sssd: Use /var/lib/sss and drop /var/run

[ipfire-3.x.git] / sssd / sssd.nm

###############################################################################
# IPFire.org    - An Open Source Firewall Solution                            #
# Copyright (C) - IPFire Development Team <info@ipfire.org>                   #
###############################################################################

name       = sssd
version    = 2.8.2
release    = 2

groups     = System/Tools
url        = https://github.com/SSSD/sssd
license    = GPLv3+
summary    = System Security Services Daemon.

description
	Provides a set of daemons to manage access to remote directories and
	authentication mechanisms. It provides an NSS and PAM interface toward
	the system and a pluggable backend system to connect to multiple different
	account sources.
end

source_dl  = https://github.com/SSSD/sssd/releases/download/%{version}/

build
	# The system security services daemon and many tools requires
	# an rpath to run properly. Disable the macro for fixing these rpath's.
	MACRO_FIX_LIBTOOL = # Do nothing.

	requires
		/usr/bin/nsupdate
		c-ares-devel
		curl-devel
		cyrus-sasl-devel
		dbus-devel
		ding-libs-devel >= 0.6.1
		docbook-xsl
		gettext-devel
		glib2-devel
		jansson-devel
		jose-devel
		krb5-devel >= 1.10.3
		libcollection-devel
		libdhash-devel >= 0.6.1
		libini_config-devel >= 0.6.1
		libldb-devel >= 1.6.1
		libnfsidmap-devel
		libnl3-devel
		libtalloc-devel
		libtdb-devel
		libtevent-devel
		libtool
		libunistring-devel
		openldap-devel
		openssl-devel
		p11-kit-devel >= 0.23.3
		pam-devel >= 1.1.6
		pcre-devel
		popt-devel
		python3-devel
		samba-devel >= 4.17.5
		systemd-devel
	end

	configure_options += \
		--with-crypto=libcrypto \
		--with-db-path=%{sharedstatedir}/sss/db \
		--with-pipe-path=%{sharedstatedir}/sss/pipe \
		--with-pubconf-path=%{sharedstatedir}/sss/pubconf \
		--with-mcache-path=%{sharedstatedir}/sss/mc \
		--with-krb5-rcache-dir=%{localstatedir}/cache/krb5rcache \
		--with-default-ccache-dir=/run/user/%U \
		--with-default-ccname-template=DIR:%d/krb5cc \
		--with-initscript=systemd \
		--with-systemdunitdir=%{unitdir} \
		--enable-pammoddir=%{libdir}/security \
		--disable-static \
		--disable-rpath \
		--disable-config-lib \
		--without-secrets \
		--without-semanage \
		--without-selinux \
		--disable-cifs-idmap-plugin

	test
		make check
	end

	install_cmds
		# Install default config file.
		install -m 600 %{DIR_SOURCE}/sssd.conf \
			%{BUILDROOT}%{sysconfdir}/sssd/sssd.conf

		# Remove old sysVinit stuff.
		rm -rvf %{BUILDROOT}%{sysconfdir}/rc.d

		# Drop /var/run
		rm -rvf %{BUILDROOT}%{localstatedir}/run
	end
end

packages
	package %{name}
		groups += Base

		configfiles
			%{sysconfdir}/sssd/sssd.conf
		end

		script postin
			systemctl daemon-reload >/dev/null 2>&1 || :
		end

		script preun
			systemctl --no-reload disable sssd.service >/dev/null 2>&1 || :
			systemctl stop sssd.service >/dev/null 2>&1 || :
		end

		script postun
			systemctl daemon-reload >/dev/null 2>&1 || :
		end

		script postup
			systemctl daemon-reload >/dev/null 2>&1 || :
			systemctl try-restart sssd.service >/dev/null 2>&1 || :
		end
	end

	package %{name}-client
		summary = SSSD Client libraries.
		description = %{summary}
		groups += Base

		requires
			%{name} = %{thisver}
		end

		obsoletes
			nss_ldap
			pam_ldap
		end

		files
			%{libdir}/libnss_sss.so.*
			%{libdir}/security/pam_sss.so
			%{libdir}/krb5/
			%{mandir}/man8/pam_sss.8*
			%{mandir}/man8/sssd_krb5*.8*
		end
	end

	package %{name}-tools
		summary = Userspace tools for use with the SSSD.
		description
			Provides userspace tools for manipulating users, groups, and nested groups in
			SSSD when using id_provider = local in /etc/sssd/sssd.conf.
		end

		requires
			%{name} = %{thisver}
		end

		files
			%{sbindir}/sss_*
			%{mandir}/man8/sss_*.8*
		end
	end

	package %{name}-devel
		template DEVEL
	end

	package libsss_idmap
		summary = FreeIPA Idmap library.
		description
			Utility library to convert SIDs to Unix uids and gids.
		end

		files
			%{libdir}/libsss_idmap.so.*
		end
	end

	package libsss_idmap-devel
		summary = Development files for libsss_idmap.
		description = %{summary}

		files
			%{libdir}/libsss_idmap.so
			%{libdir}/pkgconfig/sss_idmap.pc
			%{includedir}/sss_idmap.h
		end
	end

	package libipa_hbac
		summary = FreeIPA HBAC Evaluator library.
		description
			Utility library to validate FreeIPA HBAC rules for authorization requests.
		end

		files
			%{libdir}/libipa_hbac.so.*
		end
	end

	package libipa_hbac-devel
		summary = Development files for libipa_hbac.
		description = %{summary}

		files
			%{libdir}/libipa_hbac.so
			%{libdir}/pkgconfig/ipa_hbac.pc
			%{includedir}/ipa_hbac.h
		end
	end

	package python-libipa_hbac
		summary = Python bindings for the FreeIPA HBAC Evaluator library.
		description
			This package contains the bindings so that libipa_hbac can be
			used by Python applications.
		end

		files
			%{python_sitearch}/pyhbac.so
		end
	end

	package libsss_sudo
		summary = A library to allow communication between SUDO and SSSD.
		description
			A utility library to allow communication between SUDO and SSSD.
		end

		files
			%{libdir}/libsss_sudo.so.*
		end
	end

	package libsss_sudo-devel
		summary = Development header for libsss_sudo.
		description = %{summary}

		files
			%{libdir}/libsss_sudo.so
			%{libdir}/pkgconfig/sss_sudo.pc
			%{includedir}/sss_sudo.h
		end
	end

	package %{name}-debuginfo
		template DEBUGINFO
	end
end