2006-12-19 00:16:52 +01:00
|
|
|
#
|
2010-03-05 02:10:03 +01:00
|
|
|
# spec file for package krb5 (Version 1.7)
|
2006-12-19 00:16:52 +01:00
|
|
|
#
|
2010-01-14 15:34:47 +01:00
|
|
|
# Copyright (c) 2010 SUSE LINUX Products GmbH, Nuernberg, Germany.
|
2006-12-19 00:16:52 +01:00
|
|
|
#
|
2008-10-06 19:00:36 +02:00
|
|
|
# All modifications and additions to the file contributed by third parties
|
|
|
|
# remain the property of their copyright owners, unless otherwise agreed
|
|
|
|
# upon. The license for this file, and modifications and additions to the
|
|
|
|
# file, is the same license as for the pristine package itself (unless the
|
|
|
|
# license for the pristine package is not an Open Source License, in which
|
|
|
|
# case the license is the MIT License). An "Open Source License" is a
|
|
|
|
# license that conforms to the Open Source Definition (Version 1.9)
|
|
|
|
# published by the Open Source Initiative.
|
|
|
|
|
2006-12-19 00:16:52 +01:00
|
|
|
# Please submit bugfixes or comments via http://bugs.opensuse.org/
|
|
|
|
#
|
|
|
|
|
|
|
|
# norootforbuild
|
|
|
|
|
2009-07-08 19:41:43 +02:00
|
|
|
%define build_mini 0
|
2010-03-05 02:10:03 +01:00
|
|
|
%define srcRoot krb5-1.7
|
2009-07-08 19:41:43 +02:00
|
|
|
%define vendorFiles %{_builddir}/%{srcRoot}/vendor-files/
|
|
|
|
%define krb5docdir %{_defaultdocdir}/krb5
|
2008-03-21 01:47:13 +01:00
|
|
|
|
2006-12-19 00:16:52 +01:00
|
|
|
Name: krb5
|
2009-07-08 19:41:43 +02:00
|
|
|
License: MIT License (or similar)
|
|
|
|
Url: http://web.mit.edu/kerberos/www/
|
2007-07-05 18:29:09 +02:00
|
|
|
BuildRequires: bison libcom_err-devel ncurses-devel
|
2007-01-26 17:41:59 +01:00
|
|
|
BuildRequires: keyutils keyutils-devel
|
2010-03-05 02:10:03 +01:00
|
|
|
Version: 1.7
|
|
|
|
Release: 7
|
2009-07-08 19:41:43 +02:00
|
|
|
%if ! 0%{?build_mini}
|
|
|
|
BuildRequires: libopenssl-devel openldap2-devel
|
2008-11-02 15:42:40 +01:00
|
|
|
# bug437293
|
|
|
|
%ifarch ppc64
|
|
|
|
Obsoletes: krb5-64bit
|
|
|
|
%endif
|
|
|
|
#
|
2006-12-19 00:16:52 +01:00
|
|
|
Summary: MIT Kerberos5 Implementation--Libraries
|
|
|
|
Group: Productivity/Networking/Security
|
2009-07-08 19:41:43 +02:00
|
|
|
%else
|
|
|
|
Summary: MIT Kerberos5 Implementation--Libraries
|
|
|
|
Group: Productivity/Networking/Security
|
|
|
|
%endif
|
2010-03-05 02:10:03 +01:00
|
|
|
Source: krb5-1.7.tar.bz2
|
2006-12-19 00:16:52 +01:00
|
|
|
Source1: vendor-files.tar.bz2
|
2010-03-05 02:10:03 +01:00
|
|
|
Source2: README.Source
|
|
|
|
Source3: spx.c
|
|
|
|
Source4: baselibs.conf
|
2009-07-08 19:41:43 +02:00
|
|
|
Source5: krb5-%{version}-rpmlintrc
|
|
|
|
Source10: krb5-1.7-manpaths.txt
|
2007-04-17 00:35:48 +02:00
|
|
|
Patch2: krb5-1.6.1-compile_pie.dif
|
2009-07-08 19:41:43 +02:00
|
|
|
Patch20: krb5-1.6.3-kprop-use-mkstemp.dif
|
2010-03-05 02:10:03 +01:00
|
|
|
Patch21: krb5-1.5.1-fix-var-used-before-value-set.dif
|
|
|
|
Patch22: krb5-1.5.1-fix-ftp-var-used-uninitialized.dif
|
2009-07-08 19:41:43 +02:00
|
|
|
Patch30: krb5-1.7-manpaths.dif
|
2007-10-25 02:08:58 +02:00
|
|
|
Patch32: krb5-1.4.3-enospc.dif
|
2009-07-08 19:41:43 +02:00
|
|
|
Patch34: krb5-1.6.3-gssapi_improve_errormessages.dif
|
|
|
|
Patch41: krb5-1.6.3-kpasswd_tcp.patch
|
2008-06-23 04:16:38 +02:00
|
|
|
Patch44: krb5-1.6.3-ktutil-manpage.dif
|
2008-12-15 14:48:05 +01:00
|
|
|
Patch46: krb5-1.6.3-fix-ipv6-query.dif
|
2010-03-05 02:10:03 +01:00
|
|
|
Patch47: krb5-1.7-MITKRB5-SA-2009-003.dif
|
|
|
|
Patch48: krb5-1.7-MITKRB5-SA-2009-004.dif
|
2006-12-19 00:16:52 +01:00
|
|
|
BuildRoot: %{_tmppath}/%{name}-%{version}-build
|
2008-06-23 04:16:38 +02:00
|
|
|
PreReq: mktemp, grep, /bin/touch, coreutils
|
|
|
|
PreReq: %insserv_prereq %fillup_prereq
|
2006-12-19 00:16:52 +01:00
|
|
|
|
|
|
|
%description
|
|
|
|
Kerberos V5 is a trusted-third-party network authentication system,
|
|
|
|
which can improve your network's security by eliminating the insecure
|
|
|
|
practice of clear text passwords.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Authors:
|
|
|
|
--------
|
|
|
|
The MIT Kerberos Team
|
|
|
|
Sam Hartman <hartmans@mit.edu>
|
|
|
|
Ken Raeburn <raeburn@mit.edu>
|
|
|
|
Tom Yu <tlyu@mit.edu>
|
|
|
|
|
2009-07-08 19:41:43 +02:00
|
|
|
%if ! %{build_mini}
|
|
|
|
|
2006-12-19 00:16:52 +01:00
|
|
|
%package client
|
2009-07-08 19:41:43 +02:00
|
|
|
License: MIT License (or similar)
|
2007-06-15 00:26:00 +02:00
|
|
|
Summary: MIT Kerberos5 implementation - client programs
|
2006-12-19 00:16:52 +01:00
|
|
|
Group: Productivity/Networking/Security
|
|
|
|
|
|
|
|
%description client
|
|
|
|
Kerberos V5 is a trusted-third-party network authentication system,
|
|
|
|
which can improve your network's security by eliminating the insecure
|
|
|
|
practice of cleartext passwords. This package includes some required
|
|
|
|
client programs, like kinit, kadmin, ...
