Author: Martin Pitt
Revision Date: 2015-08-28 09:59:48 UTC

debian/nfs-common.links: Add naming compatibility symlinks for
gssd.service → rpc-gssd.service and idmapd.service → /dev/null (as this
is bound to/handled by nfs-server.service) to provide a match for the
upstart job names. (LP: #1476010).

Author: Martin Pitt
Revision Date: 2015-08-28 09:59:48 UTC

debian/nfs-common.links: Add naming compatibility symlinks for
gssd.service → rpc-gssd.service and idmapd.service → /dev/null (as this
is bound to/handled by nfs-server.service) to provide a match for the
upstart job names. (LP: #1476010).

Author: Steve Langasek
Revision Date: 2015-05-07 17:18:01 UTC

releasing package nfs-utils version 1:1.2.8-9ubuntu8.2

Author: Steve Langasek
Revision Date: 2015-04-27 17:46:03 UTC

Add a dependency on keyutils to nfs-common, so that idmapping will work
under systemd. LP: #1449074.

Author: Steve Langasek
Revision Date: 2015-04-27 17:46:03 UTC

Add a dependency on keyutils to nfs-common, so that idmapping will work
under systemd. LP: #1449074.

Author: Didier Roche-Tolomelli
Revision Date: 2015-04-01 08:22:59 UTC

* Ship missing .override files
* Ensure we only remove the manual flag from the statd-mounting.override
  file, and potentially, remove it if empty.

Author: Marc Deslauriers
Revision Date: 2014-11-18 19:07:15 UTC

debian/nfs-common.statd.upstart: wait for rpcbind job instead of
relying on portmap compatibility event. (LP: #1391296)

Author: Dave Chiluk
Revision Date: 2014-11-18 10:55:28 UTC

Fix mount.nfs so that it falls back to v3 when ipv4 and ipv6 name resolution
is present, but nfsv4 is not. present. LP: #1391662

Author: Marc Deslauriers
Revision Date: 2014-11-18 19:07:15 UTC

debian/nfs-common.statd.upstart: wait for rpcbind job instead of
relying on portmap compatibility event. (LP: #1391296)

Author: Dave Chiluk
Revision Date: 2014-11-18 10:55:28 UTC

Fix mount.nfs so that it falls back to v3 when ipv4 and ipv6 name resolution
is present, but nfsv4 is not. present. LP: #1391662

Author: Steve Langasek
Revision Date: 2014-08-21 18:29:40 UTC

releasing package nfs-utils version 1:1.2.8-9ubuntu1

Author: Adam Conrad
Revision Date: 2014-06-25 12:23:09 UTC

Add patch from Sergio Gelato to adjust for changes to the ctx
argument of the serialize_krb5_ctx() function (LP: #1331201)

Author: Adam Conrad
Revision Date: 2014-06-25 12:23:09 UTC

Add patch from Sergio Gelato to adjust for changes to the ctx
argument of the serialize_krb5_ctx() function (LP: #1331201)

Author: Steve Langasek
Revision Date: 2014-02-25 17:18:49 UTC

releasing package nfs-utils version 1:1.2.8-6ubuntu1

Author: Steve Langasek
Revision Date: 2013-09-11 15:00:02 UTC

Start statd on virtual-filesystems instead of on local-filesystems;
this works and avoids a deadlock in the nfsroot case. Also, adjust
idmapd to not block MOUNTPOINT=/ for the same reason. This isn't a
perfect fix since idmapd would be needed if we ever wanted nfsv4
nfsroot, but implementing that can wait until we have /usr mounting from
the initramfs. LP: #537133.

Author: Steve Langasek
Revision Date: 2013-09-11 22:00:05 UTC

releasing package nfs-utils version 1:1.2.8-2ubuntu2

Author: Stéphane Graber
Revision Date: 2013-05-24 20:53:07 UTC

Merge from Debian

Author: Steve Langasek
Revision Date: 2012-10-10 16:19:05 UTC

restore bug reference

Author: Steve Langasek
Revision Date: 2012-10-10 16:19:05 UTC

restore bug reference

Author: Stéphane Graber
Revision Date: 2012-09-28 17:58:50 UTC

releasing version 1:1.2.6-3ubuntu2

Author: Adam Stokes
Revision Date: 2012-09-13 18:36:16 UTC

[ Matthew L. Dailey ]
Add "-e" (ticket expiry is error) option to rpc.gssd to prevent hangs due
to EKEYEXPIRED error from kernel on ticket expiry. LP: #79411

