rpm/krb5
SHA256
1
0
Fork 0
forked from pool/krb5
Code Pull Requests Activity

Accepting request 778977 from home:scarabeus_iv:branches:network

Browse Source 
- Remove cruft to support distributions older than SLE 12
- Use macros where applicable
- Switch to pkgconfig style dependencies

- Remove cruft to support distributions older than SLE 12
- Use macros where applicable
- Switch to pkgconfig style dependencies

OBS-URL: https://build.opensuse.org/request/show/778977
OBS-URL: https://build.opensuse.org/package/show/network/krb5?expand=0&rev=226
This commit is contained in:
Samuel Cabrero 2020-02-26 08:25:58 +00:00 committed by Git OBS Bridge
parent 2225cdd33f
commit 7a27c19df2
4 changed files with 271 additions and 341 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
krb5-mini.changes
View File

@ -1,3 +1,10 @@
-------------------------------------------------------------------
Tue Feb 25 08:36:37 UTC 2020 - Tomáš Chvátal <tchvatal@suse.com>
- Remove cruft to support distributions older than SLE 12
- Use macros where applicable
- Switch to pkgconfig style dependencies
------------------------------------------------------------------- -------------------------------------------------------------------
Mon Feb 17 17:26:16 UTC 2020 - Samuel Cabrero <scabrero@suse.de> Mon Feb 17 17:26:16 UTC 2020 - Samuel Cabrero <scabrero@suse.de>

253
krb5-mini.spec
View File

@ -16,42 +16,19 @@
# #
#Compat macro for new _fillupdir macro introduced in Nov 2017
%if ! %{defined _fillupdir}
%define _fillupdir /var/adm/fillup-templates
%endif
%define srcRoot krb5-%{version} %define srcRoot krb5-%{version}
%define vendorFiles %{_builddir}/%{srcRoot}/vendor-files/ %define vendorFiles %{_builddir}/%{srcRoot}/vendor-files/
%define krb5docdir %{_defaultdocdir}/krb5 %define krb5docdir %{_defaultdocdir}/krb5
#Compat macro for new _fillupdir macro introduced in Nov 2017
%if ! %{defined _fillupdir}
%define _fillupdir %{_localstatedir}/adm/fillup-templates
%endif
Name: krb5-mini Name: krb5-mini
Version: 1.18 Version: 1.18
Release: 0 Release: 0
Summary: MIT Kerberos5 implementation and libraries with minimal dependencies Summary: MIT Kerberos5 implementation and libraries with minimal dependencies
License: MIT License: MIT
Group: Productivity/Networking/Security
URL: https://web.mit.edu/kerberos/www/ URL: https://web.mit.edu/kerberos/www/
Obsoletes: krb5-plugin-preauth-pkinit-nss
BuildRequires: autoconf
BuildRequires: bison
BuildRequires: keyutils
BuildRequires: keyutils-devel
BuildRequires: libcom_err-devel
BuildRequires: libselinux-devel
BuildRequires: libverto-devel
BuildRequires: ncurses-devel
# bug437293
%ifarch ppc64
Obsoletes: krb5-64bit
%endif
Conflicts: krb5-mini
Conflicts: krb5
Conflicts: krb5-client
Conflicts: krb5-server
Conflicts: krb5-plugin-kdb-ldap
Conflicts: krb5-plugin-preauth-pkinit
Conflicts: krb5-plugin-preauth-otp
Source0: https://web.mit.edu/kerberos/dist/krb5/1.18/krb5-%{version}.tar.gz Source0: https://web.mit.edu/kerberos/dist/krb5/1.18/krb5-%{version}.tar.gz
Source1: https://web.mit.edu/kerberos/dist/krb5/1.18/krb5-%{version}.tar.gz.asc Source1: https://web.mit.edu/kerberos/dist/krb5/1.18/krb5-%{version}.tar.gz.asc
Source2: krb5.keyring Source2: krb5.keyring
@ -67,8 +44,24 @@ Patch5: 0005-krb5-1.6.3-ktutil-manpage.patch
Patch6: 0006-krb5-1.12-api.patch Patch6: 0006-krb5-1.12-api.patch
Patch7: 0007-SELinux-integration.patch Patch7: 0007-SELinux-integration.patch
Patch8: 0008-krb5-1.9-debuginfo.patch Patch8: 0008-krb5-1.9-debuginfo.patch
BuildRoot: %{_tmppath}/%{name}-%{version}-build BuildRequires: autoconf
PreReq: %fillup_prereq BuildRequires: bison
BuildRequires: keyutils
BuildRequires: keyutils-devel
BuildRequires: pkgconfig
BuildRequires: pkgconfig(com_err)
BuildRequires: pkgconfig(libselinux)
BuildRequires: pkgconfig(libverto)
BuildRequires: pkgconfig(ncurses)
Requires(post): %fillup_prereq
Conflicts: krb5
Conflicts: krb5-client
Conflicts: krb5-mini
Conflicts: krb5-plugin-kdb-ldap
Conflicts: krb5-plugin-preauth-otp
Conflicts: krb5-plugin-preauth-pkinit
Conflicts: krb5-server
Obsoletes: krb5-plugin-preauth-pkinit-nss
%description %description
Kerberos V5 is a trusted-third-party network authentication system, Kerberos V5 is a trusted-third-party network authentication system,
@ -79,15 +72,11 @@ dependencies
%package devel %package devel
Summary: Development files for MIT Kerberos5 (openSUSE mini variant) Summary: Development files for MIT Kerberos5 (openSUSE mini variant)
Group: Development/Libraries/C and C++ Requires: %{name} = %{version}
PreReq: %{name} = %{version}
Requires: keyutils-devel Requires: keyutils-devel
Requires: libcom_err-devel Requires: pkgconfig(com_err)
Requires: libverto-devel Requires: pkgconfig(libverto)
# bug437293 Requires: pkgconfig(ss)
%ifarch ppc64
Obsoletes: krb5-devel-64bit
%endif
Provides: krb5-devel = %{version} Provides: krb5-devel = %{version}
Conflicts: krb5-devel Conflicts: krb5-devel
@ -99,15 +88,8 @@ Include Files for Development
%prep %prep
%setup -q -n %{srcRoot} %setup -q -n %{srcRoot}
%setup -a 3 -T -D -n %{srcRoot} %setup -q -a 3 -T -D -n %{srcRoot}
%patch1 -p1 %autopatch -p1
%patch2 -p1
%patch3 -p1
%patch4 -p1
%patch5 -p1
%patch6 -p1
%patch7 -p1
%patch8 -p1
%build %build
# needs to be re-generated # needs to be re-generated
@ -115,16 +97,19 @@ rm -f src/lib/krb5/krb/deltat.c
cd src cd src
autoreconf -fi autoreconf -fi
DEFCCNAME=DIR:/run/user/%%{uid}/krb5cc; export DEFCCNAME DEFCCNAME=DIR:/run/user/%%{uid}/krb5cc; export DEFCCNAME
./configure \ # FIXME: you should use the %%configure macro
CC="%{__cc}" \ %configure \
CFLAGS="%{optflags} -I%{_includedir}/et -fno-strict-aliasing -D_GNU_SOURCE -fPIC $(getconf LFS_CFLAGS)" \ CFLAGS="%{optflags} -I%{_includedir}/et -fno-strict-aliasing -D_GNU_SOURCE -fPIC $(getconf LFS_CFLAGS)" \
CPPFLAGS="-I%{_includedir}/et " \ CPPFLAGS="-I%{_includedir}/et " \
SS_LIB="-lss" \ SS_LIB="-lss" \
--prefix=/usr/lib/mit \ --prefix=%{_prefix}/lib/mit \
--sysconfdir=%{_sysconfdir} \ --sysconfdir=%{_sysconfdir} \
--mandir=%{_mandir} \ --mandir=%{_mandir} \
--infodir=%{_infodir} \ --infodir=%{_infodir} \
--libexecdir=/usr/lib/mit/sbin \ --libexecdir=%{_prefix}/lib/mit/sbin \
--bindir=%{_prefix}/lib/mit/bin \
--sbindir=%{_prefix}/lib/mit/sbin \
--datadir=%{_prefix}/lib/mit/share \
--libdir=%{_libdir} \ --libdir=%{_libdir} \
--includedir=%{_includedir} \ --includedir=%{_includedir} \
--localstatedir=%{_localstatedir}/lib/kerberos \ --localstatedir=%{_localstatedir}/lib/kerberos \
@ -140,7 +125,7 @@ DEFCCNAME=DIR:/run/user/%%{uid}/krb5cc; export DEFCCNAME
--with-system-ss \ --with-system-ss \
--with-system-verto --with-system-verto
make %{?_smp_mflags} %make_build
# Copy kadmin manual page into kadmin.local's due to the split between client and server package # Copy kadmin manual page into kadmin.local's due to the split between client and server package
cp man/kadmin.man man/kadmin.local.8 cp man/kadmin.man man/kadmin.local.8
@ -151,7 +136,7 @@ mkdir -p %{buildroot}/%{_localstatedir}/log/krb5
# Munge krb5-config yet again. This is totally wrong for 64-bit, but chunks # Munge krb5-config yet again. This is totally wrong for 64-bit, but chunks
# of the buildconf patch already conspire to strip out /usr/<anything> from the # of the buildconf patch already conspire to strip out /usr/<anything> from the
# list of link flags, and it helps prevent file conflicts on multilib systems. # list of link flags, and it helps prevent file conflicts on multilib systems.
