]> git.ipfire.org Git - people/ms/ipfire-3.x.git/commitdiff
Merge remote-tracking branch 'stevee/sssd'
authorMichael Tremer <michael.tremer@ipfire.org>
Sat, 23 Mar 2013 21:19:31 +0000 (22:19 +0100)
committerMichael Tremer <michael.tremer@ipfire.org>
Sat, 23 Mar 2013 21:19:31 +0000 (22:19 +0100)
authconfig/authconfig.nm
c-ares/c-ares.nm [new file with mode: 0644]
ding-libs/ding-libs.nm [new file with mode: 0644]
libldb/libldb.nm [new file with mode: 0644]
libtalloc/libtalloc.nm [new file with mode: 0644]
libtdb/libtdb.nm [new file with mode: 0644]
libtevent/libtevent.nm [new file with mode: 0644]
sssd/sssd.conf [new file with mode: 0644]
sssd/sssd.nm [new file with mode: 0644]

index 56f2f7bfda8be8884f75683729f1a03f384b9685..1dd4a7e0b916cb94ac9f595d293941cb4d5b5254 100644 (file)
@@ -4,8 +4,8 @@
 ###############################################################################
 
 name       = authconfig
-version    = 6.2.2
-release    = 5
+version    = 6.2.5
+release    = 1
 
 groups     = System/Base
 url        = https://fedorahosted.org/authconfig
@@ -75,7 +75,6 @@ packages
                requires
                        libpwquality
                        newt-python
-                       nss_ldap
                end
 
                configfiles
diff --git a/c-ares/c-ares.nm b/c-ares/c-ares.nm
new file mode 100644 (file)
index 0000000..dcbe850
--- /dev/null
@@ -0,0 +1,39 @@
+###############################################################################
+# IPFire.org    - An Open Source Firewall Solution                            #
+# Copyright (C) - IPFire Development Team <info@ipfire.org>                   #
+###############################################################################
+
+name       = c-ares
+version    = 1.9.1
+release    = 1
+
+groups     = System/Libraries
+url        = http://c-ares.haxx.se/
+license    = MIT
+summary    = A library that performs asynchronous DNS operations.
+
+description
+       c-ares is a C library that performs DNS requests and name resolves 
+       asynchronously. c-ares is a fork of the library named 'ares', written 
+       by Greg Hudson at MIT.
+end
+
+source_dl  = http://c-ares.haxx.se/download/
+
+build
+       configure_options += \
+               --enable-shared \
+               --disable-static
+end
+
+packages
+       package %{name}
+
+       package %{name}-devel
+               template DEVEL
+       end
+
+       package %{name}-debuginfo
+               template DEBUGINFO
+       end
+end
diff --git a/ding-libs/ding-libs.nm b/ding-libs/ding-libs.nm
new file mode 100644 (file)
index 0000000..81291ce
--- /dev/null
@@ -0,0 +1,208 @@
+###############################################################################
+# IPFire.org    - An Open Source Firewall Solution                            #
+# Copyright (C) - IPFire Development Team <info@ipfire.org>                   #
+###############################################################################
+
+name       = ding-libs
+version    = 0.2.91
+release    = 1
+
+groups     = System/Libraries
+url        = http://fedorahosted.org/sssd/
+license    = GPLv3+
+summary    = "Ding is not GLib" assorted utility libraries.
+
+description
+       A set of helpful libraries used by projects such as SSSD.
+end
+
+source_dl  = http://fedorahosted.org/releases/d/i/ding-libs/
+
+build
+       configure_options += \
+               --disable-static
+
+       test
+               make check
+       end
+end
+
+packages
+       # ding-libs is a meta package,
+       # which requires all sub-packages.
+       package %{name}
+               requires
+                       libbasicobjects = %{thisver}
+                       libcollection = %{thisver}
+                       libdhash = %{thisver} 
+                       libini_config = %{thisver}
+                       libpath_utils = %{thisver}
+                       libref_array = %{thisver}
+               end
+       end
+
+       # ding-libs-devel is a meta package,
+       # which requires all devel sub-packages.