Author: Adam Stokes
Revision Date: 2012-09-06 17:07:16 UTC

[ Matthew L. Dailey ]
Add "-e" (ticket expiry is error) option to rpc.gssd to prevent hangs due
to EKEYEXPIRED error from kernel on ticket expiry. LP: #794112

Author: Luke Yelavich
Revision Date: 2012-08-15 05:28:14 UTC

merge branch lp:~logan/ubuntu/quantal/nfs-utils/debian-merge

Author: Steve Langasek
Revision Date: 2012-04-09 05:44:43 UTC

releasing version 1:1.2.5-3ubuntu3

Author: Steve Langasek
Revision Date: 2011-07-17 22:45:15 UTC

* debian/nfs-common.idmapd.upstart: don't use a script unnecessarily for
  our job when we can exec directly - making the job more resilient in
  the face of races with /usr being mounted. LP: #811823.
* Drop rpc_pipefs.conf; this has gotten far more complicated than it
  should be, just do the mount in-line in each of the gssd and idmapd
  jobs.

Author: Steve Langasek
Revision Date: 2011-07-17 22:51:42 UTC

* debian/nfs-common.idmapd.upstart: don't use a script unnecessarily for
  our job when we can exec directly - making the job more resilient in
  the face of races with /usr being mounted. LP: #811823.
* Drop rpc_pipefs.conf; this has gotten far more complicated than it
  should be, just do the mount in-line in each of the gssd and idmapd
  jobs.

Author: Steve Langasek
Revision Date: 2011-07-17 22:21:57 UTC

* debian/nfs-common.idmapd.upstart: don't use a script unnecessarily for
  our job when we can exec directly - making the job more resilient in
  the face of races with /usr being mounted. LP: #811823.
* Drop rpc_pipefs.conf; this has gotten far more complicated than it
  should be, just do the mount in-line in each of the gssd and idmapd
  jobs.

Author: Steve Langasek
Revision Date: 2011-08-22 23:29:20 UTC

debian/nfs-common.defaults, debian/nfs-common.idmapd.upstart: idmapd
should always be started automatically, because we can no longer assume
that a mount of type 'nfs' in /etc/fstab is not nfs4. This also lets
things work by default with nfs4 autofs. LP: #662711.

Author: Steve Langasek
Revision Date: 2011-07-17 22:21:57 UTC

* debian/nfs-common.idmapd.upstart: don't use a script unnecessarily for
  our job when we can exec directly - making the job more resilient in
  the face of races with /usr being mounted. LP: #811823.
* Drop rpc_pipefs.conf; this has gotten far more complicated than it
  should be, just do the mount in-line in each of the gssd and idmapd
  jobs.

Author: Steve Langasek
Revision Date: 2011-07-18 05:51:44 UTC

releasing version 1:1.2.0-4ubuntu4.2

Author: Steve Langasek
Revision Date: 2011-07-18 05:45:17 UTC

releasing version 1:1.2.2-1ubuntu1.2

Author: Steve Langasek
Revision Date: 2011-07-17 08:01:16 UTC

Drop rpc_pipefs.conf; this has gotten far more complicated than it
should be, just do the mount in-line in each of the gssd and idmapd
jobs.

Author: Matthias Klose
Revision Date: 2011-04-01 11:22:19 UTC

Search kerberos libs in multiarch locations.

Author: Steve Langasek
Revision Date: 2011-01-19 01:42:31 UTC

roll back the gssd fixes; there's a race condition here as well where an NFS
'mounting' hook can be sent before local-filesystems is up, and we can't fix
that without deadlocking boot until mountall is fixed.

