$(SUBDIRS)'; for subdir in $$list; do \ + test "$$subdir" = . || (cd $$subdir && $(MAKE) $(AM_MAKEFLAGS) ctags); \ + done + +ID: $(HEADERS) $(SOURCES) $(LISP) $(TAGS_FILES) + list='$(SOURCES) $(HEADERS) $(LISP) $(TAGS_FILES)'; \ + unique=`for i in $$list; do \ + if test -f "$$i"; then echo $$i; else echo $(srcdir)/$$i; fi; \ + done | \ + $(AWK) '{ files[$$0] = 1; nonemtpy = 1; } \ + END { if (nonempty) { for (i in files) print i; }; }'`; \ + mkid -fID $$unique +tags: TAGS + +TAGS: tags-recursive $(HEADERS) $(SOURCES) $(TAGS_DEPENDENCIES) \ + $(TAGS_FILES) $(LISP) + tags=; \ + here=`pwd`; \ + if ($(ETAGS) --etags-include --version) >/dev/null 2>&1; then \ + include_option=--etags-include; \ + empty_fix=.; \ + else \ + include_option=--include; \ + empty_fix=; \ + fi; \ + list='$(SUBDIRS)'; for subdir in $$list; do \ + if test "$$subdir" = .; then :; else \ + test ! -f $$subdir/TAGS || \ + tags="$$tags $$include_option=$$here/$$subdir/TAGS"; \ + fi; \ + done; \ + list='$(SOURCES) $(HEADERS) $(LISP) $(TAGS_FILES)'; \ + unique=`for i in $$list; do \ + if test -f "$$i"; then echo $$i; else echo $(srcdir)/$$i; fi; \ + done | \ + $(AWK) '{ files[$$0] = 1; nonempty = 1; } \ + END { if (nonempty) { for (i in files) print i; }; }'`; \ + if test -z "$(ETAGS_ARGS)$$tags$$unique"; then :; else \ + test -n "$$unique" || unique=$$empty_fix; \ + $(ETAGS) $(ETAGSFLAGS) $(AM_ETAGSFLAGS) $(ETAGS_ARGS) \ + $$tags $$unique; \ + fi +ctags: CTAGS +CTAGS: ctags-recursive $(HEADERS) $(SOURCES) $(TAGS_DEPENDENCIES) \ + $(TAGS_FILES) $(LISP) + tags=; \ + list='$(SOURCES) $(HEADERS) $(LISP) $(TAGS_FILES)'; \ + unique=`for i in $$list; do \ + if test -f "$$i"; then echo $$i; else echo $(srcdir)/$$i; fi; \ + done | \ + $(AWK) '{ files[$$0] = 1; nonempty = 1; } \ + END { if (nonempty) { for (i in files) print i; }; }'`; \ + test -z "$(CTAGS_ARGS)$$tags$$unique" \ + || $(CTAGS) $(CTAGSFLAGS) $(AM_CTAGSFLAGS) $(CTAGS_ARGS) \ + $$tags $$unique + +GTAGS: + here=`$(am__cd) $(top_builddir) && pwd` \ + && cd $(top_srcdir) \ + && gtags -i $(GTAGS_ARGS) $$here + +distclean-tags: + -rm -f TAGS ID GTAGS GRTAGS GSYMS GPATH tags + +distdir: $(DISTFILES) + $(am__remove_distdir) + test -d $(distdir) || mkdir $(distdir) + @srcdirstrip=`echo "$(srcdir)" | sed 's/[].[^$$\\*]/\\\\&/g'`; \ + topsrcdirstrip=`echo "$(top_srcdir)" | sed 's/[].[^$$\\*]/\\\\&/g'`; \ + list='$(DISTFILES)'; \ + dist_files=`for file in $$list; do echo $$file; done | \ + sed -e "s|^$$srcdirstrip/||;t" \ + -e "s|^$$topsrcdirstrip/|$(top_builddir)/|;t"`; \ + case $$dist_files in \ + */*) $(MKDIR_P) `echo "$$dist_files" | \ + sed '/\//!d;s|^|$(distdir)/|;s,/[^/]*$$,,' | \ + sort -u` ;; \ + esac; \ + for file in $$dist_files; do \ + if test -f $$file || test -d $$file; then d=.; else d=$(srcdir); fi; \ + if test -d $$d/$$file; then \ + dir=`echo "/$$file" | sed -e 's,/[^/]*$$,,'`; \ + if test -d $(srcdir)/$$file && test $$d != $(srcdir); then \ + cp -pR $(srcdir)/$$file $(distdir)$$dir || exit 1; \ + fi; \ + cp -pR $$d/$$file $(distdir)$$dir || exit 1; \ + else \ + test -f $(distdir)/$$file \ + || cp -p $$d/$$file $(distdir)/$$file \ + || exit 1; \ + fi; \ + done + list='$(DIST_SUBDIRS)'; for subdir in $$list; do \ + if test "$$subdir" = .; then :; else \ + test -d "$(distdir)/$$subdir" \ + || $(MKDIR_P) "$(distdir)/$$subdir" \ + || exit 1; \ + distdir=`$(am__cd) $(distdir) && pwd`; \ + top_distdir=`$(am__cd) $(top_distdir) && pwd`; \ + (cd $$subdir && \ + $(MAKE) $(AM_MAKEFLAGS) \ + top_distdir="$$top_distdir" \ + distdir="$$distdir/$$subdir" \ + am__remove_distdir=: \ + am__skip_length_check=: \ + distdir) \ + || exit 1; \ + fi; \ + done + -find $(distdir) -type d ! -perm -777 -exec chmod a+rwx {} \; -o \ + ! -type d ! -perm -444 -links 1 -exec chmod a+r {} \; -o \ + ! -type d ! -perm -400 -exec chmod a+r {} \; -o \ + ! -type d ! -perm -444 -exec $(install_sh) -c -m a+r {} {} \; \ + || chmod -R a+r $(distdir) +dist-gzip: distdir + tardir=$(distdir) && $(am__tar) | GZIP=$(GZIP_ENV) gzip -c >$(distdir).tar.gz + $(am__remove_distdir) + +dist-bzip2: distdir + tardir=$(distdir) && $(am__tar) | bzip2 -9 -c >$(distdir).tar.bz2 + $(am__remove_distdir) + +dist-lzma: distdir + tardir=$(distdir) && $(am__tar) | lzma -9 -c >$(distdir).tar.lzma + $(am__remove_distdir) + +dist-tarZ: distdir + tardir=$(distdir) && $(am__tar) | compress -c >$(distdir).tar.Z + $(am__remove_distdir) + +dist-shar: distdir + shar $(distdir) | GZIP=$(GZIP_ENV) gzip -c >$(distdir).shar.gz + $(am__remove_distdir) + +dist-zip: distdir + -rm -f $(distdir).zip + zip -rq $(distdir).zip $(distdir) + $(am__remove_distdir) + +dist dist-all: distdir + tardir=$(distdir) && $(am__tar) | GZIP=$(GZIP_ENV) gzip -c >$(distdir).tar.gz + $(am__remove_distdir) + +# This target untars the dist file and tries a VPATH configuration. Then +# it guarantees that the distribution is self-contained by making another +# tarfile. +distcheck: dist + case '$(DIST_ARCHIVES)' in \ + *.tar.gz*) \ + GZIP=$(GZIP_ENV) gunzip -c $(distdir).tar.gz | $(am__untar) ;;\ + *.tar.bz2*) \ + bunzip2 -c $(distdir).tar.bz2 | $(am__untar) ;;\ + *.tar.lzma*) \ + unlzma -c $(distdir).tar.lzma | $(am__untar) ;;\ + *.tar.Z*) \ + uncompress -c $(distdir).tar.Z | $(am__untar) ;;\ + *.shar.gz*) \ + GZIP=$(GZIP_ENV) gunzip -c $(distdir).shar.gz | unshar ;;\ + *.zip*) \ + unzip $(distdir).zip ;;\ + esac + chmod -R a-w $(distdir); chmod a+w $(distdir) + mkdir $(distdir)/_build + mkdir $(distdir)/_inst + chmod a-w $(distdir) + dc_install_base=`$(am__cd) $(distdir)/_inst && pwd | sed -e 's,^[^:\\/]:[\\/],/,'` \ + && dc_destdir="$${TMPDIR-/tmp}/am-dc-$$$$/" \ + && cd $(distdir)/_build \ + && ../configure --srcdir=.. --prefix="$$dc_install_base" \ + $(DISTCHECK_CONFIGURE_FLAGS) \ + && $(MAKE) $(AM_MAKEFLAGS) \ + && $(MAKE) $(AM_MAKEFLAGS) dvi \ + && $(MAKE) $(AM_MAKEFLAGS) check \ + && $(MAKE) $(AM_MAKEFLAGS) install \ + && $(MAKE) $(AM_MAKEFLAGS) installcheck \ + && $(MAKE) $(AM_MAKEFLAGS) uninstall \ + && $(MAKE) $(AM_MAKEFLAGS) distuninstallcheck_dir="$$dc_install_base" \ + distuninstallcheck \ + && chmod -R a-w "$$dc_install_base" \ + && ({ \ + (cd ../.. && umask 077 && mkdir "$$dc_destdir") \ + && $(MAKE) $(AM_MAKEFLAGS) DESTDIR="$$dc_destdir" install \ + && $(MAKE) $(AM_MAKEFLAGS) DESTDIR="$$dc_destdir" uninstall \ + && $(MAKE) $(AM_MAKEFLAGS) DESTDIR="$$dc_destdir" \ + distuninstallcheck_dir="$$dc_destdir" distuninstallcheck; \ + } || { rm -rf "$$dc_destdir"; exit 1; }) \ + && rm -rf "$$dc_destdir" \ + && $(MAKE) $(AM_MAKEFLAGS) dist \ + && rm -rf $(DIST_ARCHIVES) \ + && $(MAKE) $(AM_MAKEFLAGS) distcleancheck + $(am__remove_distdir) + @(echo "$(distdir) archives ready for distribution: "; \ + list='$(DIST_ARCHIVES)'; for i in $$list; do echo $$i; done) | \ + sed -e 1h -e 1s/./=/g -e 1p -e 1x -e '$$p' -e '$$x' +distuninstallcheck: + @cd $(distuninstallcheck_dir) \ + && test `$(distuninstallcheck_listfiles) | wc -l` -le 1 \ + || { echo "ERROR: files left after uninstall:" ; \ + if test -n "$(DESTDIR)"; then \ + echo " (check DESTDIR support)"; \ + fi ; \ + $(distuninstallcheck_listfiles) ; \ + exit 1; } >&2 +distcleancheck: distclean + @if test '$(srcdir)' = . ; then \ + echo "ERROR: distcleancheck can only run from a VPATH build" ; \ + exit 1 ; \ + fi + @test `$(distcleancheck_listfiles) | wc -l` -eq 0 \ + || { echo "ERROR: files left in build directory after distclean:" ; \ + $(distcleancheck_listfiles) ; \ + exit 1; } >&2 +check-am: all-am +check: check-recursive +all-am: Makefile $(HEADERS) +installdirs: installdirs-recursive +installdirs-am: + for dir in "$(DESTDIR)$(includedir)"; do \ + test -z "$$dir" || $(MKDIR_P) "$$dir"; \ + done +install: install-recursive +install-exec: install-exec-recursive +install-data: install-data-recursive +uninstall: uninstall-recursive + +install-am: all-am + @$(MAKE) $(AM_MAKEFLAGS) install-exec-am install-data-am + +installcheck: installcheck-recursive +install-strip: + $(MAKE) $(AM_MAKEFLAGS) INSTALL_PROGRAM="$(INSTALL_STRIP_PROGRAM)" \ + install_sh_PROGRAM="$(INSTALL_STRIP_PROGRAM)" INSTALL_STRIP_FLAG=-s \ + `test -z '$(STRIP)' || \ + echo "INSTALL_PROGRAM_ENV=STRIPPROG='$(STRIP)'"` install +mostlyclean-generic: + +clean-generic: + +distclean-generic: + -test -z "$(CONFIG_CLEAN_FILES)" || rm -f $(CONFIG_CLEAN_FILES) + +maintainer-clean-generic: + @echo "This command is intended for maintainers to use" + @echo "it deletes files that may require special tools to rebuild." +clean: clean-recursive + +clean-am: clean-generic mostlyclean-am + +distclean: distclean-recursive + -rm -f $(am__CONFIG_DISTCLEAN_FILES) + -rm -f Makefile +distclean-am: clean-am distclean-generic distclean-tags + +dvi: dvi-recursive + +dvi-am: + +html: html-recursive + +info: info-recursive + +info-am: + +install-data-am: install-nobase_includeHEADERS + +install-dvi: install-dvi-recursive + +install-exec-am: + +install-html: install-html-recursive + +install-info: install-info-recursive + +install-man: + +install-pdf: install-pdf-recursive + +install-ps: install-ps-recursive + +installcheck-am: + +maintainer-clean: maintainer-clean-recursive + -rm -f $(am__CONFIG_DISTCLEAN_FILES) + -rm -rf $(top_srcdir)/autom4te.cache + -rm -f Makefile +maintainer-clean-am: distclean-am maintainer-clean-generic + +mostlyclean: mostlyclean-recursive + +mostlyclean-am: mostlyclean-generic + +pdf: pdf-recursive + +pdf-am: + +ps: ps-recursive + +ps-am: + +uninstall-am: uninstall-nobase_includeHEADERS + +.MAKE: $(RECURSIVE_CLEAN_TARGETS) $(RECURSIVE_TARGETS) install-am \ + install-strip + +.PHONY: $(RECURSIVE_CLEAN_TARGETS) $(RECURSIVE_TARGETS) CTAGS GTAGS \ + all all-am am--refresh check check-am clean clean-generic \ + ctags ctags-recursive dist dist-all dist-bzip2 dist-gzip \ + dist-lzma dist-shar dist-tarZ dist-zip distcheck distclean \ + distclean-generic distclean-tags distcleancheck distdir \ + distuninstallcheck dvi dvi-am html html-am info info-am \ + install install-am install-data install-data-am install-dvi \ + install-dvi-am install-exec install-exec-am install-html \ + install-html-am install-info install-info-am install-man \ + install-nobase_includeHEADERS install-pdf install-pdf-am \ + install-ps install-ps-am install-strip installcheck \ + installcheck-am installdirs installdirs-am maintainer-clean \ + maintainer-clean-generic mostlyclean mostlyclean-generic pdf \ + pdf-am ps ps-am tags tags-recursive uninstall uninstall-am \ + uninstall-nobase_includeHEADERS + + +# +# automake adds dependencies that we don't like, so we explicitly remove them +# +Makefile: +# Tell versions [3.59,3.63) of GNU make to not export all variables. +# Otherwise a system limit (for SysV at least) may be exceeded. +.NOEXPORT: diff --git a/README b/README new file mode 100644 index 0000000..3dc7817 --- /dev/null +++ b/README @@ -0,0 +1,659 @@ + Internet Systems Consortium DHCP Distribution + Version 4.2.3-P2 + 4 January 2012 + + README FILE + +You should read this file carefully before trying to install or use +the ISC DHCP Distribution. + + TABLE OF CONTENTS + + 1 WHERE TO FIND DOCUMENTATION + 2 RELEASE STATUS + 3 BUILDING THE DHCP DISTRIBUTION + 3.1 UNPACKING IT + 3.2 CONFIGURING IT + 3.2.1 DYNAMIC DNS UPDATES + 3.2.2 LOCALLY DEFINED OPTIONS + 3.3 BUILDING IT + 4 INSTALLING THE DHCP DISTRIBUTION + 5 USING THE DHCP DISTRIBUTION + 5.1 FIREWALL RULES + 5.2 LINUX + 5.2.1 IF_TR.H NOT FOUND + 5.2.2 SO_ATTACH_FILTER UNDECLARED + 5.2.3 PROTOCOL NOT CONFIGURED + 5.2.4 BROADCAST + 5.2.6 IP BOOTP AGENT + 5.2.7 MULTIPLE INTERFACES + 5.3 SCO + 5.4 HP-UX + 5.5 ULTRIX + 5.6 FreeBSD + 5.7 NeXTSTEP + 5.8 SOLARIS + 5.8.1 Solaris 11 + 5.8.2 Other Solaris Items + 5.9 AIX + 5.10 MacOS X + 6 SUPPORT + 6.1 HOW TO REPORT BUGS + + WHERE TO FIND DOCUMENTATION + +Documentation for this software includes this README file, the +RELNOTES file, and the manual pages, which are in the server, common, +client and relay subdirectories. The README file (this file) includes +late-breaking operational and system-specific information that you +should read even if you don't want to read the manual pages, and that +you should *certainly* read if you run into trouble. Internet +standards relating to the DHCP protocol are listed in the References +document that is available in html, txt and xml formats in doc/ +subdirectory. You will have the best luck reading the manual pages if +you build this software and then install it, although you can read +them directly out of the distribution if you need to. + +DHCP server documentation is in the dhcpd man page. Information about +the DHCP server lease database is in the dhcpd.leases man page. +Server configuration documentation is in the dhcpd.conf man page as +well as the dhcp-options man page. A sample DHCP server +configuration is in the file server/dhcpd.conf. The source for the +dhcpd, dhcpd.leases and dhcpd.conf man pages is in the server/ sub- +directory in the distribution. The source for the dhcp-options.5 +man page is in the common/ subdirectory. + +DHCP Client documentation is in the dhclient man page. DHCP client +configuration documentation is in the dhclient.conf man page and the +dhcp-options man page. The DHCP client configuration script is +documented in the dhclient-script man page. The format of the DHCP +client lease database is documented in the dhclient.leases man page. +The source for all these man pages is in the client/ subdirectory in +the distribution. In addition, the dhcp-options man page should be +referred to for information about DHCP options. + +DHCP relay agent documentation is in the dhcrelay man page, the source +for which is distributed in the relay/ subdirectory. + +To read installed manual pages, use the man command. Type "man page" +where page is the name of the manual page. This will only work if +you have installed the ISC DHCP distribution using the ``make install'' +command (described later). + +If you want to read manual pages that aren't installed, you can type +``nroff -man page |more'' where page is the filename of the +unformatted manual page. The filename of an unformatted manual page +is the name of the manual page, followed by '.', followed by some +number - 5 for documentation about files, and 8 for documentation +about programs. For example, to read the dhcp-options man page, +you would type ``nroff -man common/dhcp-options.5 |more'', assuming +your current working directory is the top level directory of the ISC +DHCP Distribution. + +Please note that the pathnames of files to which our manpages refer +will not be correct for your operating system until after you iterate +'make install' (so if you're reading a manpage out of the source +directory, it may not have up-to-date information). + + RELEASE STATUS + +This is ISC DHCP 4.2.3-P2, a security release containing one security +patch to fix a potential DOS issue. + +In this release, the DHCPv6 server should be fully functional on Linux, +Solaris, or any BSD. The DHCPv6 client should be similarly functional +except on Solaris. + +The DHCPv4 server, relay, and client, should be fully functional +on Linux, Solaris, any BSD, HPUX, SCO, NextSTEP, and Irix. + +If you are running the DHCP distribution on a machine which is a +firewall, or if there is a firewall between your DHCP server(s) and +DHCP clients, please read the section on firewalls which appears later +in this document. + +If you wish to run the DHCP Distribution on Linux, please see the +Linux-specific notes later in this document. If you wish to run on an +SCO release, please see the SCO-specific notes later in this document. +You particularly need to read these notes if you intend to support +Windows 95 clients. If you are running HP-UX or Ultrix, please read the +notes for those operating systems below. If you are running NeXTSTEP, +please see the notes on NeXTSTEP below. + +If you start dhcpd and get a message, "no free bpf", that means you +need to configure the Berkeley Packet Filter into your operating +system kernel. On NetBSD, FreeBSD and BSD/os, type ``man bpf'' for +information. On Digital Unix, type ``man pfilt''. + + + BUILDING THE DHCP DISTRIBUTION + + UNPACKING IT + +To build the DHCP Distribution, unpack the compressed tar file using +the tar utility and the gzip command - type something like: + + gunzip dhcp-4.2.3-P2.tar.gz + tar xvf dhcp-4.2.3-P2.tar + + CONFIGURING IT + +Now, cd to the dhcp-4.2.3-P2 subdirectory that you've just created and +configure the source tree by typing: + + ./configure + +If the configure utility can figure out what sort of system you're +running on, it will create a custom Makefile for you for that +system; otherwise, it will complain. If it can't figure out what +system you are using, that system is not supported - you are on +your own. + + DYNAMIC DNS UPDATES + +A fully-featured implementation of dynamic DNS updates is included in +this release. It uses libraries from BIND and, to avoid issues with +different versions, includes the necessary BIND version. The appropriate +BIND libraries will be compiled and installed in the bind subdirectory +as part of the make step. In order to build the necessary libraries you +will need to have "gmake" available on your build system. + + +There is documentation for the DDNS support in the dhcpd.conf manual +page - see the beginning of this document for information on finding +manual pages. + + LOCALLY DEFINED OPTIONS + +In previous versions of the DHCP server there was a mechanism whereby +options that were not known by the server could be configured using +a name made up of the option code number and an identifier: +"option-nnn" This is no longer supported, because it is not future- +proof. Instead, if you want to use an option that the server doesn't +know about, you must explicitly define it using the method described +in the dhcp-options man page under the DEFINING NEW OPTIONS heading. + + BUILDING IT + +Once you've run configure, just type ``make'', and after a while +you should have a dhcp server. If you get compile errors on one +of the supported systems mentioned earlier, please let us know. +If you get warnings, it's not likely to be a problem - the DHCP +server compiles completely warning-free on as many architectures +as we can manage, but there are a few for which this is difficult. +If you get errors on a system not mentioned above, you will need +to do some programming or debugging on your own to get the DHCP +Distribution working. + + INSTALLING THE DHCP DISTRIBUTION + +Once you have successfully gotten the DHCP Distribution to build, you +can install it by typing ``make install''. If you already have an old +version of the DHCP Distribution installed, you may want to save it +before typing ``make install''. + + USING THE DHCP DISTRIBUTION + + FIREWALL RULES + +If you are running the DHCP server or client on a computer that's also +acting as a firewall, you must be sure to allow DHCP packets through +the firewall. In particular, your firewall rules _must_ allow packets +from IP address 0.0.0.0 to IP address 255.255.255.255 from UDP port 68 +to UDP port 67 through. They must also allow packets from your local +firewall's IP address and UDP port 67 through to any address your DHCP +server might serve on UDP port 68. Finally, packets from relay agents +on port 67 to the DHCP server on port 67, and vice versa, must be +permitted. + +We have noticed that on some systems where we are using a packet +filter, if you set up a firewall that blocks UDP port 67 and 68 +entirely, packets sent through the packet filter will not be blocked. +However, unicast packets will be blocked. This can result in strange +behaviour, particularly on DHCP clients, where the initial packet +exchange is broadcast, but renewals are unicast - the client will +appear to be unable to renew until it starts broadcasting its +renewals, and then suddenly it'll work. The fix is to fix the +firewall rules as described above. + + PARTIAL SERVERS + +If you have a server that is connected to two networks, and you only +want to provide DHCP service on one of those networks (e.g., you are +using a cable modem and have set up a NAT router), if you don't write +any subnet declaration for the network you aren't supporting, the DHCP +server will ignore input on that network interface if it can. If it +can't, it will refuse to run - some operating systems do not have the +capability of supporting DHCP on machines with more than one +interface, and ironically this is the case even if you don't want to +provide DHCP service on one of those interfaces. + + LINUX + +There are three big LINUX issues: the all-ones broadcast address, +Linux 2.1 ip_bootp_agent enabling, and operations with more than one +network interface. There are also two potential compilation/runtime +problems for Linux 2.1/2.2: the "SO_ATTACH_FILTER undeclared" problem +and the "protocol not configured" problem. + + LINUX: PROTOCOL NOT CONFIGURED + +If you get the following message, it's because your kernel doesn't +have the linux packetfilter or raw packet socket configured: + + Make sure CONFIG_PACKET (Packet socket) and CONFIG_FILTER (Socket + Filtering) are enabled in your kernel configuration + +If this happens, you need to configure your Linux kernel to support +Socket Filtering and the Packet socket, or to select a kernel provided +by your Linux distribution that has these enabled (virtually all modern +ones do by default). + + LINUX: BROADCAST + +If you are running a recent version of Linux, this won't be a problem, +but on older versions of Linux (kernel versions prior to 2.2), there +is a potential problem with the broadcast address being sent +incorrectly. + +In order for dhcpd to work correctly with picky DHCP clients (e.g., +Windows 95), it must be able to send packets with an IP destination +address of 255.255.255.255. Unfortunately, Linux changes an IP +destination of 255.255.255.255 into the local subnet broadcast address +(here, that's 192.5.5.223). + +This isn't generally a problem on Linux 2.2 and later kernels, since +we completely bypass the Linux IP stack, but on old versions of Linux +2.1 and all versions of Linux prior to 2.1, it is a problem - pickier +DHCP clients connected to the same network as the ISC DHCP server or +ISC relay agent will not see messages from the DHCP server. It *is* +possible to run into trouble with this on Linux 2.2 and later if you +are running a verson of the DHCP server that was compiled on a Linux +2.0 system, though. + +It is possible to work around this problem on some versions of Linux +by creating a host route from your network interface address to +255.255.255.255. The command you need to use to do this on Linux +varies from version to version. The easiest version is: + + route add -host 255.255.255.255 dev eth0 + +On some older Linux systems, you will get an error if you try to do +this. On those systems, try adding the following entry to your +/etc/hosts file: + +255.255.255.255 all-ones + +Then, try: + + route add -host all-ones dev eth0 + +Another route that has worked for some users is: + + route add -net 255.255.255.0 dev eth0 + +If you are not using eth0 as your network interface, you should +specify the network interface you *are* using in your route command. + + LINUX: IP BOOTP AGENT + +Some versions of the Linux 2.1 kernel apparently prevent dhcpd from +working unless you enable it by doing the following: + + echo 1 >/proc/sys/net/ipv4/ip_bootp_agent + + + LINUX: MULTIPLE INTERFACES + +Very old versions of the Linux kernel do not provide a networking API +that allows dhcpd to operate correctly if the system has more than one +broadcast network interface. However, Linux 2.0 kernels with version +numbers greater than or equal to 2.0.31 add an API feature: the +SO_BINDTODEVICE socket option. If SO_BINDTODEVICE is present, it is +possible for dhcpd to operate on Linux with more than one network +interface. In order to take advantage of this, you must be running a +2.0.31 or greater kernel, and you must have 2.0.31 or later system +headers installed *before* you build the DHCP Distribution. + +We have heard reports that you must still add routes to 255.255.255.255 +in order for the all-ones broadcast to work, even on 2.0.31 kernels. +In fact, you now need to add a route for each interface. Hopefully +the Linux kernel gurus will get this straight eventually. + +Linux 2.1 and later kernels do not use SO_BINDTODEVICE or require the +broadcast address hack, but do support multiple interfaces, using the +Linux Packet Filter. + + LINUX: OpenWrt + +DHCP 4.1 has been tested on OpenWrt 7.09 and 8.09. In keeping with +standard practice, client/scripts now includes a dhclient-script file +for OpenWrt. However, this is not sufficient by itself to run dhcp on +OpenWrt; a full OpenWrt package for DHCP is available at +ftp://ftp.isc.org/isc/dhcp/dhcp-4.1.0-openwrt.tar.gz + + LINUX: 802.1q VLAN INTERFACES + +If you're using 802.1q vlan interfaces on Linux, it is necessary to +vconfig the subinterface(s) to rewrite the 802.1q information out of +packets received by the dhcpd daemon via LPF: + + vconfig set_flag eth1.523 1 1 + +Note that this may affect the performance of your system, since the +Linux kernel must rewrite packets received via this interface. For +more information, consult the vconfig man pages. + + SCO + +ISC DHCP will now work correctly on newer versions of SCO out of the +box (tested on OpenServer 5.05b, assumed to work on UnixWare 7). + +Older versions of SCO have the same problem as Linux (described earlier). +The thing is, SCO *really* doesn't want to let you add a host route to +the all-ones broadcast address. + +You can try the following: + + ifconfig net0 xxx.xxx.xxx.xxx netmask 0xNNNNNNNN broadcast 255.255.255.255 + +If this doesn't work, you can also try the following strange hack: + + ifconfig net0 alias 10.1.1.1 netmask 8.0.0.0 + +Apparently this works because of an interaction between SCO's support +for network classes and the weird netmask. The 10.