+       package %{name}-devel
+               template DEVEL
+
+               requires
+                       libbasicobjects-devel = %{thisver}
+                       libcollection-devel = %{thisver}
+                       libdhash-devel = %{thisver}
+                       libini_config-devel = %{thisver}
+                       libpath_utils-devel = %{thisver}
+                       libref_array-devel = %{thisver}
+               end
+       end
+
+       package libbasicobjects
+               template LIBS
+
+               summary = Basic object types for C.
+               description = %{summary}
+
+               files
+                       %{libdir}/libbasicobjects.so.*
+               end
+       end
+
+       package libbasicobjects-devel
+               summary = Development files for libbasicobjects.
+               description = %{summary}
+
+               files
+                       %{libdir}/libbasicobjects.so
+                       %{libdir}/pkgconfig/basicobjects.pc
+                       %{includedir}/simplebuffer.h
+               end
+       end
+                       
+       package libcollection
+               template LIBS
+
+               summary = Collection data-type for C.
+               description
+                       A data-type to collect data in a hierarchical structure 
+                       for easy iteration and serialization.
+               end
+
+               files
+                       %{libdir}/libcollection.so.*
+               end
+       end
+
+       package libcollection-devel
+               summary = Development files for libcollection.
+               description = %{summary}
+
+               files
+                       %{libdir}/libcollection.so
+                       %{libdir}/pkgconfig/collection.pc
+                       %{includedir}/collection*.h
+               end
+       end
+
+       package libdhash
+               template LIBS
+
+               summary = Dynamic hash table.
+               description
+                       A hash table which will dynamically resize to achieve
+                       optimal storage & access time properties.
+               end
+
+               files
+                       %{libdir}/libdhash.so.*
+               end
+       end
+
+       package libdhash-devel
+               summary = Development files for libdhash.
+               description = %{summary}
+
+               files
+                       %{libdir}/libdhash.so
+                       %{libdir}/pkgconfig/dhash.pc
+                       %{includedir}/dhash*.h
+               end
+       end
+
+       package libini_config
+               template LIBS
+
+               summary = INI file parsr for C.
+               description
+                       Library to process config files in INI format into a
+                       libcollection data structure.
+               end
+
+               files
+                       %{libdir}/libini_config.so.*
+               end
+       end
+
+       package libini_config-devel
+               summary = Development files for libini_config.
+               description = %{summary}
+
+               files
+                       %{libdir}/libini_config.so
+                       %{libdir}/pkgconfig/ini_config.pc
+                       %{includedir}/ini_config*.h
+               end
+       end
+
+       package libpath_utils
+               template LIBS
+
+               summary = Filesystem Path Utilities.
+               description
+                       Utility functions to manipulate filesystem pathnames.
+               end
+
+               files
+                       %{libdir}/libpath_utils.so.*
+               end
+       end
+
+       package libpath_utils-devel
+               summary = Development files for libpath_utils.
+               description = %{summary}
+
+               files
+                       %{libdir}/libpath_utils.so
+                       %{libdir}/pkgconfig/path_utils.pc
+                       %{includedir}/path_utils*.h
+               end
+       end
+
+       package libref_array
+               template LIBS
+
+               summary = A refcounted array for C.
+               description
+                       A dynamically-growing, reference-counted array.
+               end
+
+               files
+                       %{libdir}/libref_array.so.*
+               end
+       end
+
+       package libref_array-devel
+               summary = Development files for libref_array.
+               description = %{summary}
+
+               files
+                       %{libdir}/libref_array.so
+                       %{libdir}/pkgconfig/ref_array.pc
+                       %{includedir}/ref_array*.h
+               end
+       end
+       
+       package %{name}-debuginfo
+               template DEBUGINFO
+       end
+end
+
diff --git a/libldb/libldb.nm b/libldb/libldb.nm
new file mode 100644 (file)
index 0000000..21323f7
--- /dev/null
@@ -0,0 +1,82 @@
+###############################################################################
+# IPFire.org    - An Open Source Firewall Solution                            #
+# Copyright (C) - IPFire Development Team <info@ipfire.org>                   #
+###############################################################################
+
+name       = libldb
+version    = 1.1.15
+release    = 1
+
+groups     = System/Libraries
+url        = http://ldb.samba.org/
+license    = LGPLv3+
+summary    = A schema-less, ldap like, API and database.
+
+description
+       An extensible library that implements an LDAP like API to access remote LDAP
+       servers, or use local tdb databases.