Author: Clint Byrum
Revision Date: 2011-01-11 16:28:46 UTC

removing unnecessary debugging sleep delay post-start

Author: Ken VanDine
Revision Date: 2010-12-07 18:16:09 UTC

* Merge from debian unstable (LP: #685860), remaining changes:
  - debian/nfs-common.{statd,gssd,idmapd,rpc_pipefs}.upstart,
    debian/control, debian/nfs-common.{preinst,postinst,prerm,postrm},
    debian/rules: drop nfs-common init script in favor of upstart jobs, and
    build-depend on debhelper (>= 7.3.15ubuntu3) for correct upstart init
    handling.
  - debian/control:
    + depend on the upstart-using version of portmap, 6.0-10ubuntu1; and
      drop the alternative depends on rpcbind, which hasn't been converted.
    + depend on portmap 6.0-10ubuntu1.
  - debian/nfs-kernel-server.postinst: don't call "invoke-rc.d nfs-common"
    in the postinst, this is redundant anyway and the nfs-common init script
    is gone now.
* Merge from Debian unstable, remaining changes:
  - debian/nfs-common.{statd,gssd,idmapd,rpc_pipefs}.upstart,
    debian/control, debian/nfs-common.{preinst,postinst,prerm,postrm},
    debian/rules: drop nfs-common init script in favor of upstart jobs, and
    build-depend on debhelper (>= 7.3.15ubuntu3) for correct upstart init
    handling.
  - debian/control: depend on the upstart-using version of portmap,
    6.0-10ubuntu1; and drop the alternative depends on rpcbind, which
    hasn't been converted.
  - debian/nfs-kernel-server.postinst: don't call "invoke-rc.d nfs-common"
    in the postinst, this is redundant anyway and the nfs-common init script
    is gone now.
* Dropped changes, included in Debian:
  - debian/control: add ${misc:Depends} line for nfs-common, for the
    upstart deps
  - debian/nfs-kernel-server.init: updated check for presence of nfsd
    support
* debian/nfs-common.gssd.upstart:
  - fix the OPTIONS= match for the start condition (missing a leading '*')
    so that we actually match on nfs4 mounts
  - drop the 'script' for a straight exec of rpc.gssd; if /usr is a separate
    partition then nfs4 mounts might be attempted in parallel, and upstart
    gets mightily confused when this happens. LP: #545673
* debian/nfs-common.*.upstart: start on new 'mounting' signal instead of
  obsolete 'mount' signal.
* debian/nfs-kernel-server.init: 2.6.32 kernels no longer export the
  same symbols. Switch symbol check to nfsd_serv which has been present
  since 2005. LP: #493145.
* Merge from Debian testing, remaining changes:
  - debian/nfs-common.{statd,gssd,idmapd,rpc_pipefs}.upstart,
    debian/control, debian/nfs-common.{preinst,postinst,prerm,postrm},
    debian/rules: drop nfs-common init script in favor of upstart jobs, and
    build-depend on debhelper (>= 7.3.15ubuntu3) for correct upstart init
    handling.
  - debian/control: depend on the upstart-using version of portmap,
    6.0-10ubuntu1; and drop the alternative depends on rpcbind, which
    hasn't been converted.
  - debian/control: add ${misc:Depends} line for nfs-common, for the
    upstart deps
  - debian/nfs-kernel-server.postinst: don't call "invoke-rc.d nfs-common"
    in the postinst, this is redundant anyway and the nfs-common init script
    is gone now.
* debian/nfs-common.statd.upstart: check for a started portmap in a
  non-racy manner. LP: #484209.
* debian/control: add missing ${misc:Depends} for nfs-common, else we don't
  get the dependency on upstart that we should have. LP: #456281.
* debian/rules: now that the jobs will exit cleanly on their own when
  'start' is called but the job is a no-op, remove the --error-handler
  option to dh_installinit so that we don't accidentally ignore other
  kinds of errors that could point to real problems.
* Drop the gssd upstart job's dependency on "local-filesystems"; at boot
  time this is always implied transitively by the dep on portmap, and using
  a combination of 'or' and 'and' operators in the dependency list seems
  to confuse upstart quite badly, causing kerberized mounts to hang at boot.
  LP: #447654.
* Set upstart jobs to also start on mount attempt, in the event that
  mountall gets to them before the daemons are done starting. Really-fixes
  LP: #431248.
* Call 'stop' in the pre-start scripts for all jobs when we want to prevent
  the job from starting; this lets upstart know that it's a clean stop,
  and avoids boot-time messages about service start failures
* Mounting rpc_pipefs also requires the sunrpc module, so move this
  modprobe to the right upstart job.
* nfs-kernel-server: don't call invoke-rc.d nfs-common in the postinst,
  this is redundant anyway and the nfs-common init script is gone now.
  LP: #441855.
* Configure gssd and idmapd upstart jobs to stop on runlevels 0 and 6; this
  is consistent with previous initscript-based behavior, and spares upstart
  trying to restart the jobs repeatedly when sendsigs runs.
* When autodetecting gssd, handle the case of 'sec=krb5' being embedded in
  the middle of the options list in /etc/fstab. LP: #364861.
* Fix transition idempotency error when stopping old nfs-common init
  script, in case the postinst fails to finish afterwards (e.g., failure to
  restart the daemons).
* Fix statd upstart job to properly honor NEED_STATD=no and not get stuck
  respawning indefinitely.
* Ignore failures to start the daemons on upgrade, since if they aren't
  needed we don't *want* them to start. LP: #441055.
* Fix up the rpc_pipefs job, the wrong version of the file slipped into
  the previous upload.
* Drop nfs-common init script in favor of new upstart jobs. LP: #431248.
* Build-depend on debhelper (>= 7.3.15ubuntu3) for correct upstart init
  handling.
* Depend the upstart-using version of portmap, 6.0-10ubuntu1; and drop the
  alternative depends on rpcbind, which hasn't been converted.