* network is just a +dummy that can generally be assumed to be safe. Don't ask why this +works. Just try it. If it works for you, great. + + HP-UX + +HP-UX has the same problem with the all-ones broadcast address that +SCO and Linux have. One user reported that adding the following to +/etc/rc.config.d/netconf helped (you may have to modify this to suit +your local configuration): + +INTERFACE_NAME[0]=lan0 +IP_ADDRESS[0]=1.1.1.1 +SUBNET_MASK[0]=255.255.255.0 +BROADCAST_ADDRESS[0]="255.255.255.255" +LANCONFIG_ARGS[0]="ether" +DHCP_ENABLE[0]=0 + + ULTRIX + +Now that we have Ultrix packet filter support, the DHCP Distribution +on Ultrix should be pretty trouble-free. However, one thing you do +need to be aware of is that it now requires that the pfilt device be +configured into your kernel and present in /dev. If you type ``man +packetfilter'', you will get some information on how to configure your +kernel for the packet filter (if it isn't already) and how to make an +entry for it in /dev. + + FreeBSD + +Versions of FreeBSD prior to 2.2 have a bug in BPF support in that the +ethernet driver swaps the ethertype field in the ethernet header +downstream from BPF, which corrupts the output packet. If you are +running a version of FreeBSD prior to 2.2, and you find that dhcpd +can't communicate with its clients, you should #define BROKEN_FREEBSD_BPF +in site.h and recompile. + +Modern versions of FreeBSD include the ISC DHCP 3.0 client as part of +the base system, and the full distribution (for the DHCP server and +relay agent) is available from the Ports Collection in +/usr/ports/net/isc-dhcp3, or as a package on FreeBSD installation +CDROMs. + + NeXTSTEP + +The NeXTSTEP support uses the NeXTSTEP Berkeley Packet Filter +extension, which is not included in the base NextStep system. You +must install this extension in order to get dhcpd or dhclient to work. + + SOLARIS + +There are two known issues seen when compiling using the Sun compiler. + +The first is that older Sun compilers generate an error on some of +our uses of the flexible array option. Newer versions only generate +a warning, which can be safely ignored. If you run into this error +("type of struct member "buf" can not be derived from structure with +flexible array member"), upgrade your tools to Oracle Solaris Studio +(previously Sun Studio) 12 or something newer. + +The second is the interaction between the configure script and the +makefiles for the Bind libraries. Currently we don't pass all +environment variables between the DHCP configure and the Bind configure. + +If you attempt to specify the compiler you wish to use like this: + + CC=/opt/SUNWspro/bin/cc ./configure + +"make" may not build the Bind libraries with that compiler. + +In order to use the same compiler for Bind and DHCP we suggest the +following commands: + + CC=/opt/SUNWspro/bin/cc ./configure + CC=/opt/SUNWspro/bin/cc make + + Solaris 11 + +We have integrated a patch from Oracle to use sockets instead of +DLPI on Solaris 11. This functionality was written for use with +Solaris Studio 12.2 and requires the system/header package. + +By default this code is disabled in order to minimize disruptions +for current users. In order to enable this code you will need to +enable both USE_SOCKETS and USE_V4_PKTINFO as part of the +configuration step. The command line would be something like: + + ./configure --enable-use-sockets --enable-ipv4-pktinfo + + Other Solaris Items + +One problem which has been observed and is not fixed in this +patchlevel has to do with using DLPI on Solaris machines. The symptom +of this problem is that the DHCP server never receives any requests. +This has been observed with Solaris 2.6 and Solaris 7 on Intel x86 +systems, although it may occur with other systems as well. If you +encounter this symptom, and you are running the DHCP server on a +machine with a single broadcast network interface, you may wish to +edit the includes/site.h file and uncomment the #define USE_SOCKETS +line. Then type ``make clean; make''. As an alternative workaround, +it has been reported that running 'snoop' will cause the dhcp server +to start receiving packets. So the practice reported to us is to run +snoop at dhcpd startup time, with arguments to cause it to receive one +packet and exit. + + snoop -c 1 udp port 67 > /dev/null & + +The DHCP client on Solaris will only work with DLPI. If you run it +and it just keeps saying it's sending DHCPREQUEST packets, but never +gets a response, you may be having DLPI trouble as described above. +If so, we have no solution to offer at this time, aside from the above +workaround which should also work here. Also, because Solaris requires +you to "plumb" an interface before it can be detected by the DHCP client, +you must either specify the name(s) of the interface(s) you want to +configure on the command line, or must plumb the interfaces prior to +invoking the DHCP client. This can be done with ``ifconfig iface plumb'', +where iface is the name of the interface (e.g., ``ifconfig hme0 plumb''). + +It should be noted that Solaris versions from 2.6 onward include a +DHCP client that you can run with ``/sbin/ifconfig iface dhcp start'' +rather than using the ISC DHCP client, including DHCPv6. Consequently, +we don't believe there is a need for the client to run on Solaris, and +have not engineered the needed DHCPv6 modifications for the dhclient-script. +If you feel this is in error, or have a need, please contact us. + + AIX + +The AIX support uses the BSD socket API, which cannot differentiate on +which network interface a broadcast packet was received; thus the DHCP +server and relay will work only on a single interface. (They do work +on multi-interface machines if configured to listen on only one of the +interfaces.) + +We have reports of Windows XP clients having difficutly retrieving +addresses from a server running on an AIX machine. This issue +was traced to the client requiring messages be sent to the all ones +broadcast address (255.255.255.255) while the AIX server was sending +to 192.168.0.255. + +You may be able to solve this by including a relay between the client +and server with the relay configured to use a broadcast of all-ones. + +A second option that worked for AIX 5.1 but doesn't seem to work for +AIX 5.3 was to: + create a host file entry for all-ones (255.255.255.255) +and then add a route: + route add -host all-ones -interface + +The ISC DHCP distribution does not include a dhclient-script for AIX-- +AIX comes with a DHCP client. Contribution of a working dhclient-script +for AIX would be welcome. + + + MacOS X + +The MacOS X system uses a TCP/IP stack derived from FreeBSD with a +user-friendly interface named the System Configuration Framework. +As it includes a builtin DHCPv4 client (you are better just using that), +this text is only about the DHCPv6 client (``dhclient -6 ...''). The DNS +configuration (domain search list and name servers' addresses) is managed +by a System Configuration agent, not by /etc/resolv.conf (which is a link +to /var/run/resolv.conf, which itself only reflects the internal state; +the System Configuration framework's Dynamic Store). + +This means that modifying resolv.conf directly doesn't have the +intended effect, instead the macos script sample creates its own +resolv.conf.dhclient6 in /var/run, and inserts the contents of this +file into the Dynamic Store. + +When updating the address configuration the System Configuration +framework expects the prefix and a default router along with the +configured address. As this extra information is not available via +the DHCPv6 protocol the System Configuration framework isn't usable +for address configuration, instead ifconfig is used directly. + +Note the Dynamic Store (from which /var/run/resolv.conf is built) is +recomputed from scratch when the current location/set is changed. +Running the dhclient-script reinstalls the resolv.conf.dhclient6 +configuration. + + SUPPORT + +The Internet Systems Consortium DHCP server is developed and distributed +by ISC in the public trust, thanks to the generous donations of its +sponsors. ISC now also offers commercial quality support contracts for +ISC DHCP, more information about ISC Support Contracts can be found at +the following URL: + + https://www.isc.org/services/support/ + +Please understand that we may not respond to support inquiries unless +you have a support contract. ISC will continue its practice of always +responding to critical items that effect the entire community, and +responding to all other requests for support upon ISC's mailing lists +on a best-effort basis. + +However, ISC DHCP has attracted a fairly sizable following on the +Internet, which means that there are a lot of knowledgeable users who +may be able to help you if you get stuck. These people generally +read the dhcp-users@isc.org mailing list. Be sure to provide as much +detail in your query as possible. + +If you are going to use ISC DHCP, you should probably subscribe to +the dhcp-users or dhcp-announce mailing lists. + +WHERE TO SEND FEATURE REQUESTS: We like to hear your feedback. We may +not respond to it all the time, but we do read it. If ISC DHCP doesn't +work well for you, or you have an idea that would improve it for your +use, please send your suggestion to dhcp-suggest@isc.org. This is also +an excellent place to send patches that add new features. + +WHERE TO REPORT BUGS: If you want the act of sending in a bug report +to result in you getting help in the form of a fixed piece of +software, you are asking for help. Your bug report is helpful to us, +but fundamentally you are making a support request, so please use the +addresses described in the previous paragraphs. If you are _sure_ that +your problem is a bug, and not user error, or if your bug report +includes a patch, you can send it to our ticketing system at +dhcp-bugs@isc.org. If you have not received a notice that the ticket +has been resolved, then we're still working on it. + +PLEASE DO NOT REPORT BUGS IN OLD SOFTWARE RELEASES! Fetch the latest +release and see if the bug is still in that version of the software, +and if it is still present, _then_ report it. ISC release versions +always have three numbers, for example: 1.2.3. The 'major release' is +1 here, the 'minor release' is 2, and the 'maintenance release' is 3. +ISC will accept bug reports against the most recent two major.minor +releases: for example, 1.0.0 and 0.9.0, but not 0.8.* or prior. + +PLEASE take a moment to determine where the ISC DHCP distribution +that you're using came from. ISC DHCP is sometimes heavily modified +by integrators in various operating systems - it's not that we +feel that our software is perfect and incapable of having bugs, but +rather that it is very frustrating to find out after many days trying +to help someone that the sources you're looking at aren't what they're +running. When in doubt, please retrieve the source distribution from +ISC's web page and install it. + + HOW TO REPORT BUGS OR REQUEST HELP + +When you report bugs or ask for help, please provide us complete +information. A list of information we need follows. Please read it +carefully, and put all the information you can into your initial bug +report. This will save us a great deal of time and more informative +bug reports are more likely to get handled more quickly overall. + + 1. The specific operating system name and version of the + machine on which the DHCP server or client is running. + 2. The specific operating system name and version of the + machine on which the client is running, if you are having + trouble getting a client working with the server. + 3. If you're running Linux, the version number we care about is + the kernel version and maybe the library version, not the + distribution version - e.g., while we don't mind knowing + that you're running Redhat version mumble.foo, we must know + what kernel version you're running, and it helps if you can + tell us what version of the C library you're running, + although if you don't know that off the top of your head it + may be hard for you to figure it out, so don't go crazy + trying. + 4. The specific version of the DHCP distribution you're + running, as reported by dhcpd -t. + 5. Please explain the problem carefully, thinking through what + you're saying to ensure that you don't assume we know + something about your situation that we don't know. + 6. Include your dhcpd.conf and dhcpd.leases file as MIME attachments + if they're not over 100 kilobytes in size each. If they are + this large, please make them available to us eg via a hidden + http:// URL or FTP site. If you're not comfortable releasing + this information due to sensitive contents, you may encrypt + the file to our release signing key, available on our website. + 7. Include a log of your server or client running until it + encounters the problem - for example, if you are having + trouble getting some client to get an address, restart the + server with the -d flag and then restart the client, and + send us what the server prints. Likewise, with the client, + include the output of the client as it fails to get an + address or otherwise does the wrong thing. Do not leave + out parts of the output that you think aren't interesting. + 8. If the client or server is dumping core, please run the + debugger and get a stack trace, and include that in your + bug report. For example, if your debugger is gdb, do the + following: + + gdb dhcpd dhcpd.core + (gdb) where + [...] + (gdb) quit + + This assumes that it's the dhcp server you're debugging, and + that the core file is in dhcpd.core. + +Please see https://www.isc.org/software/dhcp/ for details on how to subscribe +to the ISC DHCP mailing lists. + diff --git a/RELNOTES b/RELNOTES new file mode 100644 index 0000000..8664fed --- /dev/null +++ b/RELNOTES @@ -0,0 +1,3277 @@ + Internet Systems Consortium DHCP Distribution + Version 4.2.3-P2 + 4 January 2012 + + Release Notes + + NEW FEATURES + +ISC DHCP 4.2.x includes features that were not included in DHCP 4.1.x. +These include: + +Processing the DHCP to DNS server transactions in an asynchronous fashion. +The DHCP server or client can now continue with its processing while +awaiting replies from the DNS server. + +There are a number of DHCPv6 limitations and features missing in this +release, which will be addressed in the future: + +- Only Solaris, Linux, FreeBSD, NetBSD, and OpenBSD are supported. + +- DHCPv6 includes human-readable text in status code messages, in + English. A method to reconfigure or support other languages would + be preferable. + +- The "host-identifier" option is limited to a simple token. + +- The client and server can only operate DHCPv4 or DHCPv6 at a time, + not both. To use both protocols simultaneously, two instances of the + relevant daemon are required, one with the '-6' command line option. + +For information on how to install, configure and run this software, as +well as how to find documentation and report bugs, please consult the +README file. + +ISC DHCP uses standard GNU configure for installation. Please review the +output of "./configure --help" to see what options are available. + +The system has only been tested on Linux, FreeBSD, and Solaris, and may not +work on other platforms. Please report any problems and suggested fixes to +. + + Changes since 4.2.3-P1 + +! Modify the DDNS handling code. In a previous patch we added logging + code to the DDNS handling. This code included a bug that caused it + to attempt to dereference a NULL pointer and eventually segfault. + While reviewing the code as we addressed this problem, we determined + that some of the updates to the lease structures would not work as + planned since the structures being updated were in the process of + being freed: these updates were removed. In addition we removed an + incorrect call to the DDNS removal function that could cause a failure + during the removal of DDNS information from the DNS server. + Thanks to Jasper Jongmans for reporting this issue. + [ISC-Bugs #27078] + CVE: CVE-2011-4868 + + Changes since 4.2.3 + +! Add a check for a null pointer before calling the regexec function. + Without out this check we could, under some circumstances, pass + a null pointer to the regexec function causing it to segfault. + Thanks to a report from BlueCat Networks. + [ISC-Bugs #26704]. + CVE: CVE-2011-4539 + + Changes since 4.2.2 + +- Fix the code that checks for an existing DDNS transaction to cancel + when removing DDNS information, so that we will continue with the + processing if we have a lease even if it doesn't have an outstanding + transaction. [ISC-Bugs #24682] + +- Add AM_MAINTAINER_MODE to configure.ac to avoid rebuilding + configuration files. [ISC-Bugs #24107] + +- Add support for passing DDNS information to a DNS server over + an IPv6 address. [ISC-Bugs #22647] + +- Enhanced patch for 23595 to handle IPv4 fixed addresses more + cleanly. [ISC-Bugs #23595] + + Changes since 4.2.2rc1 + +! Two packets were found that cause a server to halt. The code + has been updated to properly process or reject the packets as + appropriate. Thanks to David Zych at University of Illinois + for reporting this issue. [ISC-Bugs #24960] + One CVE number for each class of packet. + CVE-2011-2748 + CVE-2011-2749 + + Changes since 4.2.2b1 + +- Strict checks for content of domain-name DHCPv4 option can now be + configured during compilation time. Even though RFC2132 does not allow + to store more than one domain in domain-name option, such behavior is + now enabled by default, but this may change some time in the future. + See ACCEPT_LIST_IN_DOMAIN_NAME define in includes/site.h. + [ISC-Bugs #24167] + +- DNS Update fix. A misconfigured server could crash during DNS update + processing if the configuration included overlapping pools or + multiple fixed-address entries for a single address. This issue + affected both IPv4 and IPv6. The fix allows a server to detect such + conditions, provides the user with extra information and recommended + steps to fix the problem. If the user enables the appropriate option + in site.h then server will be terminated + [ISC-Bugs #23595] + + Changes since 4.2.1 + +! In dhclient check the data for some string options for + reasonableness before passing it along to the script that + interfaces with the OS. + [ISC-Bugs #23722] + CVE: CVE-2011-0997 + +- DHCPv6 server now responds properly if client asks for a prefix that + is already assigned to a different client. [ISC-Bugs #23948] + +- Add the option "--no-pid" to the client, relay and server code, + to disable writing a pid file. Add the option "-pf pidfile" + to the relay to allow the user to supply the pidfile name at + runtime. Add the "with-relay6-pid-file" option to configure + to allow the user to supply the pidfile name for the relay + in v6 mode at configure time. + [ISC-Bugs #23351] [ISC-Bugs #17541] + +- 'dhclient' no longer waits a random interval after first starting up to + begin in the INIT state. This conforms to RFC 2131, but elects not to + implement a 'SHOULD' direction in section 4.1. [ISC-Bugs #19660] + +- Added 'initial-delay' parameter that specifies maximum amount of time + before client goes to the INIT state. The default value is 0. In previous + versions of the code client could wait up to 5 seconds. The old behavior + may be restored by using 'initial-delay 5;' in the client config file. + [ISC-Bugs #19660] + +- ICMP ping-check should now sit closer to precisely the number of seconds + configured (or default 1), due to making use of the new microsecond + scale timer internally to dhcpd. This corrects a bug where the server + may immediately timeout an ICMP ping-check if it was made late in the + current second. [ISC-Bugs #19660] + +- The DHCP client will schedule renewal and rebinding events in + microseconds if the DHCP server provided a lease-time that would result + in sub-1-second timers. This corrects a bug where a 2-second or lower + lease-time would cause the DHCP client to enter an infinite loop by + scheduling renewal at zero seconds. [ISC-Bugs #19660] + +- Client lease records are recorded at most once every 15 seconds. This + keeps the client from filling the lease database disk quickly on very small + lease times. [ISC-Bugs #19660] + +- To defend against RFC 2131 non-compliant DHCP servers which fail to + advertise a lease-time (either mangled, or zero in value) the DHCP + client now adds the server to the reject list ACL and returns to INIT + state to hopefully find an RFC 2131 compliant server (or retry in INIT + forever). [ISC-Bugs #19660] + +- Parameters configured to evaluate from user defined function calls can + now be correctly written to dhcpd.leases (as on 'on events' or dynamic + host records inserted via OMAPI). [ISC-Bugs #22266] + +- If a 'next-server' parameter is configured in a dynamic host record via + OMAPI as a domain name, the syntax written to disk is now correctly parsed + upon restart. [ISC-Bugs #22266] + +- The DHCP server now responds to DHCPLEASEQUERY messages from agents using + IP addresses not covered by a subnet in configuration. Whether or not to + respond to such an agent is still governed by the 'allow leasequery;' + configuration parameter, in the case of an agent not covered by a configured + subnet the root configuration area is examined. Server now also returns + vendor-class-id option, if client sent it. [ISC-Bugs #21094] + +- Documentation fixes + [ISC-Bugs #17959] add text to AIX section describing how to have it send + responses to the all-ones address. + [ISC-Bugs #19615] update the includes in dhcpctl/dhcpctl.3 to be more correct + [ISC-Bugs #20676] update dhcpd.conf.5 to include the RFC numbers for DDNS + +- Linux Packet Filter interface improvement. sockaddr_pkt structure is used, + rather than sockaddr. Packet etherType is now forced to ETH_P_IP. + [ISC-Bugs #18975] + +- Minor code cleanups - but note port change for #23196 + [ISC-Bugs #23470] - Modify when an ignore return macro is defined to + handle unsed error return warnings for more versions of gcc. + [ISC-Bugs #23196] - Modify the reply handling in the server code to + send to a specified port rather than to the source port for the incoming + message. Sending to the source port was test code that should have + been removed. The previous functionality may be restored by defining + REPLY_TO_SOURCE_PORT in the includes/site.h file. We suggest you don't + enable this except for testing purposes. + [ISC-Bugs #22695] - Close a file descriptor in an error path. + [ISC-Bugs #19368] - Tidy up variable types in validate_port. + +- Code cleanup + [ISC-Bugs #13151] remove obsolete PROTO, KandR, INLINE and ANSI_DECL macros + +- Compilation problem with gcc4.5 and omshell.c resolved. [ISC-Bugs #23831] + +- Client Script fixes + [ISC-Bugs #23045] Typos in client/scripts/openbsd + [ISC-Bugs #23565] In the client scripts add a zone id (interface id) if + the domain search address is link local. + [ISC-Bugs #1277] In some of the client scripts add code to handle the + case of the default router information being changed without the address + being changed. + +- Documentation cleanup + [ISC-Bugs #23326] Updated References document, several man page updates + +- Server no longer complains about NULL pointer when configured + server-identifier expression fails to evaluate. [ISC-Bugs #24547] + +- Convert ISC_R_INPROGRESS status to ISC_R_SUCCESS when called from other + than the dispatch handler. This fixes an issue where omshell, when + run from the same platform as the server, would appear to fail to + connect. This is a companion to #21839. [ISC-Bugs #23592] + +- Enlarge the buffer size used by the Omshell code and some of the + print routines to allow for greater than 60 characters or, when + printing as hex strings, 20 characters. [ISC-Bugs #22743] + +- In Solaris 11 switch to using sockets instead of DLPI, thanks + to a patch form Oracle. [ISC-Bugs #24634]. + + Changes since 4.2.1rc1 + +- None + + Changes since 4.2.1b1 + +- Removed the restriction on using IPv6 addresses in IPv4 mode. This + allows IPv4 options which contain IPv6 addresses to be specified. For + example the 6rd option can be specified and used like this: + [ISC-Bugs #23039] + + option 6rd code 212 = { integer 8, integer 8, + ip6-address, array of ip-address }; + option 6rd 16 10 2001:: 1.2.3.4, 5.6.7.8; + +- Handle some DDNS corner cases better. Maintain the DDNS transaction + information when updating a lease and cancel any existing transactions + when removing the ddns information. + [ISC-Bugs #23103] + +- Some fixes for LDAP + [ISC-Bugs #21783] - Include lber library when building ldap + [ISC-Bugs #22888] - Enable the ldap code when buidling common + The above fixes are from Jiri Popelka at Red Hat. + +- Modify the dlpi code to accept getmsg() returning a positive value. + [ISC-Bugs #22824] + + Changes since 4.2.0 + +- 'get-host-names true;' now also works even if 'use-host-decl-names true;' + was also configured. The nature of this repair also fixes another + error; the host-name supplied by a client is no longer overridden by a + reverse lookup of the lease address. Thanks to a patch from Wilco Baan + Hofman supplied to us by the Debian package maintenance team. + [ISC-Bugs #21691] {Debian Bug#509445} + +- The .TH tag for the dhcp-options manpage was typo repaired + thanks to a report from jidanni and the Debian package maintenance + team. [ISC-Bugs #21676] {Debian Bug#563613} + +- More documentation changes - primarily to put the options in the dhclient + and dhcpd man pages into the standard form. Thanks in part to a patch + from David Cantrell at Red Hat. + [ISC-Bugs #20264] and parts of [ISC-Bugs #17744] dhclient.8 changes + +- Add code to clear the pointer to an object in an OMAPI handle when the + object is freed due to a dereference. [ISC-Bugs #21306] + +- Fixed a bug that leaks host record references onto lease structures, + causing the server to apply configuration intended for one host to any + other innocent clients that come along later. [ISC-Bugs #22018] + +- Minor code fixes + [ISC-Bugs #19566] When trying to find the zone for a name for ddns allow + the name to be at the apex of the zone. + [ISC-Bugs #19617] Restrict length of interface name read from command line + in dhcpd - based on a patch from David Cantrell at Red Hat. + [ISC-Bugs #20039] Correct some error messages in dhcpd.c + [ISC-Bugs #20070] Better range check on values when creating a DHCID. + [ISC-Bugs #20198] Avoid writing past the end of the field when adding + overly long file or server names to a packet and add a log message + if the configuration supplied overly long names for these fields. + Thanks to Martin Pala. + [ISC-Bugs #21497] Add a little more randomness to rng seed in client + thanks to a patch from Jeremiah Jinno. + +- Correct error handling in DLPI [ISC-Bugs #20378] + +- Remove __sun__ and __hpux__ typedefs in osdep.h as they are now being + checked in configure. [ISC-Bugs #20443] + +- Modify how the cmsg header is allocated the v6 send and received routines + to compile on more compilers. [ISC-Bugs #20524] + +- When parsing a domain name free the memory for the name after we are + done with it. [ISC-Bugs #20824] + +- Add an elapsed time option to the release message and refactor the + code to move most of the common code to a single routine. + [ISC-Bugs #21171]. + +- Parse date strings more properly - the code now handles semi-colons in + date strings correctly. Thanks to a patch from Jiri Popelka at Red Hat. + [ISC-Bugs #21501, #20598] + +- Fixes to lease input and output. + [ISC-Bugs #20418] - Some systems don't support the "%s" argument to + strftime, paste together the same string using mktime instead. + [ISC-Bugs #19596] - When parsing iaid values accept printable + characters. + [ISC-Bugs #21585] - Always print time values in omshell as hex + instead of ascii if the values happen to be printable characters. + +- Minor changes for scripts, configure.ac and Makefiles + [ISC-Bugs #19147] Use domain-search instead of domain-name in manual and + example conf file. Thanks to a patch from David Cantrell + at Red Hat. + [ISC-Bugs #19761] Restore address when doing a rebind in DHCPv6 + [ISC-Bugs #19945] Properly close the quote on some arguments. + [ISC-Bugs #20952] Add 64 bit types to configure.ac + [ISC-Bugs #21308] Add "PATH=" to CLIENT_PATH envrionment variable + +- Update the code to parse dhcpv6 lease files to accept a semi-colon at + the end of the max-life and preferred-life clauses. In order to be + backwards compatible with older lease files not finding a semi-colon + is also accepted. [ISC-Bugs #22303]. + +! Handle a relay forward message with an unspecified address in the + link address field. Previously such a message would cause the + server to crash. Thanks to a report from John Gibbons. [ISC-Bugs #21992] + CERT: VU#102047 CVE: CVE-2010-3611 + +- ./configure on longer searches for -lcrypto to explicitly link against. + This fixes a bug where 'dhclient' would have shared library dependencies + on '/usr/lib'. [ISC-Bugs #21967] + +- Handle pipe failures more gracefully. Some OSes pass a SIGPIPE + signal to a process and will kill the process if the signal isn't + caught. This patch adds code to turn off the SIGPIPE signal via + a setsockopt() call. The signal is already being ignored as part + of the ISC library. [ISC-Bugs #22269] + +- Restore printing of values in omshell to the style pre 21585. For + 21585 we changed the print routines to always display time values + as a hex list. This had a side effect of printing all data strings + as a hex list. We