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Authors:
|
|
|
|
--------
|
|
|
|
The MIT Kerberos Team
|
|
|
|
Sam Hartman <hartmans@mit.edu>
|
|
|
|
Ken Raeburn <raeburn@mit.edu>
|
|
|
|
Tom Yu <tlyu@mit.edu>
|
|
|
|
|
|
|
|
%package server
|
2009-07-08 19:41:43 +02:00
|
|
|
License: MIT License (or similar)
|
2006-12-19 00:16:52 +01:00
|
|
|
Summary: MIT Kerberos5 implementation - server
|
|
|
|
Group: Productivity/Networking/Security
|
|
|
|
Requires: perl-Date-Calc
|
2008-06-23 04:16:38 +02:00
|
|
|
Requires: logrotate cron
|
2006-12-19 00:16:52 +01:00
|
|
|
PreReq: %insserv_prereq %fillup_prereq
|
|
|
|
|
|
|
|
%description server
|
|
|
|
Kerberos V5 is a trusted-third-party network authentication system,
|
|
|
|
which can improve your network's security by eliminating the insecure
|
|
|
|
practice of cleartext passwords. This package includes the kdc, kadmind
|
|
|
|
and more.
|
|
|
|
|
|
|
|
|
|
|
|
|
2010-03-05 02:10:03 +01:00
|
|
|
Authors:
|
|
|
|
--------
|
|
|
|
The MIT Kerberos Team
|
|
|
|
Sam Hartman <hartmans@mit.edu>
|
|
|
|
Ken Raeburn <raeburn@mit.edu>
|
|
|
|
Tom Yu <tlyu@mit.edu>
|
|
|
|
|
|
|
|
%package apps-servers
|
|
|
|
License: MIT License (or similar)
|
|
|
|
Summary: MIT Kerberos5 server applications
|
|
|
|
Group: Productivity/Networking/Security
|
|
|
|
|
|
|
|
%description apps-servers
|
|
|
|
Kerberos V5 is a trusted-third-party network authentication system,
|
|
|
|
which can improve your network's security by eliminating the insecure
|
|
|
|
practice of cleartext passwords. This package includes some kerberos
|
|
|
|
compatible server applications like ftpd, klogind, telnetd, ...
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Authors:
|
|
|
|
--------
|
|
|
|
The MIT Kerberos Team
|
|
|
|
Sam Hartman <hartmans@mit.edu>
|
|
|
|
Ken Raeburn <raeburn@mit.edu>
|
|
|
|
Tom Yu <tlyu@mit.edu>
|
|
|
|
|
|
|
|
%package apps-clients
|
|
|
|
License: MIT License (or similar)
|
|
|
|
Summary: MIT Kerberos5 client applications
|
|
|
|
Group: Productivity/Networking/Security
|
|
|
|
|
|
|
|
%description apps-clients
|
|
|
|
Kerberos V5 is a trusted-third-party network authentication system,
|
|
|
|
which can improve your network's security by eliminating the insecure
|
|
|
|
practice of cleartext passwords. This package includes some kerberos
|
|
|
|
compatible client applications like ftp, rpc, rlogin, telnet, ...
|
|
|
|
|
|
|
|
|
|
|
|
|
2006-12-19 00:16:52 +01:00
|
|
|
Authors:
|
|
|
|
--------
|
|
|
|
The MIT Kerberos Team
|
|
|
|
Sam Hartman <hartmans@mit.edu>
|
|
|
|
Ken Raeburn <raeburn@mit.edu>
|
|
|
|
Tom Yu <tlyu@mit.edu>
|
|
|
|
|
2009-07-08 19:41:43 +02:00
|
|
|
%package plugin-kdb-ldap
|
|
|
|
License: MIT License (or similar)
|
|
|
|
Summary: MIT Kerberos5 Implementation--LDAP Database Plugin
|
2006-12-19 00:16:52 +01:00
|
|
|
Group: Productivity/Networking/Security
|
2009-07-08 19:41:43 +02:00
|
|
|
Requires: krb5-server = %{version}
|
2006-12-19 00:16:52 +01:00
|
|
|
|
2009-07-08 19:41:43 +02:00
|
|
|
%description plugin-kdb-ldap
|
2006-12-19 00:16:52 +01:00
|
|
|
Kerberos V5 is a trusted-third-party network authentication system,
|
|
|
|
which can improve your network's security by eliminating the insecure
|
2009-07-08 19:41:43 +02:00
|
|
|
practice of clear text passwords. This package contains the LDAP
|
|
|
|
database plugin.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Authors:
|
|
|
|
--------
|
|
|
|
The MIT Kerberos Team
|
|
|
|
Sam Hartman <hartmans@mit.edu>
|
|
|
|
Ken Raeburn <raeburn@mit.edu>
|
|
|
|
Tom Yu <tlyu@mit.edu>
|
|
|
|
|
|
|
|
%package plugin-preauth-pkinit
|
|
|
|
License: MIT License (or similar)
|
|
|
|
Summary: MIT Kerberos5 Implementation--PKINIT preauth Plugin
|
|
|
|
Group: Productivity/Networking/Security
