Netatalk 2.2 for DD-WRT

Netatalk 2.2.3 for DD-WRT

2012-09-08T16:47:00.002+02:00

The new version 2.2.3 is available here.

As before it has been compiled against BerkeleyDB 4.7.25 and works with OSX Lion (10.7). It has not been tested with Mountain Lion (10.8).

Have fun!

Netatalk 2.2.2 for DD-WRT

2012-02-04T11:46:00.000+01:00

I just compiled version 2.2.2 of netatalk for DD-WRT you can download it here:

netatalk_2.2.2-2_mipsel.ipk

I still use Berkeley DB 4.7.25 to compile against so make sure you installed it. Instructions on how to downgrade after the break.

Make a backup of your existing afpd/netatalk settings! (/opt/etc/netatalk in my case)

Install the packages on your machine in the following order:

ipkg install libdb_4.7.25-3_mipsel.ipk

ipkg install netatalk_2.2.1-2_mipsel.ipk

make sure that you use

ipkg install libdb_4.7.25-3_mipsel.ipk -force-downgrade

in case your libdb version is newer than 4.7.25.

Also in case you have not already done so - install libgcrypt which is necessary to get dhx2 authentication to work:

ipkg-opt install libgcrypt

Please donate by PayPal button if you appreciate the work!

Be aware: both packages are not guaranteed to work. They may break your system!

Netatalk 2.2.2 is available

2012-02-01T14:01:00.000+01:00

The new netatalk version 2.2.2 has been released. I will compile a new package shortly. Meanwhile here is the change log:

NEW: afpd: New option "adminauthuser". Specifying eg "-adminauthuser root" whenever a normal user login fails, afpd tries to authenticate as the specified adminauthuser. If this succeeds, a normal session is created for the original connecting user. Said differently: if you know the password of adminauthuser, you can authenticate as any other user.
NEW: configure option "--enable-suse-systemd" for openSUSE12.1 and later. "--enable-redhat-systemd" and "--enable-suse-systemd" are same as "--enable-systemd". "--enable-suse" is renamed "--enable-suse-sysv".
NEW: experimental systemd service files in distrib/systemd/
UPD: afpd: Enhanced POSIX ACL mapping semantics, from Laura Mueller
UPD: afpd: Reset options every time a :DEFAULT: line is found in a AppleVolumes file
UPD: afpd: Convert passwords from legacy encoding (wire format) to host encoding, NetAFP Bug ID #14
UPD: afpd: Don’t set ATTRBIT_SHARED flag for directories
UPD: afpd: Use sendfile() on Solaris and FreeBSD for sending data
UPD: afpd: Faster volume used size calculation for "volsizelimit" option, cf man AppleVolume.default for details
FIX: afpd: ACL access checking
FIX: afpd: Fix an error when duplicating files that lacked an AppleDouble file which lead to a possible Finder crash
FIX: afpd: Read-only filesystems lead to afpd processes running as root
FIX: afpd: Fix for filesystem without NFSv4 ACL support on Solaris
FIX: afpd: Fix catsearch bug, NetAFP Bug ID #12
FIX: afpd: Fix dircache bug, NetAFP Bug ID #13
FIX: dbd: Better checking for duplicated or bogus CNIDs from AppleDouble files
FIX: dbd: Remove BerkeleyDB database environment after running dbd. This is crucial for the automatic BerkeleyDB database upgrade feature which is built into cnid_dbd and dbd.
FIX: Fix compilation error when AppleTalk support is disabled
FIX: Portability fixes
FIX: search of surrogate pair

Source: http://netatalk.sourceforge.net/2.2/ReleaseNotes2.2.2.html

Netatalk 2.2.1 for DD-WRT

2011-11-22T13:42:00.001+01:00

I compiled the newer netatalk version 2.2.1 for DD-WRT. I still use a Netgear WNR3500L router. I tested this build with the previously used Berkeley DB 4.7.25 (libdb_4.7.25-3_mipsel.ipk). OS X Lion worked like a charm with it.

netatalk_2.2.1-2_mipsel.ipk

Make a backup of your existing afpd/netatalk settings! (/opt/etc/netatalk in my case)

Install the packages on your machine in the following order:

ipkg install libdb_4.7.25-3_mipsel.ipk

ipkg install netatalk_2.2.1-2_mipsel.ipk

make sure that you use

ipkg install libdb_4.7.25-3_mipsel.ipk -force-downgrade

in case your libdb version is newer than 4.7.25.