sed -r -i -e 's|^libdir=/usr/lib(64)?$|libdir=/usr/lib|g' %{buildroot}/usr/lib/mit/bin/krb5-config sed -r -i -e 's|^libdir=%{_prefix}/lib(64)?$|libdir=%{_prefix}/lib|g' %{buildroot}%{_prefix}/lib/mit/bin/krb5-config
# install autoconf macro # install autoconf macro
mkdir -p %{buildroot}/%{_datadir}/aclocal mkdir -p %{buildroot}/%{_datadir}/aclocal
@ -160,21 +145,21 @@ install -m 644 src/util/ac_check_krb5.m4 %{buildroot}%{_datadir}/aclocal/
# I'll probably do something about this later on # I'll probably do something about this later on
mkdir -p %{buildroot}%{_sysconfdir} mkdir -p %{buildroot}%{_sysconfdir}
mkdir -p %{buildroot}%{_sysconfdir}/krb5.conf.d mkdir -p %{buildroot}%{_sysconfdir}/krb5.conf.d
mkdir -p %{buildroot}/etc/profile.d/ mkdir -p %{buildroot}%{_sysconfdir}/profile.d/
mkdir -p %{buildroot}/var/log/krb5 mkdir -p %{buildroot}%{_localstatedir}/log/krb5
# create plugin directories # create plugin directories
mkdir -p %{buildroot}/%{_libdir}/krb5/plugins/kdb mkdir -p %{buildroot}/%{_libdir}/krb5/plugins/kdb
mkdir -p %{buildroot}/%{_libdir}/krb5/plugins/preauth mkdir -p %{buildroot}/%{_libdir}/krb5/plugins/preauth
mkdir -p %{buildroot}/%{_libdir}/krb5/plugins/libkrb5 mkdir -p %{buildroot}/%{_libdir}/krb5/plugins/libkrb5
mkdir -p %{buildroot}/%{_libdir}/krb5/plugins/tls mkdir -p %{buildroot}/%{_libdir}/krb5/plugins/tls
install -m 644 %{vendorFiles}/krb5.conf %{buildroot}%{_sysconfdir} install -m 644 %{vendorFiles}/krb5.conf %{buildroot}%{_sysconfdir}
install -m 644 %{vendorFiles}/krb5.csh.profile %{buildroot}/etc/profile.d/krb5.csh install -m 644 %{vendorFiles}/krb5.csh.profile %{buildroot}%{_sysconfdir}/profile.d/krb5.csh
install -m 644 %{vendorFiles}/krb5.sh.profile %{buildroot}/etc/profile.d/krb5.sh install -m 644 %{vendorFiles}/krb5.sh.profile %{buildroot}%{_sysconfdir}/profile.d/krb5.sh
# Do not write directly to /var/lib/kerberos anymore as it breaks transactional # Do not write directly to /var/lib/kerberos anymore as it breaks transactional
# updates. Use systemd-tmpfiles to copy the files there when it doesn't exist # updates. Use systemd-tmpfiles to copy the files there when it doesn't exist
install -d -m 0755 %{buildroot}/usr/lib/tmpfiles.d/ install -d -m 0755 %{buildroot}%{_prefix}/lib/tmpfiles.d/
install -m 644 %{SOURCE6} %{buildroot}/usr/lib/tmpfiles.d/krb5.conf install -m 644 %{SOURCE6} %{buildroot}%{_prefix}/lib/tmpfiles.d/krb5.conf
mkdir -p %{buildroot}/%{_datadir}/kerberos/krb5kdc mkdir -p %{buildroot}/%{_datadir}/kerberos/krb5kdc
# Where per-user keytabs live by default. # Where per-user keytabs live by default.
mkdir -p %{buildroot}/%{_datadir}/kerberos/krb5/user mkdir -p %{buildroot}/%{_datadir}/kerberos/krb5/user
@ -188,20 +173,12 @@ do
chmod 0755 ${lib} chmod 0755 ${lib}
done done
# and binaries too # and binaries too
chmod 0755 %{buildroot}/usr/lib/mit/bin/ksu chmod 0755 %{buildroot}%{_prefix}/lib/mit/bin/ksu
# install systemd files # install systemd files
%if 0%{?suse_version} >= 1210
mkdir -p %{buildroot}%{_unitdir} mkdir -p %{buildroot}%{_unitdir}
install -m 644 %{vendorFiles}/kadmind.service %{buildroot}%{_unitdir} install -m 644 %{vendorFiles}/kadmind.service %{buildroot}%{_unitdir}
install -m 644 %{vendorFiles}/krb5kdc.service %{buildroot}%{_unitdir} install -m 644 %{vendorFiles}/krb5kdc.service %{buildroot}%{_unitdir}
install -m 644 %{vendorFiles}/kpropd.service %{buildroot}%{_unitdir} install -m 644 %{vendorFiles}/kpropd.service %{buildroot}%{_unitdir}
%else
# install init scripts
mkdir -p %{buildroot}%{_sysconfdir}/init.d
install -m 755 %{vendorFiles}/kadmind.init %{buildroot}%{_sysconfdir}/init.d/kadmind
install -m 755 %{vendorFiles}/krb5kdc.init %{buildroot}%{_sysconfdir}/init.d/krb5kdc
install -m 755 %{vendorFiles}/kpropd.init %{buildroot}%{_sysconfdir}/init.d/kpropd
%endif
# install sysconfig templates # install sysconfig templates
mkdir -p %{buildroot}/%{_fillupdir} mkdir -p %{buildroot}/%{_fillupdir}
install -m 644 %{vendorFiles}/sysconfig.kadmind %{buildroot}/%{_fillupdir}/ install -m 644 %{vendorFiles}/sysconfig.kadmind %{buildroot}/%{_fillupdir}/
@ -211,33 +188,21 @@ mkdir -p %{buildroot}%{_sysconfdir}/logrotate.d
install -m 644 %{vendorFiles}/krb5-server.logrotate %{buildroot}%{_sysconfdir}/logrotate.d/krb5-server install -m 644 %{vendorFiles}/krb5-server.logrotate %{buildroot}%{_sysconfdir}/logrotate.d/krb5-server
find . -type f -name '*.ps' -exec gzip -9 {} \; find . -type f -name '*.ps' -exec gzip -9 {} \;
# create rc* links # create rc* links
mkdir -p %{buildroot}/usr/bin/ mkdir -p %{buildroot}%{_bindir}/
mkdir -p %{buildroot}/usr/sbin/ mkdir -p %{buildroot}%{_sbindir}/
%if 0%{?suse_version} >= 1210 ln -s service %{buildroot}%{_sbindir}/rckadmind
%if 0%{?suse_version} > 1220 ln -s service %{buildroot}%{_sbindir}/rckrb5kdc
ln -s %{_sbindir}/service %{buildroot}%{_sbindir}/rckadmind ln -s service %{buildroot}%{_sbindir}/rckpropd
ln -s %{_sbindir}/service %{buildroot}%{_sbindir}/rckrb5kdc
ln -s %{_sbindir}/service %{buildroot}%{_sbindir}/rckpropd
%else
ln -s /sbin/service %{buildroot}%{_sbindir}/rckadmind
ln -s /sbin/service %{buildroot}%{_sbindir}/rckrb5kdc
ln -s /sbin/service %{buildroot}%{_sbindir}/rcpropd
%endif
%else
ln -sf ../../etc/init.d/kadmind %{buildroot}/usr/sbin/rckadmind
ln -sf ../../etc/init.d/krb5kdc %{buildroot}/usr/sbin/rckrb5kdc
