Accepting request 145201 from network:ldap

update to 1.9.3

OBS-URL: https://build.opensuse.org/request/show/145201
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/sssd?expand=0&rev=39

0005-implicit-decl.diff

@@ -14,13 +14,13 @@ crypto_sha512crypt.c:221:14: warning: incompatible implicit
  src/util/crypto/libcrypto/crypto_sha512crypt.c |    1 +
  1 file changed, 1 insertion(+)
 
-Index: sssd-1.8.0/src/util/crypto/libcrypto/crypto_sha512crypt.c
+Index: sssd-1.9.2/src/util/crypto/libcrypto/crypto_sha512crypt.c
 ===================================================================
---- sssd-1.8.0.orig/src/util/crypto/libcrypto/crypto_sha512crypt.c
+--- sssd-1.9.2.orig/src/util/crypto/libcrypto/crypto_sha512crypt.c
-+++ sssd-1.8.0/src/util/crypto/libcrypto/crypto_sha512crypt.c
++++ sssd-1.9.2/src/util/crypto/libcrypto/crypto_sha512crypt.c
-@@ -10,6 +10,7 @@
+@@ -12,6 +12,7 @@
- /* SHA512-based Unix crypt implementation.
+ 
-    Released into the Public Domain by Ulrich Drepper <drepper@redhat.com>.  */
+ #include "config.h"
  
 +#define _GNU_SOURCE 1 /* mempcpy */
  #include <endian.h>

baselibs.conf

@@ -1,4 +1,4 @@
-sssd
+sssd-client
   supplements "packageand(sssd:pam-<targettype>)"
   supplements "packageand(sssd:glibc-<targettype>)"
   -/usr/lib(64)?/*

sssd-1.8.93.tar.xz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:d0577b6f27ea68ba164b701d84628c380bc82275b546fd20a624cfb752fd3e40
-size 1141600

sssd-1.9.3.tar.xz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:123aa0bd6c2c7276f04f3c4dd7681f0d08cd0c186fd61288bb454c7e2840d4ad
+size 1252232