Also in case you have not already done so - install libgcrypt which is necessary to get dhx2 authentication to work:

ipkg-opt install libgcrypt

Please donate by PayPal button if you appreciate the work!

Be aware: both packages are not guaranteed to work. They may break your system!

Cross Compiling Netatalk 2.2.1 for DD-WRT on Ubuntu 11.10

2011-11-22T10:02:00.001+01:00

Here is an update on how to cross compile netatalk for dd-wrt. Once again I have my Netgear WNR3500L as my target device. I recently upgraded to Ubuntu 11.10 which to my surprise works pretty good! I am very satisfied with it. But let's get started. Fire up you terminals.

In case you want to take a shortcut here are the modified makefiles:

netatalk.mk
libdb.mk

If you did not already do so you have to install bison, flex, texinfo and subversion:

> sudo apt-get install bison flex texinfo subversion

Now we can retrieve the optware packages und install our toolchain. Change to a directory you want this workspace located and execute:

> svn co http://svn.nslu2-linux.org/svnroot/optware/trunk optware

Setup the target environment once the checkout returns successfully:

> cd optware
> make ddwrt-target
> cd ddwrt
> make directories ipkg-utils toolchain

Note: the target depends on your router and the build of dd-wrt you have installed! The dd-wrt-target happens to fit in this case. Read up on what target system you need before starting out!

The compiling of the toolchain might take some time. I ran into some trouble building the toolchain. In two cases the packages were not found. For the binutils package I changed to a different mirror. In order to do so I modified the binutils.mk in optware/ddwrt/toolchain/buildroot/toolchain/binutils/. I replaced all references of the kernel.org site with http://ftp-stud.hs-esslingen.de/Mirrors/ftp.kernel.org/pub/linux/devel/binutils/. Beware this mirror might change in the future. A more suitable fix should be used. This was just a quick fix!

Also I had to change the version indicator for the gdb package. The character 'a' was appended. I updated the gdb.mk file in optware/ddwrt/toolchain/buildroot/toolchain/gdb/ to reflect this modification (around line 8):

GDB_SOURCE:=gdb-$(GDB_VERSION)a.tar.bz2

Now we can get started. First we need to build the dependencies (openssl, libgcrypt and libdb):

> make openssl-stage
> make libgcrypt-stage

I use libdb 4.7.25. In order to build that particular version I altered the libdb.mk in optware/ddwrt/make/:

LIBDB_VERSION=4.7.25
LIBDB_LIB_VERSION=4.7

Secondly we need to add a configuration flag (around line 127):

--with-mutex=MIPS/gcc-assembly \

This configuration flag is important so libdb is not linked against libpthread. When this flag is not set libdb will not play nice with netatalk and OS X will create a warning each and every time you want to access a share. Save the changes and compile!

> make libdb-ipk
> make libdb-stage

Next we modify the netatalk.mk file in optware/ddwrt/make/ to reflect the new version. Also I disabled one patch and added support for the cnid-cdb-backend:

NETATALK_VERSION=2.2.1 #(around line 8)

NETATALK_PATCHES +=#$(NETATALK_SOURCE_DIR)/afp_asp_include.patch #(around line 55)

--with-cnid-cdb-backend \ #(around line 149)

#$(PATCH_LIBTOOL) $(@D)/libtool #(around line 162)
#sed -i -e "s/db_strerror/db_strerror$(DB_VERSION)/g" $(@D)/etc/cnid_dbd/dbif.c
#sed -i -e "s/db_create/db_create$(DB_VERSION)/g" $(@D)/etc/cnid_dbd/dbif.c
#sed -i -e "s/db_env_create/db_env_create$(DB_VERSION)/g" $(@D)/etc/cnid_dbd/dbif.c
#touch $@

That should be it. Build the netatalk 2.2.1 ipk:

> make netatalk-ipk

In optware/ddwrt/builds the netatalk_2.2.1-2_mipsel.ipk should have appeared. Transfer the package to you router and proceed with the install. Remove the previous version of libdb first and install the new libdb package:

> ipkg install libdb_4.7.25-3_mipsel.ipk

Then backup your netatalk settings for they will be replaced. Mine are in /opt/etc/netatalk/. Upgrade the previous netatalk version to the new one.

