MFC r339214:

Remove BUGS section from nscd.conf(5) man page. This was missed in r339194.

Sponsored by: DARPA, AFRL

MFC r339194:

Remove the BUGS section of nscd(8) man page. According to bushman@'s
reponse quoted in PR, he no longer maintains it.

PR: 210590
Sponsored by: DARPA, AFRL

MFC r318588:

Fix up two assertions following malloc(). vangyzen@ notified me of
the second one. The first one is fixed as well.

Reported by: vangyzen@

MFC r318578:

Fix non-recoverable name resolution failures due to negative cache
entries never expiring. This patch honours the negative cache timeout.

To test/experience the failure do the following:

1. Edit /etc/ncd.conf to adjust the cache timeouts as follows:

positive-time-to-live hosts 30
negative-time-to-live hosts 1

2. Ensure that nsswitch.conf hosts line contains something like:

hosts: files cache dns

Note that cache must be specified before dns.

3. Start nscd.

4. Run the following command:

while true; do nc -z -w 3 www.google.com 80; sleep 5; done

5. While running the command, remove or comment out all nameserver
statements in /etc/resolv.conf. After a short while you will notice
non-recoverable name rsolution failures.

6. Uncomment or replace all nameserver statements back into
/etc/resolv.conf. Take note that name resolution never recovers.
To recover nscd must be restarted. This patch fixes this.

PR: 207804
Submitted by: Jov <amutu@amutu.com>

MFC r315212, r315213, r315214, r315215:
mkimg(1): let calloc(3) do the multiplication.
nscd(8): let calloc(3) do the multiplying.
mpsutil(8): let calloc(3) do the multiplying.
ypbind(8): let calloc(3) do the multiplying.

MFC after: 1 week

Copy head@r302406 to stable/11 as part of the 11.0-RELEASE cycle.
Prune svn:mergeinfo from the new branch, as nothing has been merged
here.

Additional commits post-branch will follow.

Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation

Add META_MODE support.

Off by default, build behaves normally.
WITH_META_MODE we get auto objdir creation, the ability to
start build from anywhere in the tree.

Still need to add real targets under targets/ to build packages.

Differential Revision: D2796
Reviewed by: brooks imp

Convert usr.sbin to LIBADD
Reduce overlinking

Properly set the timeout in a query_state. The global query_timeout
configuration value is an integer count of seconds, it is not a timeval.
Using memcpy() to copy a timeval from it put garbage into the tv_usec
field.

PR: 194025
Submitted by: David Shane Holden <dpejesh@yahoo.com>
MFC after: 1 week

use .Mt to mark up email addresses consistently (part2)

PR: 191174
Submitted by: Franco Fichtner <franco@lastsummer.de>

Remove end of line whitespace.

Add the possibility to specify a threshold for the number of negative cache
results required to have the cache return lookup failure.

A new configuration parameter is introduced, which must be set to a value
greater than 1 to activate this feature. The default behavior is unchanged.

The purpose of this change is to allow probes for the existence of an entry
(which are expected to fail), before that entry is added to one of the
queried databases, without the cache returning the stale information from
the probe query until that cache entry expires. If, for example, a new user
account is created after checking that the new account name is available,
the negative cache entry would prevent immediate access to the account.

For that example, the new configuration option

negative-confidence-threshold passwd 2

will require a second negative query result to consider the negative cache
entry for a passwd entry valid, but if the user account has been created
between the queries, then the positive query result from the second query
will be cached and returned.

Spelling fixes for usr.sbin/

mdoc: consistently spell our email addresses <foo@FreeBSD.org>

Reviewed by: ru

The default hash table size is 257 not 255. Reword the rest of the line
slightly while here.

PR: bin/121671
Submitted by: Artis Caune artis.caune gmail.com
Approved by: ed (mentor)

Remove "extern" from function prototypes, and fix some (but not all)
style(9) violations.

MFC after: 1 week

Wrap some macros that needed wrapping.

MFC after: 1 week

Remove casts from {c,m,re}alloc() and simplify sizeof().

MFC after: 1 week

nscd builds cleanly at WARNS level 3.

MFC after: 1 week

Explain to the compiler why the aliasing we're doing is OK.

MFC after: 1 week

Fix a large number of signed - unsigned comparison warnings.

MFC after: 1 week

Change hashtable_index_t to unsigned.
Generate prototypes for our hash table.

MFC after: 1 week

#include the right header so we get prototypes for our own functions.

MFC after: 1 week

Further #include cleanup.

MFC after: 1 week

Make the debugging macros expand to (void)0 instead of simply nothing
when debugging is turned off.
Rename debugging functions due to namespace violation.

MFC after: 1 week

#include cleanup

MFC after: 1 week

Provide correct prototypes for functions with no arguments.

MFC after: 1 week

_nss_cache_cycle_prevention_function doesn't actually need to be a function,
it just needs to have external linkage.

MFC after: 1 week

o Correct a database name: "group" not "groups".

PR: docs/129853
Submitted by: Denis Barov
MFC after: 1 week

Slightly adjust code logic: we allocate a "size"ed length of memory, not
size+1. Use strlcpy() to avoid using - 1 as length for strncpy().

Use strlcpy() before strlen() instead of strncpy().

Since we are going to strlen() on the string, it is supposed to be
NUL-terminated, so use strlcpy() instead of strncpy() here.

Replace malloc() + memset() with calloc. This corrects a misuse of
memset() as a side effect.

Reduce code duplication: use calloc instead of allocing and memset
afterward.

Approved by: bushman

Removing startup banner.

These are the things that the tinderbox has problems with because it
doesn't use the default CFLAGS which contain -fno-strict-aliasing.

Until the code is cleaned up, just add -fno-strict-aliasing to the
CFLAGS of these for the tinderboxes' sake, allowing the rest of the
tree to have -Werror enabled again.

Remove file which was accidently repo-copied to the wrong destination
file-name. The file will be nuked entirely from the repository later.

Approved by: re (kensmith)

- Renaming repocopied cached to nscd

Approved by: re (kensmith), brooks (mentor)

- When building world WITHOUT_LIBPTHREAD, link libthr to libpthread.
- Don't build ngctl(8) and cached(8) if threading libs aren't built.
- Fix various issues in a cached(8) makefile.

Revise markup.

Fix usage().

If perform-actual-lookups is enabled, getservbyname() matches an entry
even when proto is not valid.

Submitted by: Michael Bushkov <bushman__at__rsu.ru>

Fix alignment problem on AMD64.

Reported by: Pascal Hofstee <caelian__at__gmail.com>
Submitted by: Michael Bushkov <bushman__at__rsu.ru>
Tested by: Pascal Hofstee <caelian__at__gmail.com>

o Sort .Xrs.

o Reformat FILES section.

o Add missed commas.

o Silence mdoc(7) warnings: remove an empty line, add missed .El macro.
New sentence - new line.

Specify default values for positive-policy and negative-policy .

Typo.

Reword a sentence modified in my previous commit. This new one is probably
better.

Hinted by: ceri

Follow FreeBSD mdoc(7) conventions:
- Remove hard sentence breaks;
- Avoid using double negatives or "sexist" language;
- Expand contractions;
- Remove a blank line;
- Some grammar changes.

Usually we do not "hard code" requests to submit bugs to the author, but
I will leave this go for now.

- Extend the nsswitch to support Services, Protocols and Rpc
databases.
- Make nsswitch support caching.

Submitted by: Michael Bushkov <bushman__at__rsu.ru>
Sponsored by: Google Summer of Code 2005