ln -sf ../../etc/init.d/kpropd %{buildroot}/usr/sbin/rckpropd
%endif
# create links for kinit and klist, because of the java ones # create links for kinit and klist, because of the java ones
ln -sf ../../usr/lib/mit/bin/kinit %{buildroot}/usr/bin/kinit ln -sf ../..%{_prefix}/lib/mit/bin/kinit %{buildroot}%{_bindir}/kinit
ln -sf ../../usr/lib/mit/bin/klist %{buildroot}/usr/bin/klist ln -sf ../..%{_prefix}/lib/mit/bin/klist %{buildroot}%{_bindir}/klist
# install doc # install doc
install -d -m 755 %{buildroot}/%{krb5docdir} install -d -m 755 %{buildroot}/%{krb5docdir}
install -m 644 %{_builddir}/%{srcRoot}/README %{buildroot}/%{krb5docdir}/README install -m 644 %{_builddir}/%{srcRoot}/README %{buildroot}/%{krb5docdir}/README
# cleanup # cleanup
rm -f %{buildroot}/usr/share/man/man1/tmac.doc* rm -f %{buildroot}%{_mandir}/man1/tmac.doc*
rm -f /usr/share/man/man1/tmac.doc* rm -f %{_mandir}/man1/tmac.doc*
rm -rf %{buildroot}/usr/lib/mit/share/examples rm -rf %{buildroot}%{_prefix}/lib/mit/share/examples
# manually remove otp, spake and test plugin for krb5-mini since configure # manually remove otp, spake and test plugin for krb5-mini since configure
# doesn't support disabling it at build time # doesn't support disabling it at build time
rm -f %{buildroot}/%{_libdir}/krb5/plugins/preauth/otp.so rm -f %{buildroot}/%{_libdir}/krb5/plugins/preauth/otp.so
@ -273,11 +238,10 @@ rm -f %{buildroot}/%{_libdir}/krb5/plugins/preauth/test.so
######################################################## ########################################################
%files devel %files devel
%defattr(-,root,root) %dir %{_prefix}/lib/mit
%dir /usr/lib/mit %dir %{_prefix}/lib/mit/bin
%dir /usr/lib/mit/bin %dir %{_prefix}/lib/mit/sbin
%dir /usr/lib/mit/sbin %dir %{_prefix}/lib/mit/share
%dir /usr/lib/mit/share
%dir %{_datadir}/aclocal %dir %{_datadir}/aclocal
%{_libdir}/libgssrpc.so %{_libdir}/libgssrpc.so
%{_libdir}/libk5crypto.so %{_libdir}/libk5crypto.so
@ -298,13 +262,12 @@ rm -f %{buildroot}/%{_libdir}/krb5/plugins/preauth/test.so
%{_libdir}/pkgconfig/mit-krb5-gssapi.pc %{_libdir}/pkgconfig/mit-krb5-gssapi.pc
%{_libdir}/pkgconfig/mit-krb5.pc %{_libdir}/pkgconfig/mit-krb5.pc
%{_includedir}/* %{_includedir}/*
/usr/lib/mit/bin/krb5-config %{_prefix}/lib/mit/bin/krb5-config
/usr/lib/mit/sbin/krb5-send-pr %{_prefix}/lib/mit/sbin/krb5-send-pr
%{_mandir}/man1/krb5-config.1* %{_mandir}/man1/krb5-config.1%{?ext_man}
%{_datadir}/aclocal/ac_check_krb5.m4 %{_datadir}/aclocal/ac_check_krb5.m4
%files -f mit-krb5.lang %files -f mit-krb5.lang
%defattr(-,root,root)
%dir %{krb5docdir} %dir %{krb5docdir}
# add directories # add directories
%dir %{_libdir}/krb5 %dir %{_libdir}/krb5
@ -313,14 +276,14 @@ rm -f %{buildroot}/%{_libdir}/krb5/plugins/preauth/test.so
%dir %{_libdir}/krb5/plugins/preauth %dir %{_libdir}/krb5/plugins/preauth
%dir %{_libdir}/krb5/plugins/libkrb5 %dir %{_libdir}/krb5/plugins/libkrb5
%dir %{_libdir}/krb5/plugins/tls %dir %{_libdir}/krb5/plugins/tls
%attr(0700,root,root) %dir /var/log/krb5 %attr(0700,root,root) %dir %{_localstatedir}/log/krb5
%dir /usr/lib/mit %dir %{_prefix}/lib/mit
%dir /usr/lib/mit/sbin %dir %{_prefix}/lib/mit/sbin
%dir /usr/lib/mit/bin %dir %{_prefix}/lib/mit/bin
%doc %{krb5docdir}/README %doc %{krb5docdir}/README
%attr(0644,root,root) %config(noreplace) %{_sysconfdir}/krb5.conf %attr(0644,root,root) %config(noreplace) %{_sysconfdir}/krb5.conf
%dir %{_sysconfdir}/krb5.conf.d %dir %{_sysconfdir}/krb5.conf.d
%attr(0644,root,root) %config /etc/profile.d/krb5* %attr(0644,root,root) %config %{_sysconfdir}/profile.d/krb5*
%config(noreplace) %{_sysconfdir}/logrotate.d/krb5-server %config(noreplace) %{_sysconfdir}/logrotate.d/krb5-server
%{_fillupdir}/sysconfig.* %{_fillupdir}/sysconfig.*
%{_unitdir}/kadmind.service %{_unitdir}/kadmind.service
@ -352,49 +315,49 @@ rm -f %{buildroot}/%{_libdir}/krb5/plugins/preauth/test.so
%ghost %attr(0600,root,root) %config(noreplace) %{_sharedstatedir}/kerberos/krb5kdc/kdc.conf %ghost %attr(0600,root,root) %config(noreplace) %{_sharedstatedir}/kerberos/krb5kdc/kdc.conf
%ghost %attr(0600,root,root) %config(noreplace) %{_sharedstatedir}/kerberos/krb5kdc/kadm5.acl %ghost %attr(0600,root,root) %config(noreplace) %{_sharedstatedir}/kerberos/krb5kdc/kadm5.acl
%ghost %attr(0600,root,root) %config(noreplace) %{_sharedstatedir}/kerberos/krb5kdc/kadm5.dict %ghost %attr(0600,root,root) %config(noreplace) %{_sharedstatedir}/kerberos/krb5kdc/kadm5.dict
/usr/lib/mit/sbin/kadmin.local %{_prefix}/lib/mit/sbin/kadmin.local
/usr/lib/mit/sbin/kadmind %{_prefix}/lib/mit/sbin/kadmind
/usr/lib/mit/sbin/kpropd %{_prefix}/lib/mit/sbin/kpropd
/usr/lib/mit/sbin/kproplog %{_prefix}/lib/mit/sbin/kproplog
/usr/lib/mit/sbin/kprop %{_prefix}/lib/mit/sbin/kprop
/usr/lib/mit/sbin/kdb5_util %{_prefix}/lib/mit/sbin/kdb5_util
/usr/lib/mit/sbin/krb5kdc %{_prefix}/lib/mit/sbin/krb5kdc
/usr/lib/mit/sbin/uuserver %{_prefix}/lib/mit/sbin/uuserver
/usr/lib/mit/sbin/sserver %{_prefix}/lib/mit/sbin/sserver
/usr/lib/mit/sbin/gss-server %{_prefix}/lib/mit/sbin/gss-server
/usr/lib/mit/sbin/sim_server %{_prefix}/lib/mit/sbin/sim_server
/usr/lib/mit/bin/k5srvutil %{_prefix}/lib/mit/bin/k5srvutil
/usr/lib/mit/bin/kvno %{_prefix}/lib/mit/bin/kvno
/usr/lib/mit/bin/kinit %{_prefix}/lib/mit/bin/kinit
/usr/lib/mit/bin/kdestroy %{_prefix}/lib/mit/bin/kdestroy