sssd-ldflags.diff

@@ -0,0 +1,158 @@
+From: Jan Engelhardt <jengelh@inai.de>
+Date: 2012-11-10 01:36:37.022064770 +0100
+
+build: fix link failure because of wrong use of LDFLAGS
+
+	ld: src/sss_client/sss_ssh_authorizedkeys-common.o: undefined
+	reference to symbol 'pthread_mutexattr_setrobust@@GLIBC_2.12'
+
+For the i'th time,
+http://stackoverflow.com/questions/4241683/linker-flags-in-wrong-place
+
+The patch fixes the location of library names, and also adds them
+to two program which need them.
+
+---
+ Makefile.am |   36 +++++++++++++++++++++---------------
+ 1 file changed, 21 insertions(+), 15 deletions(-)
+
+Index: sssd-1.9.3/Makefile.am
+===================================================================
+--- sssd-1.9.3.orig/Makefile.am
++++ sssd-1.9.3/Makefile.am
+@@ -531,7 +531,8 @@ libipa_hbac_la_SOURCES = \
+     src/providers/ipa/hbac_evaluator.c \
+     src/util/sss_utf8.c
+ libipa_hbac_la_LDFLAGS = \
+-    -version-info 0:1:0 \
++    -version-info 0:1:0
++libipa_hbac_la_LIBADD = \
+     $(UNICODE_LIBS)
+ 
+ dist_pkgconfig_DATA += src/lib/idmap/sss_idmap.pc
+@@ -645,11 +646,11 @@ sssd_be_LDADD = \
+     -ldl \
+     $(SSSD_LIBS) \
+     $(CARES_LIBS) \
++    $(PAM_LIBS) \
+     libsss_util.la
+ sssd_be_LDFLAGS = \
+     -Wl,--version-script,$(srcdir)/src/providers/sssd_be.exports \
+-    -export-dynamic \
+-    $(PAM_LIBS)
++    -export-dynamic
+ 
+ if BUILD_PYTHON_BINDINGS
+ sss_obfuscate_pythondir = $(sbindir)
+@@ -750,7 +751,7 @@ sss_sudo_cli_SOURCES = \
+     src/sss_client/sudo/sss_sudo_response.c \
+     src/sss_client/sudo_testcli/sudo_testcli.c
+ sss_sudo_cli_CFLAGS = $(AM_CFLAGS)
+-sss_sudo_cli_LDFLAGS = $(CLIENT_LIBS)
++sss_sudo_cli_LDADD = $(CLIENT_LIBS)
+ endif
+ 
+ if BUILD_SSH
+@@ -760,8 +761,8 @@ sss_ssh_authorizedkeys_SOURCES = \
+     src/sss_client/ssh/sss_ssh_authorizedkeys.c
+ sss_ssh_authorizedkeys_CFLAGS = $(AM_CFLAGS)
+ sss_ssh_authorizedkeys_LDADD = \
++    $(CLIENT_LIBS) \
+     libsss_util.la
+-sss_ssh_authorizedkeys_LDFLAGS = $(CLIENT_LIBS)
+ 
+ sss_ssh_knownhostsproxy_SOURCES = \
+     src/sss_client/common.c \
+@@ -769,8 +770,8 @@ sss_ssh_knownhostsproxy_SOURCES = \
+     src/sss_client/ssh/sss_ssh_knownhostsproxy.c
+ sss_ssh_knownhostsproxy_CFLAGS = $(AM_CFLAGS)
+ sss_ssh_knownhostsproxy_LDADD = \
++    $(CLIENT_LIBS) \
+     libsss_util.la
+-sss_ssh_knownhostsproxy_LDFLAGS = $(CLIENT_LIBS)
+ endif
+ 
+ #################
+@@ -1127,14 +1128,14 @@ noinst_PROGRAMS += autofs_test_client
+ endif
+ 
+ pam_test_client_SOURCES = src/sss_client/pam_test_client.c
+-pam_test_client_LDFLAGS = -lpam -lpam_misc
++pam_test_client_LDADD = -lpam -lpam_misc
+ 
+ if BUILD_AUTOFS
+ autofs_test_client_SOURCES = src/sss_client/autofs/autofs_test_client.c \
+ 			     src/sss_client/autofs/sss_autofs.c \
+ 			     src/sss_client/common.c
+ autofs_test_client_CFLAGS = $(AM_CFLAGS)
+-autofs_test_client_LDFLAGS = -lpopt $(CLIENT_LIBS)
++autofs_test_client_LDADD = -lpopt $(CLIENT_LIBS)
+ endif
+ 
+ ####################
+@@ -1156,10 +1157,11 @@ libnss_sss_la_SOURCES = \
+     src/sss_client/nss_mc_group.c \
+     src/sss_client/nss_mc.h
+ libnss_sss_la_LDFLAGS = \
+-    $(CLIENT_LIBS) \
+     -module \
+     -version-info 2:0:0 \
+     -Wl,--version-script,$(srcdir)/src/sss_client/sss_nss.exports
++libnss_sss_la_LIBADD = \
++    $(CLIENT_LIBS)
+ 
+ pamlib_LTLIBRARIES = pam_sss.la
+ pam_sss_la_SOURCES = \
+@@ -1170,11 +1172,12 @@ pam_sss_la_SOURCES = \
+     src/sss_client/sss_pam_macros.h
+ 
+ pam_sss_la_LDFLAGS = \
+-    $(CLIENT_LIBS) \
+-    -lpam \
+     -module \
+     -avoid-version \
+     -Wl,--version-script,$(srcdir)/src/sss_client/sss_pam.exports
++pam_sss_la_LIBADD = \
++    $(CLIENT_LIBS) \
++    -lpam
+ 
+ if BUILD_SUDO
+ 
+@@ -1185,8 +1188,9 @@ libsss_sudo_la_SOURCES = \
+     src/sss_client/sudo/sss_sudo.c \
+     src/sss_client/sudo/sss_sudo.h \
+     src/sss_client/sudo/sss_sudo_private.h
++libsss_sudo_la_LIBADD = \
++    $(CLIENT_LIBS)
+ libsss_sudo_la_LDFLAGS = \
+-    $(CLIENT_LIBS) \
+     -Wl,--version-script,$(srcdir)/src/sss_client/sss_sudo.exports \
+     -module \
+     -avoid-version
+@@ -1206,10 +1210,11 @@ libsss_autofs_la_SOURCES = \
+     src/sss_client/autofs/sss_autofs_private.h
+ 
+ libsss_autofs_la_LDFLAGS = \
+-    $(CLIENT_LIBS) \
+     -module \
+     -avoid-version \
+     -Wl,--version-script,$(srcdir)/src/sss_client/autofs/sss_autofs.exports
++libsss_autofs_la_LIBADD = \
++    $(CLIENT_LIBS)
+ endif
+ 
+ dist_noinst_DATA += \
+@@ -1528,10 +1533,11 @@ sssd_pac_plugin_la_CFLAGS = \
+     $(AM_CFLAGS) \
+     $(KRB5_CFLAGS)
+ sssd_pac_plugin_la_LDFLAGS = \
+-    $(CLIENT_LIBS) \
+-    -lkrb5 \
+     -avoid-version \
+     -module
++sssd_pac_plugin_la_LIBADD = \
++    $(CLIENT_LIBS) \
++    -lkrb5
+ 
+ if BUILD_PYTHON_BINDINGS
+ pysss_la_SOURCES = \