|
|
|
|
|
|
|
|
%description plugin-preauth-pkinit
|
|
|
|
Kerberos V5 is a trusted-third-party network authentication system,
|
|
|
|
which can improve your network's security by eliminating the insecure
|
|
|
|
practice of cleartext passwords. This package includes a PKINIT plugin.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Authors:
|
|
|
|
--------
|
|
|
|
The MIT Kerberos Team
|
|
|
|
Sam Hartman <hartmans@mit.edu>
|
|
|
|
Ken Raeburn <raeburn@mit.edu>
|
|
|
|
Tom Yu <tlyu@mit.edu>
|
|
|
|
|
|
|
|
%endif #! build_mini
|
|
|
|
|
|
|
|
%package devel
|
|
|
|
License: MIT License (or similar)
|
|
|
|
Summary: MIT Kerberos5 - Include Files and Libraries
|
|
|
|
Group: Development/Libraries/C and C++
|
|
|
|
PreReq: %{name} = %{version}
|
|
|
|
Requires: libcom_err-devel
|
|
|
|
Requires: keyutils-devel
|
|
|
|
# bug437293
|
|
|
|
%ifarch ppc64
|
|
|
|
Obsoletes: krb5-devel-64bit
|
|
|
|
%endif
|
|
|
|
%if %{build_mini}
|
|
|
|
Provides: krb5-devel = %{version}
|
|
|
|
%endif
|
|
|
|
#
|
|
|
|
|
|
|
|
%description devel
|
|
|
|
Kerberos V5 is a trusted-third-party network authentication system,
|
|
|
|
which can improve your network's security by eliminating the insecure
|
|
|
|
practice of cleartext passwords. This package includes Libraries and
|
|
|
|
Include Files for Development
|
2006-12-19 00:16:52 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Authors:
|
|
|
|
--------
|
|
|
|
The MIT Kerberos Team
|
|
|
|
Sam Hartman <hartmans@mit.edu>
|
|
|
|
Ken Raeburn <raeburn@mit.edu>
|
|
|
|
Tom Yu <tlyu@mit.edu>
|
|
|
|
|
|
|
|
%prep
|
|
|
|
%setup -q -n %{srcRoot}
|
|
|
|
%setup -a 1 -T -D -n %{srcRoot}
|
2010-03-05 02:10:03 +01:00
|
|
|
if [ -e %{_builddir}/%{srcRoot}/src/appl/telnet/libtelnet/spx.c ]
|
|
|
|
then
|
|
|
|
echo "spx.c contains potential legal risks."
|
|
|
|
exit 1;
|
|
|
|
else
|
|
|
|
cp %{SOURCE3} %{_builddir}/%{srcRoot}/src/appl/telnet/libtelnet/spx.c
|
|
|
|
fi
|
2006-12-19 00:16:52 +01:00
|
|
|
%patch2
|
|
|
|
%patch20
|
2010-03-05 02:10:03 +01:00
|
|
|
%patch21
|
|
|
|
%patch22
|
2007-10-25 02:08:58 +02:00
|
|
|
%patch30 -p1
|
|
|
|
%patch32 -p1
|
2007-12-06 01:01:44 +01:00
|
|
|
%patch34 -p1
|
2008-05-17 02:39:26 +02:00
|
|
|
%patch41
|
2008-06-23 04:16:38 +02:00
|
|
|
%patch44 -p1
|
2008-12-15 14:48:05 +01:00
|
|
|
%patch46 -p1
|
2010-03-05 02:10:03 +01:00
|
|
|
%patch47 -p1
|
|
|
|
%patch48 -p1
|
2007-10-25 02:08:58 +02:00
|
|
|
# Rename the man pages so that they'll get generated correctly.
|
|
|
|
pushd src
|
2009-07-08 19:41:43 +02:00
|
|
|
cat %{SOURCE10} | while read manpage ; do
|
2007-10-25 02:08:58 +02:00
|
|
|
mv "$manpage" "$manpage".in
|
|
|
|
done
|
|
|
|
popd
|
2006-12-19 00:16:52 +01:00
|
|
|
|
|
|
|
%build
|
|
|
|
cd src
|
|
|
|
%{?suse_update_config:%{suse_update_config -f}}
|
|
|
|
./util/reconf
|
2009-07-08 19:41:43 +02:00
|
|
|
CFLAGS="$RPM_OPT_FLAGS -I/usr/include/et -fno-strict-aliasing -D_GNU_SOURCE -fPIC " \
|
2006-12-19 00:16:52 +01:00
|
|
|
./configure \
|
|
|
|
--prefix=/usr/lib/mit \
|
|
|
|
--sysconfdir=%{_sysconfdir} \
|
|
|
|
--mandir=%{_mandir} \
|
|
|
|
--infodir=%{_infodir} \
|
|
|
|
--libexecdir=/usr/lib/mit/sbin \
|
|
|
|
--libdir=%{_libdir} \
|
|
|
|
--includedir=%{_includedir} \
|
|
|
|
--localstatedir=%{_localstatedir}/lib/kerberos \
|
|
|
|
--enable-shared \
|
|
|
|
--disable-static \
|
2009-07-08 19:41:43 +02:00
|
|
|
--enable-kdc-replay-cache \
|
|
|
|
--enable-dns-for-realm \
|
|
|
|
--disable-rpath \
|
|
|
|
%if ! %{build_mini}
|
|
|
|
--with-ldap \
|
|
|
|
%else
|
|
|
|
--disable-pkinit \
|
|
|
|
%endif
|
2006-12-19 00:16:52 +01:00
|
|
|
--with-system-et \
|
|
|
|
--with-system-ss
|
|
|
|
make %{?jobs:-j%jobs}
|
|
|
|
|
|
|
|
%install
|
|
|
|
cd src
|
|
|
|
make DESTDIR=%{buildroot} install
|
|
|
|
cd ..