+end
+
+thisapp = ldb-%{version}
+
+source_dl  = http://samba.org/ftp/ldb/
+
+build
+       requires
+               chrpath
+               docbook-utils
+               docbook-xsl
+               libtalloc-devel
+               libtdb-devel
+               libtevent-devel
+               popt-devel
+               pytalloc
+               pytdb
+               pytevent
+               python-devel
+       end
+
+       configure_options += \
+               --disable-rpath \
+               --disable-rpath-install \
+               --bundled-libraries=NONE \
+               --with-modulesdir=%{libdir}/ldb/modules \
+               --with-privatelibdir=%{libdir}/ldb
+
+       # Disable parallel build.
+       PARALLELISMFLAGS =
+
+       install_cmds
+               # Remove rpath from binaries.
+               chrpath --delete %{BUILDROOT}%{bindir}/*
+       end
+end
+
+packages
+       package %{name}
+
+       package ldb-tools
+               summary = Tools to manage LDB files.
+               description
+                       %{summary}
+               end
+
+               files
+                       %{bindir}
+                       %{libdir}/ldb/libldb-cmdline*
+                       %{mandir}/man1/*
+               end
+       end
+
+       package %{name}-devel
+               template DEVEL
+       end
+
+       package pyldb
+               template PYTHON
+       end
+
+       package %{name}-debuginfo
+               template DEBUGINFO
+       end
+end
diff --git a/libtalloc/libtalloc.nm b/libtalloc/libtalloc.nm
new file mode 100644 (file)
index 0000000..a1244c5
--- /dev/null
@@ -0,0 +1,50 @@
+###############################################################################
+# IPFire.org    - An Open Source Firewall Solution                            #
+# Copyright (C) - IPFire Development Team <info@ipfire.org>                   #
+###############################################################################
+
+name       = libtalloc
+version    = 2.0.8
+release    = 1
+
+groups     = System/Libraries
+url        = http://talloc.samba.org/
+license    = LGPLv3+
+summary    = The talloc library.
+
+description
+       A library that implements a hierarchical allocator with destructors.
+end
+
+thisapp = talloc-%{version}
+
+source_dl  = http://samba.org/ftp/talloc/
+
+build
+       requires
+               docbook-utils
+               docbook-xsl
+               python-devel
+       end
+
+       configure_options += \
+               --disable-rpath \
+               --disable-rpath-install \
+               --bundled-libraries=NONE
+end
+
+packages
+       package %{name}
+
+       package %{name}-devel
+               template DEVEL
+       end
+
+       package pytalloc
+               template PYTHON
+       end
+
+       package %{name}-debuginfo
+               template DEBUGINFO
+       end
+end
diff --git a/libtdb/libtdb.nm b/libtdb/libtdb.nm
new file mode 100644 (file)
index 0000000..7b676ae
--- /dev/null
@@ -0,0 +1,50 @@
+###############################################################################
+# IPFire.org    - An Open Source Firewall Solution                            #
+# Copyright (C) - IPFire Development Team <info@ipfire.org>                   #
+###############################################################################
+
+name       = libtdb
+version    = 1.2.11
+release    = 1
+
+groups     = System/Libraries
+url        = http://tdb.samba.org/
+license    = LGPLv3+
+summary    = The tdb library.
+
+description
+       A library that implements a trivial database.
+end
+
+thisapp = tdb-%{version}
+
+source_dl  = http://samba.org/ftp/tdb/
+
+build
+       requires
+               docbook-utils
+               docbook-xsl
+               python-devel
+       end
+
+       configure_options += \
+               --disable-rpath \
+               --disable-rpath-install \
+               --bundled-libraries=NONE
+end
+
+packages
+       package %{name}
+
+       package %{name}-devel
+               template DEVEL
+       end
+
+       package pytdb
+               template PYTHON
+       end
+
+       package %{name}-debuginfo
+               template DEBUGINFO
+       end
+end
diff --git a/libtevent/libtevent.nm b/libtevent/libtevent.nm
new file mode 100644 (file)
index 0000000..a4dc690
--- /dev/null
@@ -0,0 +1,53 @@
+###############################################################################
+# IPFire.org    - An Open Source Firewall Solution                            #
+# Copyright (C) - IPFire Development Team <info@ipfire.org>                   #
+###############################################################################
+
+name       = libtevent
+version    = 0.9.17
+release    = 1
+
+groups     = System/Libraries
+url        = http://tevent.samba.org/
+license    = LGPLv3+
+summary    = The tevent library.