sssd.changes

@@ -1,3 +1,53 @@
+-------------------------------------------------------------------
+Mon Dec 10 09:55:35 UTC 2012 - rhafer@suse.com
+
+- Removed left-over "Requires" for no longer existing sssd-client
+  subpackage.
+- New patch: sssd-ldflags.diff to fix link failures due to erroneous
+  LDFLAGS usage
+
+-------------------------------------------------------------------
+Thu Dec  6 10:38:59 UTC 2012 - rhafer@suse.com
+
+- Switch back to using libcrypto instead of mozilla-nss as it seems
+  to be supported upstream again, cf.
+  https://lists.fedorahosted.org/pipermail/sssd-devel/2012-June/010202.html
+- Cleanup PAM configuration after uninstalling sssd (bnc#788328)
+
+-------------------------------------------------------------------
+Thu Dec  6 09:05:29 UTC 2012 - jengelh@inai.de
+
+- Update to new upstream release 1.9.3
+* Many fixes related to deployments where the SSSD is running as
+  a client of IPA server with trust relation established with an
+  Active Directory server
+* Multiple fixes related to correct reporting of group
+  memberships, especially in setups that use nested groups
+* Fixed a bug that prevented upgrade from the 1.8 series if the
+  cache contained nested groups before the upgrade
+* Restarting the responders is more robust for cases where the
+  machine is under heavy load during back end restart
+* The default_shell option can now be also set per-domain in
+  addition to global setting.
+
+-------------------------------------------------------------------
+Sat Nov 10 00:27:06 UTC 2012 - jengelh@inai.de
+
+- Update to new upstream release 1.9.2
+* Users or groups from trusted domains can be retrieved by UID or
+  GID as well
+* Several fixes that mitigate file descriptor leak during logins
+* SSH host keys are also removed from the cache after being
+  removed from the server
+* Fix intermittent crash in responders if the responder was
+  shutting down while requests were still pending
+* Catch an error condition that might have caused a tight loop in
+  the sssd_nss process while refreshing expired enumeration request
+* Fixed memory hierarchy of subdomains discovery requests that
+  caused use-after-free access bugs
+* The krb5_child and ldap_child processes can print libkrb5 tracing
+  information in the debug logs 
+
 -------------------------------------------------------------------
 Wed Jun 27 12:32:05 UTC 2012 - jengelh@inai.de
 

sssd.spec

@@ -17,25 +17,26 @@
 
 
 Name:           sssd
-Version:        1.8.93
+Version:        1.9.3
 Release:        0
 Summary:        System Security Services Daemon
 License:        GPL-3.0+ and LGPL-3.0+
 Group:          System/Daemons
 Url:            https://fedorahosted.org/sssd/
+Requires(postun): pam-config
 
 #Git-Clone:	git://git.fedorahosted.org/sssd
 Source:         %name-%version.tar.xz
 Source3:        baselibs.conf
-Patch5:         0005-implicit-decl.diff
+Patch1:         0005-implicit-decl.diff
+Patch2:         sssd-ldflags.diff
 BuildRoot:      %{_tmppath}/%{name}-%{version}-build
-BuildRequires:  xz
 
 %define servicename sssd
-%define sssdstatedir %{_localstatedir}/lib/sss
+%define sssdstatedir %_localstatedir/lib/sss
-%define dbpath %{sssdstatedir}/db
+%define dbpath %sssdstatedir/db
-%define pipepath %{sssdstatedir}/pipes
+%define pipepath %sssdstatedir/pipes
-%define pubconfpath %{sssdstatedir}/pubconf
+%define pubconfpath %sssdstatedir/pubconf
 