|
2008-04-09 21:26:24 +02:00
|
|
|
# Munge the krb5-config script to remove rpaths and CFLAGS.
|
|
|
|
sed "s|^CC_LINK=.*|CC_LINK='\$(CC) \$(PROG_LIBPATH)'|g" src/krb5-config > $RPM_BUILD_ROOT/usr/lib/mit/bin/krb5-config
|
2006-12-19 00:16:52 +01:00
|
|
|
# install sample config files
|
|
|
|
# I'll probably do something about this later on
|
|
|
|
mkdir -p %{buildroot}%{_sysconfdir} %{buildroot}%{_localstatedir}/lib/kerberos/krb5kdc
|
|
|
|
mkdir -p %{buildroot}%{_sysconfdir}
|
|
|
|
mkdir -p %{buildroot}/etc/profile.d/
|
|
|
|
mkdir -p %{buildroot}/var/log/krb5
|
2007-03-05 15:26:29 +01:00
|
|
|
mkdir -p %{buildroot}/etc/sysconfig/SuSEfirewall2.d/services/
|
2007-04-20 01:22:05 +02:00
|
|
|
# create plugin directories
|
|
|
|
mkdir -p %{buildroot}/%{_libdir}/krb5/plugins/kdb
|
|
|
|
mkdir -p %{buildroot}/%{_libdir}/krb5/plugins/preauth
|
|
|
|
mkdir -p %{buildroot}/%{_libdir}/krb5/plugins/libkrb5
|
2006-12-19 00:16:52 +01:00
|
|
|
install -m 644 %{vendorFiles}/krb5.conf %{buildroot}%{_sysconfdir}
|
|
|
|
install -m 600 %{vendorFiles}/kdc.conf %{buildroot}%{_localstatedir}/lib/kerberos/krb5kdc/
|
|
|
|
install -m 600 %{vendorFiles}/kadm5.acl %{buildroot}%{_localstatedir}/lib/kerberos/krb5kdc/
|
|
|
|
install -m 600 %{vendorFiles}/kadm5.dict %{buildroot}%{_localstatedir}/lib/kerberos/krb5kdc/
|
|
|
|
install -m 644 %{vendorFiles}/krb5.csh.profile %{buildroot}/etc/profile.d/krb5.csh
|
|
|
|
install -m 644 %{vendorFiles}/krb5.sh.profile %{buildroot}/etc/profile.d/krb5.sh
|
2007-03-05 15:26:29 +01:00
|
|
|
install -m 644 %{vendorFiles}/SuSEFirewall.kdc %{buildroot}/etc/sysconfig/SuSEfirewall2.d/services/kdc
|
|
|
|
install -m 644 %{vendorFiles}/SuSEFirewall.kadmind %{buildroot}/etc/sysconfig/SuSEfirewall2.d/services/kadmind
|
2010-03-05 02:10:03 +01:00
|
|
|
for n in ftpd.8 telnetd.8; do
|
|
|
|
mv %{buildroot}%{_mandir}/man8/${n} %{buildroot}%{_mandir}/man8/k${n}
|
|
|
|
done
|
|
|
|
for n in ftp.1 rlogin.1 rcp.1 rsh.1 telnet.1; do
|
|
|
|
mv %{buildroot}%{_mandir}/man1/${n} %{buildroot}%{_mandir}/man1/k${n}
|
|
|
|
done
|
2006-12-19 00:16:52 +01:00
|
|
|
# all libs must have permissions 0755
|
|
|
|
for lib in `find %{buildroot}/%{_libdir}/ -type f -name "*.so*"`
|
|
|
|
do
|
|
|
|
chmod 0755 ${lib}
|
|
|
|
done
|
2007-06-15 00:30:00 +02:00
|
|
|
# and binaries too
|
|
|
|
chmod 0755 %{buildroot}/usr/lib/mit/bin/ksu
|
2006-12-19 00:16:52 +01:00
|
|
|
# install init scripts
|
|
|
|
mkdir -p %{buildroot}%{_sysconfdir}/init.d
|
|
|
|
install -m 755 %{vendorFiles}/kadmind.init %{buildroot}%{_sysconfdir}/init.d/kadmind
|
|
|
|
install -m 755 %{vendorFiles}/krb5kdc.init %{buildroot}%{_sysconfdir}/init.d/krb5kdc
|
|
|
|
install -m 755 %{vendorFiles}/kpropd.init %{buildroot}%{_sysconfdir}/init.d/kpropd
|
2010-03-05 02:10:03 +01:00
|
|
|
# install xinetd files
|
|
|
|
mkdir -p %{buildroot}%{_sysconfdir}/xinetd.d
|
|
|
|
install -m 644 %{vendorFiles}/klogin.xinetd %{buildroot}%{_sysconfdir}/xinetd.d/klogin
|
|
|
|
install -m 644 %{vendorFiles}/eklogin.xinetd %{buildroot}%{_sysconfdir}/xinetd.d/eklogin
|
|
|
|
install -m 644 %{vendorFiles}/krb5-telnet.xinetd %{buildroot}%{_sysconfdir}/xinetd.d/ktelnet
|
|
|
|
install -m 644 %{vendorFiles}/kshell.xinetd %{buildroot}%{_sysconfdir}/xinetd.d/kshell
|
2006-12-19 00:16:52 +01:00
|
|
|
# install logrotate files
|
|
|
|
mkdir -p %{buildroot}%{_sysconfdir}/logrotate.d
|
2007-06-15 00:26:00 +02:00
|
|
|
install -m 644 %{vendorFiles}/krb5-server.logrotate %{buildroot}%{_sysconfdir}/logrotate.d/krb5-server
|
2006-12-19 00:16:52 +01:00
|
|
|
find . -type f -name '*.ps' -exec gzip -9 {} \;
|
|
|
|
# create rc* links
|