shall investigate other ways of displaying time + values more usefully. [ISC-Bugs #22626] + +! Fix the handling of connection requests on the failover port. + Previously a connection request from a source that wasn't + listed as a failover peer would cause the server to become + non-responsive. Thanks to a report from Brad Bendily, brad@bendily.com. + [ISC-Bugs #22679] + CERT: VU#159528 CVE: CVE-2010-3616 + +- Don't pass the ISC_R_INPROGRESS status to the omapi signal handlers. + Passing it through to the handlers caused the omshell program to fail + to connect to the server. [ISC-Bugs #21839] + +- Fix the paranthesis in the code to process configuration statements + beginning with "auth". The previous arrangement caused + "auto-partner-down" to be processed incorrectly. [ISC-Bugs #21854] + +- Limit the timeout period allowed in the dispatch code to 2^^32-1 seconds. + Thanks to a report from Jiri Popelka at Red Hat. + [ISC-Bugs #22033], [Red Hat Bug #628258] + +- When processing the format flags for a given option consume the + flag indicating an optional value correctly. A symptom of this + bug was an infinite loop when trying to parse the slp-service-scope + option. Thanks to a patch from Marius Tomaschewski. + [ISC-Bugs #22055] + +- Disable the use of kqueue in the ISC library. This avoids a problem + between the fork and socket code that caused the dhcpd process to + use all available cpu if the program daemonized itself. + [ISC-Bugs #21911] + +! When processing a request in the DHCPv6 server code that specifies + an address that is tagged as abandoned (meaning we received a + decline request for it previously) don't attempt to move it from + the inactive to active pool as doing so can result in the server + crashing on an assert failure. Also retag the lease as active + and reset its timeout value. + [ISC-Bugs #21921] + +- Relay no longer crashes, when DHCP packet is received over interface without + any IPv4 address assigned. [ISC-Bugs #22409] + + Changes since 4.2.0rc1 + +- Documentation cleanup covering multiple tickets + [ISC-Bugs #20265] [ISC-Bugs #20259] minor cleanup + [ISC-Bugs #20263] add text describing some default values + [ISC-Bugs #20193] single quotes at the start of a line indicate a control + line to nroff, escape them if we actually want a quote. + [ISC-Bugs #18916] sync the pointer to web pages amongst the different docs + + Changes since 4.2.0b2 + +- Add declaration for variable in debug code in alloc.c. [ISC-Bugs #21472] + + Changes since 4.2.0b1 + +- Prohibit including lease time information in a response to a DHCP INFORM. + [ISC-Bugs #21092] + +! Accept a client id of length 0 while hashing. Previously the server would + exit if it attempted to hash a zero length client id, providing attackers + with a simple denial of service attack. [ISC-Bugs #21253] + CERT: VU#541921 - CVE: CVE-2010-2156 + +- A memory leak in ddns processing was closed. [ISC-Bugs #21377] + +- Modify the exception handling for initial context creation. Previously + we would try and clean up before exiting. This could present problems + when the cleanup required part of the context that wasn't available. It + also didn't do much as we exited afterwards anyway. Now we simply log + the error and exit. [ISC-Bugs #21093] + +- A bug was fixed that could cause the DHCPv6 server to advertise/assign a + previously allocated (active) lease to a client that has changed subnets, + despite being on different shared networks. Dynamic prefixes specifically + allocated in shared networks also now are not offered if the client has + moved. [ISC-Bugs #21152] + +- Add some debugging output for use with the DDNS code. [ISC-Bugs #20916] + +- Fix the trace code to handle timing events better and to truncate a file + before using instead of overwriting it. [ISC-Bugs #20969] + +- Modify the determination of the default TTL to use for DDNS updates. + The user may still configure the ttl via ddns-ttl. The default for + both v4 and v6 is now 1/2 the (preferred) lease time with a limit. The + previous defaults (1/2 lease time without a limit for v4 and a default + value for v6) may be used by defining USE_OLD_DDNS_TTL in site.h + [ISC-Bugs #21126] + +- libisc/libdns is now brought up to version 9.7.1rc1. This corrects + three reported flaws in ISC DHCP; + + o DHCP processes (dhcpd, dhclient) fail to start if one of either the + IPv4 or IPv6 address families is not present. [ISC-Bugs #21122] + + o Assertion failure when attempting to cancel a previously running DDNS + update. [ISC-Bugs #21133] + + o Compilation failure of libisc/libdns due to the use of a flexible + array member. [ISC-Bugs #21316] + + Changes since 4.2.0a2 + +- Update the fsync code to work with the changes to the DDNS code. It now + uses a timer instead of noticing if there are no more packets to process. + +- When constructing the DNS name structure from a text string append + the root to relative names. This satisfies a requirement in the DNS + library that names be absolute instead of relative and prevents DHCP + from crashing. [ISC-Bugs #21054] + +- "The LDAP Patch" that has been circulating for some time, written by + Brian Masney and S.Kalyanasundraram and maintained for application to + the DHCP-4 sources by David Cantrell has been included. Please be + advised that these sources were contributed, and do not yet meet the + high standards we place on production sources we include by default. + As a result, the LDAP features are only included by using a compile-time + option which defaults off, and if you enable it you do so under your + own recognizance. We will be improving this software over time. + [ISC-Bugs #17741] + + Changes since 4.2.0a1 + +- When using 'ignore client-updates;', the FQDN returned to the client + is no longer truncated to one octet. + +- Cleaned up an unused hardware address variable in nak_lease(). + +- Manpage entries for the ia-pd and ia-prefix options were updated to + reflect support for prefix delegation. + +- Cleaned up some compiler warnings + +- An optimization described in the failover protocol draft is now included, + which permits a DHCP server operating in communications-interrupted state + to 'rewind' a lease to the state most recently transmitted to its peer, + greatly increasing a server's endurance in communications-interrupted. + This is supported using a new 'rewind state' record on the dhcpd.leases + entry for each lease. + +- Fix the trace code which was broken by the changes to the DDNS code. + + Changes since 4.1.0 (new features) + +- Failover port configuration can now be left to defaults (port 647) as + described in the -12 revision of the Failover draft (and assigned by + IANA). Thanks in part to a patch from David Cantrell at Red Hat. + +- If configured, dhclient may now transmit to an anycast MAC address, + rather than using a broadcast address. Thanks to a patch from David + Cantrell at Red Hat. + +- Added client support for setting interface MTU and metric, thanks to + Roy "UberLord" Marples . + +- Added client -D option to specify DUID type to send. + +- A new failover configuration parameter has been introduced for those + environments where DHCP servers can be reasonably guaranteed to be + "down" when the failover TCP socket is severed, "auto-partner-down". + This parameter is not generally safe, and by default is disabled, so + please carefully review the documentation of this parameter in the + dhcpd.conf(5) manpage before determining to use it yourself. + +- Added a configuration function, 'gethostname()', which calls the system + function of the same name and presents the results as a data expression. + This function can be used to incorporate the system level hostname of + the system the DHCP software is operating on in responses or queries (such + as including a failover partner's hostname in a dhcp message or binding + scope, or having a DHCP client send any system hostname in the host-name or + FQDN options by default). + +- The dhcp-renewal-time and dhcp-rebinding-time options may now be configured + for DHCPv4 operation and used independently of the dhcp-lease-time + calculations. Invalid renew and rebinding times (e.g., greater than the + determined lease time) are omitted. + +- Processing the DHCP to DNS server transactions in an asyncrhonous fashion. + The DHCP server or client can now continue with its processing while + awaiting replies from the DNS server. + +- The 'hardware [ethernet|etc] ...;' parameter in host records has been + extended to attempt to match DHCPv6 clients by the last octets of a + DUID-LL or DUID-LLT provided by the client. + + Changes since 4.1.0 (bug fixes) + +- Remove infinite loop in token_print_indent_concat(). + +- Validate the argument to the -p option. + +- The notorious 'option ... larger than buffer' log line, + which is seen in some malformed DHCP client packets, was modified. + It now logs the universe name, and does not log the length values + (which are bogus corruption read from the packet anyway). It also + carries a hopefully more useful explanation. + +- Suppress spurious warnings from configure about --datarootdir + +- A bug was fixed that caused the server not to answer some valid Solicit + and Request packets, if the dynamic range covering any requested addresses + had been deleted from configuration. + +- Update the code to deal with GCC 4.3. This included two sets of changes. + The first is to the configuration files to include the use of + AC_USE_SYSTEM_EXTENSIONS. The second is to deal with return values that + were being ignored. + +- The db-time-format option was documented in manpages. + +- Using reserved leases no longer results in 'lease with binding state + free not on its queue' error messages, thanks to a patch from Frode + Nordahl. + +- Fix a build error in dhcrelay, using older versions of gcc with + dhcpv6 disabled. + +- Two uninitialized stack structures are now memset to zero, thanks to a + patch from David Cantrell at Red Hat. + +- Fixed a cosmetic bug where pretty-printing valid domain-search options would + result in an erroneous error log message ('garbage in format string'). + +- A bug in DLPI packet transmission (Solaris, HP/UX) that caused the server + to stop receiving packets is fixed. The same fix also means that the MAC + address will no longer appear 'bogus' on DLPI-based systems. + +- A bug in select handling was discovered where the results of one select() + call were discarded, causing the server to process the next select() call + and use more system calls than required. This has been repaired - the + sockets will be handled after the first return from select(), resulting in + fewer system calls. + +- The update-conflict-detection feature would leave an FQDN updated without + a DHCID (still currently implemented as a TXT RR). This would cause later + expiration or release events to fail to remove the domain name. The feature + now also inserts the client's up to date DHCID record, so records may safely + be removed at expiration or release time. Thanks to a patch submitted by + Christof Chen. + +- Memory leak in the load_balance_mine() function is fixed. This would + leak ~20-30 octets per DHCPDISCOVER packet while failover was in use + and in normal state. + +- Various compilation fixes have been included for the memory related + DEBUG #defines in includes/site.h. + +- Fixed Linux client script 'unary operator expected' errors with DHCPv6. + +- Fixed setting hostname in Linux hosts that require hostname argument + to be double-quoted. Also allow server-provided hostname to + override hostnames 'localhost' and '(none)'. + +- Fixed failover reconnection retry code to continue to retry to reconnect + rather than restarting the listener. + +- Compilation on Solaris with USE_SOCKETS defined in includes/site.h has + been repaired. Other USE_ overrides should work better. + +- A check for the local flavor of IFNAMSIZ had a broken 'else' condition, + that probably still resulted in the correct behaviour (but wouldn't use + a larger defined value provided by the host OS). + +- Fixed a bug where an OMAPI socket disconnection message would not result + in scheduling a failover reconnection, if the link had not negotiated a + failover connect yet (e.g.: connection refused, asynch socket connect() + timeouts). + +- A bug was fixed that caused the 'conflict-done' state to fail to be parsed + in failover state records. + +! A stack overflow vulnerability was fixed in dhclient that could allow + remote attackers to execute arbitrary commands as root on the system, + or simply terminate the client, by providing an over-long subnet-mask + option. CERT VU#410676 - CVE-2009-0692 + +- Fixed a bug where relay agent options would never be returned when + processing a DHCPINFORM. + +- Versions 3.0.x syntax with multiple name->code option definitions is now + supported. Note that, similarly to 3.0.x, for by-code lookups only the + last option definition is used. + +- Fixed a bug where a time difference of greater than 60 seconds between a + failover pair could cause the primary to crash on contact with the + secondary. Thanks to a patch from Steinar Haug. + +- Don't look for IPv6 interfaces on Linux when running in DHCPv4 mode. + Thanks to patches from Matthew Newton and David Cantrell. + +- Secondary servers in a failover pair will now perform ddns removals if + they had performed ddns updates on a lease that is expiring, or was + released through the primary. As part of the same fix, stale binding scopes + will now be removed if a change in identity of a lease's active client is + detected, rather than simply if a lease is noticed to have expired (which it + may have expired without a failover server noticing in some situations). + +- A patch supplied by David Cantrell at RedHat was applied that detects + invalid calling parameters given to the ns_name_ntop() function. + Specifically, it detects if the caller passed a pointer and size pair + that causes the pointer to integer-wrap past zero. + +! Fixed a fenceposting bug when a client had two host records configured, + one using 'uid' and the other using 'hardware ethernet'. CVE-2009-1892 + +- Fixed the check in the dhcp_interface_signal_handler routine to verify + the existence of the linked signal handler before calling it. + +- Both host and subnet6 configuration groups are now included whether a + fixed-address6 (DHCPv6) is in use or not. Host scoped configuration takes + precedence. This fixes two bugs, one where host scoped configuration + would not be included from a non-fixed-address6 host record, and the equal + and opposite bug where subnet6 scoped configuration would not be used when + over-riding values were not present in a matching fixed-address6 host + configuration. + +- ./configure now checks to ensure the intX_t and u_intX_t types are defined, + correcting a compilation failure when using Sun's compiler. + +- Modified the handling of a connection to avoid releasing the omapi io + object for the connection while it is still in use. One symptom from + this error was a segfault when a failover secondary attempted to connect + to the failover primary if their clocks were not synchronized. + +- Clean up to allow compilation with gcc 2.95.4 on FreeBSD. Remove an + extra semi-colon from common/dns.c and moved setting a variable to NULL + in server/dhcpv6.c to allow the compiler to decide that the variable + was always properly set. + + Changes since 4.1.0b1 + +- A missing "else" in dhcrelay.c could have caused an interface not to + be recognized. + + Changes since 4.1.0a2 + +- A cosmetic bug in DHCPDECLINE processing was fixed which caused all + successful DHCPDECLINEs to be logged as "not found" rather than + "abandoned". + +- Added configuration file examples for DHCPv6. + +- Some failover debugging #defines have been better defined and some + high frequency messages moved to a deeper debugging symbol. + +- The CLTT parameter in failover is now only updated by client activity, + and not by failover binding updates (taking on the peer's CLTT). + +- Failover BNDUPD messages are now discarded if they conflict with an + update that has been transmitted, but not acknowledged. + +- A bug cleaning up unknown-xxx temporary option definitions was fixed. + +- Delayed-ack is now a compile-time option, compiled out by default. + This feature is simply too experimental for right now, and causes + some problems to some failover installations. We will revisit this + in future releases. + +- The !inet_pton() call in res_mkupdrec was adjusted to '<= 0' as + inet_pton returns either 1, 0, or -1. + +- A dhclient-script for MacOS X has been included, which enables + 'dhclient -6' support. + +- DDNS removal routines were updated so that the DHCID is not removed until + the client has been deprived of all A and AAAA records (not only the last + one of either of those). This resolves a bug where dual stack clients + would not be able to regain their names after either expiration event. + + Changes since 4.1.0a1 + +- Corrected list of failover state values in dhcpd man page. + +- Fixed a bug that caused some request types to be logged incorrectly. + +- Clients that sent a parameter request list containing the + routers option before the subnet mask option were receiving + only the latter. Fixed. + +- The server wasn't always sending the FQDN option when it should. + +- A partner-down failover server no longer emits 'peer holds all free leases' + if it is able to newly-allocate one of the peer's leases. + +- Fixed a coredump when adding a class via OMAPI. + +- Check whether files are zero length before trying to parse them. + +- Ari Edelkind's PARANOIA patch has been included and may be compiled in + via two ./configure parameters, --enable-paranoia and + --enable-early-chroot. + +- ./configure was extended to cover many optional build features, such + as failover, server tracing, debugging, and the execute() command. + +- There is now a default 1/4 of a second scheduled delay between delayed + fsync()'s, it can be configured by the max-ack-delay configuration + parameter. + +- A bug was fixed where the length of a hostname was miscalculated, so that + hosts were given odd-looking domain names ("foo.bar.ba.example.com"). + +- Shared network selection should be done from the innermost relay + valid link-address field, rather than the outermost. + +- Prefix pools are attached to shared network scopes. + +- Merged IA_XX related structures. + +- Add DHCPv6 files in configure. + +- A memory leak when using omapi has been fixed. + +- DHCPv6 vendor-class options (VSIO) are now only sent when they appear + on the DHCPv6 ORO. This resolves a bug where VSIO options were placed + in IA_NA encapsulated options fields. + +- Integrated client with stateless, temporary address and prefix delegation + support. + +- A double-dereference in dhclient transmission of DHCPDECLINEs was + repaired. + +- Fix handling of format code 'Z'. + +- Support "-1" argument in DHCPv6. + +- Merge DHCPv6-only "dhcrelay6" into general-purpose "dhcrelay" (use + "-6" option to select DHCPv6 mode). + +- Fix handling of -A and -a flags in dhcrelay; it was failing to expand + packet size as needed to add relay agent options. + +- A bug in subnet6 parsing where options contained in subnet6 clauses would + not be applied to clients addressed within that network was repaired. + +- When configuring a "subnet {}" or "subnet6 {}" without an explicit + shared-network enclosing it, the DHCP software would synthesize a + shared-network to contain the subnet. However, all configuration + parameters within the subnet more intuitively belong "to any client + on that interface", or rather the synthesized shared-network. So, + when a shared-network is synthesized, it is used to contain the + configuration present inside the subnet {} clause. This means that + the configuration will be valid for all clients on that network, not + just those addressed out of the stated subnet. If you intended the + opposite, the workaround is to explicitly configure an empty + shared-network. + +- A bug was fixed where Information-Request processing was not sourcing + configured option values. + +- A warning was added since the DHCPv6 processing software does not yet + support class statements. + +- Compliation warnings on GCC 4.3 relating to bootp source address + selection were repaired. + +- The v6 BSD socket method was updated to use a single UDP BSD socket + no matter how many interfaces are involved, differentiating the + interfaces the packets were received on by the interface index supplied + by the OS. + +- The relay agent no longer listens to the All DHCP Servers Multicast + address. + +- A bug was fixed in data_string_sprintfa() where va_start was only called + once for two invocations of vsprintf() variants. + +- ERO (RFC 4994) server support. + +- Basic and partial DHCPv6 leasequery support. + +- Reliable DHCPv6 release (previous behavior, send release and exit, is + still available with dhclient -6 -1 -r). + + Changes since 4.0.0 (new features) + +- Added DHCPv6 rapid commit support. + +- Added explicit parser support for zero-length DHCP options, such as + rapid-commit, via format code 'Z'. + +- It's now possible to update the "ends" field of a lease with OMAPI. + This is useful if you want not only to release a lease, but also make + it available for reuse right away. Hat tip to Christof Chen. + +- Fixed definition of the iaaddr hash functions to use the correct + functions when referencing and dereferencing memory. + +- Some definitions not in phase with the IANA registry were updated. + +- Allocated interface IDs are better controlled ('u' bit set to zero, + reserved IDs avoided). + +- Unicast options are taken into account only for RENEWs. + +- NoAddrsAvail answers to SOLICITs are always ADVERTISEs even when a SOLICIT + carries a rapid-commit option. + +- Return in place of raise an impossible condition when one tries to release + an empty active lease. + +- Timer granularity is now 1/100s in the DHCPv6 client. + +- The dhclient-script was updated to create a host route for the default + gateway if the supplied subnet mask for an IPv4 address was a /32. This + allows the client to work in 'captive' network environments, where the + operator does not want clients to crosstalk directly. + +- MINUS tokens should be parseable again. + +- Multiple (up to "delayed-ack x;" maximum) DHCPv4 packets are now queued and + released in bursts after single fsync() events when the upper limit is + reached or if the receiving sockets go dry. The practical upshot is + that fsync-coupled server performance is now multiplicitively increased. + The default delayed ack limit is 28. Thanks entirely to a patch from + Christof Chen. + + Changes since 4.0.0 (bug fixes) + +- DHCP now builds on AIX. + +- Exit with warning when DHCPv6-specific statements are used in the + config file but -6 is not specified. + +- Fixed "--version" flag in dhcrelay + +- The 'min-secs' configuration parameter's log message has been updated to + be more helpful. + +- The warning logged when an address range doesn't fit in the subnets + they were declared has been updated to be more helpful and identify the + typo in configuration that created the spanning addresses. + +- A bug in failover pool rebalancing that caused POOLREQ message ping-pongs + was repaired. + +- A flaw in failover pool rebalancing that could cause POOLREQ messages to + be sent outside of the min-balance/max-balance scheduled intervals has + been repaired. + +- A cosmetic bug during potential-conflict recovery that caused the peer's + 'conflict-done' state message to be logged as 'unknown-state' has been + repaired. It is now logged correctly. + +- A bug was fixed where the 'giaddr' may be used to find the client's subnet + rather than its own 'ciaddr'. + +- A log message was introduced to clarify the situation where a failover + 'address' parameter (the server's local address) did not resolve to an + IPv4 address. + +- The minimum site code value was set to 224 in 3.1.0 to track RFC3942. This + broke a lot of legacy site local configurations. The new code in place will + track site local space minimum option codes and logs a warning to encourage + updates and exploration of site local code migration problems. Option + codes less than 128 in site local spaces remain inaccessible. + +- A possible relay agent option bug was repaired where random server + initialization state may have been used to signal the relay agent + information options sub-option code for the 'END' of the option space. + +- Fixes to allow code to compile and run on Solaris 9. + +- Fixes to allow code to compile on Mac OS X Leopard (10.5). + +- When server is configured with options that it overrides, a warning is + issued when the configuration file is read, rather than at the time the + option is overridden. This was important, because the warning was given + every time the option was overridden, which could create a lot of + unnecessary logging. + +- Fixed a compilation problems on platforms that define a value for FDDI, + which conflicts with a dhcp configuration syntax token by the same name. + +- When a failover server suspects it has encountered a peer running a + version 3.0.x failover server, a warning that the failover wire protocol + is incompatible is printed. + +- The failover server no longer issues a floating point error if it encounters + a previously undefined option code. + +- Fix startup error messages to report a missing "subnet6 declaration", rather + than a missing "subnet declaration", when running as a DHCPv6 server. + +- DHCPv6 client timestamp in DUID was based on the year 1970 rather + than the year 2000. + +- Warn when attempting to use a hardware parameter in DHCPv6. + +- DHCPv6 released resources are now marked as released by the client. + +- 'Soft' bindings have no more side-effects. + + Changes since 4.0.0b3 + +- The reverse dns name for PTR updates on IPv6 addresses has been fixed to + use ip6.arpa. rather than default to in-addr.arpa and require user + configuration. + +- dhc6_lease_destroy() and dhc6_ia_destroy() now set lease and IA pointers + to NULL after freeing, to prevent subsequent accesses to freed memory. + +- The DHCPv6 server would not send the preference option unless the + client requested it, via the ORO. This has been fixed, so the DHCPv6 + server will always send the preference value if it is configured. + +- When addresses were passed as hints to the server in an IA, they were + incorrectly handled, sometimes being treated as an error. Now the + server will treat these as hints and ignore them if it cannot supply + a requested address. + +- If the client had multiple addresses, and one expired (was not renewed + by the server), the client would continue to attempt to renew the same + old address over and over. Now, the client will omit any expired + addresses from future Confirm, Renew, or Rebind messages. + +- dhclient -6 will now select renew/rebind timers based upon the longest + address expiration time rather than the shortest expiration time, in + order to avoid cascading renewals in the event a server elects not to + extend one of multiple IAADDR leases. + +- The server now limits clients that request multiple addresses to one + address per IA by default, which can be adjusted through the + "limit-addrs-per-ia" configuration option. + +- The DHCPv6 client now issues fresh transaction IDs on Renew and Rebind + message exchanges, rather than using the most recent ID. + +- The DHCPv6 server now replies to Information-Request messages. + +- A bug was fixed in the dhclient-script for BSDs to correctly carry error + codes through some conditions. + +- The parsing of some options in the dhclient