 # SLES11 doesn't know the python_* macros
 %if %suse_version <= 1110
@@ -43,10 +44,12 @@ BuildRequires:  xz
 %define python_sitearch %py_sitedir
 %endif
 
-#BuildRequires:	autoconf >= 2.59, automake, libtool
+BuildRequires:  autoconf >= 2.59
+BuildRequires:  automake
 BuildRequires:  bind-utils
 BuildRequires:  docbook-xsl-stylesheets
 BuildRequires:  krb5-devel
+BuildRequires:  libtool
 BuildRequires:  pkgconfig >= 0.21
 %if 0%{?suse_version} >= 1210
 BuildRequires:  pkgconfig(collection) >= 0.5.1
@@ -58,7 +61,7 @@ BuildRequires:  pkgconfig(ldb) >= 0.9.2
 BuildRequires:  pkgconfig(libcares)
 BuildRequires:  pkgconfig(libnl-1) >= 1.1
 BuildRequires:  pkgconfig(libpcre) >= 7
-BuildRequires:  pkgconfig(nss)
+BuildRequires:  pkgconfig(openssl)
 BuildRequires:  pkgconfig(popt)
 BuildRequires:  pkgconfig(python)
 BuildRequires:  pkgconfig(talloc)
@@ -73,10 +76,10 @@ BuildRequires:  libdhash-devel >= 0.4.2
 BuildRequires:  libini_config-devel >= 0.6.1
 BuildRequires:  libldb-devel >= 0.9.2
 BuildRequires:  libnl-devel >= 1.1
+BuildRequires:  libopenssl-devel
 BuildRequires:  libtalloc-devel
 BuildRequires:  libtdb-devel >= 1.1.3
 BuildRequires:  libtevent-devel
-BuildRequires:  mozilla-nss-devel
 BuildRequires:  pcre-devel >= 7
 BuildRequires:  popt-devel
 BuildRequires:  python-devel
@@ -96,6 +99,7 @@ BuildRequires:  pkg-config
 BuildRequires:  systemd
 %{?systemd_requires}
 %endif
+BuildRequires:  xz
 
 %description
 Provides a set of daemons to manage access to remote directories and
@@ -108,7 +112,7 @@ services for projects like FreeIPA.
 Summary:        FreeIPA provider plugin for sssd
 License:        GPL-3.0+ and LGPL-3.0+
 Group:          System/Daemons
-Requires:       sssd = %{version}
+Requires:       sssd = %version
 
 %description ipa-provider
 This package provide the FreeIPA provider plugin for the System Security
@@ -118,7 +122,7 @@ Services Daemon (sssd).
 Summary:        Commandline tools for sssd
 License:        GPL-3.0+ and LGPL-3.0+
 Group:          System/Management
-Requires:       sssd = %{version}
+Requires:       sssd = %version
 
 %description tools
 The packages contains commandline tools for managing users and groups using
@@ -160,6 +164,18 @@ Requires:       libsss_idmap0 = %version
 %description -n libsss_idmap-devel
 A utility library for FreeIPA to map Windows SIDs to Unix user/group IDs.
 
+%package -n libsss_sudo
+Summary:        A library to allow communication between sudo and SSSD
+License:        LGPL-3.0+
+Group:          System/Libraries
+Provides:       libsss_sudo-devel = %version-%release
+Obsoletes:      libsss_sudo-devel < %version-%release
+# No provides: true obsolete.
+Obsoletes:      libsss_sudo1
+
+%description -n libsss_sudo
+A utility library to allow communication between sudo and SSSD.
+
 %package -n python-ipa_hbac
 Summary:        Python bindings for the FreeIPA HBAC Evaluator library
 License:        GPL-3.0+ and LGPL-3.0+
@@ -174,7 +190,7 @@ can be used by Python applications.
 Summary:        Python API for configuring sssd
 License:        GPL-3.0+ and LGPL-3.0+
 Group:          Development/Libraries/Python
-%{py_requires}
+%py_requires
 
 %description -n python-sssd-config
 Provide python module to access and manage configuration of the System 
@@ -182,7 +198,7 @@ Security Services Daemon (sssd).
 