/usr/lib/mit/bin/kpasswd %{_prefix}/lib/mit/bin/kpasswd
/usr/lib/mit/bin/klist %{_prefix}/lib/mit/bin/klist
/usr/lib/mit/bin/kadmin %{_prefix}/lib/mit/bin/kadmin
/usr/lib/mit/bin/ktutil %{_prefix}/lib/mit/bin/ktutil
/usr/lib/mit/bin/kswitch %{_prefix}/lib/mit/bin/kswitch
%attr(0755,root,root) /usr/lib/mit/bin/ksu %attr(0755,root,root) %{_prefix}/lib/mit/bin/ksu
/usr/lib/mit/bin/uuclient %{_prefix}/lib/mit/bin/uuclient
/usr/lib/mit/bin/sclient %{_prefix}/lib/mit/bin/sclient
/usr/lib/mit/bin/gss-client %{_prefix}/lib/mit/bin/gss-client
/usr/lib/mit/bin/sim_client %{_prefix}/lib/mit/bin/sim_client
/usr/bin/kinit %{_bindir}/kinit
/usr/bin/klist %{_bindir}/klist
/usr/sbin/rc* %{_sbindir}/rc*
%{_mandir}/man1/kvno.1* %{_mandir}/man1/kvno.1%{?ext_man}
%{_mandir}/man1/kinit.1* %{_mandir}/man1/kinit.1%{?ext_man}
%{_mandir}/man1/kdestroy.1* %{_mandir}/man1/kdestroy.1%{?ext_man}
%{_mandir}/man1/kpasswd.1* %{_mandir}/man1/kpasswd.1%{?ext_man}
%{_mandir}/man1/klist.1* %{_mandir}/man1/klist.1%{?ext_man}
%{_mandir}/man1/ksu.1* %{_mandir}/man1/ksu.1%{?ext_man}
%{_mandir}/man1/sclient.1* %{_mandir}/man1/sclient.1%{?ext_man}
%{_mandir}/man1/kadmin.1* %{_mandir}/man1/kadmin.1%{?ext_man}
%{_mandir}/man1/ktutil.1* %{_mandir}/man1/ktutil.1%{?ext_man}
%{_mandir}/man1/k5srvutil.1* %{_mandir}/man1/k5srvutil.1%{?ext_man}
%{_mandir}/man1/kswitch.1* %{_mandir}/man1/kswitch.1%{?ext_man}
%{_mandir}/man5/* %{_mandir}/man5/*
%{_mandir}/man5/.k5login.5.gz %{_mandir}/man5/.k5login.5%{?ext_man}
%{_mandir}/man5/.k5identity.5* %{_mandir}/man5/.k5identity.5%{?ext_man}
%{_mandir}/man7/kerberos.7.gz %{_mandir}/man7/kerberos.7%{?ext_man}
%{_mandir}/man8/* %{_mandir}/man8/*
%changelog %changelog

7
krb5.changes
View File

@ -1,3 +1,10 @@
-------------------------------------------------------------------
Tue Feb 25 08:36:37 UTC 2020 - Tomáš Chvátal <tchvatal@suse.com>
- Remove cruft to support distributions older than SLE 12
- Use macros where applicable
- Switch to pkgconfig style dependencies
------------------------------------------------------------------- -------------------------------------------------------------------
Mon Feb 17 17:26:16 UTC 2020 - Samuel Cabrero <scabrero@suse.de> Mon Feb 17 17:26:16 UTC 2020 - Samuel Cabrero <scabrero@suse.de>

297
krb5.spec
View File

@ -18,34 +18,14 @@
#Compat macro for new _fillupdir macro introduced in Nov 2017 #Compat macro for new _fillupdir macro introduced in Nov 2017
%if ! %{defined _fillupdir} %if ! %{defined _fillupdir}
%define _fillupdir /var/adm/fillup-templates %define _fillupdir %{_localstatedir}/adm/fillup-templates
%endif %endif
Name: krb5 Name: krb5
Version: 1.18 Version: 1.18
Release: 0 Release: 0
Summary: MIT Kerberos5 implementation Summary: MIT Kerberos5 implementation
License: MIT License: MIT
Group: Productivity/Networking/Security
URL: https://web.mit.edu/kerberos/www/ URL: https://web.mit.edu/kerberos/www/
Obsoletes: krb5-plugin-preauth-pkinit-nss
BuildRequires: autoconf
BuildRequires: bison
BuildRequires: keyutils
BuildRequires: keyutils-devel
BuildRequires: libcom_err-devel
BuildRequires: libopenssl-devel
BuildRequires: libselinux-devel
BuildRequires: libverto-devel
BuildRequires: ncurses-devel
BuildRequires: openldap2-devel
BuildRequires: pam-devel
BuildRequires: pkgconfig(systemd)
# bug437293
%ifarch ppc64
Obsoletes: krb5-64bit
%endif
Conflicts: krb5-mini
Source0: https://web.mit.edu/kerberos/dist/krb5/1.18/krb5-%{version}.tar.gz Source0: https://web.mit.edu/kerberos/dist/krb5/1.18/krb5-%{version}.tar.gz
Source1: https://web.mit.edu/kerberos/dist/krb5/1.18/krb5-%{version}.tar.gz.asc Source1: https://web.mit.edu/kerberos/dist/krb5/1.18/krb5-%{version}.tar.gz.asc
Source2: krb5.keyring Source2: krb5.keyring
@ -62,7 +42,22 @@ Patch5: 0005-krb5-1.6.3-ktutil-manpage.patch
Patch6: 0006-krb5-1.12-api.patch Patch6: 0006-krb5-1.12-api.patch
Patch7: 0007-SELinux-integration.patch Patch7: 0007-SELinux-integration.patch
Patch8: 0008-krb5-1.9-debuginfo.patch Patch8: 0008-krb5-1.9-debuginfo.patch
BuildRoot: %{_tmppath}/%{name}-%{version}-build BuildRequires: autoconf
BuildRequires: bison
BuildRequires: keyutils
BuildRequires: keyutils-devel
BuildRequires: openldap2-devel
BuildRequires: pam-devel
BuildRequires: pkgconfig
BuildRequires: pkgconfig(com_err)
BuildRequires: pkgconfig(libselinux)
BuildRequires: pkgconfig(libssl)
BuildRequires: pkgconfig(libverto)
BuildRequires: pkgconfig(ncurses)
BuildRequires: pkgconfig(ss)
BuildRequires: pkgconfig(systemd)
Conflicts: krb5-mini
Obsoletes: krb5-plugin-preauth-pkinit-nss
%description %description
Kerberos V5 is a trusted-third-party network authentication system, Kerberos V5 is a trusted-third-party network authentication system,
@ -70,9 +65,8 @@ which can improve network security by eliminating the insecure
practice of clear text passwords. practice of clear text passwords.
%package client %package client
Conflicts: krb5-mini
Summary: Client programs of the MIT Kerberos5 implementation Summary: Client programs of the MIT Kerberos5 implementation
Group: Productivity/Networking/Security Conflicts: krb5-mini
%description client %description client
Kerberos V5 is a trusted-third-party network authentication system, Kerberos V5 is a trusted-third-party network authentication system,
@ -82,17 +76,12 @@ client programs, like kinit, kadmin, ...