lease file, in particular + the success DHCPv6 status-code, was fixed. + +- A bug was fixed that caused the DHCPv6 ORO option to be corrupted with + seemingly random values. + +- A reference overleak in DHCPv6 shared network processing was repaired. + +- ./configure now autodetects local database locations rather than trying + to put dhcpd.leases and dhclient.leases in /usr/local/var/db, which no + one ever has. + +- Regression fix for bug where server advertised a IPv6 address in + response to a SOLICIT but would not return the address in response + to a REQUEST. + +- A bug was fixed where the DHCPv6 server puts the NoAddrsAvail status + code in the IA_NA was fixed. The status code now appears in the root + level. + + Changes since 4.0.0b2 + +- Clarified error message when lease limit exceeded + +- Relative time may now be used as a qualifier for 'allow' and 'deny' access + control lists. These directives may be used to assist in re-addressing + address pools without having to constantly reconfigure the server. Please + see 'man dhcpd.conf' for more information on allow/deny 'after time' syntax. + Thanks to a patch from Christof Chen. + +- The server will now include multiple IA_NA's and multiple IAADDRs within + them, if advertised by the client. It still only seeks to allocate one + new address. + + Changes since 4.0.0b1 + +- Use different paths for PID and lease files when running in DHCPv4 + or DHCPv6 mode, so that servers for both protcols can be run + simultaneously on a single interface. + +- Fixed a buffer overflow error which could have allowed a denial + of service under unusual server configurations + +- Eliminated a spurious error message from the client + +- A number of bugs with the internal handling of lease state on the + server have been fixed. Some of these could cause server crashes. + +- The peer_wants_leases() changes pulled up from 3.1.0 were corrected, + 'never used' leases will no longer consistently shift between servers + on every pool rebalance run. + +- sendmsg()/recvmsg() control buffers are now declared in such a way to + ensure they are correctly aligned on all (esp. 64-bit) architectures. + +- The client leasing subsystem was streamlined and corrected to account + more closely for changes in client link attachment selection. + + Changes since 4.0.0a3 + +- The DHCP server no longer requires a "ddns-update-style" statement, + and now defaults to "none", which means DNS updates are disabled. + +- Log messages when failover peer names mismatch have been improved to + point out the problem. + +- Bug where server advertised a IPv6 address in response to a SOLICIT + but would not return the address in response to a REQUEST. Thanks to + Dennis Kou for finding the bug. + +- Fixed an error causing the server to lock up on lease expiration, + reported independently by Jothilingam Vasu and Dennis Kou. + +- Fixed a ./configure bug where compile tests were failing due to + "-Werror" (unused variable) rather than the actual test failure. Lead + to inconsistent and unworkable auto-configurations. + +- Compilation with DLPI and -Werror has been repaired. + +- Error in decoding IA_NA option if multiple interfaces are present + fixed by Marcus Goller. + +- DHCPv6 server Confirm message processing has been enhanced - it no + longer replies only to clients with host {} records, it now replies + as directed in RFC3315 section 18.2.2 - that is, to all clients + regardless of the existence of bindings. + +- A core dump during expired lease cleanup has been repaired. + +- DDNS updates state information are now stored in 'binding scopes' that + follow the leases through their lifecycles. This enables DDNS teardowns + on leases that are assigned and expired inbetween a server restart (the + state is recovered from dhcpd.leases). Arbitrary user-specified binding + scopes ('set var = "value";') are not yet supported. + +- Additional compilation problems on HP/UX have been repaired. + + Changes since 4.0.0a2 + +- Fix for startup where there are no IPv4 addresses on an interface. + Thanks to Marcus Goller for reporting the bug. + +- Fixed file descriptor leak on listen failure. Thanks to Tom Clark. + +- Bug in server configuration parser caused server to get stuck on + startup for certain bad pool declarations. Thanks to Guillaume + Knispel for the bug report and fix. + +- Code cleaned to remove warnings reported by "gcc -Wall". + +- DHCPv6 is now the default. You can disable DHCPv6 support using the + "--disable-dhcpv6" flag when you run the configure script. + +- An internal database inconsistency bug was repaired where the server + would segfault if a client attempted to renew a lease that had been + loaded from persistent storage. + +- 'request' and 'also request' syntaxes have been added to accommodate + the DHCPv6 client configuration. 'send dhcp6.oro' is no longer + necessary. + +- Bug fixed where configuration file parsing did not work with + zero-length options; this made it impossible to set the + rapid-commit option. + +- Bogus messages about host records with IPv4 fixed-addresses being of + non-128-bits in length were removed. + + Changes since 4.0.0a1 + +- Bug in octal parsing fixed. Thanks to Bernd Fuhrmann for the report + and fix. + +- Autoconf now supplies proper flags for Solaris DHCPv6 builds. + +- Fix for parsing error on some IPv6 addresses. + +- Invalid CIDR representation for IPv6 subnets or ranges now checked + for when loading configuration. + +- Compilation on HP/UX has been repaired. The changes should generally + apply to any architecture that supplies SIOCGLIFCONF but does not + use 'struct lifconf' structures to pass values. + +- Two new operators, ~= and ~~, have been integrated to implement + boolean matches by regular expression (such as may be used in + class matching statements). Thanks to a patch by Alexandr S. + Agranovsky, which underwent slight modification. + +- Fix for icmp packets on 64-bit systems (bug introduced in 4.0). + +- A bug was fixed in interface discovery wherein an error identifying + a server-configured interface with no IPv4 addresses would SEGV. + +- Fixed a bug in which write_lease() might report a failure incorrectly + +- Added support for DHCPv6 Release messages + +- Added -x option to dhclient, which triggers dhclient processes + to exit gracefully without releasing leases first + +- All binaries (client, server, relay) now change directories + to / before going into daemon mode, so as not to hold $CWD open + +- Fixed a bug parsing DHCPv6 client-id's in host-identifier statements + +- Fixed a bug with the 'ddns-updates' boolean server configuration + parameter, which caused the server to fail. + + Changes since 4.0.0-20070413 + +- Old (expired) leases are now cleaned. + +- IPv6 subnets now have support for arbitrary allocation ranges via + a new 'range6' configuration directive. + +- An obviated option code hash lookup to find D6O_CLIENTID was removed. + +- Corrected some situations where variables might be used without being + initialized. + +- Silenced several other compiler warnings. + +- Include the more standard sys/uio.h rather than rely upon other + header files to include it (fixes a BSD 4.2 compile failure). + +- Duplicate dhclient-script updates for DHCPv6 to all provided scripts. + +- DHCPv4 I/O methods that failed to sense hardware address were corrected. + +- DHCPv4 is now the default (as documented) rather than DHCPv6. The default + was set to DHCPv6 to facilitate ease early development, and forgotten. + +- Corrected a segmentation violation in DHCPv4 socket processing. + +- dhclient will now fork() into the background once it binds to an + IPv6 address, or immediately if the -n flag is supplied. + +- -q is now the default behaviour on dhclient, with -d or -v enabling + non-quiet (stderr logging) mode. + +- Fix documentation of the domain-search atom (quoted, with commas). + +- Document DHCPv6 options presently in the default table. + +- Replaced ./configure shellscripting with GNU Autoconf. + + Changes since 3.1.0 (NEW FEATURES) + +- DHCPv6 Client and Server protocol support. Use '-6' to run the daemons + as v6-only. Use '-4' to run the daemons as v4-only (default. There is + no support currently for both. + +- Server support for multiple IA_NA options, containing at most one + IAADDR option. + +- Client support for one IA_NA option, containing any number of IAADDR + options. + +- Server support for the DHCPv6 Information-request message. + +- Inappropriate unicast DHCPv6 messages sent to the server are now + discarded, and this has rearchitected the IO system slightly. + +- The DHCPv6 server DUID defaults to type 1, is persistently stored in + the leases database, and can be over-ridden (either completely, or by + specifying type 1 or type 2). + +- The server only uses Rapid-Commit if it has been configured with the + Rapid-Commit option and the client requests it. + +- DDNS support. We now update AAAA records in the same place we would + update A records, if we have an IPv6 address. We also generate IP6.ARPA + style names for PTR records if we're dealing with an IPv6 address. Both + A and AAAA updates are done using the same 'fqdn.' virtual option space + (although the DHCPv4 FQDN and DHCPv6 FQDN options are formatted + differently, they both use the same code here). + +- The Linux dhclient-script attempts to set and remove assigned addresses, + and to configure /etc/resolv.conf from nameserver and domain name + configurations. It can be extended to configure other parameters. + +- Initial DHCPv6 lease support. + +- The IO system now tracks all local IP addresses, so that the DHCP + applications (particularly the dhcrelay) can discern between what frames + were transmitted to it, and what frames are being carried through it which + it should not intercept. + + Changes since 3.1.0 (Maintenance) + +- A bug was repaired where MAC Address Affinity for virgin leases always + mapped to the primary. Virgin leases now have an interleaved preference + between primary and secondary. + +- A bug was repaired where MAC Address Affinity for clients with no client + identifier was sometimes mishashed to the peer. Load balancing during + runtime and pool rebalancing were opposing. + +- An assertion in lease counting relating to reserved leases was repaired. + +- The subnet-mask option inclusion now conforms with RFC2132 section 3.3; + it will only appear prior to the routers option if it is present on the + Parameter-Request-List. The subnet-mask option will also only be + included by default (if it is not on the PRL) in response to DISCOVER + or REQUEST messages. + +- The FQDN option is only supplied if the client supplied an FQDN option or + if the FQDN option was explicitly requested on the PRL. + +- Dynamic BOOTP leases are now load balanced in failover. + + Changes since 3.1.0rc1 + +- The parse warning that 'deny dyanmic bootp;' must be configured for + failover protected subnets was removed. + + Changes since 3.1.0b2 + +- Failover rebalance events no longer play ping pong with round errors + (moving leases between free and back to backup where there are an + odd number of leases). + +- The 'pool' log line has been split into two messages, one before the + rebalance run, and one after. + +- Any queued BNDACKs are transmitted before transmitting new BNDUPDs. + This enforces the correct sequence of events for the remote server + processing these messages. + + Changes since 3.1.0b1 + +- Fixed a bug that caused OMAPI clients to freeze when opening lease + objects. + +- A new server config option "fqdn-reply" specifies whether the server + should send out option 81 (FQDN). Defaults to "on". If set to "off", + the FQDN option is not sent, even if the client requested it. This is + needed because some clients misbehave otherwise. Thanks to Christof Chen + at Allianz. + +- Allow trace output files (-tf option) to be overwritten, rather than + crashing dhcpd if the file already exists + +- A bug was fixed that caused dhcpd to segfault if a pool was declared + outside the scope of a subnet in dhcpd.conf. + +- Some uninitialized values were repaired in dhcpleasequery.c that + caused the server to abort. + +- A new server config option, 'do-reverse-updates', has been added + which causes the server to abstain from performing updates on PTR + records. Thanks to a patch from Christof Chen at Allianz. + +- A bug was repaired in subencapsulation support, where spaces separated + by empty spaces would not get included. + +- A bug in dhclient was repaired which caused it to send parameter request + lists of 55 bytes in length no matter how long the declared PRL was. + +- 'dhcp.c(3953): non-null pointer' has been repaired. This fixes a flaw + wherein the DHCPv4 server may ignore a configured server-identifier. + +- A flaw in failover startup sequences was repaired that sometimes left + the primary DHCP server's pool rebalance schedules unscheduled. + +- Corrected a flaw that broke encapsulated spaces included due to presence + on the parameter request list. + + Changes since 3.1.0a3 + +- Some spelling fixes. + + Changes since 3.1.0a2 + +- A bug was fixed where attempting to permit leasequeries results in a + fatal internal error, "Unable to find server option 49". + +- A bug was fixed in dhclient rendering the textual output form of the + domain-search option syntax. + + Changes since 3.1.0a1 + +- A bug in the FQDN universe that added FQDN codes to the NWIP universe's + hash table was repaired. + +- The servers now try harder to transmit pending binding updates when + entering normal state. + +- UPDREQ/UPDREQALL handling was optimized - it no longer dequeues and + requeues all pending updates. This should reduce the number of spurious + 'xid mismatch' log messages. + +- An option definition referencing leak was fixed, which resulted in early + termination of dhclient upon the renewal event. + +- Some default hash table sizes were tweaked, some upwards, some downwards. + 3.1.0a1's tables resulted in a reduction in default server memory use. + The new selected values provide more of a zero sum (increasing the size + of tables likely to be populated, decreasing the size of tables unlikely). + +- Lease structures appear in three separate hashes: by IP address, by UID, + and by hardware address. One type of table was used for all three, and + improvements to IP address hashing were applied to all three (so UID and + hardware addresses were treated like 4-byte integers). There are now two + types of tables, and the uid/hw hashes use functions more appropriate + to their needs. + +- The max-lease-misbalance percentage no longer causes scheduled rebalance + runs to be skipped: it still governs the schedule, but every scheduled + run will attempt balance. + +- A segfault bug in recursive encapsulation support has been corrected. + + Changes since 3.0 (New Features) + +- A workaround for certain STSN servers that send a mangled domain-name + option was introduced for dhclient. The client will now accept corrupted + server responses, if they contain a valid DHCP_MESSAGE_TYPE (OFFER, ACK, + or NAK). The server will continue to not accept corrupt client packets. + +- Support for 'reserved' (pseudo-static) and BOOTP leases via failover + was introduced. + +- Support for adding, removing, and managing class and subclass statements + via OMAPI. + +- The failover implementation was updated to comply with revision 12 of + the protocol draft. + +- 'make install' now creates the initial zero-length dhcpd.leases file if + one does not already exist on the system. + +- RFC3942 compliance, site-local option spaces start at 224 now, not 128. + +- The Load Balance Algorithm was misimplemented. The current implementation + matches RFC 3074. + +- lcase() and ucase() configuration expressions have been added which adjust + their arguments from upper to lower and lower to upper cases respectively. + Thanks to a patch from Albert Herranz. + +- The dhclient 'reject ...;' statement, which rejects leases given by named + server-identifiers, now permits address ranges to be specified in CIDR + notation. Thanks to a patch from David Boyce. + +- The subnet-mask option is now supplied by default, but at lowest + priority. This helps a small minority of clients that provide parameter + request lists, but do not list the subnet-mask option because they were + designed to interoperate with a server that behaves in this manner. + +- The FQDN option is similarly supplied even if it does not appear on the + parameter request list, but not to the exclusion of options that do + appear at the parameter request list. Up until now it had ultimate + priority over the client's parameter request list. + +- Varying option space code and length bit widths (8/16/32) are now + supported. This is a milestone in achieving RFC 3925 "VIVSO" and + DHCPv6 support. + +- A new common (server or client) option, 'db-time-format local;', has + been added which prints the local time in /var/db/dhcpd.leases rather + than UTC. Thanks to a patch from Ken Lalonde. + +- Some patches to improve DHCP Server startup speed from Andrew Matheson + have been incorporated. + +- Failover pairs now implement 'MAC Affinity' on leases moving from the + active to free states. Leases that belonged to the failover secondary + are moved to BACKUP state rather than FREE upon exiting EXPIRED state. + If lease rebalancing must move leases, it tries first to move leases + that belong to the peer in need. + +- The server no longer sends POOLREQ messages unless the pool is severely + misbalanced in the peer's favor (see 'man dhcpd.conf' for more details). + +- Pool rebalance events no longer happen upon successfully allocating a + lease. Instead, they happen on a schedule. See 'man dhcpd.conf' for the + min-balance and max-balance statements for more information. + +- The DHCP Relay Agent Information Option / Link Selection Sub-Option + is now supported. (See RFC3527 for details). + +- A new DDNS related server option, update-conflict-detection, has been + added. If this option is enabled, dhcpd will perform normal DHCID + conflict resolution (the default). If this option is disabled, it will + instead trust the assigned name implicitly (removing any other bindings + on that name). This option has not been made available in dhclient. + +- In those cases where the DHCP software manufactures an IP header (to + transmit via bpf, lpf, etc), the IP TTL the software selects has been + increased from 16 to 128. This is intended to match Microsoft Windows + DHCP Client behaviour, to increase compatibility. + +- 'ignore client-updates;' now has behaviour that is different from + 'deny client-updates;'. The client's request is not truly ignored, + rather it is encouraged. Should this value be configured, the server + updates DNS as though client-updates were set to 'deny'. That is, it + enters into DNS whatever it is configured to do already, provided it is + configured to. Then it sends a response to the client that lets the + client believe it is performing client updates (which it will), probably + for a different name. In essence, this lets the client do as it will, + ignoring this aspect of their request. + +- Support for compressed 'domain name list' style DHCP option contents, and + in particular the domain search option (#119) was added. + +- The DHCP LEASEQUERY protocol as defined in RFC4388 is now implemented. + LEASEQUERY lets you query the DHCP server for information about a lease, + using either an IP address, MAC address, or client identifier. Thanks + to a patch from Justin Haddad. + +- DHCPD is now RFC2131 section 4.1 compliant (broadcast to all-ones ip and + ethernet mac address) on the SCO platform specifically without any strange + ifconfig hacks. Many thanks go to the Kroger Co. for donating the + hardware and funding the development. + +- A new common configuration executable statement, execute(), has been + added. This permits dhcpd or dhclient to execute a named external + program with command line arguments specified from other configuration + language. Thanks to a patch written by Mattias Ronnblom, gotten to us + via Robin Breathe. + +- A new dhcp server option 'adaptive-lease-time-threshold' has been added + which causes the server to substantially reduce lease-times if there are + few (configured percentage) remaining leases. Thanks to a patch submitted + from Christof Chen. + +- Encapsulated option spaces within encapsulated option spaces is now + formally supported. + + Changes since 3.0.6rc1 + +- supersede_lease() now requeues leases in their respective hardware + address hash bucket. This mirrors client identifier behaviour. + + Changes since 3.0.5 + +- Assorted fixes for broken network devices: Packet length is now + determined from the IP header length field to finally calculate the + UDP payload length, because some NIC drivers return more data than + they actually received. + +- UDP packets are now stored in aligned data structures. + +- A logic error in omapi interface code was repaired that might result in + incorrectly indicating 'up' state when any flags were set, rather than + specifically the INTERFACE_REQUESTED flag. Thanks to a patch from + Jochen Voss which got to us via Andrew Pollock at Debian. + +- A reference leak on binding scopes set by ddns updates was repaired. + +- A memory leak in the minires_nsendsigned() function call was repaired. + Effectively, this leaked ~176 bytes per DDNS update. + +- In the case where an "L2" DHCP Relay Agent (one that does not set giaddr) + was directly attached to the same broadcast domain as the DHCP server, + the RFC3046 relay agent information option was not being returned to the + relay in the server's replies. This was fixed; the dhcp server no longer + requires the giaddr to reply with relay agent information. Note that + this also improves compatibility with L2 devices that "intercept" DHCP + packets and expect relay agent information even in unicast (renewal) + replies. Thanks to a patch from Pekka Silvonen. + +- A bug was fixed where the BOOTP header 'sname' field had a value, the + copy written to persistent storage was actually the contents of the + 'file' field. + +- A bug was fixed where the nwip virtual option space was referencing + the fqdn option's virtual option space's option cache. + +- Timestamp parsing errors that indicated missing "minutes" fields rather + than the actually missing "seconds" fields have been repaired thanks to + a patch from Kevin Steves. + +- A grammar error in the dhclient.8 manpage was repaired thanks to a patch + from Chris Wagner. + +- Several spelling typos were repaired, and some cross-references to other + relevant documents were included in the manpages, thanks to a patch + by Andrew Pollock which got to us via Tomas Pospisek. + +- Some bugs were fixed in the 'emergency relay agent options hologram' + which is used to retain relay agent option contents from when the + client was in INIT or REBIND states. This should solve problems where + relay agent options were not echoed from the server, even when giaddr + was set. + +- dhclient now closes its descriptor to dhclient.leases prior to executing + dhclient-script. Thanks to a patch from Tomas Pospisek. + +- The server's "by client-id" and "by hardware address" hash table lists + are now sorted according to the preference to re-allocate that lease to + returning clients. This should eliminate pool starvation problems + arising when "INIT" clients were given new leases rather than presently + active ones. + + Changes since 3.0.5rc1 + +- A bug was repaired in fixes to the dhclient, which sought to run the + dhclient-script with the 'EXPIRE' state should it receive a NAK in + response to a REQUEST. The client now iterates the PREINIT state + after the EXPIRE state, so that interfaces that might be configured + 'down' can be brought back 'up' and initialized. + +- DHCPINFORM handling for clients that properly set ciaddr and come to the + server via a relay aget has been repaired. + + Changes since 3.0.4 + +- A warning that host statements declared within subnet or shared-network + scopes are actually global has been added. + +- The default minimum lease time (if min-lease-time was not specified) + was raised from 0 to 300. 