 %prep
 %setup -q
-%patch -P 5 -p1
+%patch -P 1 -P 2 -p1
 
 %build
 %if 0%{?suse_version} < 1210
@@ -197,13 +213,15 @@ export LDB_DIR="$(pkg-config ldb --variable=modulesdir)"
 # help configure find nscd
 export PATH="$PATH:/usr/sbin"
 
+autoreconf -fi;
 %configure \
-    --with-db-path=%{dbpath} \
+    --with-crypto=libcrypto \
-    --with-pipe-path=%{pipepath} \
+    --with-db-path="%dbpath" \
-    --with-pubconf-path=%{pubconfpath} \
+    --with-pipe-path="%pipepath" \
-    --with-init-dir=%{_initrddir} \
+    --with-pubconf-path="%pubconfpath" \
-    --enable-nsslibdir=/%{_lib} \
+    --with-init-dir="%_initrddir" \
-    --enable-pammoddir=/%{_lib}/security \
+    --enable-nsslibdir="/%_lib" \
+    --enable-pammoddir="/%_lib/security" \
     --with-ldb-lib-dir="$LDB_DIR" \
     --with-selinux=no \
     --with-os=suse \
@@ -212,43 +230,30 @@ export PATH="$PATH:/usr/sbin"
 make %{?_smp_mflags} all
 
 %install
-make install DESTDIR="%buildroot"
+b="%buildroot";
+make install DESTDIR="$b"
 
 # Copy default sssd.conf file
-install -d %{buildroot}%{_mandir}/cs
+install -d "$b/%_mandir"/{cs,cs/man8,nl,nl/man8,pt,pt/man8,uk,uk/man1} \
-install -d %{buildroot}%{_mandir}/cs/man8
+           "$b/%_mandir"/{uk/man5,uk/man8};
-install -d %{buildroot}%{_mandir}/nl
+install -d "$b/%_sysconfdir/sssd";
-install -d %{buildroot}%{_mandir}/nl/man8
+install -m600 src/examples/sssd-example.conf "$b/%_sysconfdir/sssd/sssd.conf";
-install -d %{buildroot}%{_mandir}/pt
+install src/sysv/SUSE/sssd "$b/%_sysconfdir/init.d/sssd";
-install -d %{buildroot}%{_mandir}/pt/man8
-install -d %{buildroot}%{_mandir}/uk
-install -d %{buildroot}%{_mandir}/uk/man1
-install -d %{buildroot}%{_mandir}/uk/man5
-install -d %{buildroot}%{_mandir}/uk/man8
-install -d $RPM_BUILD_ROOT/%{_sysconfdir}/sssd
-install -m600 src/examples/sssd-example.conf $RPM_BUILD_ROOT%{_sysconfdir}/sssd/sssd.conf
-install src/sysv/SUSE/sssd $RPM_BUILD_ROOT%{_sysconfdir}/init.d/sssd
 %if 0%{?_unitdir:1}
-install -d $RPM_BUILD_ROOT/%{_unitdir}
+install -d "$b/%_unitdir";
-install src/sysv/systemd/sssd.service $RPM_BUILD_ROOT/%{_unitdir}/sssd.service
+install src/sysv/systemd/sssd.service "$b/%_unitdir/sssd.service";
 %endif
-ln -sf ../../etc/init.d/sssd $RPM_BUILD_ROOT/usr/sbin/rcsssd
+ln -sf ../../etc/init.d/sssd $b/usr/sbin/rcsssd
 
-# Remove .la files created by libtool
+find "$b" -type f -name "*.la" -delete;
-find "%buildroot" -type f -name "*.la" -delete;
 
 %if %suse_version <= 1110
 # remove some unsupported languages, sssd does not contain
 # translations for these anyway
-rm -rf \
+rm -Rf "$b/usr/share/locale"/{fa_IR,ja_JP,lt_LT,ta_IN,vi_VN}
-    $RPM_BUILD_ROOT/usr/share/locale/fa_IR \
-    $RPM_BUILD_ROOT/usr/share/locale/ja_JP \
-    $RPM_BUILD_ROOT/usr/share/locale/lt_LT \
-    $RPM_BUILD_ROOT/usr/share/locale/ta_IN \
-    $RPM_BUILD_ROOT/usr/share/locale/vi_VN
 %endif
 