Author: Steve Langasek
Revision Date: 2010-06-04 09:55:56 UTC

releasing version 1:1.2.2-1ubuntu1

Author: Matthew L. Dailey
Revision Date: 2010-04-06 15:30:21 UTC

Another patch to reduce verbosity - backported from upstream version 1.1.5
(LP: #293705)

Author: Matthew L. Dailey
Revision Date: 2010-04-06 15:30:21 UTC

Another patch to reduce verbosity - backported from upstream version 1.1.5
(LP: #293705)

Author: Steve Langasek
Revision Date: 2010-03-24 05:42:21 UTC

releasing version 1:1.2.0-4ubuntu4

Author: Steve Langasek
Revision Date: 2009-12-08 21:48:48 UTC

debian/nfs-kernel-server.init: 2.6.32 kernels no longer export the
same symbols. Switch symbol check to nfsd_serv which has been present
since 2005. LP: #493145.

Author: Steve Langasek
Revision Date: 2009-12-08 21:48:48 UTC

debian/nfs-kernel-server.init: 2.6.32 kernels no longer export the
same symbols. Switch symbol check to nfsd_serv which has been present
since 2005. LP: #493145.

Author: Steve Langasek
Revision Date: 2009-12-08 21:48:48 UTC

debian/nfs-kernel-server.init: 2.6.32 kernels no longer export the
same symbols. Switch symbol check to nfsd_serv which has been present
since 2005. LP: #493145.

Author: Steve Langasek
Revision Date: 2009-12-08 21:48:48 UTC

debian/nfs-kernel-server.init: 2.6.32 kernels no longer export the
same symbols. Switch symbol check to nfsd_serv which has been present
since 2005. LP: #493145.

Author: Steve Langasek
Revision Date: 2009-10-20 13:10:01 UTC

debian/control: add missing ${misc:Depends} for nfs-common, else we don't
get the dependency on upstart that we should have. LP: #456281.

Author: Bryce Harrington
Revision Date: 2008-12-04 14:37:39 UTC

* Merge from debian unstable, remaining changes:
  - Adjust initscripts version dependancy.
  - 101-reduce-verbosity.diff: Reduce verbosity
* Drop 100-gssd-use-kernel-supported-enctypes.diff on advice from
  upstream. "This patch isn't needed. There is still no code in the kernel to
  return the enctype information and, as it turns out, the way we're
  going to get this information from the kernel has changed. (Which is
  why this has never gone upstream.)"

Author: Marc Deslauriers
Revision Date: 2008-12-02 13:40:44 UTC

* SECURITY UPDATE: netgroups access restrictions bypass from wrong argument
  order
  - debian/patches/101-SECURITY-CVE-2008-4552.patch: call hosts_ctl() with
    right argument order in support/misc/tcpwrapper.c.
  - CVE-2008-4552

Author: Marc Deslauriers
Revision Date: 2008-12-02 13:40:44 UTC

* SECURITY UPDATE: netgroups access restrictions bypass from wrong argument
  order
  - debian/patches/101-SECURITY-CVE-2008-4552.patch: call hosts_ctl() with
    right argument order in support/misc/tcpwrapper.c.
  - CVE-2008-4552

Author: Bryce Harrington
Revision Date: 2008-06-19 20:05:51 UTC

* Merge from debian unstable, remaining changes:
  - Update maintainer to Ubuntu
  - Adjust initscripts version dependancy.
  - 100-gssd-use-kernel-supported-enctypes.diff:
    Allow to use encryption types that the kernel supports, not just
    des-cbc-crc. This patch was dropped by mistake when merging. Start the
    numbering from 100 to more easily distinguish which patches are ours.