> killall afpd
> ipkg install netatalk_2.2.1-2_mipsel.ipk

Now you can restore your settings and start netatalk again:

> afpd -D

Cross Compiling Netatalk 2.2 for DD-WRT on Ubuntu 11.04

2011-08-03T18:44:00.000+02:00

This is a straight up history on how I got netatalk 2.2 compiled to run on my Netgear WNR3500L router. I used Ubuntu 11.04 but this should work on various distributions.

I am not an expert on the matter. So in case you are wondering about some commands that might not be necessary ... its just how I got it to work. It might not be the most efficient way!
On my machine I needed the packages bison, flex and texinfo installed before I could start cross compiling. So we start up a Terminal and install them:

> sudo apt-get install bison flex texinfo

In case you do not have subversion installed:

> sudo apt-get install subversion

Now we are set to retrieve the optware packages und install our toolchain. Change to a directory you want this workspace located and execute:

> svn co http://svn.nslu2-linux.org/svnroot/optware/trunk optware

Once that completed successfully we want to setup the dd-wrt toolchain. So change into the optware directory:

> cd optware
> make ddwrt-target
> cd ddwrt
> make directories ipkg-utils toolchain

Note: the target depends on your router and the build of dd-wrt you have installed! The dd-wrt target happens to fit in this case. Read up on what target system you need before starting out!

Now that will take some time. Afterwards however we are ready to go. There are several dependencies netatalk needs. These are: openssl, libgcrypt and libdb (Berkeley DB > =4.6). So we are starting out by compiling openssl and libgcrypt:

> make openssl-stage
> make libgcrypt-stage

For libdb we need to alter the libdb.mk file in the directory make. There are two things we need to change in order for this lib to play nice on the router later on. First we need to chose the correct version, which in my case is 4.7.25:

LIBDB_VERSION=4.7.25
LIBDB_LIB_VERSION=4.7

Secondly we need to add a configuration flag (around line 127):

--with-mutex=MIPS/gcc-assembly \

This configuration flag is important so libdb is not linked against libpthread. When this flag is not set libdb will not play nice with netatalk and OS X will create a warning each and every time you want to access a share. Save the changes and compile!

> make libdb-ipk
> make libdb-stage

Now we are set to get to netatalk. First we need to change the version in make/netatalk.mk just as we did with libdb. We change it to version 2.2.0:

NETATALK_VERSION=2.2.0

and disable the line where patches are applied (line 49)

#NETATALK_PATCHES=$(NETATALK_SOURCE_DIR)/db3-check.patch

also we need to change the libgcrypt configuration flag around line 137 from

--with-libgcrypt-prefix=$(STAGING_PREFIX) \

to

--with-libgcrypt-dir=$(STAGING_PREFIX) \

This puts uams_dhx2.so into our ipk. Also add the configuration flag:

--with-cnid-cdb-backend \

We are ready to compile netatalk now:

> make netatalk-ipk

The process might stop on an error telling you that the variable AI_NUMERICSERV is nowhere to be found. I fixed this by adding:

#ifndef AI_NUMERICSERV
#define AI_NUMERICSERV 0
#endif

in builds/netatalk/libatalk/cnid/dbd/cnid_dbd.c right before the function static int tsock_getfd(const char *host, const char *port) Now we are starting the building process again and it should run smoothly and create the ipk.

> make netatalk-ipk

Thats it! We have created libdb and netatalk packages which we can deploy on the router now. Copy builds/libdb_4.7.25-3_mipsel.ipk and builds/netatalk_2.2.0-2_mipsel.ipk onto your router and install them (in case afpd is running kill it first):

ipkg install libdb_4.7.25-3_mipsel.ipk
ipkg install netatalk_2.2.0-2_mipsel.ipk

Cheers!

Netatalk 2.2 configurations

2011-08-01T12:20:00.000+02:00

Here is how I got my netatalk/afpd running with Apple's Time Machine service. After installing netatalk 2.2 (and its dependency libdb and libgcrypt - see previous post) there should be configuration files in /opt/etc/netatalk/

afpd.conf: (updated August 3rd)

- -transall -nouservol -setuplog "default log_info /var/log/afpd.log" -defaultvol /opt/etc/netatalk/AppleVolumes.default -systemvol /opt/etc/netatalk/AppleVolumes.system -passwdfile /opt/etc/netatalk/afppasswd -uamlist uams_clrtxt.so,uams_guest.so,uams_randnum.so,uams_dhx.so,uams_dhx2.so -nosavepassword -advertise_ssh