-%find_lang %{name} --all-name
+%find_lang %name --all-name
 
 %if 0%{?_unitdir:1}
 %pre
@@ -274,91 +279,106 @@ rm -rf \
 %if 0%{?_unitdir:1}
 %service_del_postun sssd.service
 %endif
+if [ "$1" == "0" ]; then
+	"%_sbindir/pam-config" -d --sss || :;
+fi;
 
-%post -n libipa_hbac0 -p /sbin/ldconfig
+%post   -n libipa_hbac0 -p /sbin/ldconfig
-
 %postun -n libipa_hbac0 -p /sbin/ldconfig
+%post   -n libsss_idmap0 -p /sbin/ldconfig
+%postun -n libsss_idmap0 -p /sbin/ldconfig
 
 %files -f sssd.lang
-%defattr(-,root,root,-)
+%defattr(-,root,root)
 %doc COPYING
-%{_initrddir}/%{name}
+%_initrddir/%name
 %if 0%{?_unitdir:1}
-%{_unitdir}/sssd.service
+%_unitdir
 %endif
-%{_sbindir}/sssd
+%_bindir/sss_ssh_*
-%{_sbindir}/rcsssd
+%_sbindir/sssd
-%dir %{_libdir}/%{name}
+%_sbindir/rcsssd
-%dir %{_libexecdir}/%{name}
+%dir %_libdir/%name
-%dir %{_mandir}/cs
+%dir %_libexecdir/%name
-%dir %{_mandir}/cs/man8
+%dir %_mandir/cs
-%dir %{_mandir}/nl
+%dir %_mandir/cs/man8
-%dir %{_mandir}/nl/man8
+%dir %_mandir/nl
-%dir %{_mandir}/pt
+%dir %_mandir/nl/man8
-%dir %{_mandir}/pt/man8
+%dir %_mandir/pt
-%dir %{_mandir}/uk
+%dir %_mandir/pt/man8
-%dir %{_mandir}/uk/man1
+%dir %_mandir/uk
-%dir %{_mandir}/uk/man5
+%dir %_mandir/uk/man1
-%dir %{_mandir}/uk/man8
+%dir %_mandir/uk/man5
-%{_mandir}/??/man?/*
+%dir %_mandir/uk/man8
-%{_mandir}/man5/sssd-krb5.5*
+%_mandir/??/man?/*
-%{_mandir}/man5/sssd-ldap.5*
+%_mandir/man1/sss_ssh_*
-%{_mandir}/man5/sssd-simple.5*
+%_mandir/man5/sssd-ad.5*
-%{_mandir}/man8/sssd.8*
+%_mandir/man5/sssd-krb5.5*
-%{_mandir}/man5/sssd.conf.5.gz
+%_mandir/man5/sssd-ldap.5*
-%{_mandir}/man8/pam_sss.8.gz
+%_mandir/man5/sssd-simple.5*
-%{_mandir}/man8/sssd_krb5_locator_plugin.8.gz
+%_mandir/man5/sssd-sudo.5*
-%{_libexecdir}/%{name}/sss*
+%_mandir/man8/sssd.8*
-%{_libexecdir}/%{name}/*_child
+%_mandir/man5/sssd.conf.5.gz
-%{_libdir}/%{name}/libsss_krb5*
+%_libexecdir/%name/sss*
-%{_libdir}/%{name}/libsss_ldap*
+%_libexecdir/%name/*_child
-%{_libdir}/%{name}/libsss_proxy*
+%_libdir/%name/libsss_ad.so
-%{_libdir}/%{name}/libsss_simple*
+%_libdir/%name/libsss_krb5*
-%{_libdir}/ldb/memberof.so
+%_libdir/%name/libsss_ldap*
-%{_libdir}/krb5/plugins/libkrb5/*
+%_libdir/%name/libsss_proxy*
-%dir %{sssdstatedir}
+%_libdir/%name/libsss_simple*
-%attr(700,root,root) %dir %{dbpath}
+%_libdir/%name/modules
-%attr(755,root,root) %dir %{pipepath}
+%_libdir/ldb/memberof.so
-%attr(700,root,root) %dir %{pipepath}/private
+%dir %sssdstatedir
-%attr(755,root,root) %dir %{pubconfpath}
+%attr(700,root,root) %dir %dbpath
-%attr(750,root,root) %dir %{_var}/log/%{name}
+%attr(755,root,root) %dir %pipepath
-%dir %{_sysconfdir}/sssd
+%attr(700,root,root) %dir %pipepath/private
-%config(noreplace) %{_sysconfdir}/sssd/sssd.conf
+%attr(755,root,root) %dir %pubconfpath
-/%{_lib}/libnss_sss.so.2
+%attr(750,root,root) %dir %_localstatedir/log/%name
-/%{_lib}/security/pam_sss.so
+%dir %_sysconfdir/sssd
+%config(noreplace) %_sysconfdir/sssd/sssd.conf
 %_datadir/sssd
 %exclude %_datadir/sssd/sssd.api.d/sssd-ipa.conf
+#
+# client side
+#
+/%_lib/libnss_sss.so.2
+/%_lib/security/pam_sss.so
+%_libdir/krb5/plugins/libkrb5/*
+%_mandir/man8/pam_sss.8.gz
+%_mandir/man8/sssd_krb5_locator_plugin.8.gz
 