|
|
|
mkdir -p %{buildroot}/usr/bin/
|
|
|
|
ln -sf ../../etc/init.d/kadmind %{buildroot}/usr/bin/rckadmind
|
|
|
|
ln -sf ../../etc/init.d/krb5kdc %{buildroot}/usr/bin/rckrb5kdc
|
|
|
|
ln -sf ../../etc/init.d/kpropd %{buildroot}/usr/bin/rckpropd
|
|
|
|
# create links for kinit and klist, because of the java ones
|
|
|
|
ln -sf ../../usr/lib/mit/bin/kinit %{buildroot}/usr/bin/kinit
|
|
|
|
ln -sf ../../usr/lib/mit/bin/klist %{buildroot}/usr/bin/klist
|
|
|
|
# install doc
|
|
|
|
install -d -m 755 %{buildroot}/%{krb5docdir}
|
|
|
|
install -m 644 %{_builddir}/%{srcRoot}/README %{buildroot}/%{krb5docdir}/README
|
2009-07-08 19:41:43 +02:00
|
|
|
%if ! %{build_mini}
|
|
|
|
install -m 644 %{_builddir}/%{srcRoot}/src/plugins/kdb/ldap/libkdb_ldap/kerberos.schema %{buildroot}/%{krb5docdir}/kerberos.schema
|
|
|
|
install -m 644 %{_builddir}/%{srcRoot}/src/plugins/kdb/ldap/libkdb_ldap/kerberos.ldif %{buildroot}/%{krb5docdir}/kerberos.ldif
|
|
|
|
%endif
|
2006-12-19 00:16:52 +01:00
|
|
|
# cleanup
|
|
|
|
rm -f %{buildroot}/usr/share/man/man1/tmac.doc*
|
|
|
|
rm -f /usr/share/man/man1/tmac.doc*
|
|
|
|
rm -rf /usr/lib/mit/share
|
|
|
|
rm -rf %{buildroot}/usr/lib/mit/share
|
|
|
|
#####################################################
|
2009-07-08 19:41:43 +02:00
|
|
|
# krb5-mini-devel pre/post/postun
|
2006-12-19 00:16:52 +01:00
|
|
|
#####################################################
|
2009-07-08 19:41:43 +02:00
|
|
|
%if %{build_mini}
|
2006-12-19 00:16:52 +01:00
|
|
|
|
2009-07-08 19:41:43 +02:00
|
|
|
%preun
|
|
|
|
%stop_on_removal krb5kdc kadmind kpropd
|
2006-12-19 00:16:52 +01:00
|
|
|
|
2008-06-23 04:16:38 +02:00
|
|
|
%postun
|
|
|
|
/sbin/ldconfig
|
2009-07-08 19:41:43 +02:00
|
|
|
%restart_on_update krb5kdc kadmind kpropd
|
|
|
|
%{insserv_cleanup}
|
|
|
|
|
|
|
|
%post -p /sbin/ldconfig
|
|
|
|
%else
|
2006-12-19 00:16:52 +01:00
|
|
|
#####################################################
|
2009-07-08 19:41:43 +02:00
|
|
|
# krb5 pre/post/postun
|
2006-12-19 00:16:52 +01:00
|
|
|
#####################################################
|
|
|
|
|
2009-07-08 19:41:43 +02:00
|
|
|
%post -p /sbin/ldconfig
|
|
|
|
|
|
|
|
%postun -p /sbin/ldconfig
|
|
|
|
|
2006-12-19 00:16:52 +01:00
|
|
|
%preun server
|
2009-07-08 19:41:43 +02:00
|
|
|
#####################################################
|
|
|
|
# krb5-server preun/postun
|
|
|
|
#####################################################
|
|
|
|
%stop_on_removal krb5kdc kadmind kpropd
|
2006-12-19 00:16:52 +01:00
|
|
|
|
|
|
|
%postun server
|
2009-07-08 19:41:43 +02:00
|
|
|
%restart_on_update krb5kdc kadmind kpropd
|
2006-12-19 00:16:52 +01:00
|
|
|
%{insserv_cleanup}
|
2009-07-08 19:41:43 +02:00
|
|
|
#####################################################
|
|
|
|
# krb5-plugin-kdb-ldap post/postun
|
|
|
|
#####################################################
|
|
|
|
|
|
|
|
%post plugin-kdb-ldap -p /sbin/ldconfig
|
|
|
|
|
|
|
|
%postun plugin-kdb-ldap -p /sbin/ldconfig
|
|
|
|
%endif
|
2006-12-19 00:16:52 +01:00
|
|
|
|
|
|
|
%clean
|
|
|
|
rm -rf %{buildroot}
|
|
|
|
########################################################
|
|
|
|
# files sections
|
|
|
|
########################################################
|
|
|
|
|
2009-07-08 19:41:43 +02:00
|
|
|
%files devel
|
|
|
|
%defattr(-,root,root)
|
|
|
|
%dir /usr/lib/mit
|
|
|
|
%dir /usr/lib/mit/bin
|
|
|
|
%dir /usr/lib/mit/sbin
|
|
|
|
%{_libdir}/libgssrpc.so
|
|
|
|
%{_libdir}/libk5crypto.so
|
|
|
|
%{_libdir}/libkadm5clnt.so
|
|
|
|
%{_libdir}/libkadm5srv.so
|
|
|
|
%{_libdir}/libkdb5.so
|
|
|
|
%{_libdir}/libkrb5.so
|