0 is not thought to be sensible, and is + known to be damaging. + +- Added additional fatal error sanity checks surrounding lease binding + state count calculations (free/active counts used for failover pool + balancing). + +- Some time value size fixes in 3.0.4 brought on from FreeBSD /usr/ports were + misapplied to server values rather than client values. The server no longer + advertises 8-byte lease-time options when on 64-bit platforms. + +- A bug where leases not in ACTIVE state would get billed to billed classes + (classes with lease limitations) was fixed. Non-active leases OFFERed + to clients are no longer billed (but billing is checked before offering). + +- The dhcpd.conf.5 manpage was updated in regard to the ddns-domainname + configuration option - the default configuration and results should be + more clear now. + +- If the dhclient were to receive a DHCPNAK while it was in the RENEW + state (and consequently, had an active, 'bound' address and related + configuration options), it would fail to 'tear down' this information + before proceeding into INIT state. dhclient now iterates the dhclient- + script with the 'EXPIRE' action to cause these teardowns prior to entering + INIT state. Thanks to a patch from Chris Zimmerman. + +- The omapi.1 manpage had some formatting errors repaired thanks to a patch + from Yoshihiko Sarumaru. + +- A few lines of code that were failover-specific were moved within + #if defined() clauses so that compilation without failover could be + made possible. + +- The log message emitted when the 'leased-address' value was not available + in dhcpd.conf "executable statements" has been updated to be more helpful. + Manpage information for this value has also been updated. + +- Abandoned or dissociated (err condition) leases now remove any related + dynamic dns bindings. Thanks to a patch from Patrick Schoo. + +- Attempting to write a new lease file to replace a corrupt (due to + encountering non-retryable errors during writing) lease file should + no longer result in an infinite recursion. + +- Host declaration hardware addresses and client identifiers may only be + configured once. dhcpd will now fail to load config files that specify + multiple identifiers (previous versions would silently over-ride the + value with the later configured value). + +- Several option codes that have been allocated since our last release + have been named and documented. + +- Option names of the form "unknown-123" have been removed from the in- + memory hash tables. In order to support options of these names that + may appear in dhclient.leases or similar in previous versions, the + parser will now find the new option code definition, or mock up a + generic option code definition. This should result in a smooth + transition from one name to the other, as the new name is used to + write new output. + + Changes since 3.0.4rc1 + +- The dhcp-options.5 manpage was updated to correct indentation errors + thanks to a patch from Jean Delvare. + + Changes since 3.0.4b3 + +- Some manual pages were clarified pursuant to discussion on the dhcp-server + mailing list. + + Changes since 3.0.4b2 + +- Null-termination sensing for certain clients that unfortunately require + it in DHCPINFORM processing was repaired. + +- The host-name option and a few others were moved from "X" format to "t" + format to be compatible with new NULL handling functions. + +- DHCPINFORM processing is a little more careful about return addressing + its responses, or if responding via a relay. The INFORM related + messages also log the 'effective client ip address' rather than the + client's supplied ciaddr (since some clients produce null ciaddrs). + +- The server was inappropriately sending leases to the RESET state in the + event that multiple active leases were found to match a singly-identified + client. This was changed to RELEASED (by accepting a different, ACTIVE + binding, the client is implicitly releasing its lease). This repairs a + bug wherein secondary servers in failover pairs detecting this condition + move leases to RESET, and primaries refuse to accept that state + transition (properly). + +- The memset-after-dmalloc() changes made in 3.0.4b1 have been backed out. + + Changes since 3.0.4b1 + +- Command line parsing in omshell was repaired - it no longer closes + STDIN after reading one line. + +- The resolver library no longer closes the /etc/resolv.conf file + descriptor it opened twice. + +- Changes to trailing NULL removal in 't' option-atoms has been rethought, + it now includes 'd' (domain name) types, and tries hard not to rewind an + option beyond the start of the text field it is un-terminating. + + Changes since 3.0.3 + +- A DDNS update handling function was misusing the DNS error codes, rather + than the internal generic result enumeration. The result is a confusing + syslog line, logging the wrong condition. + +- The DHCP Server was not checking pool balance in the case where it brought + a non-ACTIVE lease out of storage for a client that was returning to use + a lease it once had long ago, and had since expired. + +- Failover peers no longer bother to look for free leases to allocate when + they already found the client's ACTIVE lease. DISCOVERs are load balanced + whether freely-allocated or not, unless the server doubts the peer has + leases to allocate. + +- Fixed a bug in dhcrelay agent addition code that suppressed trailing + PAD options - it was suppressing only one trailing PAD option, rather + than the entire block of them. + +! Fixed some unlikely overlapping-region memcpy() bugs in dhcrelay agent + option addition and stripping code. Added a few sanity checks. Although + highly improbable, due to requiring the reception of a DHCP datagram well + in excess of all known to be used physical MTU limitations, it is possible + this may have been used in a stack overflow security vulnerability. Thanks + to a patch from infamous42md. + +! Added some sanity checks to OMAPI connection/authentication code. + Although highly improbable, due to having to deliver in excess of 2^32 + bytes of data via the OMAPI channel, not to mention requiring dhcpd to + be able to malloc() a memory region 2^32 bytes in size, it was possible + this might have resulted in a heap overflow security vulnerability. + Thanks to a patch from infamous42md. + +- dmalloc() memset()'s the non-debug (data) portion of the allocated + memory to zero. Code that memset()'s the result returned by dmalloc() to + zero is redundant. These redundancies were removed. + +- Some type declaration corrections to u_int16_t were made in common/tr.c + (Token Ring support) thanks to a patch from Jason Vas Dias at Red Hat. + +- A failover bug that was allowing leases that EXPIRED or were RELEASED + where tsfp and tstp are identical timestamps to languish in these + transitional states has been repaired. As a side effect, lease + databases should be kept more consistent overall, not just for these + transitional states. + +- If the lease db is deleted out from under the daemon, and it moves to rewrite + the db, it will go ahead with the operation and move the new db into place + once it detects the old db does not exist. + +- dhclient now ignores IRDA, SIT, and IEEE1394 network interfaces, as it + is either nonsensical or (in the case of IEEE1394) is not known to support + these interfaces. Thanks to Marius Gedminas and Andrew Pollock of Debian. + +- Some previously undocumented reasons for dhclient-script invoking has + been documented in the dhclient-script.8 manpage. + +- Failover potential expiry calculations (TSTP) have been corrected. Results + should be substantially more consistent, and proper given the constraints. + +- Adjusted lease state validation checks in potential-conflict, to + account for possible clock skew similarly to normal state, and several + previously illegal transitions were made legal (ex: active->released). + +- An impossible sanity check was removed from omapi/buffer.c, thanks to a + patch from 'infamous42md'. + +- An OMAPI host/network byte order problem in lease time values has been + repaired. + +- Several minor bugs, largely relating to treating 8-byte time values as + 4-byte entities, have been repaired after careful review of the FreeBSD + ports collection's patch set. Thanks to the nameless entities who have + contributed to the FreeBSD ports. + +- When writing a trace file, the file is now created with permissions 0600, + to help administrators avoid accidentally publicising sensitive config + data. + +- The calculation of the maximum size of DHCP packets no longer includes + Ethernet framing overhead. The result is that the 'Maximum Message + Size' option advertised by clients, or the default value 576, is no + longer reduced by 14 bytes, and instead directly reflects the IP level + MTU (and the default, minimum allowed IP MTU of 576). + +- The special status of RELEASED/EXPIRED/RESET leases when a server + is operating in partner-down was fixed. It no longer requires a + lease be twice the MCLT beyond STOS to 'reallocate', and the expiry + event to turn these into FREE leases without peer acknowledgement + (after STOS+MCLT) has been repaired. + +- Compilation on older Solaris systems (lacking /usr/include/sys/int_types.h) + has been repaired. + +- "append"ing a string onto the end of a "t" type option (such as the + domain-name field) that had been improperly NULL-terminated by the + DHCP server will no longer result in a truncated string containing + only the option from the server, and not the expected appended value. + Thanks to a patch from Jason Vas Dias at Red Hat. + +- File handlers on configuration state (config files and lease dbs) should + be treated consistently, regardless of whether TRACING is defined or not. + +- The Linux build environment has had some minor improvements - better + sensing of 64-bit pointer sizes (only used for establishing an icmp_id), + and corrections to #if operators regarding LINUX_MAJOR should it ever + move to 3.[01].x. + +- The server now tries harder to survive the condition where it is unable + to open a new lease file to rewrite the lease state database. + + Changes since 3.0.3b3 + +- dhclient.conf documentation for interface {} was updated to reflect recent + discussion on the dhcp-hackers mailing list. + +- In response to reports that the software does not compile on GCC 4.0.0, + -Werror was removed from Makefile.conf for all platforms that used it. + We will address the true problem in a future release; this is a temporary + workaround. + + Changes since 3.0.3b2 + +- An error in code changes introduced in 3.0.3b2 was corrected, which caused + static BOOTP clients to receive random addresses. + + Changes since 3.0.3b1 + +- A bug was fixed in BOOTPREQUEST handling code wherein stale references to + host records would be left behind on leases that were not allocated to the + client currently booting (eg in the case where the host was denied booting). + +- The dhcpd.conf.5 manpage was updated to be more clear in regards to + multiple host declarations (thanks to Vincent McIntyre). 'Interim' style + dynamic updates were also retouched. + + Changes since 3.0.2 + +- A bug was fixed where a server might load balance a DHCP REQUEST to its + peer after already choosing not to load balance the preceding DISCOVER. + The peer cannot allocate the originating server's lease. + +- In the case where a secondary server lost its stable storage while the + primary was still in communications-interrupted, and came back online, + the lease databases would not be fully transferred to the secondary. + This was due to the secondary errantly sending an extra UPDREQ message + when the primary made its state transition to PARTNER-DOWN known. + +- The package will now compile cleanly in gcc 3.3 and 3.4. As a side effect, + lease structures will be 9 bytes smaller on all platforms. Thanks to + Jason Vas Dias at Red Hat. + +- Interface discovery code in DISCOVER_UNCONFIGURED mode is now + properly restricted to only detecting broadcast interfaces. Thanks + to a patch from Jason Vas Dias at Red Hat. + +- decode_udp_ip_header was changed so that the IP address was copied out + to a variable, rather than referenced by a pointer. This enforces 4-byte + alignment of the 32-bit IP address value. Thanks to a patch from Dr. + Peter Poeml. + +- An incorrect log message was corrected thanks to a patch from + Dr. Peter Poeml. + +- A bug in DDNS was repaired, where if the server's first DDNS action was + a DDNS removal rather than a DDNS update, the resolver library's + retransmit timer and retry timer was set to the default, implying a + 15 second timeout interval. Which is a little excessive in a synchronous, + single-threaded system. In all cases, ISC DHCP should now hold fast to + a 1-second timeout, trying only once. + +- The siaddr field was being improperly set to the server-identifier when + responding to DHCP messages. RFC2131 clarified the siaddr field as + meaning the 'next server in the bootstrap process', eg a tftp server. + The siaddr field is now left zeroed unless next-server is configured. + +- mockup_lease() could have returned in an error condition (or in the + condition where no fixed-address was found matching the shared + network) with stale references to a host record. This is probably not + a memory leak since host records generally never die anyway. + +- A bug was repaired where failover servers would let stale client identifiers + persist on leases that were reallocated to new clients not sending an id. + +- Binding scopes ("set var = value;") are now removed from leases allocated + by failover peers if the lease had expired. This should help reduce the + number of stale binding scopes on leases. + +- A small memory leak was closed involving client identifiers larger than + 7 bytes, and failover. + +- Configuring a subnet in dhcpd.conf with a subnet mask of 32 bits might + cause an internal function to overflow heap. Thanks to Jason Vas Dias + at Red Hat. + +- Some inconsistencies in treating numbers that the lexer parsed as 'NUMBER' + or 'NUMBER_OR_NAME' was repaired. Hexadecimal parsing is affected, and + should work better. + +- In several cases, parse warnings were being issued before the lexical + token had been advanced to the token whose value was causing an error... + causing parse warnings to claim the problem is on the wrong token. + +- Host declarations matching on client identifier for dynamic leases will + no longer match fixed-address host declarations (this is now identical + to behaviour for host records matching on hardware address). + + Changes since 3.0.2rc3 + +- A previously undocumented configuration directive, 'local-address', + was documented in the dhcpd.conf manpage. + + Changes since 3.0.2rc2 + +- Two variables introduced in 3.0.2b1 were used without being initialized + in the case where neither the FILE nor SNAME fields were available for + overloading. This was repaired. + +- A heretofore believed to be impossible corner case of the option + overloading implementation turned out to be possible ("Unable to sort + overloaded options after 10 tries."). The implementation was reworked + to consider the case of an option so large it would require more than + three chunks to fit. + +- Many other instances of variables being used without being initialized + were repaired. + +- An uninitialized variable in omapi_io_destroy() led to the discovery + that this function may result in orphaned pointers (and hence, a memory + leak). + + Changes since 3.0.2rc1 + +- allocate_lease() was rewritten to repair a bug in which the server would + try to allocate an ABANDONED lease when FREE leases were available. + + Changes since 3.0.2b1 + +- Some dhcp-eval.5 manpage formatting was repaired. + + Changes since 3.0.1 + +- A bug was fixed in the server's 'option overloading' implementation, + where options loaded into the 'file' and 'sname' packet fields were + not aligned precisely as rfc2131 dictates. + +- The FreeBSD client script was changed to support the case where a domain + name was not provided by the server. + +- A memory leak in 'omshell' per each command line parsed was + repaired, thanks to a patch from Jarkko Torppa. + +- Log functions writing to stderr were adjusted to use the STDERR_FILENO + system definition rather than '2'. This is a no-op for 90% of platforms. + +- One call to trace_write_packet_iov() counted the number of io vectors + incorrectly, causing inconsistent tracefiles. This was fixed. + +- Some expression parse failure memory leaks were closed. + +- A host byte order problem in tracefiles was repaired. + +- Pools configured in DHCPD for failover possessing permission lists that + previously were assumed to not include dyanmic bootp clients are now + a little more pessimistic. The result is, dhcpd will nag you about just + about most pools that possess a 'allow' statement with no 'deny' that + would definitely match a dynamic bootp client. + +- The 'ddns-update-style' configuration warning bit now insists that + the configuration be globally scoped. + +- Two memory leaks in dhclient were closed thanks to a patch from Felix + Farkas. + +- Some minor but excellently pedantic documentation errors were fixed + thanks to a patch from Thomas Klausner. + +- Bugs in operator precedence in executable statements have been repaired + once again. More legal syntaxes should be parsed legally. + +- Failing to initialize a tracefile for any reason if a tracefile was + specified is now a fatal error. Thanks to a patch from Albert Herranz. + +- Corrected a bug in which the number of leases transferred as calculated + by the failover primary and sent to peers in POOLRESP responses may be + incorrect. This value is not believed to be used by other failover + implementations, excepting perhaps as logged information. + +- Corrected a bug in which 'dhcp_failover_send_poolresp()' was in fact + sending POOLREQ messages instead of POOLRESP mesasges. This message + was essentially ignored since failover secondaries effectively do not + respond to POOLREQ messages. + +- Type definitions for various bitwidths of integers in the sunos5-5 + build of ISC DHCP have been fixed. It should compile and run more + easily when built in 64-bit for this platform. + +- "allow known-clients;" is now a legal syntax, to avoid confusion. + +- If one dhcp server chooses to 'load balance' a request to its failover + peer, it first checks to see if it believes said peer has a free + lease to allocate before ignoring the DISCOVER. + +- log() was logging a work buffer, rather than the value returned by + executing the statements configured by the user. In some cases, + the work buffer and the intended results were the same. In some other + cases, they were not. This was fixed thanks to a patch from Gunnar + Fjone and directconnect.no. + +- Compiler warnings for some string type conversions was fixed, thanks + to Andreas Gustafsson. + +- The netbsd build environments were simplified to one, in which + -Wconversion is not used, thanks to Andreas Gustafsson. + +- How randomness in the backoff-cutoff dhclient configuration variable + is implemented was better documented in the manpage, and the behaviour + of dhclient in REQUEST timeout handling was changed to match that of + DISCOVER timeout handling. + +- Omapi was hardened against clients that pass in null values, thanks + to a patch from Mark Jason Dominus. + +- A bug was fixed in dhclient that kept it from doing client-side + ddns updates. Thanks to a patch from Andreas Gustafsson, which + underwent some modification after review by Jason Vas Dias. + +- Failover implementations disconnected due to the network between + them (rather than one of the two shutting down) will now try to + re-establish the failover connection every 5 seconds, rather than + to simply try once and give up until one of them is restarted. + Thanks to a patch from Ulf Ekberg from Infoblox, and field testing + by Greger V. Teigre which led to an enhancement to it. + +- A problem that kept DHCP Failover secondaries from tearing down + ddns records was repaired. Thanks to a patch from Ulf Ekberg from + Infoblox. + +- 64bit pointer sizes are detected properly on FreeBSD now. + +- A bug was repaired where the DHCP server would leave stale references + to host records on leases it once thought about offering to certain + clients. The result would be to apply host and 'known' scopes to the + wrong clients (possibly denying booting). NOTE: The 'mis-host' patch + that was being circulated as a workaround is not the way this bug was + fixed. If you were a victim of this bug in 3.0.1, you are cautioned + to proceed carefully and see if it fixes your problem. + +- A bug was repaired in the server's DHCPINFORM handling, where it + tried to divine the client's address from the source packet and + would get it wrong. Thanks to Anshuman Singh Rawat. + +- A log message was introduced to help illuminate the case where the + server was unable to find a lease to assign to any BOOTP client. + Thanks to Daniel Baker. + +- A minor dhcpd.conf.5 manpage error was fixed. + + Changes since 3.0.1rc14 + +- The global variable 'cur_time' was centralized and is now uniformly of a + type #defined in system-dependent headers. It had previously been defined + in one of many places as a 32-bit value, and this causes mayhem on 64-bit + big endian systems. It probably wasn't too healthy on little endian + systems either. + +- A printf format string error introduced in rc14 was repaired. + +- AIX system-dependent header file was altered to only define NO_SNPRINTF + if the condition used to #ifdef in vsnprintf in AIX' header files + is false. + +- The Alpha/OSF system-dependent header file was altered to define + NO_SNPRINTF on OS revisions older than 4.0G. + +- omapip/test.c had string.h added to its includes. + + Changes since 3.0.1rc13 + +! CAN-2004-0460 - CERT VU#317350: Five stack overflow exploits were closed + in logging messages with excessively long hostnames provided by the + clients. It is highly probable that these could have been used by + attackers to gain arbitrary root access on systems using ISC DHCP 3.0.1 + release candidates 12 or 13. Special thanks to Gregory Duchemin for + both finding and solving the problem. + +! CAN-2004-0461 - CERT VU#654390: Once the above was closed, an opening + in log_*() functions was evidenced, on some specific platforms where + vsnprintf() was not believed to be available and calls were wrapped to + sprintf() instead. Again, credit goes to Gregory Duchemin for finding + the problem. Calls to snprintf() are now linked to a distribution-local + snprintf implementation, only in those cases where the architecture is + not known to provide one (see includes/cf/[arch].h). If you experience + linking problems with snprintf/vsnprintf or 'isc_print_' functions, this + is where to look. This vulnerability did not exist in any previously + published version of ISC DHCP. + +- Compilation on hpux 11.11 was repaired. + +- 'The cross-compile bug fix' was backed out. + + Changes since 3.0.1rc12 + +- Fixed a bug in omapi lease lookup function, to form the hardware + address for the hash lookup correctly, thanks to a patch from + Richard Hirst. + +- Fixed a bug where dhcrelay was sending relayed responses back to the + broadcast address, but with the source's unicast mac address. Should + now conform to rfc2131 section 4.1. + +- Cross-compile bug fix; use $(AR) instead of ar. Thanks to Morten Brorup. + +- Fixed a crash bug in dhclient where dhcpd servers that do not provide + renewal times results in an FPE. As a side effect, dhclient can now + properly handle 0xFFFFFFFF (-1) expiry times supplied by servers. Thanks + to a patch from Burt Silverman. + +- The 'ping timeout' debugs from rc12 were removed to -DDEBUG only, + and reformatted to correct a compilation error on Solaris platforms. + +- A patch was applied which fixes a case where leases read from the + leases database do not properly over-ride previously read leases. + +- dhcpctl.3 manpage was tweaked. + + Changes since 3.0.1rc11 + +- A patch from Steve Campbell was applied with minor modifications to + permit reverse dns PTR record updates with values containing spaces. + +- A patch from Florian Lohoff was applied with some modifications to + dhcrelay. It now discards packets whose hop count exceeds 10 by default, + and a command-line option (-c) can be used to set this threshold. + +- A failover bug relating to identifying peers by name length instead of + by name was fixed. + +- Declaring failover configs within shared-network statements should no + longer result in error. + +- The -nw command line option to dhclient now works. + +- Thanks to a patch from Michael Richardson: + - Some problems with long option processing have been fixed. + - Some fixes to minires so that updates of KEY records will work. + +- contrib/ms2isc was updated by Shu-Min Chang of the Intel Corporation. + see contrib/ms2isc/readme.txt for revision notes. + +- Dhclient no longer uses shell commands to kill another instance of + itself, it sends the signal directly. Thanks to a patch from Martin + Blapp. + +- The FreeBSD dhclient-script was changed so that a failure to write to + /etc/resolv.conf does not prematurely end the script. This keeps dhclient + from looping infinitely when this is the case. Thanks to a patch from + Martin Blapp. + +- A patch from Bill Stephens was applied which resolves a problem with lease + expiry times in failover configurations. + +- A memory leak in configuration parsing was closed thanks to a patch from + Steve G. + +- The function which discovers interfaces will now skip non-broadcast or + point-to-point interfaces, thanks to a patch from David Brownlee. + +- Options not yet known by the dhcpd or dhclient have had their names + changed such that they do not contain # symbols, in case they should ever + appear in a lease file. An option that might have been named "#144" is + now "unknown-144". + +- Another patch from Bill Stephens which allows the ping-check timeout to + be configured as 'ping-timeout'. Defaults to 1. + + Changes since 3.0.1rc10 + +- Potential buffer overflows in minires repaired. + +- A change to the linux client script to use /bin/bash, since /bin/sh may + not be bash. + +- Some missing va_end cleanups thanks to a patch from Thomas Klausner. + +- A correction of boolean parsing syntax validation - some illegal syntaxes + that worked before are now detected and produce errs, some legal syntaxes + that errored before will now work properly. + +- Some search-and-replace errors that caused some options to change their + names was repaired. + +- Shu-min Chang of the Intel corporation has contributed a perl script and + module that converts the MS NT4 DHCP configuration to a ISC DHCP3 + configuration file. + +- Applied the remainder of the dhcpctl memory leak patch provided by Bill + Squier at ReefEdge, Inc. (groo@reefedge.com). + +- Missing non-optional failover peer configurations will now result in a soft + error rather than a null dereference. + + Changes since 3.0.1rc9 + +- A format string was corrected to fix compiler warnings. + +- A number of spelling corrections were made in the man pages. + +- The dhclient.conf.5 man page was changed to refer to do-forward-updates + rather than a configuration option that doesn't exist. + +- A FreeBSD-specific bug in the interface removal handling was fixed. + +- A Linux-specific Token Ring detection problem was fixed. + +- Hashes removed from as-yet-unknown agent options, having those options + appear in reality before we know about them will no longer produce + self-corrupting lease databases. + +- dhclient will use the proper port numbers now when using the -g option. + +- A order-of-operations bug with 2 match clauses in 1 class statement is + fixed thanks to a patch from Andrew Matheson. + +- Compilation problems on Solaris were fixed. + +- Compilation problems when built with DEBUG or DEBUG_PACKET were repaired. + +- A fix to the dhcp ack process which makes certain group options will be + included in the first DHCPOFFER message was made thanks to a patch from + Ling Gou. + +- A few memory leaks were repaired thanks to patches from Bill Squier at + ReefEdge, Inc. (groo@reefedge.com). + +- A fix for shared-networks that sometimes give clients options for the + wrong subnets (in particular, 'option routers') was applied, thanks to + Ted Lemon for the patch. + +- Omshell's handling of dotted octets as values was changed such that dots + one after the other produce zero values in the integer string. + + Changes since 3.0.1rc8 + +- Fix a format string vulnerability in the server that could lead to a + remote root compromise (discovered by NGSEC Research Team, www.ngsec.com). + +- Add additional support for NetBSD/sparc64. + +- Fix a bug in the command-line parsing of the client. Also, resolve + a memory leak. + +- Add better support for shells other than bash in the Linux client + script. + +- Various build fixes for modern versions of FreeBSD and Linux. + +- Fix a bad bounds check when printing binding state names. + +- Clarify documentation about fixed-address and multiple addresses. + +- Fix a typo in the authoritative error message. + +- Make a log entry when we can't write a billing class. + +- Use conversion targets that are the right size on all architectures. + +- Increment the hop count when relaying. + +- Log a message when lease state is changed through OMAPI. + +- Don't rerun the shared_network when evaluating the pool. + +- Fix a reversed test in the parser. + +- Change the type of rbuf_max. + +- Make FTS_LAST a manifest constant to quiet warnings. + + Changes since 3.0.1rc7 + +- Fix two compiler warnings that are generated when compiling on Solaris + with gcc. These stop the build, even though they weren't actually + errors, because we prefer that our builds generate no warnings. + + Changes since 3.0.1rc6 + +- Don't allow a lease that's in the EXPIRED, RELEASED or RESET state + to be renewed. + +- Implement lease stealing for cases where the primary has fewer leases + than the secondary, as called for by the standard. + +- Add a fudge factor to the lease expiry acceptance code, (suggested + by Kevin Miller of CMU). + +- Fix a bug in permit_list_match that made it much too willing to say + that two permit lists matched. + +- Unless DEBUG_DNS_UPDATES is defined, print more user-friendly (and + also more compact) messages about DNS updates. + +- Fix a bug in generating wire-format domain names for the FQDN option. + +- Fix a bug where the FQDN option would not be returned if the client + requested it, contrary to the standard. + +- On Darwin, use the FreeBSD DHCP client script. + +- On NetBSD/sparc, don't check for casting warnings. + +- Add a flag in the DHCP client to disable updating the client's A + record when sending an FQDN option indicating that the client is + going to update its A record. + +- In the client, don't attempt a DNS update until one second after + configuring the new IP address, and if the update times out, keep + trying until a response, positive or negative, is received from the + DNS server. + +- Fix an uninitialized memory