AppleVolumes.default:

/path/to/Volume "TimeMachine" cnidscheme:cdb options:tm

netatalk.conf:

# Appletalk configuration
# Change this to increase the maximum number of clients that can connect:
AFPD_MAX_CLIENTS=50

# Change this to set the machine's atalk name and zone, the latter containing
# the '@' sign as first character -- compare with nbp_name(3) if in doubt
#
# NOTE: If Netatalk should register AppleTalk services in the standard zone
# then you need not to specify a zone name here.
#
# If your zone has spaces in it, you're better off specifying
# it in afpd.conf if you realize that your distribution doesn't
# handle spaces correctly in the startup script. Remember to use
# quotes here if the zone name contains spaces.
#
#ATALK_ZONE="@some zone"
ATALK_NAME=`echo ${HOSTNAME}|cut -d. -f1`

# specify the Mac and unix charsets to be used
ATALK_MAC_CHARSET='MAC_ROMAN'
ATALK_UNIX_CHARSET='LOCALE'

# specify this if you don't want dhx and dhx2
# available options: uams_guest.so, uams_clrtxt.so,
# uams_dhx.so, uams_dhx2.so,
# uams_randnum.so
#AFPD_UAMLIST="-U uams_dhx.so,uams_dhx2.so"

# Change this to set the id of the guest user
AFPD_GUEST=nobody

# Set which daemons to run (papd is dependent upon atalkd):
ATALKD_RUN=no
PAPD_RUN=no
CNID_METAD_RUN=yes
AFPD_RUN=yes
TIMELORD_RUN=no
A2BOOT_RUN=no

# Control whether the daemons are started in the background
ATALK_BGROUND=no

# export the charsets, read form ENV by apps

export ATALK_MAC_CHARSET
export ATALK_UNIX_CHARSET

Also if you want to get the netatalk service to be advertised you need install the avahi-daemon and edit its settings. The settings reside in /opt/etc/avahi/

avahi-daemon.conf:

[server]
host-name=TimeMachine
use-ipv4=yes
use-ipv6=no
allow-interfaces=br0
enable-dbus=no

Also create a file in /opt/etc/avahi/services

Mine is called afpd.service:

<?xml version="1.0" standalone='no'?>
<!DOCTYPE service-group SYSTEM "avahi-service.dtd">
<service-group>
<name replace-wildcards="yes">%h</name>
<service>
<type>_afpovertcp._tcp</type>
<port>548</port>
</service>
<service>
<type>_device-info._tcp</type>
<port>0</port>
<txt-record>model=Xserve</txt-record>
</service>
</service-group>

Last but not least issue the command 'adduser avahi' then 'avahi-daemon &'. Now you are set to start the service by typing 'afpd'. You should now be able to see 'TimeMachine' in the shared section of your Finder window. After mounting it is available in the Time Machine preferences.

Thanks to myopenrouter - their tutorial initially got me started fiddling around with Time Machine and dd-wrt afpd/netatalk half a year ago. I found some more settings using www.google.com. My configurations are most certainly not the best there is but for me they worked. I hope they do the same for you.

Netatalk 2.2 for DD-WRT

2011-07-31T16:16:00.000+02:00

I successfully compiled netatalk 2.2.0 for opt ware DD-WRT build environment. It is compiled against Berkeley DB 4.7.25.

I tested it with OS X 10.6.8 aka Snow Leopard and OS X 10.7 aka Lion. Both worked with Apples Time Machine. My router is a Netgear WNR3500L with Firmware: DD-WRT v24-sp2 (08/12/10) mini-usb-ftp installed.

libdb 4.7 ipk
netatalk 2.2 ipk (updated August 3rd - added uams_dhx2.so)

Make a backup of your existing afpd/netatalk settings! (/opt/etc/netatalk in my case)
Install the packages on your machine in the following order:

ipkg install libdb_4.7.25-3_mipsel.ipk
ipkg install netatalk_2.2.0-2_mipsel.ipk

make sure that you use

ipkg install libdb_4.7.25-3_mipsel.ipk -force-downgrade

in case your libdb version is newer than 4.7.25.

Also in case you have not already done so - install libgcrypt which is necessary to get dhx2 authentication to work:

ipkg-opt install libgcrypt (updated August 22nd - thanks newton)

Please donate by PayPal Button if you appreciate the work!

Be aware: both packages are not guaranteed to work. They may break your system!