|
|
|
%{_libdir}/libkrb5support.so
|
|
|
|
%{_includedir}/*
|
|
|
|
/usr/lib/mit/bin/krb5-config
|
|
|
|
/usr/lib/mit/sbin/krb5-send-pr
|
|
|
|
%{_mandir}/man1/krb5-send-pr.1*
|
|
|
|
%{_mandir}/man1/krb5-config.1*
|
|
|
|
%if %{build_mini}
|
|
|
|
|
|
|
|
%files
|
|
|
|
%defattr(-,root,root)
|
|
|
|
%dir %{krb5docdir}
|
|
|
|
# add directories
|
|
|
|
%dir %{_libdir}/krb5
|
|
|
|
%dir %{_libdir}/krb5/plugins
|
|
|
|
%dir %{_libdir}/krb5/plugins/kdb
|
|
|
|
%dir %{_libdir}/krb5/plugins/preauth
|
|
|
|
%dir %{_libdir}/krb5/plugins/libkrb5
|
|
|
|
%dir %{_localstatedir}/lib/kerberos/
|
|
|
|
%dir %{_localstatedir}/lib/kerberos/krb5kdc
|
|
|
|
%attr(0700,root,root) %dir /var/log/krb5
|
|
|
|
%dir /usr/lib/mit
|
|
|
|
%dir /usr/lib/mit/sbin
|
|
|
|
%dir /usr/lib/mit/bin
|
|
|
|
%doc %{krb5docdir}/README
|
|
|
|
%attr(0644,root,root) %config(noreplace) %{_sysconfdir}/krb5.conf
|
|
|
|
%attr(0644,root,root) %config /etc/profile.d/krb5*
|
|
|
|
%config(noreplace) %{_sysconfdir}/logrotate.d/krb5-server
|
|
|
|
%attr(0600,root,root) %config(noreplace) %{_localstatedir}/lib/kerberos/krb5kdc/kdc.conf
|
|
|
|
%attr(0600,root,root) %config(noreplace) %{_localstatedir}/lib/kerberos/krb5kdc/kadm5.acl
|
|
|
|
%attr(0600,root,root) %config(noreplace) %{_localstatedir}/lib/kerberos/krb5kdc/kadm5.dict
|
2010-03-05 02:10:03 +01:00
|
|
|
%config(noreplace) %{_sysconfdir}/xinetd.d/klogin
|
|
|
|
%config(noreplace) %{_sysconfdir}/xinetd.d/eklogin
|
|
|
|
%config(noreplace) %{_sysconfdir}/xinetd.d/kshell
|
|
|
|
%config(noreplace) %{_sysconfdir}/xinetd.d/ktelnet
|
2009-07-08 19:41:43 +02:00
|
|
|
%config %{_sysconfdir}/sysconfig/SuSEfirewall2.d/services/k*
|
|
|
|
%{_sysconfdir}/init.d/*
|
|
|
|
%{_libdir}/libgssapi_krb5.*
|
|
|
|
%{_libdir}/libgssrpc.so.*
|
|
|
|
%{_libdir}/libk5crypto.so.*
|
2010-03-05 02:10:03 +01:00
|
|
|
%{_libdir}/libkadm5clnt.so.*
|
|
|
|
%{_libdir}/libkadm5srv.so.*
|
2009-07-08 19:41:43 +02:00
|
|
|
%{_libdir}/libkdb5.so.*
|
|
|
|
%{_libdir}/libkrb5.so.*
|
|
|
|
%{_libdir}/libkrb5support.so.*
|
|
|
|
%{_libdir}/krb5/plugins/kdb/*
|
|
|
|
%{_libdir}/krb5/plugins/preauth/*
|
|
|
|
#/usr/lib/mit/sbin/*
|
|
|
|
/usr/lib/mit/sbin/kadmin.local
|
|
|
|
/usr/lib/mit/sbin/kadmind
|
|
|
|
/usr/lib/mit/sbin/kpropd
|
|
|
|
/usr/lib/mit/sbin/kproplog
|
|
|
|
/usr/lib/mit/sbin/kprop
|
|
|
|
/usr/lib/mit/sbin/kdb5_util
|
|
|
|
/usr/lib/mit/sbin/krb5kdc
|
2010-03-05 02:10:03 +01:00
|
|
|
/usr/lib/mit/sbin/ftpd
|
|
|
|
/usr/lib/mit/sbin/klogind
|
|
|
|
/usr/lib/mit/sbin/kshd
|
|
|
|
/usr/lib/mit/sbin/telnetd
|
2009-07-08 19:41:43 +02:00
|
|
|
/usr/lib/mit/sbin/uuserver
|
|
|
|
/usr/lib/mit/sbin/sserver
|
|
|
|
/usr/lib/mit/sbin/gss-server
|
|
|
|
/usr/lib/mit/sbin/sim_server
|
2010-03-05 02:10:03 +01:00
|
|
|
/usr/lib/mit/sbin/login.krb5
|
2009-07-08 19:41:43 +02:00
|
|
|
/usr/lib/mit/bin/k5srvutil
|
|
|
|
/usr/lib/mit/bin/kvno
|
|
|
|
/usr/lib/mit/bin/kinit
|
|
|
|
/usr/lib/mit/bin/kdestroy
|
|
|
|
/usr/lib/mit/bin/kpasswd
|
|
|
|
/usr/lib/mit/bin/klist
|
|
|
|
/usr/lib/mit/bin/kadmin
|
|
|
|
/usr/lib/mit/bin/ktutil
|
|
|
|
%attr(0755,root,root) /usr/lib/mit/bin/ksu
|
2010-03-05 02:10:03 +01:00
|
|
|
/usr/lib/mit/bin/rcp
|
|
|
|
/usr/lib/mit/bin/rsh
|
|
|
|
/usr/lib/mit/bin/telnet
|
2009-07-08 19:41:43 +02:00
|
|
|
/usr/lib/mit/bin/uuclient
|
|
|
|
/usr/lib/mit/bin/sclient
|
|
|
|
/usr/lib/mit/bin/gss-client
|
|
|
|
/usr/lib/mit/bin/sim_client
|
2010-03-05 02:10:03 +01:00
|
|
|
/usr/lib/mit/bin/ftp
|
|
|
|
/usr/lib/mit/bin/rlogin
|
|
|
|
#/usr/lib/mit/bin/*
|
2009-07-08 19:41:43 +02:00
|
|
|
/usr/bin/kinit
|
|
|
|
/usr/bin/klist
|
|
|
|
/usr/bin/rc*
|