%package server %package server
Summary: Server program of the MIT Kerberos5 implementation Summary: Server program of the MIT Kerberos5 implementation
Group: Productivity/Networking/Security
Requires: cron Requires: cron
Requires: libverto-libev1 Requires: libverto-libev1
Requires: logrotate Requires: logrotate
Requires: perl-Date-Calc Requires: perl-Date-Calc
%if 0%{?suse_version} >= 1210 Requires(post): %fillup_prereq
%{?systemd_requires} %{?systemd_requires}
%else
PreReq: %insserv_prereq
%endif
PreReq: %fillup_prereq
%description server %description server
Kerberos V5 is a trusted-third-party network authentication system, Kerberos V5 is a trusted-third-party network authentication system,
@ -102,7 +91,6 @@ and more.
%package plugin-kdb-ldap %package plugin-kdb-ldap
Summary: LDAP database plugin for MIT Kerberos5 Summary: LDAP database plugin for MIT Kerberos5
Group: Productivity/Networking/Security
Requires: krb5-server = %{version} Requires: krb5-server = %{version}
%description plugin-kdb-ldap %description plugin-kdb-ldap
@ -113,7 +101,6 @@ database plugin.
%package plugin-preauth-pkinit %package plugin-preauth-pkinit
Summary: PKINIT preauthentication plugin for MIT Kerberos5 Summary: PKINIT preauthentication plugin for MIT Kerberos5
Group: Productivity/Networking/Security
%description plugin-preauth-pkinit %description plugin-preauth-pkinit
Kerberos V5 is a trusted-third-party network authentication system, Kerberos V5 is a trusted-third-party network authentication system,
@ -122,7 +109,6 @@ practice of cleartext passwords. This package includes a PKINIT plugin.
%package plugin-preauth-otp %package plugin-preauth-otp
Summary: OTP preauthentication plugin for MIT Kerberos5 Summary: OTP preauthentication plugin for MIT Kerberos5
Group: Productivity/Networking/Security
%description plugin-preauth-otp %description plugin-preauth-otp
Kerberos V5 is a trusted-third-party network authentication system, Kerberos V5 is a trusted-third-party network authentication system,
@ -131,7 +117,6 @@ practice of cleartext passwords. This package includes a OTP plugin.
%package plugin-preauth-spake %package plugin-preauth-spake
Summary: SPAKE preauthentication plugin for MIT Kerberos5 Summary: SPAKE preauthentication plugin for MIT Kerberos5
Group: Productivity/Networking/Security
%description plugin-preauth-spake %description plugin-preauth-spake
Kerberos V5 is a trusted-third-party network authentication system, Kerberos V5 is a trusted-third-party network authentication system,
@ -140,7 +125,6 @@ practice of cleartext passwords. This package includes a SPAKE plugin.
%package doc %package doc
Summary: Documentation for the MIT Kerberos5 implementation Summary: Documentation for the MIT Kerberos5 implementation
Group: Documentation/Other
%description doc %description doc
Kerberos V5 is a trusted-third-party network authentication Kerberos V5 is a trusted-third-party network authentication
@ -150,15 +134,11 @@ extended documentation for MIT Kerberos.
%package devel %package devel
Summary: Development files for MIT Kerberos5 Summary: Development files for MIT Kerberos5
Group: Development/Libraries/C and C++ Requires: %{name} = %{version}
PreReq: %{name} = %{version}
Requires: keyutils-devel Requires: keyutils-devel
Requires: libcom_err-devel Requires: pkgconfig(com_err)
Requires: libverto-devel Requires: pkgconfig(libverto)
# bug437293 Requires: pkgconfig(ss)
%ifarch ppc64
Obsoletes: krb5-devel-64bit
%endif
Conflicts: krb5-mini-devel Conflicts: krb5-mini-devel
%description devel %description devel
@ -173,7 +153,7 @@ Include Files for Development
%prep %prep
%setup -q -n %{srcRoot} %setup -q -n %{srcRoot}
%setup -a 3 -T -D -n %{srcRoot} %setup -q -a 3 -T -D -n %{srcRoot}
%patch1 -p1 %patch1 -p1
%patch2 -p1 %patch2 -p1
%patch3 -p1 %patch3 -p1
@ -189,16 +169,18 @@ rm -f src/lib/krb5/krb/deltat.c
cd src cd src
autoreconf -fi autoreconf -fi
DEFCCNAME=DIR:/run/user/%%{uid}/krb5cc; export DEFCCNAME DEFCCNAME=DIR:/run/user/%%{uid}/krb5cc; export DEFCCNAME
./configure \ %configure \
CC="%{__cc}" \
CFLAGS="%{optflags} -I%{_includedir}/et -fno-strict-aliasing -D_GNU_SOURCE -fPIC $(getconf LFS_CFLAGS)" \ CFLAGS="%{optflags} -I%{_includedir}/et -fno-strict-aliasing -D_GNU_SOURCE -fPIC $(getconf LFS_CFLAGS)" \
CPPFLAGS="-I%{_includedir}/et " \ CPPFLAGS="-I%{_includedir}/et " \
SS_LIB="-lss" \ SS_LIB="-lss" \
--prefix=/usr/lib/mit \ --prefix=%{_prefix}/lib/mit \
--sysconfdir=%{_sysconfdir} \ --sysconfdir=%{_sysconfdir} \
--mandir=%{_mandir} \ --mandir=%{_mandir} \
--infodir=%{_infodir} \ --infodir=%{_infodir} \
--libexecdir=/usr/lib/mit/sbin \ --libexecdir=%{_prefix}/lib/mit/sbin \
--bindir=%{_prefix}/lib/mit/bin \
--sbindir=%{_prefix}/lib/mit/sbin \
--datadir=%{_prefix}/lib/mit/share \
--libdir=%{_libdir} \ --libdir=%{_libdir} \
--includedir=%{_includedir} \ --includedir=%{_includedir} \
--localstatedir=%{_localstatedir}/lib/kerberos \ --localstatedir=%{_localstatedir}/lib/kerberos \
@ -216,7 +198,7 @@ DEFCCNAME=DIR:/run/user/%%{uid}/krb5cc; export DEFCCNAME
--with-system-ss \ --with-system-ss \
--with-system-verto --with-system-verto
make %{?_smp_mflags} %make_build
# Copy kadmin manual page into kadmin.local's due to the split between client and server package # Copy kadmin manual page into kadmin.local's due to the split between client and server package
cp man/kadmin.man man/kadmin.local.8 cp man/kadmin.man man/kadmin.local.8
@ -227,7 +209,7 @@ mkdir -p %{buildroot}/%{_localstatedir}/log/krb5
# Munge krb5-config yet again. This is totally wrong for 64-bit, but chunks # Munge krb5-config yet again. This is totally wrong for 64-bit, but chunks
# of the buildconf patch already conspire to strip out /usr/<anything> from the # of the buildconf patch already conspire to strip out /usr/<anything> from the
# list of link flags, and it helps prevent file conflicts on multilib systems. # list of link flags, and it helps prevent file conflicts on multilib systems.