+
+description
+       Tevent is an event system based on the talloc memory management library.
+       Tevent has support for many event types, including timers, signals, and
+       the classic file descriptor events.
+end
+
+thisapp = tevent-%{version}
+
+source_dl  = http://samba.org/ftp/tevent/
+
+build
+       requires
+               docbook-utils
+               docbook-xsl
+               libtalloc-devel
+               python-devel
+       end
+
+       configure_options += \
+               --disable-rpath \
+               --disable-rpath-install \
+               --bundled-libraries=NONE
+end
+
+packages
+       package %{name}
+
+       package %{name}-devel
+               template DEVEL
+       end
+
+       package pytevent
+               template PYTHON
+       end
+
+       package %{name}-debuginfo
+               template DEBUGINFO
+       end
+end
diff --git a/sssd/sssd.conf b/sssd/sssd.conf
new file mode 100644 (file)
index 0000000..0aef9be
--- /dev/null
@@ -0,0 +1,25 @@
+###############################################################################
+# IPFire.org    - An Open Source Firewall Solution                            #
+# Copyright (C) - IPFire Development Team <info@ipfire.org>                   #
+###############################################################################
+
+[sssd]
+domains = LDAP
+services = nss, pam
+config_file_version = 2
+
+[nss]
+filter_groups = root
+filter_users = root
+
+[pam]
+
+[domain/LDAP]
+id_provider = ldap
+ldap_uri = ldapi://
+ldap_search_base = @SUFFIX@
+
+cache_credentials = true
+
+min_id = 1000
+enumerate = False
diff --git a/sssd/sssd.nm b/sssd/sssd.nm
new file mode 100644 (file)
index 0000000..2f4c6ad
--- /dev/null
@@ -0,0 +1,240 @@
+###############################################################################
+# IPFire.org    - An Open Source Firewall Solution                            #
+# Copyright (C) - IPFire Development Team <info@ipfire.org>                   #
+###############################################################################
+
+name       = sssd
+version    = 1.9.4
+release    = 2
+
+groups     = System/Tools
+url        = http://fedorahosted.org/sssd/
+license    = GPLv3+
+summary    = System Security Services Daemon.
+
+description
+       Provides a set of daemons to manage access to remote directories and
+       authentication mechanisms. It provides an NSS and PAM interface toward
+       the system and a pluggable backend system to connect to multiple different
+       account sources.
+end
+
+source_dl  = https://fedorahosted.org/released/sssd/
+
+build
+       requires
+               /usr/bin/nsupdate
+               c-ares-devel
+               cyrus-sasl-devel
+               dbus-devel
+               docbook-xsl
+               glib2-devel
+               krb5-devel >= 1.10.3
+               libcollection-devel
+               libdhash-devel
+               libini_config-devel
+               libldb-devel
+               libnl-devel
+               libsemanage-devel
+               libtalloc-devel
+               libtdb-devel
+               libtevent-devel
+               openldap-devel
+               openssl-devel
+               pam-devel >= 1.1.6
+               pcre-devel
+               popt-devel
+               python-devel
+       end
+
+       configure_options += \
+               --with-crypto=libcrypto \
+               --with-db-path=%{localstatedir}/sss/db \
+               --with-pipe-path=%{localstatedir}/sss/pipe \
+               --with-pubconf-path=%{localstatedir}/sss/pubconf \
+               --with-mcache-path=%{localstatedir}/sss/mc \
+               --with-krb5-rcache-dir=%{localstatedir}/cache/krb5rcache \
+               --with-default-ccache-dir=/run/user/%U \
+               --with-default-ccname-template=DIR:%d/krb5cc \
+               --with-initscript=systemd \
+               --with-systemdunitdir=%{unitdir} \
+               --enable-pammoddir=%{libdir}/security \
+               --disable-static \
+               --disable-rpath
+
+       install_cmds
+               # Install default config file.
+               install -m 600 %{DIR_SOURCE}/sssd.conf \
+                       %{BUILDROOT}%{sysconfdir}/sssd/sssd.conf
+
+               # Remove old sysVinit stuff.