|
|
|
#%{_mandir}/man1/*
|
|
|
|
%{_mandir}/man1/kvno.1*
|
|
|
|
%{_mandir}/man1/kinit.1*
|
|
|
|
%{_mandir}/man1/kdestroy.1*
|
|
|
|
%{_mandir}/man1/kpasswd.1*
|
|
|
|
%{_mandir}/man1/klist.1*
|
|
|
|
%{_mandir}/man1/kerberos.1*
|
2010-03-05 02:10:03 +01:00
|
|
|
%{_mandir}/man1/kftp.1*
|
|
|
|
%{_mandir}/man1/krlogin.1*
|
|
|
|
%{_mandir}/man1/krsh.1*
|
|
|
|
%{_mandir}/man1/ktelnet.1*
|
2009-07-08 19:41:43 +02:00
|
|
|
%{_mandir}/man1/ksu.1*
|
2010-03-05 02:10:03 +01:00
|
|
|
%{_mandir}/man1/krcp.1*
|
2009-07-08 19:41:43 +02:00
|
|
|
%{_mandir}/man1/sclient.1*
|
|
|
|
%{_mandir}/man1/kadmin.1*
|
|
|
|
%{_mandir}/man1/ktutil.1*
|
|
|
|
%{_mandir}/man1/k5srvutil.1*
|
|
|
|
%{_mandir}/man5/*
|
|
|
|
%{_mandir}/man5/.k5login.5.gz
|
|
|
|
%{_mandir}/man8/*
|
|
|
|
%else
|
|
|
|
|
2006-12-19 00:16:52 +01:00
|
|
|
%files
|
|
|
|
%defattr(-,root,root)
|
|
|
|
%dir %{krb5docdir}
|
2007-04-20 01:22:05 +02:00
|
|
|
# add plugin directories
|
|
|
|
%dir %{_libdir}/krb5
|
|
|
|
%dir %{_libdir}/krb5/plugins
|
|
|
|
%dir %{_libdir}/krb5/plugins/kdb
|
|
|
|
%dir %{_libdir}/krb5/plugins/preauth
|
|
|
|
%dir %{_libdir}/krb5/plugins/libkrb5
|
|
|
|
# add log directory
|
2006-12-19 00:16:52 +01:00
|
|
|
%attr(0700,root,root) %dir /var/log/krb5
|
2009-07-08 19:41:43 +02:00
|
|
|
%doc %{krb5docdir}/README
|
2006-12-19 00:16:52 +01:00
|
|
|
%attr(0644,root,root) %config(noreplace) %{_sysconfdir}/krb5.conf
|
|
|
|
%attr(0644,root,root) %config /etc/profile.d/krb5*
|
2009-07-08 19:41:43 +02:00
|
|
|
%{_libdir}/libgssapi_krb5.*
|
|
|
|
%{_libdir}/libgssrpc.so.*
|
|
|
|
%{_libdir}/libk5crypto.so.*
|
2010-03-05 02:10:03 +01:00
|
|
|
%{_libdir}/libkadm5clnt.so.*
|
|
|
|
%{_libdir}/libkadm5srv.so.*
|
2009-07-08 19:41:43 +02:00
|
|
|
%{_libdir}/libkdb5.so.*
|
|
|
|
%{_libdir}/libkrb5.so.*
|
|
|
|
%{_libdir}/libkrb5support.so.*
|
|
|
|
%{_libdir}/krb5/plugins/preauth/encrypted_challenge.so
|
2006-12-19 00:16:52 +01:00
|
|
|
|
|
|
|
%files server
|
|
|
|
%defattr(-,root,root)
|
2007-06-15 00:26:00 +02:00
|
|
|
%config(noreplace) %{_sysconfdir}/logrotate.d/krb5-server
|
2006-12-19 00:16:52 +01:00
|
|
|
%{_sysconfdir}/init.d/kadmind
|
|
|
|
%{_sysconfdir}/init.d/krb5kdc
|
|
|
|
%{_sysconfdir}/init.d/kpropd
|
|
|
|
%dir %{krb5docdir}
|
|
|
|
%dir /usr/lib/mit
|
|
|
|
%dir /usr/lib/mit/sbin
|
|
|
|
%dir %{_localstatedir}/lib/kerberos/
|
|
|
|
%dir %{_localstatedir}/lib/kerberos/krb5kdc
|
|
|
|
%dir %{_libdir}/krb5
|
|
|
|
%dir %{_libdir}/krb5/plugins
|
|
|
|
%dir %{_libdir}/krb5/plugins/kdb
|
|
|
|
%attr(0600,root,root) %config(noreplace) %{_localstatedir}/lib/kerberos/krb5kdc/kdc.conf
|
|
|
|
%attr(0600,root,root) %config(noreplace) %{_localstatedir}/lib/kerberos/krb5kdc/kadm5.acl
|
|
|
|
%attr(0600,root,root) %config(noreplace) %{_localstatedir}/lib/kerberos/krb5kdc/kadm5.dict
|
2009-07-08 19:41:43 +02:00
|
|
|
%config %{_sysconfdir}/sysconfig/SuSEfirewall2.d/services/k*
|
2006-12-19 00:16:52 +01:00
|
|
|
/usr/bin/rc*
|
|
|
|
/usr/lib/mit/sbin/kadmin.local
|
|
|
|
/usr/lib/mit/sbin/kadmind
|
|
|
|
/usr/lib/mit/sbin/kpropd
|
2009-07-08 19:41:43 +02:00
|
|
|
/usr/lib/mit/sbin/kproplog
|
2006-12-19 00:16:52 +01:00
|
|
|
/usr/lib/mit/sbin/kprop
|
|
|
|
/usr/lib/mit/sbin/kdb5_util
|
|
|
|
/usr/lib/mit/sbin/krb5kdc
|
2009-07-08 19:41:43 +02:00
|
|
|
%{_libdir}/krb5/plugins/kdb/db2.so
|
2006-12-19 00:16:52 +01:00
|
|
|
%{_mandir}/man5/kdc.conf.5*
|
|
|
|
%{_mandir}/man8/kadmind.8*
|
|
|
|
%{_mandir}/man8/kadmin.local.8*
|
|
|
|
%{_mandir}/man8/kpropd.8*
|
|
|
|
%{_mandir}/man8/kprop.8*
|
2009-07-08 19:41:43 +02:00
|
|
|
%{_mandir}/man8/kproplog.8.gz
|
2006-12-19 00:16:52 +01:00