 %files tools
-%defattr(-,root,root,-)
+%defattr(-,root,root)
-%{_sbindir}/sss_cache
+%_sbindir/sss_cache
-%{_sbindir}/sss_debuglevel
+%_sbindir/sss_debuglevel
-%{_sbindir}/sss_useradd
+%_sbindir/sss_groupadd
-%{_sbindir}/sss_userdel
+%_sbindir/sss_groupdel
-%{_sbindir}/sss_usermod
+%_sbindir/sss_groupmod
-%{_sbindir}/sss_groupadd
+%_sbindir/sss_groupshow
-%{_sbindir}/sss_groupdel
+%_sbindir/sss_seed
-%{_sbindir}/sss_groupmod
+%_sbindir/sss_useradd
-%{_sbindir}/sss_groupshow
+%_sbindir/sss_userdel
-%{_mandir}/man8/sss_groupadd.8*
+%_sbindir/sss_usermod
-%{_mandir}/man8/sss_groupdel.8*
+%_mandir/man8/sss_groupadd.8*
-%{_mandir}/man8/sss_groupmod.8*
+%_mandir/man8/sss_groupdel.8*
-%{_mandir}/man8/sss_groupshow.8*
+%_mandir/man8/sss_groupmod.8*
-%{_mandir}/man8/sss_useradd.8*
+%_mandir/man8/sss_groupshow.8*
-%{_mandir}/man8/sss_userdel.8*
+%_mandir/man8/sss_seed.8*
-%{_mandir}/man8/sss_usermod.8*
+%_mandir/man8/sss_useradd.8*
-%{_mandir}/man8/sss_obfuscate.8*
+%_mandir/man8/sss_userdel.8*
-%{_mandir}/man8/sss_cache.8*
+%_mandir/man8/sss_usermod.8*
-%{_mandir}/man8/sss_debuglevel.8*
+%_mandir/man8/sss_obfuscate.8*
-%attr(0755,root,root) %{_sbindir}/sss_obfuscate
+%_mandir/man8/sss_cache.8*
+%_mandir/man8/sss_debuglevel.8*
+%attr(0755,root,root) %_sbindir/sss_obfuscate
 
 %files ipa-provider
-%defattr(-,root,root,-)
+%defattr(-,root,root)
 %dir %_datadir/sssd
 %dir %_datadir/sssd/sssd.api.d
 %_datadir/sssd/sssd.api.d/sssd-ipa.conf
-%{_libdir}/sssd/libsss_ipa*
+%_libdir/sssd/libsss_ipa*
-%{_mandir}/man5/sssd-ipa.*
+%_mandir/man5/sssd-ipa.*
 
 %files -n libipa_hbac0
 %defattr(-,root,root)
@@ -380,6 +400,11 @@ rm -rf \
 %_libdir/libsss_idmap.so
 %_libdir/pkgconfig/sss_idmap.pc
 
+%files -n libsss_sudo
+%defattr(-,root,root)
+%_includedir/sss_sudo.h
+%_libdir/libsss_sudo.so
+
 %files -n python-ipa_hbac
 %defattr(-,root,root)
 %python_sitearch/pyhbac.so
@@ -387,6 +412,7 @@ rm -rf \
 %files -n python-sssd-config
 %defattr(-,root,root)
 %python_sitearch/pysss.so
+%python_sitearch/pysss_murmur.so
 %python_sitelib/SSSDConfig*
 
 %changelog