bug in the DHCP client. + +- Apply some FreeBSD-specific bug fixes suggested by Murray Stokely. + +- Fix a bug in ns_parserr(), where it was returning the wrong sort + of result code in some cases (suggested by Ben Harris of the + NetBSD project). + +- Fix a bug in is_identifier(), where it was checking against EOF + instead of the END_OF_FILE token (also suggested by Ben Harris). + +- Fix a bug where if an option universe contained no options, the + DHCP server could dump core (Walter Steiner). + +- Fix a bug in the handling of encapsulated options. + +- Fix a bug that prevented NWIP suboptions from being processed. + +- Delete the FTS_BOOTP and FTS_RESERVED states and implement them + as modifier flags to the FTS_ACTIVE state, as called for in the + failover protocol standard. + +- Fix bugs in the pool merging code that resulted in references and + dereferences of null pointers. This bug had no impact unless the + POINTER_DEBUG flag was defined. + +- In the server, added a do-forward-updates flag that can be used to + disable forward updates in all cases, so that sites that want the + clients to take sole responsibility for updating their A record can + do so. + +- Make it possible to disable optimization of PTR record updates. + + Changes since 3.0.1rc5 + +- Include some new documentation and changes provided by Karl Auer. + +- Add a workaround for some Lexmark printers that send a double-NUL- + terminated host-name option, which would break DNS updates. + +- Fix an off-by-one error in the MAC-address checking code for + DHCPRELEASE that was added in 3.0.1rc5. + +- Fix a bug where client-specific information was not being discarded + from the lease when it expired or was released, resulting in + problems if the lease was reallocated to a different client. + +- If more than one allocation pool is specified that has the same set + of constraints as another allocation pool on the same shared + network, merge the two pools. + +- Don't print an error in fallback_discard, since this just causes + confusion and does not appear to be helping to encourage anyone to + fix this bug. + + Changes since 3.0.1rc4 + +- Fix a bug that would cause the DHCP server to spin if asked to parse + a certain kind of incorrect statement. + +- Fix a related bug that would prevent an error from being reported in + the same case. + +- Additional documentation. + +- Make sure that the hardware address matches the lease when + processing a DHCPRELEASE message. + + Changes since 3.0.1rc3 + +- A minor bug fix in the arguments to a logging function call. +- Documentation update for dhcpd.conf. + + Changes since 3.0.1rc2 + +- Allow the primary to send a POOLREQ message. This isn't what the current + failover draft says to do, so we may have to back it out if I can't get the + authors to relent, but the scheme for balancing that's specified in the + current draft seems needlessly hairy, so I'm floating a trial balloon. + The rc1 code did not implement the method described in the draft either. + + Changes since 3.0.1rc1 + +- Treat NXDOMAIN and NXRRSET as success when we are trying to delete a + domain or RRSET. This allows the DHCP server to forget about a name + it added to the DNS once it's been removed, even if the DHCP server + wasn't the one that removed it. + +- Install defaults for failover maximum outstanding updates and maximum + silent time. This prevents problems that might occur if these values + were not configured. + +- Don't do DDNS deletes if ddns-update-style is none. + +- Return relay agent information options in DHCPNAK. This prevents DHCPNAK + messages from being dropped when the relay agent information option contains + routing information. + +- Fix a problem where coming up in recover wouldn't result in an update + request being sent. + +- Add some more chatty messages when we start a recovery update and when it's + done. + +- Fix a possible problem where some state might have been left around + after the peer lost contact and regained contact about how many updates + were pending. + +- Don't nix a lease update because of a lease conflict. This test has + never (as far as I know) prevented a mistake, and it appears to cause + problems with failover. + +- Add support in rc history code for keeping a selective history, rather + than a history of all references and dereferences. This code is only used + when extensive additional debugging is enabled. + + Changes since 3.0 + +- Make allocators for hash tables. As a side effect, this fixes a memory + smash in the subclass allocation code. + +- Fix a small bug in omshell where if you try to close an object when + no object is open, it dumps core. + +- Fix an obscure coredump that could occur on shutdown. + +- Fix a bug in the recording of host declaration rubouts in the lease file. + +- Fix two potential spins in the host deletion code. + +- Fix a core dump that would happen if an application tried to update + a host object attribute with a null value. + + Changes since 3.0 Release Candidate 12 + +- Fix a memory leak in the evaluation code. + +- Fix an obscure core dump. + +- Print a couple of new warnings when parsing the configuration file + when crucial information is left out. + +- Log "no free leases" as an error. + +- Documentation updates. + + Changes since 3.0 Release Candidate 11 + +- Always return a subnet selection option if one is sent. + +- Fix a warning that was being printed because an automatic data + structure wasn't zeroed. + +- Fix some failover state transitions that were being handled + incorrectly. + +- When supersede_lease is called on a lease whose end time has already + expired, but for which a state transition has not yet been done, do + a state transition. This fixes the case where if the secondary + allocated a lease to a client and the lease "expired" while the + secondary was in partner-down, no expiry event would actually + happen, so the lease would remain active until the primary was + restarted. + + Changes since 3.0 Release Candidate 10 + +- Fix a bug that was preventing released leases from changing state + in failover-enabled pools. + +- Fix a core dump in the client identifier finder code (for host + declarations). + +- Finish fixing a bug where bogus data would sometimes get logged to + the dhclient.leases file because it was opened as descriptor 2. + +- Fix the Linux dhclient-script according to suggestions made by + several people on the dhcp-client mailing list. + +- Log successful DNS updates at LOG_INFO, not LOG_ERROR. + +- Print an error message and refuse to run if a failover peer is + defined but not referenced by any pools. + +- Correct a confusing error message in failover. + + Changes since 3.0 Release Candidate 9 + +- Fix a bug in lease allocation for Dynamic BOOTP clients. + + Changes since 3.0 Release Candidate 8 Patchlevel 2 + +- Fix a bug that prevented update-static-leases from working. + +- Document failover-state OMAPI object. + +- Fix a compilation error on SunOS 4. + + Changes since 3.0 Release Candidate 8 Patchlevel 1 + +- Fix a parsing bug that broke dns updates (both interim and ad-hoc). + This was introduced in rc8pl1 as an unintended result of the memory + leakage fixes that were in pl1. + +- Fix a long-standing bug where the server would record that an update + had been done for a client with no name, even though no update had + been done, and then when the client's lease expired the deletion of + that nonexistant record would time out because the name was the null + string. + +- Clean up the omshell, dhcpctl and omapi man pages a bit. + + Changes since 3.0 Release Candidate 8 + +- Fix a bug that could cause the DHCP server to spin if + one-lease-per-client was enabled. + +- Fix a bug that was causing core dumps on BSD/os in the presence of + malformed packets. + +- In partner-down state, don't restrict lease lengths to MCLT. + +- On the failover secondary, record the MCLT received from the primary + so that if we come up without a connection to the primary we don't + wind up giving out zero-length leases. + +- Fix some compilation problems on BSD/os. + +- Fix a bunch of memory leaks. + +- Fix a couple of bugs in the option printer. + +- Fix an obscure error reporting bug in the dns update code, and also + make the message clearer when a key algorithm isn't supported. + +- Fix a bug in the tracing code that prevented trace runs that used + tcp connections from being played back. + +- Add some additional debugging capability for catching memory leaks + on exit. + +- Make the client release the lease correctly on shutdown. + +- Add some configurability to the build system. + +- Install omshell manual page in man1, not man8. + +- Craig Gwydir sent in a patch that fixes a long-standing bug in the + DHCP client that could cause core dumps, but that for some reason + hadn't been noticed until now. + + Changes since 3.0 Release Candidate 7 + +- Fix a bug in failover where we weren't sending updates after a + transition from communications-interrupted to normal. + +- Handle expired/released/reset -> free transition according to the + protocol specification (this works - the other way not only wasn't + conformant, but also didn't work). + +- Add a control object in both client and server that allows either + daemon to be shut down cleanly. + +- When writing a lease, if we run out of disk space, shut down the + output file and insist on writing a new one before proceeding. + +- In the server, if the OMAPI listener port is occupied, keep trying + to get it, rather than simply giving up and exiting. + +- Support fetching variables from leases and also updating and adding + variables to leases via OMAPI. + +- If two failover peers have wildly different clocks, refuse to start + doing failover. + +- Fix a bug in the DNS update code that could cause core dumps when + running on alpha processors. + +- Fixed a bug in ddns updates for static lease entries, thanks to a + patch from Andrey M Linkevitch. + +- Add support for Darwin/MacOS X + +- Install omshell (including new documentation). + +- Support DNS updates in the client (this is a very obscure feature + that most DHCP client users probably will not be able to use). + +- Somewhat cleaner status logging in the client. + +- Make OMAPI key naming syntax compatible with the way keys are + actually named (key names are domain names). + +- Fix a bug in the lease file writer. + +- Install DHCP ISC headers in a different place than BIND 9 ISC + headers, to avoid causing trouble in BIND 9 builds. + +- Don't send updates for attributes on an object when the attributes + haven't changed. Support deleting attributes on remote objects. + +- Fix a number of bugs in omshell, and add the unset and refresh + statements. + +- Handle disconnects in OMAPI a little bit more intelligently (so that + the caller gets ECONNRESET instead of EINVAL). + +- Fix a bunch of bugs in the handling of clients that have existing + leases when the try to renew their leases while failover is + operating. + + Changes since 3.0 Release Candidate 6 + +- Fix a core dump that could happen when processing a DHCPREQUEST from + a client that had a host declaration that contained both a + fixed-address declaration and a dhcp-client-identifier option + declaration, if the client identifier was longer than nine bytes. + +- Fix a memory leak that could happen in certain obscure cases when + using omapi to manipulate leases. + +- Fix some bugs and omissions in omshell. + + Changes since 3.0 Release Candidate 5 + +- Fix a bug in omapi_object_dereference that prevented objects in + chains from having their reference counts decreased on dereference. + +- Fix a bug in omapi_object_dereference that would prevent object + chains from being freed upon removal of the last reference external + to the chain. + +- Fix a number of other memory leaks in the OMAPI protocol subsystem. + +- Add code in the OMAPI protocol handler to trace memory leakage. + +- Clean up the memory allocation/reference history printer. + +- Support input of dotted quads and colon-separated hex lists as + attribute values in omshell. + +- Fix a typo in the Linux interface discovery code. + +- Conditionalize a piece of trace code that wasn't conditional. + + Changes since 3.0 Release Candidate 4 + +- Fix a bug that would prevent leases from being abandoned properly on + DHCPDECLINE. + +- Fix failover peer OMAPI support. + +- In failover, correctly handle expiration of leases. Previously, + leases would never be reclaimed because they couldn't make the + transition from EXPIRED to FREE. + +- Fix some broken failover state transitions. + +- Documentation fixes. + +- Take out an unnecessary check in DHCP relay agent information option + stashing code that was preventing REBINDING clients from rebinding. + +- Prevent failover peers from allocating leases in DHCPREQUEST + processing if the lease belongs to the other server. + +- Record server version in lease file introductory comment. + +- Correctly report connection errors in OMAPI and failover. + +- Make authentication signature algorithm name comparisons in OMAPI + case-insensitive. + +- Fix compile problem on SunOS 4.x + +- If a signature algorithm is not terminated with '.', terminate it so + that comparisons between fully-qualified names will work + consistently. + +- Different SIOCGIFCONF probe code, may "fix" problem on some Linux + systems with the probe not working correctly. + +- Don't allow user to type omapi key on command line of omshell. + + Changes since 3.0 Release Candidate 3 + +- Do lease billing on startup in a way that I *think* will finally do + the billing correctly - the previous method could overbill as a + result of duplicate leases. + +- Document OMAPI server objects. + + Changes since 3.0 Release Candidate 2 Patchlevel 1 + +- Fix some problems in the DDNS update code. Thanks to Albert + Herranz for figuring out the main problem. + +- Fix some reference counting errors on host entries that were causing + core dumps. + +- Fix a byte-swap bug in the token ring code, thanks to Jochen + Friedrich. + +- Fix a bug in lease billing, thanks to Jonas Bulow. + + Changes since 3.0 Release Candidate 2 + +- Change the conditions under which a DHCPRELEASE is actually + committed to be consistent with lease binding states rather than + using the lease end time. This may fix some problems with the + billing class code. + +- Fix a bug where lease updates would fail on Digital Unix (and maybe + others) because malloc was called with a size of zero. + +- Fix a core dump that happens when the DHCP server can't create its + trace file. + + Changes since 3.0 Release Candidate 1 Patchlevel 1 + +- Fix the dhcp_failover_put_message to not attempt to allocate a + zero-length buffer. Some versions of malloc() fail if you try to + allocate a zero-length buffer, and this was causing problems on, + e.g., Digital Unix. + +- Fix a case where the failover code was printing an error message + when no error had occurred. + +- Fix a problem where when a server went down and back up again, the + peer would not see a state transition and so would stay in the + non-communicating state. + +- Be smart about going into recover_wait. + +- Fix a problem in the failover implementation where peers would fail + to come into sync if interrupted in the RECOVER state. This could + have been the cause of some problems people have reported recently. + +- Fix a problem with billing classes where they would not be unbilled + when the client lease expired. + +- If select fails, figure out which descriptor is bad, and cut it out + of the I/O loop. This prevents a potentially nasty spin. I + haven't heard any report it in a while, but it came up consistently + in testing. + +- Fix a bug in the relay agent where if you specified interfaces on + the command line, it would fail. + +- Fix a couple of small bugs in the omapi connection object (no known + user impact). + +- Add the missing 3.0 Beta 1 lease conversion script. + +- Read dhcp client script hooks if they exist, rather than only if + they're executable. + + Changes since 3.0 Release Candidate 1 + +- Fix a memory smash that happens when fixed-address leases are used. + ANY SITE AT WHICH FIXED-ADDRESS STATEMENTS ARE BEING USED SHOULD + UPGRADE IMMEDIATELY. This has been a long-standing bug - thanks to + Alvise Nobile for discovering it and helping me to find it! + +- Fix a small bug in binary-to-ascii, thanks to H. Peter Anvin of + Transmeta. + +- There is a known problem with the DHCP server doing failover on + Compaq Alpha systems. This patchlevel is not a release candidate + because of this bug. The bug should be straightforward to fix, so + a new release candidate is expected shortly. + +- There is a known problem in the DDNS update code that is probably a + bug, and is not, as far as we know, fixed in this patchlevel. + + Changes since 3.0 Beta 2 Patchlevel 24 + +- Went over problematic failover state transitions and made them all + work, so that failover should now much less fragile. + +- Add some dhcpctl and omapi documentation + +- Fix compile errors when compiling with unusual predefines. + +- Make Token Ring work on Linux 2.4 + +- Fix the Digital Unix BPF_WORDALIGN bug. + +- Fix some dhcp client documentation errors. + +- Update some parts of the README file. + +- Support GCC on SCO. + + Changes since 3.0 Beta 2 Patchlevel 23 + +- Fix a bug in the DNS update code where a status code was not being + checked. This may have been causing core dumps. + +- When parsing the lease file, if a lease declaration includes a + billing class statement, and the lease already has a billing class, + unbill the old class. + +- When processing failover transactions, where acks will be deferred, + process the state transition immediately. + +- Don't try to use the new SIOCGIFCONF buffer size detection code on + Linux 2.0, which doesn't provide this functionality. + +- Apply a patch suggested by Tuan Uong for a problem in dlpi.c. + +- Fix a problem in using the which command in the configure script. + +- Fix a parse error in the client when setting up an omapi listener. + +- Document the -n and -g flags to the client. + +- Make sure there is always a stdin and stdout on startup. This + prevents shell scripts from accidentally writing error messages into + configuration files that happen to be opened as stderr. + +- If an interface is removed, the client will now notice that it is + gone rather than spinning. This has only been tested on NetBSD. + +- The client will attempt to get an address even if it can't create a + lease file. + +- Don't overwrite tracefiles. + +- Fix some memory allocation bugs in failover. + + Changes since 3.0 Beta 2 Patchlevel 22 + +- Apply some patches suggested by Cyrille Lefevre, who is maintaining + the FreeBSD ISC DHCP Distribution port. + +- Fix a core dump in DHCPRELEASE. + + Changes since 3.0 Beta 2 Patchlevel 21 + +- This time for sure: fix the spin described in the changes for pl20. + + Changes since 3.0 Beta 2 Patchlevel 20 + +- Fix a problem with Linux detecting large numbers of interfaces (Ben) + +- Fix a memory smash in the quotify code, which was introduced in + pl19. + +- Actually fix the spin described in the changes for pl20. The + previous fix only partially fixed the problem - enough to get it + past the regression test. + + Changes since 3.0 Beta 2 Patchlevel 19 + +- Fix a bug that could cause the server to abort if compiled with + POINTER_DEBUG enabled. + +- Fix a bug that could cause the server to spin when responding to a + DHCPREQUEST. + +- Apply Joost Mulders' suggested patches for DLPI on x86. + +- Support NUL characters in quoted strings. + +- Install unformatted man pages on SunOS. + + Changes since 3.0 Beta 2 Patchlevel 18 + +- Allow the server to be placed in partner-down state using OMAPI. + (Damien Neil) + +- Implement omshell, which can be used to do arbitrary things to the + server (in theory). (Damien Neil) + +- Fix a case where if a client had two different leases the server could + actually dereference the second one when it hadn't been referenced, + leading to memory corruption and a core dump. (James Brister) + +- Fix a case where a client could request the address of another client's + lease, but find_lease wouldn't detect that the other client had it, and + would attempt to allocate it to the client, resulting in a lease conflict + message. + +- Fix a case where a client with more than one client identifier could be + given a lease where the hardware address was correct but the client + identifier was not, resulting in a lease conflict message. + +- Fix a problem where the server could write out a colon-separated + hex list as a value for a variable, which would then not parse. + The fix is to always write strings as quoted strings, with any + non-printable characters quoted as octal escape sequences. So + a file written the old way still won't work, but new files written + this way will work. + +- Fix documentation for sending non-standard options. + +- Use unparsable names for unknown options. WARNING: this will + break any configuration files that use the option-nnn convention. + If you want to continue to use this convention for some options, + please be sure to write a definition, like this: + + option option-nnn code nnn = string; + + You can use a descriptive name instead of option-nnn if you like. + +- Fix a problem where we would see a DHCPDISCOVER/DHCPOFFER/ + DHCPREQUEST/DHCPACK/DHCPREQUEST/DHCPNAK sequence. This was the + result of a deceptively silly bug in supersede_lease. + +- Fix client script exit status check, according to a fix supplied by + Hermann Lauer. + +- Fix an endianness bug in the tracefile support, regarding ICMP + messages. + +- Fix a bug in the client where the medium would not work correctly if + it contained quoted strings. + + ** there was no pl17 ** + + Changes since 3.0 Beta 2 Patchlevel 16 + +- Add support for transaction tracing. This allows the state of the + DHCP server on startup, and all the subsequent transactions, to be + recorded in a file which can then be played back to reproduce the + behaviour of the DHCP server. This can be used to quickly + reproduce bugs that cause core dumps or corruption, and also for + tracking down memory leaks. + +- Incorporate some bug fixes provided by Joost Mulders for the DLPI + package which should clear up problems people have been seeing on + Solaris. + +- Fix bugs in the handling of options stored as linked lists (agent + options, fqdn options and nwip options) that could cause memory + corruption and core dumps. + +- Fix a bug in DHCPREQUEST handling that resulted in DHCPNAK messages + not being send in some cases when they were needed. + +- Make the lease structure somewhat more compact. + +- Make initial failover startup *much* faster. This was researched + and implemented by Damien Neil. + +- Add a --version flag to all executables, which prints the program + name and version to standard output. + +- Don't rewrite the lease file every thousand leases. + +- A bug in nit.c for older SunOS machines was fixed by a patch sent in + by Takeshi Hagiwara. + +- Fix a memory corruption bug in the DHCP client. + +- Lots of documentation updates. + +- Add a feature allowing environment variables to be passed to the + DHCP client script on the DHCP client command line. + +- Fix client medium support, which had been broken for some time. + +- Fix a bug in the DHCP client initial startup backoff interval, which + would cause two DHCPDISCOVERS to be sent back-to-back on startup. + + Changes since 3.0 Beta 2 Patchlevel 15 + +- Some documentation tweaks. + +- Maybe fix a problem in the DLPI code. + +- Fix some error code space inconsistencies in ddns update code. + +- Support relay agents that intercept unicast DHCP messages to stuff + agent options into them. + +- Fix a small memory leak in the relay agent option support code. + +- Fix a core dump that would occur if a packet was sent with no + options. + + Changes since 3.0 Beta 2 Patchlevel 14 + +- Finish fixing a long-standing bug in the agent options code. This + was causing core dumps and failing to operate correctly - in + particular, agent option stashing wasn't working. Agent option + stashing should now be working, meaning that agent options can be + used in class statements to control address allocation. + +- Fix up documentation. + +- Fix a couple of small memory leaks that would have added up + significantly in a high-demand situation. + +- Add a log-facility configuration parameter. + +- Fix a compile error on some older operating systems. + +- Add the ability in the client to execute certain statements before + transmitting packets to the server. Handy for debugging; not much + practical use otherwise. + +- Don't send faked-out giaddr when renewing or bound - again, useful + for debugging. + + Changes since 3.0 Beta 2 Patchlevel 13 + +- Fixed a problem where the fqdn decoder would sometimes try to store + an option with an (unsigned) negative length, resulting in a core + dump on some systems. + +- Work around the Win98 DHCP client, which NUL-terminates the FQDN + option. + +- Work around Win98 and Win2k clients that will claim they want to do + the update even when they don't have any way to do it. + +- Fix some log messages that can be printed when failover is operating + that were not printing enough information. + +- It was possible for a DHCPDISCOVER to get an allocation even when + the state machine said the server shouldn't be responding. + +- Don't load balance DHCPREQUESTs from clients in RENEWING and + REBINDING, since in RENEWING, if we heard it, it's for us, and in + REBINDING, the client wouldn't have got to REBINDING if its primary + were answering. + +- When we get a bogus state lease binding state transition, don't do + the transition. + + + Changes since 3.0 Beta 2 Patchlevel 12 + +- Fixed a couple of silly compile errors. + + Changes since 3.0 Beta 2 Patchlevel 11 + +- Albert Herranz tracked down and fixed a subtle bug in the base64 + decoder that would prevent any key with an 'x' in its base64 + representation from working correctly. + +- Thanks to Chris Cheney and Michael Sanders, we have a fix for the + hang that they both spotted in the DHCP server - when + one-lease-per-client was set, the code to release the "other" lease + could spin. + +- Fix a problem with alignment of the input buffer in bpf in cases + where two packets arrive in the same bpf read. + +- Fix a problem where the relay agent would crash if you specified an + interface name on the command line. + +- Add the ability to conditionalize client behaviour based on the + client state. + +- Add support for the FQDN option, and added support for a new way of + doing ddns updates (ddns update style interim) that allows more than + one DHCP server to update the DNS for the same network(s). This + was implemented by Damien Neil with some additional functionality + added by Ted Lemon. + +- Damien added a "log" statement, so that the configuration file can + be made to log debugging information and other information. + +- Fixed a bug that caused option buffers not to be terminated with an + end option. + +- Fixed a long-standing bug in the support for option spaces where the + options are stored as an ordered list rather than in a hash table, + which could theoretically result in memory pool corruption. + +- Prevent hardware declarations with no actual hardware address from + being written as something unparsable, and behave correctly in the + face of a null hardware address on input. + +- Allow key names to be FQDNs, and qualify the algorithm name if it is + specified unqualified. + +- Modify the DDNS update code so that it never prints the "resolver + failed" message, but instead says *why* the