11
0

- turn the testsuite off even for Factory for now, it appears it

requires certain kerberos tweaks 
  [kinit: Configuration file does not specify default realm when parsing name maguser]

OBS-URL: https://build.opensuse.org/package/show/Apache:Modules/apache2-mod_auth_gssapi?expand=0&rev=13
This commit is contained in:
2025-04-03 10:52:02 +00:00
committed by Git OBS Bridge
commit f2c9c756fb
6 changed files with 254 additions and 0 deletions

23
.gitattributes vendored Normal file
View File

@@ -0,0 +1,23 @@
## Default LFS
*.7z filter=lfs diff=lfs merge=lfs -text
*.bsp filter=lfs diff=lfs merge=lfs -text
*.bz2 filter=lfs diff=lfs merge=lfs -text
*.gem filter=lfs diff=lfs merge=lfs -text
*.gz filter=lfs diff=lfs merge=lfs -text
*.jar filter=lfs diff=lfs merge=lfs -text
*.lz filter=lfs diff=lfs merge=lfs -text
*.lzma filter=lfs diff=lfs merge=lfs -text
*.obscpio filter=lfs diff=lfs merge=lfs -text
*.oxt filter=lfs diff=lfs merge=lfs -text
*.pdf filter=lfs diff=lfs merge=lfs -text
*.png filter=lfs diff=lfs merge=lfs -text
*.rpm filter=lfs diff=lfs merge=lfs -text
*.tbz filter=lfs diff=lfs merge=lfs -text
*.tbz2 filter=lfs diff=lfs merge=lfs -text
*.tgz filter=lfs diff=lfs merge=lfs -text
*.ttf filter=lfs diff=lfs merge=lfs -text
*.txz filter=lfs diff=lfs merge=lfs -text
*.whl filter=lfs diff=lfs merge=lfs -text
*.xz filter=lfs diff=lfs merge=lfs -text
*.zip filter=lfs diff=lfs merge=lfs -text
*.zst filter=lfs diff=lfs merge=lfs -text

1
.gitignore vendored Normal file
View File

@@ -0,0 +1 @@
.osc

View File

@@ -0,0 +1,62 @@
From 07daec17066ff9871c09bc83045c106266b7e578 Mon Sep 17 00:00:00 2001
From: Johannes Kastl <kastl@b1-systems.de>
Date: Mon, 17 Jul 2023 07:38:48 +0200
Subject: [PATCH] patch tests for openSUSE
Signed-off-by: Johannes Kastl <kastl@b1-systems.de>
---
tests/httpd.conf | 2 ++
tests/magtests.py | 9 +++++++--
2 files changed, 9 insertions(+), 2 deletions(-)
diff --git a/tests/httpd.conf b/tests/httpd.conf
index 4672cde..cfa5afd 100644
--- a/tests/httpd.conf
+++ b/tests/httpd.conf
@@ -71,7 +71,9 @@ LoadModule userdir_module modules/mod_userdir.so
LoadModule version_module modules/mod_version.so
</IfModule>
LoadModule vhost_alias_module modules/mod_vhost_alias.so
+<IfModule !prefork.c>
LoadModule mpm_prefork_module modules/mod_mpm_prefork.so
+</IfModule>
LoadModule proxy_module modules/mod_proxy.so
LoadModule proxy_http_module modules/mod_proxy_http.so
diff --git a/tests/magtests.py b/tests/magtests.py
index 7316788..e0c7c07 100755
--- a/tests/magtests.py
+++ b/tests/magtests.py
@@ -417,6 +417,11 @@ def setup_http(testdir, so_dir, wrapenv):
if not os.path.exists(moddir):
distro = "Debian"
moddir = "/usr/lib/apache2/modules"
+ if not os.path.exists(moddir):
+ distro = "SUSE"
+ moddir = "/usr/lib64/apache2"
+ if not os.path.exists(moddir):
+ moddir = "/usr/lib/apache2"
if not os.path.exists(moddir):
raise ValueError("Could not find Apache module directory!")
os.symlink(moddir, os.path.join(httpdir, 'modules'))
@@ -443,7 +448,7 @@ def setup_http(testdir, so_dir, wrapenv):
'MALLOC_PERTURB_': str(random.randint(0, 32767) % 255 + 1),
})
- httpd = "httpd" if distro == "Fedora" else "apache2"
+ httpd = "httpd" if (distro == "Fedora") or (distro == "SUSE") else "apache2"
log = open(httpdstdlog, 'a')
httpproc = subprocess.Popen([httpd, '-DFOREGROUND', '-f', config],
stdout=log, stderr=log,
@@ -460,7 +465,7 @@ def kinit_user(testdir, kdcenv):
})
with (open(testlog, 'a')) as logfile:
- kinit = subprocess.Popen(["kinit", USR_NAME],
+ kinit = subprocess.Popen(["kinit", "-V", USR_NAME],
stdin=subprocess.PIPE,
stdout=logfile, stderr=logfile,
env=testenv, preexec_fn=os.setsid)
--
2.41.0