|
|
|
%{_mandir}/man8/kdb5_util.8*
|
|
|
|
%{_mandir}/man8/krb5kdc.8*
|
|
|
|
|
|
|
|
%files client
|
|
|
|
%defattr(-,root,root)
|
|
|
|
%dir /usr/lib/mit
|
|
|
|
%dir /usr/lib/mit/bin
|
|
|
|
%dir /usr/lib/mit/sbin
|
|
|
|
/usr/lib/mit/bin/kvno
|
|
|
|
/usr/lib/mit/bin/kinit
|
|
|
|
/usr/lib/mit/bin/kdestroy
|
|
|
|
/usr/lib/mit/bin/kpasswd
|
|
|
|
/usr/lib/mit/bin/klist
|
2009-07-08 19:41:43 +02:00
|
|
|
/usr/lib/mit/bin/kadmin
|
|
|
|
/usr/lib/mit/bin/ktutil
|
|
|
|
/usr/lib/mit/bin/k5srvutil
|
2006-12-19 00:16:52 +01:00
|
|
|
/usr/bin/kinit
|
|
|
|
/usr/bin/klist
|
|
|
|
%{_mandir}/man1/kvno.1*
|
|
|
|
%{_mandir}/man1/kinit.1*
|
|
|
|
%{_mandir}/man1/kdestroy.1*
|
|
|
|
%{_mandir}/man1/kpasswd.1*
|
|
|
|
%{_mandir}/man1/klist.1*
|
|
|
|
%{_mandir}/man1/kerberos.1*
|
2009-07-08 19:41:43 +02:00
|
|
|
%{_mandir}/man1/kadmin.1*
|
|
|
|
%{_mandir}/man1/ktutil.1*
|
|
|
|
%{_mandir}/man1/k5srvutil.1*
|
2007-01-26 17:41:59 +01:00
|
|
|
%{_mandir}/man5/krb5.conf.5*
|
|
|
|
%{_mandir}/man5/.k5login.5*
|
2010-03-05 02:10:03 +01:00
|
|
|
|
|
|
|
%files apps-servers
|
|
|
|
%defattr(-,root,root)
|
|
|
|
%config(noreplace) %{_sysconfdir}/xinetd.d/klogin
|
|
|
|
%config(noreplace) %{_sysconfdir}/xinetd.d/eklogin
|
|
|
|
%config(noreplace) %{_sysconfdir}/xinetd.d/kshell
|
|
|
|
%config(noreplace) %{_sysconfdir}/xinetd.d/ktelnet
|
|
|
|
%dir /usr/lib/mit
|
|
|
|
%dir /usr/lib/mit/sbin
|
|
|
|
/usr/lib/mit/sbin/ftpd
|
|
|
|
/usr/lib/mit/sbin/klogind
|
|
|
|
/usr/lib/mit/sbin/kshd
|
|
|
|
/usr/lib/mit/sbin/telnetd
|
|
|
|
/usr/lib/mit/sbin/uuserver
|
|
|
|
/usr/lib/mit/sbin/sserver
|
|
|
|
/usr/lib/mit/sbin/gss-server
|
|
|
|
/usr/lib/mit/sbin/sim_server
|
|
|
|
/usr/lib/mit/sbin/login.krb5
|
|
|
|
%{_mandir}/man8/kftpd.8*
|
|
|
|
%{_mandir}/man8/klogind.8*
|
|
|
|
%{_mandir}/man8/kshd.8*
|
|
|
|
%{_mandir}/man8/ktelnetd.8*
|
|
|
|
%{_mandir}/man8/sserver.8*
|
|
|
|
%{_mandir}/man8/login.krb5.8*
|
|
|
|
|
|
|
|
%files apps-clients
|
|
|
|
%defattr(-,root,root)
|
|
|
|
%dir /usr/lib/mit
|
|
|
|
%dir /usr/lib/mit/bin
|
|
|
|
/usr/lib/mit/bin/ftp
|
|
|
|
/usr/lib/mit/bin/rlogin
|
|
|
|
# removed SUID bit, we will rely on su + pam_krb
|
|
|
|
%attr(0755,root,root) /usr/lib/mit/bin/ksu
|
|
|
|
/usr/lib/mit/bin/rcp
|
|
|
|
/usr/lib/mit/bin/rsh
|
|
|
|
/usr/lib/mit/bin/telnet
|
|
|
|
/usr/lib/mit/bin/uuclient
|
|
|
|
/usr/lib/mit/bin/sclient
|
|
|
|
/usr/lib/mit/bin/gss-client
|
|
|
|
/usr/lib/mit/bin/sim_client
|
|
|
|
%{_mandir}/man1/kftp.1*
|
|
|
|
%{_mandir}/man1/krlogin.1*
|
|
|
|
%{_mandir}/man1/krsh.1*
|
|
|
|
%{_mandir}/man1/ktelnet.1*
|
|
|
|
%{_mandir}/man1/ksu.1*
|
|
|
|
%{_mandir}/man1/krcp.1*
|
|
|
|
%{_mandir}/man1/sclient.1*
|
2006-12-19 00:16:52 +01:00
|
|
|
|
2009-07-08 19:41:43 +02:00
|
|
|
%files plugin-kdb-ldap
|
2006-12-19 00:16:52 +01:00
|
|
|
%defattr(-,root,root)
|
2009-07-08 19:41:43 +02:00
|
|
|
%dir %{_libdir}/krb5
|
|
|
|
%dir %{_libdir}/krb5/plugins
|
|
|
|
%dir %{_libdir}/krb5/plugins/kdb
|
|
|
|
%dir /usr/lib/mit/sbin/
|
|
|
|
%dir %{krb5docdir}
|
|
|
|
%doc %{krb5docdir}/kerberos.schema
|
|
|
|
%doc %{krb5docdir}/kerberos.ldif
|
|
|
|
%{_libdir}/krb5/plugins/kdb/kldap.so
|
|
|
|
/usr/lib/mit/sbin/kdb5_ldap_util
|
|
|
|
%{_libdir}/libkdb_ldap*
|
|
|
|
%{_mandir}/man8/kdb5_ldap_util.8*
|
|
|
|
|
|
|
|
%files plugin-preauth-pkinit
|
|
|
|
%defattr(-,root,root)
|
|
|
|
%dir %{_libdir}/krb5
|
|
|
|
%dir %{_libdir}/krb5/plugins
|
|
|
|
%dir %{_libdir}/krb5/plugins/preauth
|
|
|
|
%{_libdir}/krb5/plugins/preauth/pkinit.so
|
|
|
|
%endif #build_mini
|
2007-12-06 01:01:44 +01:00
|
|
|
|
2007-02-19 21:42:34 +01:00
|
|
|
%changelog
|