sed -r -i -e 's|^libdir=/usr/lib(64)?$|libdir=/usr/lib|g' %{buildroot}/usr/lib/mit/bin/krb5-config sed -r -i -e 's|^libdir=%{_prefix}/lib(64)?$|libdir=%{_prefix}/lib|g' %{buildroot}%{_prefix}/lib/mit/bin/krb5-config
# install autoconf macro # install autoconf macro
mkdir -p %{buildroot}/%{_datadir}/aclocal mkdir -p %{buildroot}/%{_datadir}/aclocal
@ -236,21 +218,21 @@ install -m 644 src/util/ac_check_krb5.m4 %{buildroot}%{_datadir}/aclocal/
# I'll probably do something about this later on # I'll probably do something about this later on
mkdir -p %{buildroot}%{_sysconfdir} mkdir -p %{buildroot}%{_sysconfdir}
mkdir -p %{buildroot}%{_sysconfdir}/krb5.conf.d mkdir -p %{buildroot}%{_sysconfdir}/krb5.conf.d
mkdir -p %{buildroot}/etc/profile.d/ mkdir -p %{buildroot}%{_sysconfdir}/profile.d/
mkdir -p %{buildroot}/var/log/krb5 mkdir -p %{buildroot}%{_localstatedir}/log/krb5
# create plugin directories # create plugin directories
mkdir -p %{buildroot}/%{_libdir}/krb5/plugins/kdb mkdir -p %{buildroot}/%{_libdir}/krb5/plugins/kdb
mkdir -p %{buildroot}/%{_libdir}/krb5/plugins/preauth mkdir -p %{buildroot}/%{_libdir}/krb5/plugins/preauth
mkdir -p %{buildroot}/%{_libdir}/krb5/plugins/libkrb5 mkdir -p %{buildroot}/%{_libdir}/krb5/plugins/libkrb5
mkdir -p %{buildroot}/%{_libdir}/krb5/plugins/tls mkdir -p %{buildroot}/%{_libdir}/krb5/plugins/tls
install -m 644 %{vendorFiles}/krb5.conf %{buildroot}%{_sysconfdir} install -m 644 %{vendorFiles}/krb5.conf %{buildroot}%{_sysconfdir}
install -m 644 %{vendorFiles}/krb5.csh.profile %{buildroot}/etc/profile.d/krb5.csh install -m 644 %{vendorFiles}/krb5.csh.profile %{buildroot}%{_sysconfdir}/profile.d/krb5.csh
install -m 644 %{vendorFiles}/krb5.sh.profile %{buildroot}/etc/profile.d/krb5.sh install -m 644 %{vendorFiles}/krb5.sh.profile %{buildroot}%{_sysconfdir}/profile.d/krb5.sh
# Do not write directly to /var/lib/kerberos anymore as it breaks transactional # Do not write directly to /var/lib/kerberos anymore as it breaks transactional
# updates. Use systemd-tmpfiles to copy the files there when it doesn't exist # updates. Use systemd-tmpfiles to copy the files there when it doesn't exist
install -d -m 0755 %{buildroot}/usr/lib/tmpfiles.d/ install -d -m 0755 %{buildroot}%{_prefix}/lib/tmpfiles.d/
install -m 644 %{SOURCE7} %{buildroot}/usr/lib/tmpfiles.d/krb5.conf install -m 644 %{SOURCE7} %{buildroot}%{_prefix}/lib/tmpfiles.d/krb5.conf
mkdir -p %{buildroot}/%{_datadir}/kerberos/krb5kdc mkdir -p %{buildroot}/%{_datadir}/kerberos/krb5kdc
# Where per-user keytabs live by default. # Where per-user keytabs live by default.
mkdir -p %{buildroot}/%{_datadir}/kerberos/krb5/user mkdir -p %{buildroot}/%{_datadir}/kerberos/krb5/user
@ -264,7 +246,7 @@ do
chmod 0755 ${lib} chmod 0755 ${lib}
done done
# and binaries too # and binaries too
chmod 0755 %{buildroot}/usr/lib/mit/bin/ksu chmod 0755 %{buildroot}%{_prefix}/lib/mit/bin/ksu
# install systemd files # install systemd files
%if 0%{?suse_version} >= 1210 %if 0%{?suse_version} >= 1210
mkdir -p %{buildroot}%{_unitdir} mkdir -p %{buildroot}%{_unitdir}
@ -287,26 +269,14 @@ mkdir -p %{buildroot}%{_sysconfdir}/logrotate.d
install -m 644 %{vendorFiles}/krb5-server.logrotate %{buildroot}%{_sysconfdir}/logrotate.d/krb5-server install -m 644 %{vendorFiles}/krb5-server.logrotate %{buildroot}%{_sysconfdir}/logrotate.d/krb5-server
find . -type f -name '*.ps' -exec gzip -9 {} + find . -type f -name '*.ps' -exec gzip -9 {} +
# create rc* links # create rc* links
mkdir -p %{buildroot}/usr/bin/ mkdir -p %{buildroot}%{_bindir}/
mkdir -p %{buildroot}/usr/sbin/ mkdir -p %{buildroot}%{_sbindir}/
%if 0%{?suse_version} >= 1210 ln -s service %{buildroot}%{_sbindir}/rckadmind
%if 0%{?suse_version} > 1220 ln -s service %{buildroot}%{_sbindir}/rckrb5kdc
ln -s %{_sbindir}/service %{buildroot}%{_sbindir}/rckadmind ln -s service %{buildroot}%{_sbindir}/rckpropd
ln -s %{_sbindir}/service %{buildroot}%{_sbindir}/rckrb5kdc
ln -s %{_sbindir}/service %{buildroot}%{_sbindir}/rckpropd
%else
ln -s /sbin/service %{buildroot}%{_sbindir}/rckadmind
ln -s /sbin/service %{buildroot}%{_sbindir}/rckrb5kdc
ln -s /sbin/service %{buildroot}%{_sbindir}/rcpropd
%endif
%else
ln -sf ../../etc/init.d/kadmind %{buildroot}/usr/sbin/rckadmind
ln -sf ../../etc/init.d/krb5kdc %{buildroot}/usr/sbin/rckrb5kdc
ln -sf ../../etc/init.d/kpropd %{buildroot}/usr/sbin/rckpropd
%endif
# create links for kinit and klist, because of the java ones # create links for kinit and klist, because of the java ones
ln -sf ../../usr/lib/mit/bin/kinit %{buildroot}/usr/bin/kinit ln -sf ../..%{_prefix}/lib/mit/bin/kinit %{buildroot}%{_bindir}/kinit
ln -sf ../../usr/lib/mit/bin/klist %{buildroot}/usr/bin/klist ln -sf ../..%{_prefix}/lib/mit/bin/klist %{buildroot}%{_bindir}/klist
# install doc # install doc
install -d -m 755 %{buildroot}/%{krb5docdir} install -d -m 755 %{buildroot}/%{krb5docdir}
install -m 644 %{_builddir}/%{srcRoot}/README %{buildroot}/%{krb5docdir}/README install -m 644 %{_builddir}/%{srcRoot}/README %{buildroot}/%{krb5docdir}/README
@ -314,22 +284,20 @@ install -d -m 755 %{buildroot}/%{_datadir}/kerberos/ldap
install -m 644 %{_builddir}/%{srcRoot}/src/plugins/kdb/ldap/libkdb_ldap/kerberos.schema %{buildroot}/%{_datadir}/kerberos/ldap/kerberos.schema install -m 644 %{_builddir}/%{srcRoot}/src/plugins/kdb/ldap/libkdb_ldap/kerberos.schema %{buildroot}/%{_datadir}/kerberos/ldap/kerberos.schema