resolver failed. + +- Officially support the subnet selection option, which now has an + RFC. + +- Fix a build bug on MacOS X. + +- Allow administrator to disable ping checking. + +- Clean up dhcpd.conf documentation and add more information about how + it works. + + Changes since 3.0 Beta 2 Patchlevel 10 + +- Fix a bug introduced during debugging (!) and accidentally committed + to CVS. + + Changes since 3.0 Beta 2 Patchlevel 9 + +- Fix DHCP client handling of vendor encapsulated options. + +- Fix a bug in the handling of relay agent information options introduced + in patchlevel 9. + +- Stash agent options on client leases by default, and use the stashed + options at renewal time. + +- Add the ability to test the client's binding state in the client + configuration language. + +- Fix a core dump in the DNS update code. + +- Fix some expression evaluation bugs that were causing updates to be + done when no client hostname was received. + +- Fix expression evaluation debugging printfs. + +- Teach pretty_print_option to print options in option spaces other than + the DHCP option space. + +- Add a warning message if the RHS of a not is not boolean. + +- Never select for more than a day, because some implementations of + select will just fail if the timeout is too long (!). + +- Fix a case where a DHCPDISCOVER from an unknown network would be + silently dropped. + +- Fix a bug where if a client requested an IP address for which a different + client had the lease, the DHCP server would reallocate it anyway. + +- Fix the DNS update code so that if the client changes its name, the DNS + will be correctly updated. + + Changes since 3.0 Beta 2 Patchlevel 8 + +- Oops, there was another subtle math error in the header-length + bounds-checking. + + Changes since 3.0 Beta 2 Patchlevel 7 + +- Oops, forgot to byte-swap udp header length before bounds-checking it. + + Changes since 3.0 Beta 2 Patchlevel 6 + +- Fix a possible DoS attack where a client could cause the checksummer + to dump core. This was a read, not a write, so it shouldn't be + possible to exploit it any further than that. + +- Implement client- and server-side support for using the Client FQDN + option. + +- Support for other option spaces in the client has been added. This + means that it is now possible to define a vendor option space on the + client, request options in that space from the server (which must + define the same option space), and then use those options in the + client. This also allows NWIP and Client FQDN options to be used + meaningfully. + +- Add object initializer support. This means that objects can now be + initialized to something other than all-zeros when allocated, which + makes, e.g., the interface object support code a little more robust. + +- Fix an off-by-one bug in the host stuffer. This was causing host + deletes not the work, and may also have been causing OMAPI + connections to get dropped. Thanks to James Brister for tracking + this one down! + +- Fixed a core dump in the interface discovery code that is triggered + when there is no subnet declaration for an interface, but the server + decides to continue running. Thanks to Shane Kerr for tracking + down and fixing this problem. + + Changes since 3.0 Beta 2 Patchlevel 5 + +- Fix a bug in the recent enhancement to the interface discovery code + to support arbitrary-length interface lists. + +- Support NUL-terminated DHCP options when initializing client-script + environment. + +- Fix suffix operator. + +- Fix NetWare/IP option parsing. + +- Better error/status checking in dhcpctl initialization and omapi + connection code. + +- Fix a potential memory smash in dhcpctl code. + +- Fix SunOS4 and (maybe) Ultrix builds. + +- Fix a bug where a certain sort of incoming packet could cause a core + dump on Solaris (and probably elsewhere). + +- Add some more safety checks in error logging code. + +- Add support for ISC_R_INCOMPLETE in OMAPI protocol connection code. + +- Fix relay agent so that if an interface is specified on the command + line, the relay agent does not dump core. + +- Fix class matching so that match if can be combined with match or + spawn with. + +- Do not allow spurious leases in the lease database to introduce + potentially bogus leases into the in-memory database. + +- Fix a byte-order problem in the client hardware address type code + for OMAPI. + +- Be slightly less picky about what sort of hardware addresses OMAPI + can install in host declarations. + + Changes since 3.0 Beta 2 Patchlevel 4 + +- Incorporated Peter Marschall's proposed change to array/record + parsing, which allows things like the slp-agent option to be encoded + correctly. Thanks very much to Peter for taking the initiative to + do this, and for doing such a careful job of it (e.g., updating the + comments)! + +- Added an encoding for the slp-agent option. :') + +- Fixed SunOS 4 build. Thanks to Robert Elz for responding to my + request for help on this with patches! + +- Incorporated a change that should fix a problem reported by Philippe + Jumelle where when the network connection between two servers is + lost, they never reconnect. + +- Fix client script files other than that for NetBSD to actually use + make_resolv_conf as documented in the manual page. + +- Fix a bug in the packet handling code that could result in a core + dump. + +- Fix a bug in the bootp code where responses on the local net would + be sent to the wrong MAC address. Thanks to Jerry Schave for + catching this one. + + Changes since 3.0 Beta 2 Patchlevel 3 + +- In the DHCP client, execute client statements prior to using the values + of options, so that the client configuration can overridden, e.g., the + lease renewal time. + +- Fix a reference counting error that would result in very reproducible + failures in updates, as well as occasional core dumps, if a zone was + declared without a key. + +- Fix some Linux 2.0 compilation problems. + +- Fix a bug in scope evaluation during execution of "on" statements that + caused values not to be recorded on leases. + +- If the dhcp-max-message-size option is specified in scope, and the + client didn't send this option, use the one specified in scope to + determine the maximum size of the response. + + Changes since 3.0 Beta 2 Patchlevel 2 + +- Fix a case where spawning subclasses were being allocated + incorrectly, resulting in a core dump. + +- Fix a case where the DHCP server might inappropriately NAK a + RENEWING client. + +- Fix a place dhcprequest() where static leases could leak. + +- Include memory.h in omapip_p.h so that we don't get warnings about + using memcmp(). + + Changes since 3.0 Beta 2 Patchlevel 1 + +- Notice when SIOCFIGCONF returns more data than fit in the buffer - + allocate a larger buffer, and retry. Thanks to Greg Fausak for + pointing this out. + +- In the server, if no interfaces were configured, report an error and + exit. + +- Don't ever record a state of 'startup'. + +- Don't try to evaluate the local failover binding address if none was + specified. Thanks to Joseph Breu for finding this. diff --git a/aclocal.m4 b/aclocal.m4 new file mode 100644 index 0000000..be41d12 --- /dev/null +++ b/aclocal.m4 @@ -0,0 +1,897 @@ +# generated automatically by aclocal 1.10.1 -*- Autoconf -*- + +# Copyright (C) 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, +# 2005, 2006, 2007, 2008 Free Software Foundation, Inc. +# This file is free software; the Free Software Foundation +# gives unlimited permission to copy and/or distribute it, +# with or without modifications, as long as this notice is preserved. + +# This program is distributed in the hope that it will be useful, +# but WITHOUT ANY WARRANTY, to the extent permitted by law; without +# even the implied warranty of MERCHANTABILITY or FITNESS FOR A +# PARTICULAR PURPOSE. + +m4_ifndef([AC_AUTOCONF_VERSION], + [m4_copy([m4_PACKAGE_VERSION], [AC_AUTOCONF_VERSION])])dnl +m4_if(AC_AUTOCONF_VERSION, [2.67],, +[m4_warning([this file was generated for autoconf 2.67. +You have another version of autoconf. It may work, but is not guaranteed to. +If you have problems, you may need to regenerate the build system entirely. +To do so, use the procedure documented by the package, typically `autoreconf'.])]) + +# Copyright (C) 2002, 2003, 2005, 2006, 2007 Free Software Foundation, Inc. +# +# This file is free software; the Free Software Foundation +# gives unlimited permission to copy and/or distribute it, +# with or without modifications, as long as this notice is preserved. + +# AM_AUTOMAKE_VERSION(VERSION) +# ---------------------------- +# Automake X.Y traces this macro to ensure aclocal.m4 has been +# generated from the m4 files accompanying Automake X.Y. +# (This private macro should not be called outside this file.) +AC_DEFUN([AM_AUTOMAKE_VERSION], +[am__api_version='1.10' +dnl Some users find AM_AUTOMAKE_VERSION and mistake it for a way to +dnl require some minimum version. Point them to the right macro. +m4_if([$1], [1.10.1], [], + [AC_FATAL([Do not call $0, use AM_INIT_AUTOMAKE([$1]).])])dnl +]) + +# _AM_AUTOCONF_VERSION(VERSION) +# ----------------------------- +# aclocal traces this macro to find the Autoconf version. +# This is a private macro too. Using m4_define simplifies +# the logic in aclocal, which can simply ignore this definition. +m4_define([_AM_AUTOCONF_VERSION], []) + +# AM_SET_CURRENT_AUTOMAKE_VERSION +# ------------------------------- +# Call AM_AUTOMAKE_VERSION and AM_AUTOMAKE_VERSION so they can be traced. +# This function is AC_REQUIREd by AC_INIT_AUTOMAKE. +AC_DEFUN([AM_SET_CURRENT_AUTOMAKE_VERSION], +[AM_AUTOMAKE_VERSION([1.10.1])dnl +m4_ifndef([AC_AUTOCONF_VERSION], + [m4_copy([m4_PACKAGE_VERSION], [AC_AUTOCONF_VERSION])])dnl +_AM_AUTOCONF_VERSION(AC_AUTOCONF_VERSION)]) + +# AM_AUX_DIR_EXPAND -*- Autoconf -*- + +# Copyright (C) 2001, 2003, 2005 Free Software Foundation, Inc. +# +# This file is free software; the Free Software Foundation +# gives unlimited permission to copy and/or distribute it, +# with or without modifications, as long as this notice is preserved. + +# For projects using AC_CONFIG_AUX_DIR([foo]), Autoconf sets +# $ac_aux_dir to `$srcdir/foo'. In other projects, it is set to +# `$srcdir', `$srcdir/..', or `$srcdir/../..'. +# +# Of course, Automake must honor this variable whenever it calls a +# tool from the auxiliary directory. The problem is that $srcdir (and +# therefore $ac_aux_dir as well) can be either absolute or relative, +# depending on how configure is run. This is pretty annoying, since +# it makes $ac_aux_dir quite unusable in subdirectories: in the top +# source directory, any form will work fine, but in subdirectories a +# relative path needs to be adjusted first. +# +# $ac_aux_dir/missing +# fails when called from a subdirectory if $ac_aux_dir is relative +# $top_srcdir/$ac_aux_dir/missing +# fails if $ac_aux_dir is absolute, +# fails when called from a subdirectory in a VPATH build with +# a relative $ac_aux_dir +# +# The reason of the latter failure is that $top_srcdir and $ac_aux_dir +# are both prefixed by $srcdir. In an in-source build this is usually +# harmless because $srcdir is `.', but things will broke when you +# start a VPATH build or use an absolute $srcdir. +# +# So we could use something similar to $top_srcdir/$ac_aux_dir/missing, +# iff we strip the leading $srcdir from $ac_aux_dir. That would be: +# am_aux_dir='\$(top_srcdir)/'`expr "$ac_aux_dir" : "$srcdir//*\(.*\)"` +# and then we would define $MISSING as +# MISSING="\${SHELL} $am_aux_dir/missing" +# This will work as long as MISSING is not called from configure, because +# unfortunately $(top_srcdir) has no meaning in configure. +# However there are other variables, like CC, which are often used in +# configure, and could therefore not use this "fixed" $ac_aux_dir. +# +# Another solution, used here, is to always expand $ac_aux_dir to an +# absolute PATH. The drawback is that using absolute paths prevent a +# configured tree to be moved without reconfiguration. + +AC_DEFUN([AM_AUX_DIR_EXPAND], +[dnl Rely on autoconf to set up CDPATH properly. +AC_PREREQ([2.50])dnl +# expand $ac_aux_dir to an absolute path +am_aux_dir=`cd $ac_aux_dir && pwd` +]) + +# AM_CONDITIONAL -*- Autoconf -*- + +# Copyright (C) 1997, 2000, 2001, 2003, 2004, 2005, 2006 +# Free Software Foundation, Inc. +# +# This file is free software; the Free Software Foundation +# gives unlimited permission to copy and/or distribute it, +# with or without modifications, as long as this notice is preserved. + +# serial 8 + +# AM_CONDITIONAL(NAME, SHELL-CONDITION) +# ------------------------------------- +# Define a conditional. +AC_DEFUN([AM_CONDITIONAL], +[AC_PREREQ(2.52)dnl + ifelse([$1], [TRUE], [AC_FATAL([$0: invalid condition: $1])], + [$1], [FALSE], [AC_FATAL([$0: invalid condition: $1])])dnl +AC_SUBST([$1_TRUE])dnl +AC_SUBST([$1_FALSE])dnl +_AM_SUBST_NOTMAKE([$1_TRUE])dnl +_AM_SUBST_NOTMAKE([$1_FALSE])dnl +if $2; then + $1_TRUE= + $1_FALSE='#' +else + $1_TRUE='#' + $1_FALSE= +fi +AC_CONFIG_COMMANDS_PRE( +[if test -z "${$1_TRUE}" && test -z "${$1_FALSE}"; then + AC_MSG_ERROR([[conditional "$1" was never defined. +Usually this means the macro was only invoked conditionally.]]) +fi])]) + +# Copyright (C) 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006 +# Free Software Foundation, Inc. +# +# This file is free software; the Free Software Foundation +# gives unlimited permission to copy and/or distribute it, +# with or without modifications, as long as this notice is preserved. + +# serial 9 + +# There are a few dirty hacks below to avoid letting `AC_PROG_CC' be +# written in clear, in which case automake, when reading aclocal.m4, +# will think it sees a *use*, and therefore will trigger all it's +# C support machinery. Also note that it means that autoscan, seeing +# CC etc. in the Makefile, will ask for an AC_PROG_CC use... + + +# _AM_DEPENDENCIES(NAME) +# ---------------------- +# See how the compiler implements dependency checking. +# NAME is "CC", "CXX", "GCJ", or "OBJC". +# We try a few techniques and use that to set a single cache variable. +# +# We don't AC_REQUIRE the corresponding AC_PROG_CC since the latter was +# modified to invoke _AM_DEPENDENCIES(CC); we would have a circular +# dependency, and given that the user is not expected to run this macro, +# just rely on AC_PROG_CC. +AC_DEFUN([_AM_DEPENDENCIES], +[AC_REQUIRE([AM_SET_DEPDIR])dnl +AC_REQUIRE([AM_OUTPUT_DEPENDENCY_COMMANDS])dnl +AC_REQUIRE([AM_MAKE_INCLUDE])dnl +AC_REQUIRE([AM_DEP_TRACK])dnl + +ifelse([$1], CC, [depcc="$CC" am_compiler_list=], + [$1], CXX, [depcc="$CXX" am_compiler_list=], + [$1], OBJC, [depcc="$OBJC" am_compiler_list='gcc3 gcc'], + [$1], UPC, [depcc="$UPC" am_compiler_list=], + [$1], GCJ, [depcc="$GCJ" am_compiler_list='gcc3 gcc'], + [depcc="$$1" am_compiler_list=]) + +AC_CACHE_CHECK([dependency style of $depcc], + [am_cv_$1_dependencies_compiler_type], +[if test -z "$AMDEP_TRUE" && test -f "$am_depcomp"; then + # We make a subdir and do the tests there. Otherwise we can end up + # making bogus files that we don't know about and never remove. For + # instance it was reported that on HP-UX the gcc test will end up + # making a dummy file named `D' -- because `-MD' means `put the output + # in D'. + mkdir conftest.dir + # Copy depcomp to subdir because otherwise we won't find it if we're + # using a relative directory. + cp "$am_depcomp" conftest.dir + cd conftest.dir + # We will build objects and dependencies in a subdirectory because + # it helps to detect inapplicable dependency modes. For instance + # both Tru64's cc and ICC support -MD to output dependencies as a + # side effect of compilation, but ICC will put the dependencies in + # the current directory while Tru64 will put them in the object + # directory. + mkdir sub + + am_cv_$1_dependencies_compiler_type=none + if test "$am_compiler_list" = ""; then + am_compiler_list=`sed -n ['s/^#*\([a-zA-Z0-9]*\))$/\1/p'] < ./depcomp` + fi + for depmode in $am_compiler_list; do + # Setup a source with many dependencies, because some compilers + # like to wrap large dependency lists on column 80 (with \), and + # we should not choose a depcomp mode which is confused by this. + # + # We need to recreate these files for each test, as the compiler may + # overwrite some of them when testing with obscure command lines. + # This happens at least with the AIX C compiler. + : > sub/conftest.c + for i in 1 2 3 4 5 6; do + echo '#include "conftst'$i'.h"' >> sub/conftest.c + # Using `: > sub/conftst$i.h' creates only sub/conftst1.h with + # Solaris 8's {/usr,}/bin/sh. + touch sub/conftst$i.h + done + echo "${am__include} ${am__quote}sub/conftest.Po${am__quote}" > confmf + + case $depmode in + nosideeffect) + # after this tag, mechanisms are not by side-effect, so they'll + # only be used when explicitly requested + if test "x$enable_dependency_tracking" = xyes; then + continue + else + break + fi + ;; + none) break ;; + esac + # We check with `-c' and `-o' for the sake of the "dashmstdout" + # mode. It turns out that the SunPro C++ compiler does not properly + # handle `-M -o', and we need to detect this. + if depmode=$depmode \ + source=sub/conftest.c object=sub/conftest.${OBJEXT-o} \ + depfile=sub/conftest.Po tmpdepfile=sub/conftest.TPo \ + $SHELL ./depcomp $depcc -c -o sub/conftest.${OBJEXT-o} sub/conftest.c \ + >/dev/null 2>conftest.err && + grep sub/conftst1.h sub/conftest.Po > /dev/null 2>&1 && + grep sub/conftst6.h sub/conftest.Po > /dev/null 2>&1 && + grep sub/conftest.${OBJEXT-o} sub/conftest.Po > /dev/null 2>&1 && + ${MAKE-make} -s -f confmf > /dev/null 2>&1; then + # icc doesn't choke on unknown options, it will just issue warnings + # or remarks (even with -Werror). So we grep stderr for any message + # that says an option was ignored or not supported. + # When given -MP, icc 7.0 and 7.1 complain thusly: + # icc: Command line warning: ignoring option '-M'; no argument required + # The diagnosis changed in icc 8.0: + # icc: Command line remark: option '-MP' not supported + if (grep 'ignoring option' conftest.err || + grep 'not supported' conftest.err) >/dev/null 2>&1; then :; else + am_cv_$1_dependencies_compiler_type=$depmode + break + fi + fi + done + + cd .. + rm -rf conftest.dir +else + am_cv_$1_dependencies_compiler_type=none +fi +]) +AC_SUBST([$1DEPMODE], [depmode=$am_cv_$1_dependencies_compiler_type]) +AM_CONDITIONAL([am__fastdep$1], [ + test "x$enable_dependency_tracking" != xno \ + && test "$am_cv_$1_dependencies_compiler_type" = gcc3]) +]) + + +# AM_SET_DEPDIR +# ------------- +# Choose a directory name for dependency files. +# This macro is AC_REQUIREd in _AM_DEPENDENCIES +AC_DEFUN([AM_SET_DEPDIR], +[AC_REQUIRE([AM_SET_LEADING_DOT])dnl +AC_SUBST([DEPDIR], ["${am__leading_dot}deps"])dnl +]) + + +# AM_DEP_TRACK +# ------------ +AC_DEFUN([AM_DEP_TRACK], +[AC_ARG_ENABLE(dependency-tracking, +[ --disable-dependency-tracking speeds up one-time build + --enable-dependency-tracking do not reject slow dependency extractors]) +if test "x$enable_dependency_tracking" != xno; then + am_depcomp="$ac_aux_dir/depcomp" + AMDEPBACKSLASH='\' +fi +AM_CONDITIONAL([AMDEP], [test "x$enable_dependency_tracking" != xno]) +AC_SUBST([AMDEPBACKSLASH])dnl +_AM_SUBST_NOTMAKE([AMDEPBACKSLASH])dnl +]) + +# Generate code to set up dependency tracking. -*- Autoconf -*- + +# Copyright (C) 1999, 2000, 2001, 2002, 2003, 2004, 2005 +# Free Software Foundation, Inc. +# +# This file is free software; the Free Software Foundation +# gives unlimited permission to copy and/or distribute it, +# with or without modifications, as long as this notice is preserved. + +#serial 3 + +# _AM_OUTPUT_DEPENDENCY_COMMANDS +# ------------------------------ +AC_DEFUN([_AM_OUTPUT_DEPENDENCY_COMMANDS], +[for mf in $CONFIG_FILES; do + # Strip MF so we end up with the name of the file. + mf=`echo "$mf" | sed -e 's/:.*$//'` + # Check whether this is an Automake generated Makefile or not. + # We used to match only the files named `Makefile.in', but + # some people rename them; so instead we look at the file content. + # Grep'ing the first line is not enough: some people post-process + # each Makefile.in and add a new line on top of each file to say so. + # Grep'ing the whole file is not good either: AIX grep has a line + # limit of 2048, but all sed's we know have understand at least 4000. + if sed -n 's,^#.*generated by automake.*,X,p' "$mf" | grep X >/dev/null 2>&1; then + dirpart=`AS_DIRNAME("$mf")` + else + continue + fi + # Extract the definition of DEPDIR, am__include, and am__quote + # from the Makefile without running `make'. + DEPDIR=`sed -n 's/^DEPDIR = //p' < "$mf"` + test -z "$DEPDIR" && continue + am__include=`sed -n 's/^am__include = //p' < "$mf"` + test -z "am__include" && continue + am__quote=`sed -n 's/^am__quote = //p' < "$mf"` + # When using ansi2knr, U may be empty or an underscore; expand it + U=`sed -n 's/^U = //p' < "$mf"` + # Find all dependency output files, they are included files with + # $(DEPDIR) in their names. We invoke sed twice because it is the + # simplest approach to changing $(DEPDIR) to its actual value in the + # expansion. + for file in `sed -n " + s/^$am__include $am__quote\(.*(DEPDIR).*\)$am__quote"'$/\1/p' <"$mf" | \ + sed -e 's/\$(DEPDIR)/'"$DEPDIR"'/g' -e 's/\$U/'"$U"'/g'`; do + # Make sure the directory exists. + test -f "$dirpart/$file" && continue + fdir=`AS_DIRNAME(["$file"])` + AS_MKDIR_P([$dirpart/$fdir]) + # echo "creating $dirpart/$file" + echo '# dummy' > "$dirpart/$file" + done +done +])# _AM_OUTPUT_DEPENDENCY_COMMANDS + + +# AM_OUTPUT_DEPENDENCY_COMMANDS +# ----------------------------- +# This macro should only be invoked once -- use via AC_REQUIRE. +# +# This code is only required when automatic dependency tracking +# is enabled. FIXME. This creates each `.P' file that we will +# need in order to bootstrap the dependency handling code. +AC_DEFUN([AM_OUTPUT_DEPENDENCY_COMMANDS], +[AC_CONFIG_COMMANDS([depfiles], + [test x"$AMDEP_TRUE" != x"" || _AM_OUTPUT_DEPENDENCY_COMMANDS], + [AMDEP_TRUE="$AMDEP_TRUE" ac_aux_dir="$ac_aux_dir"]) +]) + +# Do all the work for Automake. -*- Autoconf -*- + +# Copyright (C) 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, +# 2005, 2006, 2008 Free Software Foundation, Inc. +# +# This file is free software; the Free Software Foundation +# gives unlimited permission to copy and/or distribute it, +# with or without modifications, as long as this notice is preserved. + +# serial 13 + +# This macro actually does too much. Some checks are only needed if +# your package does certain things. But this isn't really a big deal. + +# AM_INIT_AUTOMAKE(PACKAGE, VERSION, [NO-DEFINE]) +# AM_INIT_AUTOMAKE([OPTIONS]) +# ----------------------------------------------- +# The call with PACKAGE and VERSION arguments is the old style +# call (pre autoconf-2.50), which is being phased out. PACKAGE +# and VERSION should now be passed to AC_INIT and removed from +# the call to AM_INIT_AUTOMAKE. +# We support both call styles for the transition. After +# the next Automake release, Autoconf can make the AC_INIT +# arguments mandatory, and then we can depend on a new Autoconf +# release and drop the old call support. +AC_DEFUN([AM_INIT_AUTOMAKE], +[AC_PREREQ([2.60])dnl +dnl Autoconf wants to disallow AM_ names. We explicitly allow +dnl the ones we care about. +m4_pattern_allow([^AM_[A-Z]+FLAGS$])dnl +AC_REQUIRE([AM_SET_CURRENT_AUTOMAKE_VERSION])dnl +AC_REQUIRE([AC_PROG_INSTALL])dnl +if test "`cd $srcdir && pwd`" != "`pwd`"; then + # Use -I$(srcdir) only when $(srcdir) != ., so that make's output + # is not polluted with repeated "-I." + AC_SUBST([am__isrc], [' -I$(srcdir)'])_AM_SUBST_NOTMAKE([am__isrc])dnl + # test to see if srcdir already configured + if test -f $srcdir/config.status; then + AC_MSG_ERROR([source directory already configured; run "make distclean" there first]) + fi +fi + +# test whether we have cygpath +if test -z "$CYGPATH_W"; then + if (cygpath --version) >/dev/null 2>/dev/null; then + CYGPATH_W='cygpath -w' + else + CYGPATH_W=echo + fi +fi +AC_SUBST([CYGPATH_W]) + +# Define the identity of the package. +dnl Distinguish between old-style and new-style calls. +m4_ifval([$2], +[m4_ifval([$3], [_AM_SET_OPTION([no-define])])dnl + AC_SUBST([PACKAGE], [$1])dnl + AC_SUBST([VERSION], [$2])], +[_AM_SET_OPTIONS([$1])dnl +dnl Diagnose old-style AC_INIT with new-style AM_AUTOMAKE_INIT. +m4_if(m4_ifdef([AC_PACKAGE_NAME], 1)m4_ifdef([AC_PACKAGE_VERSION], 1), 11,, + [m4_fatal([AC_INIT should be called with package and version arguments])])dnl + AC_SUBST([PACKAGE], ['AC_PACKAGE_TARNAME'])dnl + AC_SUBST([VERSION], ['AC_PACKAGE_VERSION'])])dnl + +_AM_IF_OPTION([no-define],, +[AC_DEFINE_UNQUOTED(PACKAGE, "$PACKAGE", [Name of package]) + AC_DEFINE_UNQUOTED(VERSION, "$VERSION", [Version number of package])])dnl + +# Some tools Automake needs. +AC_REQUIRE([AM_SANITY_CHECK])dnl +AC_REQUIRE([AC_ARG_PROGRAM])dnl +AM_MISSING_PROG(ACLOCAL, aclocal-${am__api_version}) +AM_MISSING_PROG(AUTOCONF, autoconf) +AM_MISSING_PROG(AUTOMAKE, automake-${am__api_version}) +AM_MISSING_PROG(AUTOHEADER, autoheader) +AM_MISSING_PROG(MAKEINFO, makeinfo) +AM_PROG_INSTALL_SH +AM_PROG_INSTALL_STRIP +AC_REQUIRE([AM_PROG_MKDIR_P])dnl +# We need awk for the "check" target. The system "awk" is bad on +# some platforms. +AC_REQUIRE([AC_PROG_AWK])dnl +AC_REQUIRE([AC_PROG_MAKE_SET])dnl +AC_REQUIRE([AM_SET_LEADING_DOT])dnl +_AM_IF_OPTION([tar-ustar], [_AM_PROG_TAR([ustar])], + [_AM_IF_OPTION([tar-pax], [_AM_PROG_TAR([pax])], + [_AM_PROG_TAR([v7])])]) +_AM_IF_OPTION([no-dependencies],, +[AC_PROVIDE_IFELSE([AC_PROG_CC], + [_AM_DEPENDENCIES(CC)], + [define([AC_PROG_CC], + defn([AC_PROG_CC])[_AM_DEPENDENCIES(CC)])])dnl +AC_PROVIDE_IFELSE([AC_PROG_CXX], + [_AM_DEPENDENCIES(CXX)], + [define([AC_PROG_CXX], + defn([AC_PROG_CXX])[_AM_DEPENDENCIES(CXX)])])dnl +AC_PROVIDE_IFELSE([AC_PROG_OBJC], + [_AM_DEPENDENCIES(OBJC)], + [define([AC_PROG_OBJC], + defn([AC_PROG_OBJC])[_AM_DEPENDENCIES(OBJC)])])dnl +]) +]) + + +# When config.status generates a header, we must update the stamp-h file. +# This file resides in the same directory as the config header +# that is generated. The stamp files are numbered to have different names. + +# Autoconf calls _AC_AM_CONFIG_HEADER_HOOK (when defined) in the +# loop where config.status creates the headers, so we can generate +# our stamp files there. +AC_DEFUN([_AC_AM_CONFIG_HEADER_HOOK], +[# Compute $1's index in $config_headers. +_am_arg=$1 +_am_stamp_count=1 +for _am_header in $config_headers :; do + case $_am_header in + $_am_arg | $_am_arg:* ) + break ;; + * ) + _am_stamp_count=`expr $_am_stamp_count + 1` ;; + esac +done +echo "timestamp for $_am_arg" >`AS_DIRNAME(["$_am_arg"])`/stamp-h[]$_am_stamp_count]) + +# Copyright (C) 2001, 2003, 2005 Free Software Foundation, Inc. +# +# This file is free software; the Free Software Foundation +# gives unlimited permission to copy and/or distribute it, +# with or without modifications, as long as this notice is preserved. + +# AM_PROG_INSTALL_SH +# ------------------ +# Define $install_sh. +AC_DEFUN([AM_PROG_INSTALL_SH], +[AC_REQUIRE([AM_AUX_DIR_EXPAND])dnl +install_sh=${install_sh-"\$(SHELL) $am_aux_dir/install-sh"} +AC_SUBST(install_sh)]) + +# Copyright (C) 2003, 2005 Free Software Foundation, Inc. +# +# This file is free software; the Free Software Foundation +# gives unlimited permission to copy and/or distribute it, +# with or without modifications, as long as this notice is preserved. + +# serial 2 + +# Check whether the underlying file-system supports filenames +# with a leading dot. For instance MS-DOS doesn't. +AC_DEFUN([AM_SET_LEADING_DOT], +[rm -rf .tst 2>/dev/null +mkdir .tst 2>/dev/null +if test -d .tst; then + am__leading_dot=. +else + am__leading_dot=_ +fi +rmdir .tst 2>/dev/null +AC_SUBST([am__leading_dot])]) + +# Add --enable-maintainer-mode option to configure. -*- Autoconf -*- +# From Jim Meyering + +# Copyright (C) 1996, 1998, 2000, 2001, 2002, 2003, 2004, 2005 +# Free Software Foundation, Inc. +# +# This file is free software; the Free Software Foundation +# gives unlimited permission to copy and/or distribute it, +# with or without modifications, as long as this notice is preserved. + +# serial 4 + +AC_DEFUN([AM_MAINTAINER_MODE], +[AC_MSG_CHECKING([whether to enable maintainer-specific portions of Makefiles]) + dnl maintainer-mode is disabled by default + AC_ARG_ENABLE(maintainer-mode, +[ --enable-maintainer-mode enable make rules and dependencies not useful + (and sometimes confusing) to the casual installer], + USE_MAINTAINER_MODE=$enableval, + USE_MAINTAINER_MODE=no) + AC_MSG_RESULT([$USE_MAINTAINER_MODE]) + AM_CONDITIONAL(MAINTAINER_MODE, [test $USE_MAINTAINER_MODE = yes]) + MAINT=$MAINTAINER_MODE_TRUE + AC_SUBST(MAINT)dnl +] +) + +AU_DEFUN([jm_MAINTAINER_MODE], [AM_MAINTAINER_MODE]) + +# Check to see how 'make' treats includes. -*- Autoconf -*- + +# Copyright (C) 2001, 2002, 2003, 2005 Free Software Foundation, Inc. +# +# This file is free software; the Free Software Foundation +# gives unlimited permission to copy and/or distribute it, +# with or without modifications, as long as this notice is preserved. + +# serial 3 + +# AM_MAKE_INCLUDE() +# ----------------- +# Check to see how make treats includes. +AC_DEFUN([AM_MAKE_INCLUDE], +[am_make=${MAKE-make} +cat > confinc << 'END' +am__doit: + @echo done +.PHONY: am__doit +END +# If we don't find an include directive, just comment out the code. +AC_MSG_CHECKING([for style of include used by $am_make]) +am__include="#" +am__quote= +_am_result=none +# First try GNU make style include. +echo "include confinc" > confmf +# We grep out `Entering directory' and `Leaving directory' +# messages which can occur if `w' ends up in MAKEFLAGS. +# In particular we don't look at `^make:' because GNU make might +# be invoked under some other name (usually "gmake"), in which +# case it prints its new name instead of `make'. +if test "`$am_make -s -f confmf 2> /dev/null | grep -v 'ing directory'`" = "done"; then + am__include=include + am__quote= + _am_result=GNU +fi +# Now try BSD make style include. +if test "$am__include" = "#"; then + echo '.include "confinc"' > confmf + if test "`$am_make -s -f confmf 2> /dev/null`" = "done"; then + am__include=.include + am__quote="\"" + _am_result=BSD + fi +fi +AC_SUBST([am__include]) +AC_SUBST([am__quote]) +AC_MSG_RESULT([$_am_result]) +rm -f confinc confmf +]) + +# Fake the existence of programs that GNU maintainers use. -*- Autoconf -*- + +# Copyright (C) 1997, 1999, 2000, 2001, 2003, 2004, 2005 +# Free Software Foundation, Inc. +# +# This file is free software; the Free Software Foundation +# gives unlimited permission to copy and/or distribute it, +# with or without modifications, as long as this notice is preserved. + +# serial 5 + +# AM_MISSING_PROG(NAME, PROGRAM) +# ------------------------------ +AC_DEFUN([AM_MISSING_PROG], +[AC_REQUIRE([AM_MISSING_HAS_RUN]) +$1=${$1-"${am_missing_run}$2"} +AC_SUBST($1)]) + + +# AM_MISSING_HAS_RUN +# ------------------ +# Define MISSING if not defined so far and test if it supports --run. +# If it does, set am_missing_run to use it, otherwise, to nothing. +AC_DEFUN([AM_MISSING_HAS_RUN], +[AC_REQUIRE([AM_AUX_DIR_EXPAND])dnl +AC_REQUIRE_AUX_FILE([missing])dnl +test x"${MISSING+set}" = xset || MISSING="\${SHELL} $am_aux_dir/missing" +# Use eval to expand $SHELL +if eval "$MISSING --run true"; then + am_missing_run="$MISSING --run " +else + am_missing_run= + AC_MSG_WARN([`missing' script is too old or missing]) +fi +]) + +# Copyright (C) 2003, 2004, 2005, 2006 Free Software Foundation, Inc. +# +# This file is free software; the Free Software Foundation +# gives unlimited permission to copy and/or distribute it, +# with or without modifications, as long as this notice is preserved. + +# AM_PROG_MKDIR_P +# --------------- +# Check for `mkdir -p'. +AC_DEFUN([AM_PROG_MKDIR_P], +[AC_PREREQ([2.60])dnl +AC_REQUIRE([AC_PROG_MKDIR_P])dnl +dnl Automake 1.8 to 1.9.6 used to define mkdir_p. We now use MKDIR_P, +dnl while keeping a definition of mkdir_p for backward compatibility. +dnl @MKDIR_P@ is magic: AC_OUTPUT adjusts its value for each Makefile. +dnl However we cannot define mkdir_p as $(MKDIR_P) for the sake of +dnl Makefile.ins that do not define MKDIR_P, so we do our own +dnl adjustment using top_builddir (which is defined more often than +dnl MKDIR_P). +AC_SUBST([mkdir_p], ["$MKDIR_P"])dnl +case $mkdir_p in + [[\\/$]]* | ?:[[\\/]]*) ;; + */*) mkdir_p="\$(top_builddir)/$mkdir_p" ;; +esac +]) + +# Helper functions for option handling. -*- Autoconf -*- + +# Copyright (C) 2001, 2002, 2003, 2005 Free Software Foundation, Inc. +# +# This file is free software; the Free Software Foundation +# gives unlimited permission to copy and/or distribute it, +# with or without modifications, as long as this notice is preserved. + +# serial 3 + +# _AM_MANGLE_OPTION(NAME) +# ----------------------- +AC_DEFUN([_AM_MANGLE_OPTION], +[[_AM_OPTION_]m4_bpatsubst($1, [[^a-zA-Z0-9_]], [_])]) + +# _AM_SET_OPTION(NAME) +# ------------------------------ +# Set option NAME. Presently that only means defining a flag for this option. +AC_DEFUN([_AM_SET_OPTION], +[m4_define(_AM_MANGLE_OPTION([$1]), 1)]) + +# _AM_SET_OPTIONS(OPTIONS) +# ---------------------------------- +# OPTIONS is a space-separated list of Automake options. +AC_DEFUN([_AM_SET_OPTIONS], +[AC_FOREACH([_AM_Option], [$1], [_AM_SET_OPTION(_AM_Option)])]) + +# _AM_IF_OPTION(OPTION, IF-SET, [IF-NOT-SET]) +# ------------------------------------------- +# Execute IF-SET if OPTION is set, IF-NOT-SET otherwise. +AC_DEFUN([_AM_IF_OPTION], +[m4_ifset(_AM_MANGLE_OPTION([$1]), [$2], [$3])]) + +# Check to make sure that the build environment is sane. -*- Autoconf -*- + +# Copyright (C) 1996, 1997, 2000, 2001, 2003, 2005 +# Free Software Foundation, Inc. +# +# This file is free software; the Free Software Foundation +# gives unlimited permission to copy and/or distribute it, +# with or without modifications, as long as this notice is preserved. + +# serial 4 + +# AM_SANITY_CHECK +# --------------- +AC_DEFUN([AM_SANITY_CHECK], +[AC_MSG_CHECKING([whether build environment is sane]) +# Just in case +sleep 1 +echo timestamp > conftest.file +# Do `set' in a subshell so we don't clobber the current shell's +# arguments. Must try -L first in case configure is actually a +# symlink; some systems play weird games with the mod time of symlinks +# (eg FreeBSD returns the mod time of the symlink's containing +# directory). +if ( + set X `ls -Lt $srcdir/configure conftest.file 2> /dev/null` + if test "$[*]" = "X"; then + # -L didn't work. + set X `ls -t $srcdir/configure conftest.file` + fi + rm -f conftest.file + if test "$[*]" != "X $srcdir/configure conftest.file" \ + && test "$[*]" != "X conftest.file $srcdir/configure"; then + + # If neither matched, then we have a broken ls. This can happen + # if, for instance, CONFIG_SHELL is bash and it inherits a + # broken ls alias from the environment. This has actually + # happened. Such a system could not be considered "sane". + AC_MSG_ERROR([ls -t appears to fail. Make sure there is not a broken +alias in your environment]) + fi + + test "$[2]" = conftest.file + ) +then + # Ok. + : +else + AC_MSG_ERROR([newly created file is older than distributed files! +Check your system clock]) +fi +AC_MSG_RESULT(yes)]) + +# Copyright (C) 2001, 2003, 2005 Free Software Foundation, Inc. +# +# This file is free software; the Free Software Foundation +# gives unlimited permission to copy and/or distribute it, +# with or without modifications, as long as this notice is preserved. + +# AM_PROG_INSTALL_STRIP +# --------------------- +# One issue with vendor `install' (even GNU) is that you can't +# specify the program used to strip binaries. This is especially +# annoying in cross-compiling environments, where the build's strip +# is unlikely to handle the host's binaries. +# Fortunately install-sh will honor a STRIPPROG variable, so we +# always use install-sh in `make install-strip', and initialize +# STRIPPROG with the value of the STRIP variable (set by the user). +AC_DEFUN([AM_PROG_INSTALL_STRIP], +[AC_REQUIRE([AM_PROG_INSTALL_SH])dnl +# Installed binaries are usually stripped using `strip' when the user +# run `make install-strip'. However `strip' might not be the right +# tool to use in cross-compilation environments, therefore Automake +# will honor the `STRIP' environment variable to overrule this program. +dnl Don't test for $cross_compiling = yes, because it might be `maybe'. +if test "$cross_compiling" != no; then + AC_CHECK_TOOL([STRIP], [strip], :) +fi +INSTALL_STRIP_PROGRAM="\$(install_sh) -c -s" +AC_SUBST([INSTALL_STRIP_PROGRAM])]) + +# Copyright (C) 2006 Free Software Foundation, Inc. +# +# This file is free software; the Free Software Foundation +# gives unlimited permission to copy and/or distribute it, +# with or without modifications, as long as this notice is preserved. + +# _AM_SUBST_NOTMAKE(VARIABLE) +# --------------------------- +# Prevent Automake from outputting VARIABLE = @VARIABLE@ in Makefile.in. +# This macro is traced by Automake. +AC_DEFUN([_AM_SUBST_NOTMAKE]) + +# Check how to create a tarball. -*- Autoconf -*- + +# Copyright (C) 2004, 2005 Free Software Foundation, Inc. +# +# This file is free software; the Free Software Foundation +# gives unlimited permission to copy and/or distribute it, +# with or without modifications, as long as this notice is preserved. + +# serial 2 + +# _AM_PROG_TAR(FORMAT) +# -------------------- +# Check how to create a tarball in format FORMAT. +# FORMAT should be one of `v7', `ustar', or `pax'. +# +# Substitute a variable $(am__tar) that is a command +# writing to stdout a FORMAT-tarball containing the directory +# $tardir. +# tardir=directory && $(am__tar) > result.tar +# +# Substitute a variable $(am__untar) that extract such +# a tarball read from stdin. +# $(am__untar) < result.tar +AC_DEFUN([_AM_PROG_TAR], +[# Always define AMTAR for backward compatibility. +AM_MISSING_PROG([AMTAR], [tar]) +m4_if([$1], [v7], + [am__tar='${AMTAR} chof - "$$tardir"'; am__untar='${AMTAR} xf -'], + [m4_case([$1], [ustar],, [pax],, + [m4_fatal([Unknown tar format])]) +AC_MSG_CHECKING([how to create a $1 tar archive]) +# Loop over all known methods to create a tar archive until one works. +_am_tools='gnutar m4_if([$1], [ustar], [plaintar]) pax cpio none' +_am_tools=${am_cv_prog_tar_$1-$_am_tools} +# Do not fold the above two line into one, because Tru64 sh and +# Solaris sh will not grok spaces in the rhs of `-'. +for _am_tool in $_am_tools +do + case $_am_tool in + gnutar) + for _am_tar in tar gnutar gtar; + do + AM_RUN_LOG([$_am_tar --version]) && break + done + am__tar="$_am_tar --format=m4_if([$1], [pax], [posix], [$1]) -chf - "'"$$tardir"' + am__tar_="$_am_tar --format=m4_if([$1], [pax], [posix], [$1]) -chf - "'"$tardir"' + am__untar="$_am_tar -xf -" + ;; + plaintar) + # Must skip GNU tar: if it does not support --format= it doesn't create + # ustar tarball either. + (tar --version) >/dev/null 2>&1 && continue + am__tar='tar chf - "$$tardir"' + am__tar_='tar chf - "$tardir"' + am__untar='tar xf -' + ;; + pax) + am__tar='pax -L -x $1 -w "$$tardir"' + am__tar_='pax -L -x $1 -w "$tardir"' + am__untar='pax -r' + ;; + cpio) + am__tar='find "$$tardir" -print | cpio -o -H $1 -L' + am__tar_='find "$tardir" -print | cpio -o -H $1 -L' + am__untar='cpio -i -H $1 -d' + ;; + none) + am__tar=false + am__tar_=false + am__untar=false + ;; + esac + + # If the value was cached, stop now. We just wanted to have am__tar + # and am__untar set. + test -n "${am_cv_prog_tar_$1}" && break + + # tar/untar a dummy directory, and stop if the command works + rm -rf conftest.dir + mkdir conftest.dir + echo GrepMe > conftest.dir/file + AM_RUN_LOG([tardir=conftest.dir && eval $am__tar_ >conftest.tar]) + rm -rf conftest.dir + if test -s conftest.tar; then + AM_RUN_LOG([$am__untar /dev/null 2>&1 && break + fi +done +rm -rf conftest.dir + +AC_CACHE_VAL([am_cv_prog_tar_$1], [am_cv_prog_tar_$1=$_am_tool]) +AC_MSG_RESULT([$am_cv_prog_tar_$1])]) +AC_SUBST([am__tar]) +AC_SUBST([am__untar]) +]) # _AM_PROG_TAR + diff --git a/bind/Makefile b/bind/Makefile new file mode 100644 index 0000000..030759c --- /dev/null +++ b/bind/Makefile @@ -0,0 +1,75 @@ +# +# Copyright (C) 2009-2010 by Internet Systems Consortium, Inc. ("ISC") +# +# Permission to use, copy, modify, and/or distribute this software for any +# purpose with or without fee is hereby granted, provided that the above +# copyright notice and this permission notice appear in all copies. +# +# THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH +# REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY +# AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT, +# INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM +# LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE +# OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR +# PERFORMANCE OF THIS SOFTWARE. + +# $Id: Makefile.bind,v 1.2.2.7 2011-04-06 22:00:40 marka Exp $ + +# Configure and build the bind libraries for use by DHCP + +include ./version.tmp +version=${MAJORVER}.${MINORVER}.${PATCHVER}${RELEASETYPE}${RELEASEVER} + +# bindvar.tmp is constructed by configure, it has the paths for +# if GMAKE is blank the shell script couldn't find a gmake to use. +# binddir= +# GMAKE= +include ./bindvar.tmp + +bindsrcdir=bind-${version} + +all: +# Extract the source from the tarball, if it hasn't been already. + @if test -d ${bindsrcdir} ; then \ + echo ${bindsrcdir} already unpacked... ; \ + else \ + gunzip -c bind.tar.gz | tar xf - ; \ + fi + + @if test -z "${GMAKE}"; then \ + echo "unable to find gmake" 1>&2 ; \ + exit 1; \ + fi + +# Configure the export libraries +# Currently disable the epoll and devpoll options as they don't interact +# well with the DHCP code. + @echo Configuring BIND Export libraries for DHCP. + @(cd ${bindsrcdir} && ./configure --disable-kqueue --disable-epoll --disable-devpoll --without-openssl --without-libxml2 --enable-exportlib --enable-threads=no --with-export-includedir=${binddir}/include --with-export-libdir=${binddir}/lib --with-gssapi=no > ${binddir}/configure.log) + +# Build the export libraries + @echo Building BIND Export libraries - this takes some time. + @(cd ${bindsrcdir}/lib/export ; \ + echo building in `pwd` ; \ + MAKE=${GMAKE} ${GMAKE} > ${binddir}/build.log) + + @echo Installing BIND Export libraries to ${binddir}. + @(cd ${bindsrcdir}/lib/export ; \ + MAKE=${GMAKE} ${GMAKE} install > ${binddir}/install.log) + +clean: + @echo Cleaning BIND export library. + rm -rf ${bindsrcdir} ./lib ./include ./configure.log ./build.log \ + ./install.log + +# Include the following so that this Makefile is happy when the parent +# tries to use them. + +distdir: + +distclean: + +install: + +check: + diff --git a/bind/bind.tar.gz b/bind/bind.tar.gz new file mode 100644 index 0000000000000000000000000000000000000000..0a16b06cdc003bbeae8e9cd7d7fa6feab58b1d0a GIT binary patch literal 8462564 zcmV(tKpaXCjCUJe+)a@R~$x^11lkXe(i$SMx(DhPvuyB z|3$9hmi?(^`QFGG7bf462I!+!sk~=@S(3|ju)i!#>TCnqO)z*64C;*X*^JA?o41Ot63rkzy?diI)h5|h4EViElui@A8>9&zEk$b^L}|4Mysj%9Q&SCc ztC^RGNmnlvy-Cb2-~>c#q@6~q-_$x60#IxBS{k6=K+ruWZB=hv!cXN)YiZ^^qC>jp zn%PkeqX35LkWQDVH)_Wu#-%_6Je{eer734Em7I5VfVd|{Pi<&Q>j>D@)rNV5n6ys% zgTPCTZpTos`+x^tBTc2PTp$YxboTT1QZbD#P}4ywqu(--`*Xe9Ms%&NA$aZ^Dv(i3 z1))K0z^riupem?TM}`&n(=fGe2j2#|rmi3p9rdE6U8tRgir4_QD*(){4)6Aj6y}I1 zx@I8VZr?-%U4awObkqbX>Rp%*7=fq4RaG4n(N+LAf^69V4PMOUiU;Ixnte*v+4X2f zIGSg`i3hIT5jamf#peSUMi0I@e`(K|C+! z{%&@Ae;1^Q%|?#L2)KDuZIG^Uj#QaPhrmXqP&qT2B#f5uBcubDc_fU303sV%{}6is zO$J7{@kwbm^+8MRY$0_qnTf$Frknzobj9r)N3S{%8fcOw2NEiHT?R0&^jiEzUM4%MaFUI z46@4$H2sctho0~zK2W3KyObj;U+8{~9&XHi{`6ARkWC>^Io77ogI?Fr?p9(OY8!*R zVZ7wM<#_SJOc4Q1$W7n`FF9^$o&H^d>J>{ zI%WS03})->zN56&muM^+fu_Q5U}z}jg=)SM03e+awQY{@Yys6HdKsN{4c}p|QR5mgLTMBNlFu=WHa=$QnNhASF<$OsedJb9i4f)ImLw)U> z5s$5ipnQ%u^4}2Z8!eI6Ftj2DMH$Q}s)0c! z{+vuPTV`Q4XJjf0{T!kV0eI{s$vow!0p)Nb;!JS(Mqk&V!rZ?UOzX{RS&oK&1+8gs zV7i519caCq+Do{R>swElu)pC7=Pk&n=UVGkq<}%KLF^$KW`6?-7`D;xASSh$;4vo9 zBgFw|fP0XFLTrQJP8h@yjTe|a!pL@f@NGzAkob$B$AGhZr66x0H!k~Tzc(;?eN*Y* zI~as0#>X66V22359nTfAc;aC~c~AVZj>t9?IT!@{A9Ej=2Myv^B@m4o za99!5dPfIsAnb>0RV2%irLEA<*{Vw+Gh7M+e}TN9n(u@wZqV zaeqq2mPPWn77e5PmzcU+{K^&JOZ-!8tU9ZJ3p|dW-`$V;rK!nX&`HPa2gbB*@Tl-6b@>P_4X} zM%WrB#uUZwiLrnr-B66h6U0qA?CF#t#F(I|FwrI=rkzwO?>}=pGdjS*Ey{gJ#8}T;dmx#0c zNu!7lu);>vdJ3KAZ>66s2`Z+kV;V6`rSZwo9$uxREdt@cNWl0CfmMCZ$`B?g)K>#M zZ^$WM7G51Md#tl}#*Iwm=wYtH&_Nii8F2n`rcfQ(&5ph|<%@9{wBN z8$iNA1rL(Mv%kqMjB;D8_`rO@aaIbk4=1Zi*8t|QZ86pMdu{jTJGuYw<&7WLH?EiK zf6y&Zw=k`IPa0oe|AVVsCQ@CNDz$p4oUZ@Lr622mf5sK28ELOjgd`dHJ{o`D_T1c$ z*!_37w&P!kMmTYNXByv%f4PkNKh<(cs+BAC3dX-&ssD)oKjUgZgAN^c-h_VQ6j!ZX z#}eIo@h(rJ5&lJw_(-7B$Mx-Bcjet&4rZp{6sBmHOv2cS81%&GNGG{m1ot74{74>u zk!w5t;nyFq2mF8A|1ClMmn)_EkNw|2<9cO(yYR%8;diC+jr?D!ma3Tlp#iMcYhwSu z0%hPw{{J(sY;S61d9gKBCnZUi^Ah|ii=CL36q0t|FvZGrwi0F&=7wyJo6;ZC<({SBdi@5V!pBF+v$^BCVrdz$aAx^q4+ef4 z_qnsh0o-q~3%L)O!7@v1YYAzrw!V>7AUI>5!#s0HVaTlfY^`=0 zNB+lM@E1U^LCz2GX@~}R18cK&vqB1R8CrK`*90p--=@a|0348{SV7BT>6k@FsdEU| z7wb&fcC2vXvFG!();D%)J6)5o1?VD5qGTvmad>`h-<7Gt6uU5g>h4qoz!mjk%9kQY zaie}D91C71BkH)gzzP^}%hUmNJ)`pgv=zA^H$=mfE|YaK;KMRHOZ3rk1QqUDkX=8{A$K@%CU14?;m<1H;9AQyB4>6}p)FknT7?tR6xY~_j z1}sdXCTZ-R%u8w>LlAx4FB z+blvw6>=oKKA>UL)5KP&NL-OzIW!eJo zWcN%};Obqr<6_nKp1G>lpJg_lPR7OCUROGNjQt0GTW0aC>Q&l{W{+u0fN z$@Q$tJLQu8DQZ98)!L7B>Ct{>oo40k$-Au{+ul{D*I0PRhmXpITRMMeeL9W~0aT8^ zRBjJFPbq)tmJXY(!>8I=vodA#c5A5JpU;`pyQr5JzWi}HG48{+pG$p%jsR^ zOe^}=hnDiGDis&AtC=L7^U?9sycSz+bAIlQd+hMhyIAyk>hw~HSh24^0qA|L^e}pA z`DcpKY+YWTXxu18e5tVdba?h~V|C{m>lgKTajGwhv-!N;Fvp#t-v-d@Pf_2Vb?%z{ z{;FwQKFq`N!qM-}Wqou=-IMLL=6DbqmMOsE96QTa5@mjAMs zy-IgqakIC4>zM2+b8s#?Rxe_HI3HC>NA~m^~00f(g}+fldH+iO{=@S9vbSc z)IA(tLPd>WsWmtJF5H z^rwY?hi*A)(muQCUB~z8WL&Oy9&VMZ>ysO=ebZd@iZ_?7%1NzVyna|bJ&vkHbrf4c zX-t~{dRNnpTH`M8?`y}caMrtd)TIYw{`@S{KzW{ZPHgvCov^#Q*0?%5i(;jAQEpua z&j5N`ophDb$F1R)^O_yr)SCX;_47D(rSL+tF1q(_9i+AIMi13GG!O>* z79^GU&Q7$Bi`_2>x=;@L zPqH(4mVO1_`u*cyY53jl|M5WBg=&0f8ei-Gd>ZX!&`k0RsS(cqn}_?%v|D3eKXKdqmd_?Sf$P zgcc?AEoapXLV)ae(Cp%gj-+9?aF_Im03{o99W+7M6+ph@nCS3*>|&r5Dv*EZCizgR zRZpbPkh52;zTk8HfLpI*kSj9CFpS5acXkYDU$CDI0}#lML$WJ+cc2Vu6SroeS+yqA zgZ^TdOrdLqq!1!QFJvNY8br&ahtHU-O7)Y^NUwanqNmt4$KH3!rarW5z}HhKh6`vc z^ZqCgihxnT4_MMxhcE^)p@47_Cxt*{cw+l=Z$+mhO9`DC&=~>42_d4NH;8;9AA4-`muFfb;3wyLyXOqJlj(IMLf@o=lSH6-!BN3G{YG~m6OCeJ3AdeVyEOa z5SgY22X>b%gq9r#q2x7$5++Da`z8JG>X6L#9D$`alQDzKKvqRmbfHjHIr|brZ;OWs zM87*^2m&`?Diw%FafAmCQfI-&5;R%`jpB|hX!M*jc4jnB#VI_>{TQq^*~hubV&YIq0jXr|MB0Up0MjtEML%JUo#L06@nt^X1^Dsb0smF59+#y$ z0%rQGrUtI897&tvY?jP2)PiuN))K9mwh4I51l942IM9eY*20M*@Tw3G3#O)$Yf^bT zkcQ<~;ZiQIs5V3>kPl^9u8=v!Imhy+fy<&*XjZEAdcrIYBIF-YjMP78T}sAx2xA`| zIxb`paWK`zZN}u7hnF}iiD>w=>TX_M5Ftc{teV&yrUY@+1CkIPJvkx}J~&gu2;-#( zCh5DVM$Q7J2iz7HB;f;mZ6!`cstIvQCo3&D}!}%55bjgy~PeNL0v_xi^GoI|@XDpQJ<&$k2m0sDXRNG3+eIaraPfMoh zH91czj)Jgkg2PzA2@HuLWxe+xPVX*YBuq!TRT3sIGH|6{OZ8HHgYw*QZHofc#s&)^ zNsgziiLc55Qcn0tmGMnBHlm|0R})Uw(a{g_#3kWaeo)zX!X)`m0V9`+0s~DBZfl4n z;IT2d-i+lfQOz=LU;7Z};*f>(5uwERD;8SY44$!80@f^WKQ9hG?_~J~$CN4L`gCCdu*X;{vzocWQma)G zEJ=1)iI{|pYYN%L9qYwz9_U6&|lPW7xkhMB?%b8$RBtPs;pd#}pA$nR& z*5O?)Rm%wv>n_R*<3Q*n!Dz=*Y(BX-uZfKkc1KAN3fV;o)-JG{`yb-|{=1Fr$Pz_= z?)fY7!E-Mun;`KGP-XizMN(Cqk|;GnRh2#Cg_Q(A5*7%+NI(>;r~mhNV(*A^A`?)# zr{7)c^{jDGByjTN`H0UQI}kF8Z`a^iZ1(+$zJW;)EUYo+7nUWQzpz;MQ^5~M`-y@h z%)LI7Ig2<8FK{4Ed7YO+U-LjigIS2$1$W4#z|Q`m?bfz}daVDP*+S0(O?w zJ&EQ5uDK-S!^dsO#YW|GMZSe44$r+9r_viIpmw%Kck?-iQ+=n!?A)6P@{rGXFRx6*$8$F!`FW`BR zd?VdV<~_2roA44`U3Big5`#Sr1EpS}QUEONECoHLh(Il5W zXnFA=R4~Z^RBPcp{y6+GJ+nu*tkM7WGjFEAVIr?Yjb?b-a6tY#{IQ4+rF5--wc#6s zZi~Zr_wCL1AEY=$VV)BF4&qS$DPAEXezh3*|K^(3>nhvp56faxOD{$Z-RSIl@|&Qd zMT_dQ5vN=)i=r+59Pvy+)|bv=~YA)Kpl z=BBeRla-*8G(Vx8PaO%SCYbH`zlF+C_Hr zdidkj$B&m6L8>z@2&RZMXFjkGIg8T0$s!NEvayd>94Ijrthc)Wv4>5X8=EHVU5hbhR08z8=1c ztKXm%(Kt=I{0EtxsKVtOc1}1CV#0p$bK325xK317mtR++?ZU0= zb;K@#y3|C1e6qdoy1$)$%{c3m&(n2~T+1S8x>c~DgF2Xn?a}8A+PXk37ZiI~_ zx`^HzZi-*9wp~v*h(fq=nlA2J@x#MLhkwZu zQBC4$$n3$m!I?q@Yw<{@RV@#xEWInlP+Dx}FD{2twy3B+=hKZ8kZ#1{M|( zwY0GB^UqVe7hGVeILNp2O?FT6yZg=_6bp39$f}-p>X7ziq-o@9NPwFfg z{;X&Qil%2dj3}`;>r8DT@jsC1MtThyYq3%nIG4m$FocWxm^)aMgdRwBKVQ36{|EtD zKa>B|7~zfk8Wi1Dq`w`IPM=qPko0546y-rB3WN9niFU{_P4zf2AQPTVW)sYp zK8MWhFTY%Tcz8|)3j}TZHX>@RE76C=*NTPK`X{VFPC*nN?y4Hci-ZnXK-t~Xsryh@|{*pzJ1 z$?*e<05h?^yoVg%+MGxUZN%kXnxAE@`N=X8|6aor=cQa@WYzFD>l>i{T>h1yxGI_e5 zzvxY*HWN@y9JA5tQU~^1)n)B#=AtEEKSBrkOR>D@c}*;7G|#Mr>zG1CPM z;%Br#V88+)*dYm!1DC__AR>hjaN#g5f|woYHe}V2zv(mm7pK}g_4nFRW3d7?$~J&= z#`9d{+6EdlY{2{_9I?HlCN0Pqhg@QXI&Ek3iN$!WAkOT>spvFVyXvyUThQtA7WC5H zn|-}s*JWPy$?QHxYX1Exm!iD?UCi?@)BpG`JsG1;=P*ygdF97W@G;BbMWLt0b)*i`i+)E1PX76_Quzygz+BR{fB< zHl2wad|fss@SbOjcI)_6Tta$yjb0KYOxW^hlGH%tI0S__`OC0+G49D+nHLOg+wCM6 zR?Bb)SL4?-U|tquh%+hCh6AM9d%A#&me|axf zdwAJ9L2oiVu!h?%ON%oqd-U$&>|+{8RcZIM{=Bt4@L6(!}8Q8Fc;7CK=xbiT~-9XXFjpgIt*gK8<7CbrgQ3MyW3aj=mH>s;&w z`Blmi^{Jh^=~mS6@E{oks8rOlXGTr##PP`QH&d#)``J3YE*8*C&SI$tL1JX#U*RB# zTkm#cKohr{wwvoX4NlZbL_+Y1zf4o41Ku@-8$uv<+j+~OgvLIH9G*bSv76-lC)C{L zVbDThf{(MHVCWrVO;wcK3+@S`<0=2jtPb*f06R(oE;#qaOs*F;89Iv@c?|~K2^8`% z-xe`Sy(CT{9Ji@c$F}6Hbe!nLNTD~P4~RnHJn?MC@0xh*CjD@oV)DzoLazEnIekWH zb+_Dv%c7CWm@f~fDE#43VY^c?IODS#YK3=`#t;z}=jX!&vOMADGcZbbkq-LLLXBXi zkpj!&5E^r{_`Q5y-D)eCW^|X31Nqs90pkQa$p{?g8djDsE!Q+L9)ghyqXnUL8P#>%Gd|94#RarT>QX(SQhd}IJf{s_wN7%OB)v&-9n7R~f5JxG z-oCR9kThpX2O-mC_nKb{pG`-&O^Mh^7x{a0zoj?rt(uIUBK){ zqti~;;{9~}kYw8RbR*1AXSZ)v)~>_Wf!*j(v6FLLMFR~tj+?DliqriP#ODgp!*G%m zv=L0G4MuVR-s=B-Dja6s9Qb^5p9~S14h*G*_+Q@~h*0>QasCu;UD$D@rxQ2TT;y-Z z#+R#?WNEY-ddQp=I(x|euvzD&fMq4lEe{h$8SF9PMbiSAFy-VU&0TN~-h{RHG z;Uvu}ad%32=DY|ao5W-hWQ)h$YJiB6eP!aur#Zvic*Pu0>x!Ib*&o9ioUB*B9zXs$ z?NnQRkaj=D=sqzdasJ`sUv93x|KXOG5y@xp{ZVL6!m3ZUIU*WW?!dy*^kTmWZ5{w@~h*t{Wuc!-8?Tf zD1Laig)sX6{7G`nqqB=QqpRzm&fZ;Jy!mwgR?gG{netLU$^{!AKNfi_^iR*k(gduGhTn=Kx~W>VE^)dWjlf&}yYZaUBESJi|*dV&Xd@r;#j&@q8v$V|`^y1TdpygCx)dm&~1!2-p?7bT;13^R9P}X9RKmm-i*xzFL5~h^qgOqvik(A=v-wODs3c8l zLu}b>na~C*2VoB}{$=6{9L=s6b(z2D*~g8N@1z0KLwFay9}dqxUd3JMwdrFvoG4Pp z;n&&E*lkueph6@M0(ptx<3mvhj%~D_K8TK9D-vS49?c{`6zl}yVvgmC3Suk4ET)Su zv-NTT&pp!OCM@Ncv@=BDg;&wsx*Xt5ekYaw^J2-63Pzt=%o4ut`+WRi_>0?-uI`94 zc_P9G!mT&3WlC|oKteXjgA}Hndw9+`_*M%=&lbV;f6i{#v&qABK98aPR=-Qi8HfWraa4&F}iq|q&R?iZqIA0)(BkbGUGrm+X zg6B`uC4i6q zki;o%T@N67EZsf1BmrvQSvLa-9(@K8#ox~J`SgfKNI6~gz*d2?joCCNUzn@W`a z>v$f7iiTz5-y}qAf6?$c6qA(FgbVEQ6FokppB}<1QvZqIv?<|H@@-2G$diKK_VsDr zl2niEFE*cX>WEd#AB4;!U1nlk!n4X{F}KsF@Q5IL#JbZ2+wjBa?EL)lWT4B_Etyww(|Iz?#-eeRjP`JO*SQ=4C=N+WA!;gSsvI4YpKhHRd|D@oXvRw! zQHjj&DZwcBMnkH9{!`XHZXB8UI9Xy&WW6w$NH)#aLG7=Nlc6x_`dPs?IN1xF$3@+q zcNC17q6VdNNu*y{A8%Ks41E5Ufvv z3GqPa+iLzgOgk*3_*Fm$ni(YVC!|*;Q>Kwb_eERiMpw7Bx$m)nVN55p&2jPgIz0zo zhy0q+*X7()a0w+JpV98=jZ8A=pbC5%9%Lywj3Blc1Z>j~g#ZE|K@c)XDt@^Z8BMeJ zr&+8lYm_B+6LT1xRwcH_0*jG@3lRaF$C=kLaQ}DIjD=H&`O}@$eJuYT4t>%+M9G9l z55A#P^OQrE=Q4YJL~y*B@=Wn?8N%bDGE85v&?&WvWCFn!1Q+BnmuiOPolFcVw6#QH z!n*tNuAr|!`|4!1x6UmW5$!Fnsl)}&X}UlR!MTWz#ZJN=AX=ZXXTqNJ&0$Tx8p%$? zS;w8w0PcMDc`9>JR~KB}dn;G}xp`39HyHHa+&U+&t$1^)2DP7T)T)LjynE4%1d$H4 zU8Am+Ko3{EI)vyv;z;0y;WA+9-)NCRZQJX(P!V^AWj{wHpVK32R~>!#tBRBtHAM@Dr^;(8M-E zyQL$fl;g!xyv=Ykv-iJPrAm}<8>!ffdE@W_h714&W z5$ma$@zOxYu6kZ_1)E?l$Y87}6C)!03uDgbBL1|aMX;jiOCZXFNVH8uGPdChUg(*b zJ=>_+2Gdd!hug7KuP18?u6%fLXYzlP004_vgHsi4OJOa7ID4EHv*J}sF`cRoN_tR< z3>avLK{w4ZFtj*SxlRHG^Asiaq=x|!%a3O_XYb4L&Y*YOc%DO*E?n%{#m*tTV$q;v z&7R?qDRySFT-DHoAk0fag}_x$42@A(ZCDWg@$pUM?8D;+$%cDeZNI*TZGx-u$I0|d z@FnNRkAF^iIEny=DLsg8Nqv5x7IGy0*W0GFK^l5=n!njoQ?lRNzX~%{Orp@5(cZ=M zVHvh{Ly;Y%d0iq4GNLQuYjyj&xJd-8?>3XW5|N0P5CMsf`Aa(I{dm}1p- z@)?y~hARmEH0L#+5+0>u%Qnl~G`%Keh{K@{fl?CdNKcQ|O%^_PZWRg|awwO_g{8<9 z2@7bNq?Y9$YA34!62tHQG8quv5DP&RO0t3)Dq8*Jh-kF(Q{&#MaRina?pd-Zf4Z!<8qG$%-D|dwvY$TvuHOjP zbdXNNfI<;4x9UKzssUKYAjPb(Zh^eH)}ZoP=Ot zAVjk^0O>+VTm|OvJezDD;g%duj~|Y++W%E=j%%;dnN|%89JQgt#rpl>{n>duR90LC zyBLQ68bJba!Bps2utxsf>9sp4g4v+q1yD7rY#xJrp04@JGDQdgo$jh2aT*l}XxvE- zVK5xM{_Z=rZKBPE%hJuMMyab<>KBq>^dBiiS9QatO8tgdFdz{gcS&QiTYmrj(hYO`E*xi+LWcerFJ-kYYaSz4RJszs?g3 zgw_#r8^!LEw3^lDDVyC>j@Ui@jS)4Kqo>P~#LOo}*ECL%O3y*f7nST5hTA_{_RZna zl@+1AT)jw7Cq=Nh->i!1cCsv8xm5WlCA%N5NW67+eKERw2}fGTz%Tf1`#tdj;*87c zrRuciscw9?mrl{8(h;B#z*C?td6z#*Il;&CUb-HGQ%a+*yL=zXSZoJTNL@`BtmUp0 zTH>2dM29w*L$YfKFt}dxUq??b#XsgFt^OKkcj5A|)*zK2F9?kZ2YeJhJGq0sB)(jQ zLZ{hl>9dl(w@W}5wK0%@@&I@_N7;iU@bRo*rj9q8q!v{qh-NtZUftsCC_=An*|(mYZwXtO+T<~8ZZ6kP;d#RkXVQyrgGHRG3W_u= z3Jwz=M?P|U{!xzXr;Cr7q74#@-~KWsr38zM)zvhPL&HlDK#Uw|lNRh5LH_u*qcvPoe%V?M#O|({ZjUvZ=3){TpM8Je?I!3TsvW!f^aCKz*N&$;P&x z-Yo@TD$I8~MbFX{?ER%h>m&2BOrpO>(E<3rhbyLBog4Fv;=ny^pKx5C@~`r+jfAnTV^Lopq2VZ0U#-W9QhX%lrwt@$6XjK#Xgif!-z)= zlVJ+g=gbzL`3!y|L8-#+&FaIN1x#x@NsbhyYqqg-;kEEU=^xV2Wjr{QH^w6 zbZZS*FKOyK7T%RfYp5vH15LNRLoL?+O#^}0r1rND#|0|_4h<5rDC!H_y8>$o6Dfs&hVprqQkaD%&AuR- zIkUR+45JmA)eG```J};!BXhWHQDi#>A}%R$Ik_OFV1zejnFJUO7LT|C68F+*KTMt+ z+b>I1-aUCyI>rgv$g;?+ToY+YBt(4vvDLasOEo@P&0%;fcb7a9v^FEu$v^=#gk^;f z3``en1#t7cI0I*(p%YJ7>`BWKPm-lZq0H5QsT;$TPhSV;Q?Bz#u=QA~G(|;Hb||$l z+#C7I@4`bH(u?IrBdRrHW(B`dEv9dkz;0riGpkjJTn}HS#s6L`U)8kFMQI>2ZqOhH z(J8GBkJN|8J|pp&qnLTl;lF|PG9md?yaGC*mjOe{$8a*PHs$nXP(z|}*2optl=Y%! z2e35JGJy6wo@L!>OvukOyeZkW5*H6p#Yp9UndK>OqT5kZG?h&Zd224by)i$p+h(ET zV3l@gpSM$v!BQcw4J(x$;0n$3)b=VET!7i*D-LGMR5kb4#T8m8ImP*q(ifXN;WNw z1cnr`Z26Lewq`)ynkOh9RoF%21cUMAyJm=7*?N4q3upf5z^~bWVGvS61^~kEvV~3D2HH-Hp0$C zZc;HF;bWN(d z55?*S1~3S>j>OEozqRBd8)PDEP%W*rCKplSu&Ep0_My~4amJ}1L zMpTAaYJ?J?JzVw;um(7Aj9mr~a|s}t947HZ4o30Tn~Hb;1uy3j(^!>RhxIWS{g zb1d=v&5cfkb@!~a3C|FHAW0TK)IoM=7c^hIyuzzBD==;&+o*pQX!XMV;@9wtFS9jh z<#DN$3n6XTphNY90z8XJ$)G^&SUO&W%hj>;!KzCYFfLOf3IIRv*Y9AY~Nq{cuJ{sU6M%Q ztV3l$1khp^d$o|=n)I5OB_nT0wWa0_(_;CHnc&EausFzoyMs~ zKbzlXgV2bJBDQGGS`{+u{hp-|#o0*Y6%K>CTQ$rV(0zz_MM!-@W)?eBYE&>?E*(*~ zCPV^ln%!r$a?y^k2+mnPf|$FfT5@Ji-0P-3(9uHd;SbWHQ=^?0k_n1CxH=J}%A9*b zLFzubBDPy#j^NTd2u|=p!paM8f6y8eMg6Ao55K;4I2$RQZViV}^w9{1Dzeq9?ItF! zTjK^ZRK7kepM8A|^g+0-Bc|v6^fJ{D@IpZ?yhJ67xTD$YM!G6LC&uiHcRw8onnk^7 zhpURwc=-qcJX$aA17q4Tz~LlZa+`P${L(d*ikdbUV$1siS{b~r^b8bAz^LR#GT3O# zG!|SLDeuf1Ic-E;+&g&?JVC2XQG+AN>LS|wuTW*c?&;r&i`QjbpiLVoFkEk`SX;j!0IWwV{7PIw*lkR6e9BQK=11UFB)wZ#C!L zm<{fxVU?7y3d8|3MHt0=sR4Y-+c$7z)e1v}Qt{=jy2=$s07$kH*hP^(a$sCVNr@{~ zx@_~YE{`6J_%P$JDoWqyLTw=8(sTetltt#Cyi29AjbJx$?2b3-jF>NuE1@wl1`huF z0UWS{|0|ZyH(Rv72d56ytpT8trO+qz}uLxoCChDQ%b*j02N34dNXJu9!%t zr)5Cv<%H~tC>jonpyoT7Q59u$F+4&u7yzcLFB6`@{Td`CdpXxmQ7WS!f&~|(uNJ45 zC=)Dv?PXd+ud!pp{;-(8WQlsvN32AYOlCz8J1_3uwTL(#IPPlKp#e1>56o+e?)Y?j zZYty$#L(eLLXluyX|*DC0hT-}5jaY*C)F&XBlWi_0oZEkRMH(C%ZNhrtH4tP!$EU& zyz{N@&Ka)XFP8NnDre(OJ)h5Vf*NP30%T~0>L(zIOzN(@&^aTQ$j`}^5=#zN~@ zIxC%AMB0XXAvhoKUN99T{4{>YS_7SI)wwHz|GYVHa!74I2@}k%wUTz9Dj6otrjEG7 zCsED>Q8`*?LhUVMVG#$Eg#8Mhji>x!Hg>Xt_^yGYy}p@-OQ8(KPpHz6a}3W#{6zt- zBQP}u5M5(CkJGs^4bGQEY#&wl7-2K_i@Df#D6Mf@7a`p?53tn+ zNygX%_4FI@liUaz=Wck$hA8sA)`rA)EzB(;sH#liq0aq`Sfd?U70{ z1qwU6-kQQQCRXO|nA&pre!j>gQsxriNi&*6uwl%SW7*c-aQ#~ZkjBL04#|KNG9n?c zC{E}?2A_4ZolleT?V6N)vqM~1M}7Bn%ik|25`Ru3ACF(l+VUS-&qU5IECwU+s1iXV z$gp4to=99m;sn0rLg-FQ=eyP7<6T5ZFy(f_L;?nJGm@h8afvSwUR8{-n_o=+E@}^C z8j#rbRTMFaRo7-pb-HiCW!pW$jeiz+dAB$4GUz2u45+*(`je$(h2wk*`gh?A55JJg z8!Znj1%dih?trW(0{`uzR8f+BtDHodGA;@Q)k&R#ajgSKaOcVeQAa3F)B^&+n1lEs zS_vx;W39-a7E8Pb^F7XNRGZHM%~>NTe(3kZVQ^=Lm;d(Z^7{NT_%&zWiwd_W2rd|I z5^lZ=hRinZ35+HT9Q51<5O4rAIld%I0e%%^Wv#mZNjo-`uAL2;;lW%CkaRO4FUF7x^!Z*PyT1?UfWgy61|?7IWR&&{s`*M?PlG0!6(xV@Mtt zC6tGB$76;xqIilWb|*36C5>HXc>>TuiJnZ)#d^Tm2F*lW*sDb$-E|q2pxa+-mp-~G zQeIXpa|4kfAD@4{Une3$Qu&lRx*cV(oWrE;_FkVW9 zzKIi(KTMsPUMU;^6rLgzwkx17#b)-wP2x@m4p&X3vJo@H*rei{fpjLQ^0j2matRj( zE4d`^HEsgvG#BqZmWu%AV@j_h`zHgr@t+dqZ#HA?4}ZD7A2Uj8-8&twxS{n9gHEYm z>G}SSyXx;b@##*Vu0y)Rmml8B)!#0Hg`qTQEXgb?yf&(MXc?OBiMa_iq&u#wgvFiJ zu&i{=w!-Ub0D90#?azcB`Tj+yU-HCwL&!BIhbm&g*bEsb=YThHDoql?p*ZZmicEeO z-lbeVYWwDIx@je*NF#uX4D=RZC{j@xpod}{!S7UaN^uSH@v95Uvavt`C)3z`ITjoP zcYLp8bJH1YUX8vWloK0S(SrmB#qAQ1!u4#TS7R0f=}|Q9zR!_z0|ndcC4oYYv&w2< zx}d;$Q3xALsI81)bA%K-Ur1NwNJ=;rw<@#Je7>Be2vCcBBaMOD$(?fOTOfMK