Author: Marc Deslauriers
Revision Date: 2008-12-02 13:34:22 UTC

* SECURITY UPDATE: netgroups access restrictions bypass from wrong argument
  order
  - debian/patches/102-SECURITY-CVE-2008-4552.patch: call hosts_ctl() with
    right argument order in support/misc/tcpwrapper.c.
  - CVE-2008-4552

Author: Timo Aaltonen
Revision Date: 2008-04-02 23:10:01 UTC

100-gssd-use-kernel-supported-enctypes.diff:
Allow to use encryption types that the kernel supports, not just
des-cbc-crc. This patch was dropped by mistake when merging. Start the
numbering from 100 to more easily distinguish which patches are ours.

Author: Marc Deslauriers
Revision Date: 2008-12-02 13:22:59 UTC

* SECURITY UPDATE: netgroups access restrictions bypass from wrong argument
  order
  - debian/patches/08-SECURITY-CVE-2008-4552.patch: call hosts_ctl() with
    right argument order in support/misc/tcpwrapper.c.
  - CVE-2008-4552

Author: Marc Deslauriers
Revision Date: 2008-12-02 13:22:59 UTC

* SECURITY UPDATE: netgroups access restrictions bypass from wrong argument
  order
  - debian/patches/08-SECURITY-CVE-2008-4552.patch: call hosts_ctl() with
    right argument order in support/misc/tcpwrapper.c.
  - CVE-2008-4552

Author: Matthias Klose
Revision Date: 2007-08-13 12:03:05 UTC

* Merge from Debian; remaining changes:
  - nfs-common: adjust dependency on initscripts.

Author: Steinar H. Gunderson
Revision Date: 2007-03-07 11:46:25 UTC

Bump the versioned dependency on libblkid1 to require at least version
1.39+1.40-WIP-2006.11.14+dfsg-2, which ensures that we get a version
that doesn't make mountd leak memory on every mount.
(Closes: #413429)

Author: Scott James Remnant (Canonical)
Revision Date: 2006-08-31 18:41:20 UTC

Remove unnecessary dependency on sysvinit.

Author: Marc Deslauriers
Revision Date: 2008-12-01 09:16:49 UTC

* SECURITY UPDATE: netgroups access restrictions bypass from wrong argument
  order
  - support/misc/tcpwrapper.c: call hosts_ctl() with right argument order.
  - http://patch-tracking.debian.net/patch/series/view/nfs-utils/1:1.1.2-6lenny1/08-CVE-2008-4552.patch
  - CVE-2008-4552

Author: Marc Deslauriers
Revision Date: 2008-12-01 09:16:49 UTC

* SECURITY UPDATE: netgroups access restrictions bypass from wrong argument
  order
  - support/misc/tcpwrapper.c: call hosts_ctl() with right argument order.
  - http://patch-tracking.debian.net/patch/series/view/nfs-utils/1:1.1.2-6lenny1/08-CVE-2008-4552.patch
  - CVE-2008-4552

Author: Fabio Massimo Di Nitto
Revision Date: 2006-04-10 11:15:49 UTC

Changes by Timo Aaltonen <tjaalton@cc.hut.fi>:

Add /var/lib/nfs/rpc_pipefs directory.
(Closes Ubuntu: #32700)

Author: Scott James Remnant (Canonical)
Revision Date: 2005-04-14 22:11:30 UTC

Resynchronise with Debian.

Author: Michael Vogt
Revision Date: 2005-01-12 10:16:32 UTC

Resynchronise with Debian.

Author: Martin Pitt
Revision Date: 2004-12-01 14:34:34 UTC

* SECURITY UPDATE: fix remote Denial of Service, fix buffer overflow on 64
  bit architectures
* utils/statd/statd.c (patch from SGI):
  - main(): ignore SIGPIPE to continue to run even if a peer prematurely
    closes his TCP connection
  - drop_privs(): fix uninitialized st.st_gid value when running as root
    (not exploitable, but using random group ids might be confusing)
  - CAN-2004-1014
* utils/rquotad/rquota_server.c (Arjan van de Ven):
  - getquotainfo(): do not use memcpy() to copy
    values from struct dqblk to struct rquota; on 64 bit architectures time_t
    is 64 bits wide, but the target fields are only 32 bit, thus causing a
    buffer overflow
  - CAN-2004-0946
  - NOTE: rpc.quotad is not shipped in the debs by default (this is
    contained in the package "quota" which is not affected by this)

Author: Nathaniel McCallum
Revision Date: 2004-09-10 13:10:39 UTC

* debian/nfs-common.init,nfs-kernel-server.init: prettified initscripts
* debian/control: versioned depend on lsb-base