install -m 644 %{_builddir}/%{srcRoot}/src/plugins/kdb/ldap/libkdb_ldap/kerberos.ldif %{buildroot}/%{_datadir}/kerberos/ldap/kerberos.ldif install -m 644 %{_builddir}/%{srcRoot}/src/plugins/kdb/ldap/libkdb_ldap/kerberos.ldif %{buildroot}/%{_datadir}/kerberos/ldap/kerberos.ldif
# link pam-config for su to ksu # link pam-config for su to ksu
mkdir -p %{buildroot}/etc/pam.d/ mkdir -p %{buildroot}%{_sysconfdir}/pam.d/
install -m 644 %{S:6} %{buildroot}/etc/pam.d/ksu install -m 644 %{SOURCE6} %{buildroot}%{_sysconfdir}/pam.d/ksu
# cleanup # cleanup
rm -f %{buildroot}/usr/share/man/man1/tmac.doc* rm -f %{buildroot}%{_mandir}/man1/tmac.doc*
rm -f /usr/share/man/man1/tmac.doc* html/.doctrees/environment.pickle rm -f %{_mandir}/man1/tmac.doc* html/.doctrees/environment.pickle
rm -rf %{buildroot}/usr/lib/mit/share/examples rm -rf %{buildroot}%{_prefix}/lib/mit/share/examples
# manually remove test plugin since configure doesn't support disabling it at build time # manually remove test plugin since configure doesn't support disabling it at build time
rm -f %{buildroot}/%{_libdir}/krb5/plugins/preauth/test.so rm -f %{buildroot}/%{_libdir}/krb5/plugins/preauth/test.so
%find_lang mit-krb5 %find_lang mit-krb5
%post -p /sbin/ldconfig %post -p /sbin/ldconfig
%postun -p /sbin/ldconfig %postun -p /sbin/ldconfig
%preun server %preun server
%service_del_preun krb5kdc.service kadmind.service kpropd.service %service_del_preun krb5kdc.service kadmind.service kpropd.service
@ -347,15 +315,13 @@ rm -f %{buildroot}/%{_libdir}/krb5/plugins/preauth/test.so
%service_add_pre krb5kdc.service kadmind.service kpropd.service %service_add_pre krb5kdc.service kadmind.service kpropd.service
%post plugin-kdb-ldap -p /sbin/ldconfig %post plugin-kdb-ldap -p /sbin/ldconfig
%postun plugin-kdb-ldap -p /sbin/ldconfig %postun plugin-kdb-ldap -p /sbin/ldconfig
%files devel %files devel
%defattr(-,root,root) %dir %{_prefix}/lib/mit
%dir /usr/lib/mit %dir %{_prefix}/lib/mit/bin
%dir /usr/lib/mit/bin %dir %{_prefix}/lib/mit/sbin
%dir /usr/lib/mit/sbin %dir %{_prefix}/lib/mit/share
%dir /usr/lib/mit/share
%dir %{_datadir}/aclocal %dir %{_datadir}/aclocal
%{_libdir}/libgssrpc.so %{_libdir}/libgssrpc.so
%{_libdir}/libk5crypto.so %{_libdir}/libk5crypto.so
@ -376,13 +342,12 @@ rm -f %{buildroot}/%{_libdir}/krb5/plugins/preauth/test.so
%{_libdir}/pkgconfig/mit-krb5-gssapi.pc %{_libdir}/pkgconfig/mit-krb5-gssapi.pc
%{_libdir}/pkgconfig/mit-krb5.pc %{_libdir}/pkgconfig/mit-krb5.pc
%{_includedir}/* %{_includedir}/*
/usr/lib/mit/bin/krb5-config %{_prefix}/lib/mit/bin/krb5-config
/usr/lib/mit/sbin/krb5-send-pr %{_prefix}/lib/mit/sbin/krb5-send-pr
%{_mandir}/man1/krb5-config.1* %{_mandir}/man1/krb5-config.1%{?ext_man}
%{_datadir}/aclocal/ac_check_krb5.m4 %{_datadir}/aclocal/ac_check_krb5.m4
%files -f mit-krb5.lang %files -f mit-krb5.lang
%defattr(-,root,root)
%dir %{krb5docdir} %dir %{krb5docdir}
# add plugin directories # add plugin directories
%dir %{_libdir}/krb5 %dir %{_libdir}/krb5
@ -392,11 +357,11 @@ rm -f %{buildroot}/%{_libdir}/krb5/plugins/preauth/test.so
%dir %{_libdir}/krb5/plugins/libkrb5 %dir %{_libdir}/krb5/plugins/libkrb5
%dir %{_libdir}/krb5/plugins/tls %dir %{_libdir}/krb5/plugins/tls
# add log directory # add log directory
%attr(0700,root,root) %dir /var/log/krb5 %attr(0700,root,root) %dir %{_localstatedir}/log/krb5
%doc %{krb5docdir}/README %doc %{krb5docdir}/README
%attr(0644,root,root) %config(noreplace) %{_sysconfdir}/krb5.conf %attr(0644,root,root) %config(noreplace) %{_sysconfdir}/krb5.conf
%dir %{_sysconfdir}/krb5.conf.d %dir %{_sysconfdir}/krb5.conf.d
%attr(0644,root,root) %config /etc/profile.d/krb5* %attr(0644,root,root) %config %{_sysconfdir}/profile.d/krb5*
%{_libdir}/libgssapi_krb5.* %{_libdir}/libgssapi_krb5.*
%{_libdir}/libgssrpc.so.* %{_libdir}/libgssrpc.so.*
%{_libdir}/libk5crypto.so.* %{_libdir}/libk5crypto.so.*
@ -409,22 +374,15 @@ rm -f %{buildroot}/%{_libdir}/krb5/plugins/preauth/test.so
%{_libdir}/krb5/plugins/tls/*.so %{_libdir}/krb5/plugins/tls/*.so
%files server %files server
%defattr(-,root,root) %attr(0700,root,root) %dir %{_localstatedir}/log/krb5
%attr(0700,root,root) %dir /var/log/krb5
%config(noreplace) %{_sysconfdir}/logrotate.d/krb5-server %config(noreplace) %{_sysconfdir}/logrotate.d/krb5-server
%if 0%{?suse_version} >= 1210
%{_unitdir}/kadmind.service %{_unitdir}/kadmind.service
%{_unitdir}/krb5kdc.service %{_unitdir}/krb5kdc.service
%{_unitdir}/kpropd.service %{_unitdir}/kpropd.service
%{_libexecdir}/tmpfiles.d/krb5.conf %{_libexecdir}/tmpfiles.d/krb5.conf
%else
%{_sysconfdir}/init.d/kadmind
%{_sysconfdir}/init.d/krb5kdc
%{_sysconfdir}/init.d/kpropd
%endif
%dir %{krb5docdir} %dir %{krb5docdir}
%dir /usr/lib/mit %dir %{_prefix}/lib/mit
%dir /usr/lib/mit/sbin %dir %{_prefix}/lib/mit/sbin
%dir %{_datadir}/kerberos/ %dir %{_datadir}/kerberos/
%dir %{_datadir}/kerberos/krb5kdc %dir %{_datadir}/kerberos/krb5kdc
%dir %{_datadir}/kerberos/krb5 %dir %{_datadir}/kerberos/krb5
@ -444,101 +402,96 @@ rm -f %{buildroot}/%{_libdir}/krb5/plugins/preauth/test.so
%ghost %attr(0600,root,root) %config(noreplace) %{_sharedstatedir}/kerberos/krb5kdc/kadm5.acl %ghost %attr(0600,root,root) %config(noreplace) %{_sharedstatedir}/kerberos/krb5kdc/kadm5.acl
%ghost %attr(0600,root,root) %config(noreplace) %{_sharedstatedir}/kerberos/krb5kdc/kadm5.dict %ghost %attr(0600,root,root) %config(noreplace) %{_sharedstatedir}/kerberos/krb5kdc/kadm5.dict
%{_fillupdir}/sysconfig.* %{_fillupdir}/sysconfig.*
/usr/sbin/rc* %{_sbindir}/rc*