+               rm -rvf %{BUILDROOT}%{sysconfdir}/rc.d
+       end
+end
+
+packages
+       package %{name}
+               groups += Base
+
+               configfiles
+                       %{sysconfdir}/sssd/sssd.conf
+               end
+
+               prerequires += systemd-units
+
+               script postin
+                       systemctl daemon-reload >/dev/null 2>&1 || :
+               end
+
+               script preun
+                       systemctl --no-reload disable sssd.service >/dev/null 2>&1 || :
+                       systemctl stop sssd.service >/dev/null 2>&1 || :
+               end
+
+               script postun
+                       systemctl daemon-reload >/dev/null 2>&1 || :
+               end
+
+               script postup
+                       systemctl daemon-reload >/dev/null 2>&1 || :
+                       systemctl try-restart sssd.service >/dev/null 2>&1 || :
+               end
+       end
+
+       package %{name}-client
+               summary = SSSD Client libraries.
+               description = %{summary}
+               groups += Base
+
+               requires
+                       %{name} = %{thisver}
+               end
+
+               obsoletes
+                       nss_ldap
+                       pam_ldap
+               end
+
+               files
+                       %{libdir}/libnss_sss.so.*
+                       %{libdir}/security/pam_sss.so
+                       %{libdir}/krb5/
+                       %{mandir}/man8/pam_sss.8*
+                       %{mandir}/man8/sssd_krb5*.8*
+               end
+
+               prerequires += \
+                       authconfig >= 6.2.5
+
+               script postin
+                       authconfig --update --enableldap --enablesssd --enablesssdauth
+               end
+
+               script postun
+                       authconfig --update --disableldap --disablesssd --disablesssdauth
+               end
+       end
+
+       package %{name}-tools
+               summary = Userspace tools for use with the SSSD.
+               description
+                       Provides userspace tools for manipulating users, groups, and nested groups in
+                       SSSD when using id_provider = local in /etc/sssd/sssd.conf.
+               end
+
+               requires
+                       %{name} = %{thisver}
+               end
+
+               files
+                       %{sbindir}/sss_*
+                       %{mandir}/man8/sss_*.8*
+               end
+       end
+
+       package %{name}-devel
+               template DEVEL
+       end
+
+       package libsss_idmap
+               summary = FreeIPA Idmap library.
+               description
+                       Utility library to convert SIDs to Unix uids and gids.
+               end
+
+               files
+                       %{libdir}/libsss_idmap.so.*
+               end
+       end
+
+       package libsss_idmap-devel
+               summary = Development files for libsss_idmap.
+               description = %{summary}
+
+               files
+                       %{libdir}/libsss_idmap.so
+                       %{libdir}/pkgconfig/sss_idmap.pc
+                       %{includedir}/sss_idmap.h
+               end
+       end
+
+       package libipa_hbac
+               summary = FreeIPA HBAC Evaluator library.
+               description
+                       Utility library to validate FreeIPA HBAC rules for authorization requests.
+               end
+
+               files
+                       %{libdir}/libipa_hbac.so.*
+               end
+       end
+
+       package libipa_hbac-devel
+               summary = Development files for libipa_hbac.
+               description = %{summary}
+
+               files
+                       %{libdir}/libipa_hbac.so
+                       %{libdir}/pkgconfig/ipa_hbac.pc
+                       %{includedir}/ipa_hbac.h
+               end
+       end
+
+       package python-libipa_hbac
+               summary = Python bindings for the FreeIPA HBAC Evaluator library.
+               description
+                       This package contains the bindings so that libipa_hbac can be
+                       used by Python applications.
+               end
+
+               files
+                       %{python_sitearch}/pyhbac.so
+               end
+       end
+
+       package libsss_sudo
+               summary = A library to allow communication between SUDO and SSSD.
+               description
+                       A utility library to allow communication between SUDO and SSSD.
+               end
+
+               files
+                       %{libdir}/libsss_sudo.so.*
+               end
+       end
+
+       package libsss_sudo-devel
+               summary = Development header for libsss_sudo.
+               description = %{summary}
+
+               files
+                       %{libdir}/libsss_sudo.so
+                       %{libdir}/pkgconfig/sss_sudo.pc
+                       %{includedir}/sss_sudo.h
+               end
+       end
+
+       package %{name}-debuginfo
+               template DEBUGINFO
+       end
+end