View File

@@ -0,0 +1,83 @@
-------------------------------------------------------------------
Thu Apr 3 09:55:51 UTC 2025 - pgajdos@suse.com
- turn the testsuite off even for Factory for now, it appears it
requires certain kerberos tweaks
[kinit: Configuration file does not specify default realm when parsing name maguser]
-------------------------------------------------------------------
Tue Feb 20 11:00:28 UTC 2024 - Dominique Leuenberger <dimstar@opensuse.org>
- Use %autosetup macro. Allows to eliminate the usage of deprecated
%patchN.
-------------------------------------------------------------------
Mon Jul 17 05:16:03 UTC 2023 - Johannes Kastl <kastl@b1-systems.de>
- update to 1.6.5:
* Fix a bad crash bug when the GssapiUseS4U2Proxy option is set
but no GssapiCredStore directives are provided at all.
- crash bug when s4u2proxy is configured by @simo5 in #272
- rebased patch apache2-mod_auth_gssapi-test.patch
-------------------------------------------------------------------
Mon Jul 17 05:11:38 UTC 2023 - Johannes Kastl <kastl@b1-systems.de>
- change upstream URL to https://github.com/gssapi/mod_auth_gssapi,
because https://github.com/modauthgssapi/mod_auth_gssapi has no
releases, no activity and looks fishy
- upgrade to 1.6.4:
* tests: Catch errors during tests setup by @stanislavlevin in
#225
* tests: Don't override the specific environment by the global
one by @stanislavlevin in #227
* Emit error in logs if keytab files can't be opened by @simo5 in
#229
* Add warnings if s4u2proxy options are inconsistent by @simo5 in
#232
* Move to python3 by default by @frozencemetery in #235
* Fix type/token distinction in parser.y by @frozencemetery in
#237
* Special ccache handling for {HOSTNAME} acceptor by @simo5 in
#238
* crypto: Handle EVP changes in OpenSSL 3 by @frozencemetery in
#256
-------------------------------------------------------------------
Thu Feb 3 08:48:37 UTC 2022 - pgajdos@suse.com
- test only when test requirements are fulfilled
-------------------------------------------------------------------
Wed Nov 25 12:32:53 UTC 2020 - pgajdos@suse.com
- version update to 1.6.3
* add a few options to expose the mechanism used for authentication
(when multiple are available) and to control the timeout interval
for Basic Auth sessions
* CI and other minor fixes, as well as a fix for gss_localname()
* see
https://github.com/gssapi/mod_auth_gssapi/releases
- modified patches
% apache2-mod_auth_gssapi-test.patch (refreshed)
-------------------------------------------------------------------
Wed Apr 8 14:44:12 UTC 2020 - pgajdos@suse.com
- version update to 1.6.1
* lot of changes, see
https://github.com/gssapi/mod_auth_gssapi/releases
- added patches
python3 and other testsuite fixes
+ apache2-mod_auth_gssapi-test.patch
-------------------------------------------------------------------
Sun Feb 9 20:12:17 UTC 2020 - pgajdos@suse.com
- removing %apache_test_* macros, do not test module just by
loading the module
-------------------------------------------------------------------
Tue Feb 28 15:29:32 UTC 2017 - k0da@opensuse.org
- Initial mod_gssapi-1.5 version

View File

@@ -0,0 +1,82 @@
#
# spec file for package apache2-mod_auth_gssapi
#
# Copyright (c) 2025 SUSE LLC
# Copyright (c) 2004, 2005 NOVELL (All rights reserved)
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
# upon. The license for this file, and modifications and additions to the
# file, is the same license as for the pristine package itself (unless the
# license for the pristine package is not an Open Source License, in which
# case the license is the MIT License). An "Open Source License" is a
# license that conforms to the Open Source Definition (Version 1.9)
# published by the Open Source Initiative.
# Please submit bugfixes or comments via https://bugs.opensuse.org/
#
# kinit: Configuration file does not specify default realm when parsing name maguser
%define test 0
Name: apache2-mod_auth_gssapi
Version: 1.6.5
Release: 0
Summary: GSSAPI Module for Apache
License: MIT
URL: https://github.com/gssapi/mod_auth_gssapi/
Source0: https://github.com/gssapi/mod_auth_gssapi/releases/download/v%{version}/mod_auth_gssapi-%{version}.tar.gz
# python3 and other testsuite fixes
Patch0: apache2-mod_auth_gssapi-test.patch
BuildRequires: apache-rpm-macros
BuildRequires: apache2-devel
BuildRequires: byacc
BuildRequires: flex
BuildRequires: krb5-devel
BuildRequires: openssl-devel
Requires: %{apache_mmn}
Requires: %{apache_suse_maintenance_mmn}
Requires: apache2
# SECTION test requirements
%if %{test} == 1
BuildRequires: krb5-client
BuildRequires: krb5-plugin-preauth-pkinit
BuildRequires: krb5-server
BuildRequires: nss_wrapper
BuildRequires: python3-gssapi
BuildRequires: python3-requests-gssapi
BuildRequires: python3-requests-kerberos
BuildRequires: socket_wrapper
%endif
# /SECTION
%description
This module has been built as a replacement for the aging
mod_auth_kerb. Its aim is to use only GSSAPI calls and be
as much as possible agnostic of the actual mechanism used.
%prep
%autosetup -p1 -n mod_auth_gssapi-%{version}
%build
export APACHE="%{_sbindir}/httpd"
%configure
%make_build APXS=%{apache_apxs}
%install
%make_install
rm %{buildroot}%{apache_libexecdir}/*.la
%check
%if %{test} == 1
sed -i 's/env python3/python3/' tests/*.py
export PATH="$PATH:%{_sbindir}"
make check
%endif
%files
%license COPYING
%doc README
%{apache_libexecdir}/*.so
%changelog

View File

@@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:a4bb89a2704b2a9461fbc9c0397f326b092c358d9d12b6311c2aa63d161f0530
size 513260