/usr/lib/mit/sbin/kadmin.local %{_prefix}/lib/mit/sbin/kadmin.local
/usr/lib/mit/sbin/kadmind %{_prefix}/lib/mit/sbin/kadmind
/usr/lib/mit/sbin/kpropd %{_prefix}/lib/mit/sbin/kpropd
/usr/lib/mit/sbin/kproplog %{_prefix}/lib/mit/sbin/kproplog
/usr/lib/mit/sbin/kprop %{_prefix}/lib/mit/sbin/kprop
/usr/lib/mit/sbin/kdb5_util %{_prefix}/lib/mit/sbin/kdb5_util
/usr/lib/mit/sbin/krb5kdc %{_prefix}/lib/mit/sbin/krb5kdc
/usr/lib/mit/sbin/gss-server %{_prefix}/lib/mit/sbin/gss-server
/usr/lib/mit/sbin/sim_server %{_prefix}/lib/mit/sbin/sim_server
/usr/lib/mit/sbin/sserver %{_prefix}/lib/mit/sbin/sserver
/usr/lib/mit/sbin/uuserver %{_prefix}/lib/mit/sbin/uuserver
%{_libdir}/krb5/plugins/kdb/db2.so %{_libdir}/krb5/plugins/kdb/db2.so
%{_mandir}/man5/kdc.conf.5* %{_mandir}/man5/kdc.conf.5%{?ext_man}
%{_mandir}/man5/kadm5.acl.5* %{_mandir}/man5/kadm5.acl.5%{?ext_man}
%{_mandir}/man8/kadmind.8* %{_mandir}/man8/kadmind.8%{?ext_man}
%{_mandir}/man8/kadmin.local.8* %{_mandir}/man8/kadmin.local.8%{?ext_man}
%{_mandir}/man8/kpropd.8* %{_mandir}/man8/kpropd.8%{?ext_man}
%{_mandir}/man8/kprop.8* %{_mandir}/man8/kprop.8%{?ext_man}
%{_mandir}/man8/kproplog.8.gz %{_mandir}/man8/kproplog.8%{?ext_man}
%{_mandir}/man8/kdb5_util.8* %{_mandir}/man8/kdb5_util.8%{?ext_man}
%{_mandir}/man8/krb5kdc.8* %{_mandir}/man8/krb5kdc.8%{?ext_man}
%{_mandir}/man8/sserver.8* %{_mandir}/man8/sserver.8%{?ext_man}
%files client %files client
%defattr(-,root,root) %dir %{_prefix}/lib/mit
%dir /usr/lib/mit %dir %{_prefix}/lib/mit/bin
%dir /usr/lib/mit/bin %dir %{_prefix}/lib/mit/sbin
%dir /usr/lib/mit/sbin %attr(0644,root,root) %config(noreplace) %{_sysconfdir}/pam.d/ksu
%attr(0644,root,root) %config(noreplace) /etc/pam.d/ksu %{_prefix}/lib/mit/bin/kvno
/usr/lib/mit/bin/kvno %{_prefix}/lib/mit/bin/kinit
/usr/lib/mit/bin/kinit %{_prefix}/lib/mit/bin/kdestroy
/usr/lib/mit/bin/kdestroy %{_prefix}/lib/mit/bin/kpasswd
/usr/lib/mit/bin/kpasswd %{_prefix}/lib/mit/bin/klist
/usr/lib/mit/bin/klist %{_prefix}/lib/mit/bin/kadmin
/usr/lib/mit/bin/kadmin %{_prefix}/lib/mit/bin/ktutil
/usr/lib/mit/bin/ktutil %{_prefix}/lib/mit/bin/k5srvutil
/usr/lib/mit/bin/k5srvutil %{_prefix}/lib/mit/bin/gss-client
/usr/lib/mit/bin/gss-client %{_prefix}/lib/mit/bin/ksu
/usr/lib/mit/bin/ksu %{_prefix}/lib/mit/bin/sclient
/usr/lib/mit/bin/sclient %{_prefix}/lib/mit/bin/sim_client
/usr/lib/mit/bin/sim_client %{_prefix}/lib/mit/bin/uuclient
/usr/lib/mit/bin/uuclient %{_prefix}/lib/mit/bin/kswitch
/usr/lib/mit/bin/kswitch %{_bindir}/kinit
/usr/bin/kinit %{_bindir}/klist
/usr/bin/klist %{_mandir}/man1/kvno.1%{?ext_man}
%{_mandir}/man1/kvno.1* %{_mandir}/man1/kinit.1%{?ext_man}
%{_mandir}/man1/kinit.1* %{_mandir}/man1/kdestroy.1%{?ext_man}
%{_mandir}/man1/kdestroy.1* %{_mandir}/man1/kpasswd.1%{?ext_man}
%{_mandir}/man1/kpasswd.1* %{_mandir}/man1/klist.1%{?ext_man}
%{_mandir}/man1/klist.1* %{_mandir}/man1/kadmin.1%{?ext_man}
%{_mandir}/man1/kadmin.1* %{_mandir}/man1/ktutil.1%{?ext_man}
%{_mandir}/man1/ktutil.1* %{_mandir}/man1/k5srvutil.1%{?ext_man}
%{_mandir}/man1/k5srvutil.1* %{_mandir}/man1/kswitch.1%{?ext_man}
%{_mandir}/man1/kswitch.1* %{_mandir}/man5/krb5.conf.5%{?ext_man}
%{_mandir}/man5/krb5.conf.5* %{_mandir}/man5/.k5login.5%{?ext_man}
%{_mandir}/man5/.k5login.5* %{_mandir}/man5/.k5identity.5%{?ext_man}
%{_mandir}/man5/.k5identity.5* %{_mandir}/man5/k5identity.5%{?ext_man}
%{_mandir}/man5/k5identity.5* %{_mandir}/man5/k5login.5%{?ext_man}
%{_mandir}/man5/k5login.5* %{_mandir}/man1/ksu.1%{?ext_man}
%{_mandir}/man1/ksu.1.gz %{_mandir}/man1/sclient.1%{?ext_man}
%{_mandir}/man1/sclient.1.gz %{_mandir}/man7/kerberos.7%{?ext_man}
%{_mandir}/man7/kerberos.7.gz
%files plugin-kdb-ldap %files plugin-kdb-ldap
%defattr(-,root,root)
%dir %{_libdir}/krb5 %dir %{_libdir}/krb5
%dir %{_libdir}/krb5/plugins %dir %{_libdir}/krb5/plugins
%dir %{_libdir}/krb5/plugins/kdb %dir %{_libdir}/krb5/plugins/kdb
%dir /usr/lib/mit/sbin/ %dir %{_prefix}/lib/mit/sbin/
%dir %{_datadir}/kerberos %dir %{_datadir}/kerberos
%dir %{_datadir}/kerberos/ldap %dir %{_datadir}/kerberos/ldap
%config %{_datadir}/kerberos/ldap/kerberos.schema %config %{_datadir}/kerberos/ldap/kerberos.schema
%config %{_datadir}/kerberos/ldap/kerberos.ldif %config %{_datadir}/kerberos/ldap/kerberos.ldif
%{_libdir}/krb5/plugins/kdb/kldap.so %{_libdir}/krb5/plugins/kdb/kldap.so
/usr/lib/mit/sbin/kdb5_ldap_util %{_prefix}/lib/mit/sbin/kdb5_ldap_util
%{_libdir}/libkdb_ldap* %{_libdir}/libkdb_ldap*
%{_mandir}/man8/kdb5_ldap_util.8* %{_mandir}/man8/kdb5_ldap_util.8%{?ext_man}
%files plugin-preauth-pkinit %files plugin-preauth-pkinit
%defattr(-,root,root)
%dir %{_libdir}/krb5 %dir %{_libdir}/krb5
%dir %{_libdir}/krb5/plugins %dir %{_libdir}/krb5/plugins
%dir %{_libdir}/krb5/plugins/preauth %dir %{_libdir}/krb5/plugins/preauth
%{_libdir}/krb5/plugins/preauth/pkinit.so %{_libdir}/krb5/plugins/preauth/pkinit.so
%files plugin-preauth-otp %files plugin-preauth-otp
%defattr(-,root,root)
%dir %{_libdir}/krb5 %dir %{_libdir}/krb5
%dir %{_libdir}/krb5/plugins %dir %{_libdir}/krb5/plugins
%dir %{_libdir}/krb5/plugins/preauth %dir %{_libdir}/krb5/plugins/preauth
%{_libdir}/krb5/plugins/preauth/otp.so %{_libdir}/krb5/plugins/preauth/otp.so
%files plugin-preauth-spake %files plugin-preauth-spake
%defattr(-,root,root)
%dir %{_libdir}/krb5 %dir %{_libdir}/krb5
%dir %{_libdir}/krb5/plugins %dir %{_libdir}/krb5/plugins
%dir %{_libdir}/krb5/plugins/preauth %dir %{_libdir}/krb5/plugins/preauth