1 ###############################################################################
2 # IPFire.org - An Open Source Firewall Solution #
3 # Copyright (C) - IPFire Development Team <info@ipfire.org> #
4 ###############################################################################
11 url = https://github.com/SSSD/sssd
13 summary = System Security Services Daemon.
16 Provides a set of daemons to manage access to remote directories and
17 authentication mechanisms. It provides an NSS and PAM interface toward
18 the system and a pluggable backend system to connect to multiple different
22 source_dl = https://releases.pagure.org/SSSD/sssd/
25 # The system security services daemon and many tools requires
26 # an rpath to run properly. Disable the macro for fixing these rpath's.
27 MACRO_FIX_LIBTOOL = # Do nothing.
34 cifs-utils-devel >= 6.6
37 ding-libs-devel >= 0.6.1
43 libdhash-devel >= 0.6.1
44 libini_config-devel >= 0.6.1
45 libldb-devel >= 1.1.20
66 configure_options += \
67 --with-crypto=libcrypto \
68 --with-db-path=%{localstatedir}/sss/db \
69 --with-pipe-path=%{localstatedir}/sss/pipe \
70 --with-pubconf-path=%{localstatedir}/sss/pubconf \
71 --with-mcache-path=%{localstatedir}/sss/mc \
72 --with-krb5-rcache-dir=%{localstatedir}/cache/krb5rcache \
73 --with-default-ccache-dir=/run/user/%U \
74 --with-default-ccname-template=DIR:%d/krb5cc \
75 --with-initscript=systemd \
76 --with-systemdunitdir=%{unitdir} \
77 --enable-pammoddir=%{libdir}/security \
80 --disable-config-lib \
90 # Install default config file.
91 install -m 600 %{DIR_SOURCE}/sssd.conf \
92 %{BUILDROOT}%{sysconfdir}/sssd/sssd.conf
94 # Remove old sysVinit stuff.
95 rm -rvf %{BUILDROOT}%{sysconfdir}/rc.d
102 %{libdir}:%{libdir}/sssd
103 %{libdir}/sssd:%{libdir}
112 %{sysconfdir}/sssd/sssd.conf
115 prerequires += systemd-units
118 systemctl daemon-reload >/dev/null 2>&1 || :
122 systemctl --no-reload disable sssd.service >/dev/null 2>&1 || :
123 systemctl stop sssd.service >/dev/null 2>&1 || :
127 systemctl daemon-reload >/dev/null 2>&1 || :
131 systemctl daemon-reload >/dev/null 2>&1 || :
132 systemctl try-restart sssd.service >/dev/null 2>&1 || :
136 package %{name}-client
137 summary = SSSD Client libraries.
138 description = %{summary}
151 %{libdir}/libnss_sss.so.*
152 %{libdir}/security/pam_sss.so
154 %{mandir}/man8/pam_sss.8*
155 %{mandir}/man8/sssd_krb5*.8*
162 authconfig --update --enableldap --enablesssd --enablesssdauth
166 authconfig --update --disableldap --disablesssd --disablesssdauth
170 package %{name}-tools
171 summary = Userspace tools for use with the SSSD.
173 Provides userspace tools for manipulating users, groups, and nested groups in
174 SSSD when using id_provider = local in /etc/sssd/sssd.conf.
183 %{mandir}/man8/sss_*.8*
187 package %{name}-devel
192 summary = FreeIPA Idmap library.
194 Utility library to convert SIDs to Unix uids and gids.
198 %{libdir}/libsss_idmap.so.*
202 package libsss_idmap-devel
203 summary = Development files for libsss_idmap.
204 description = %{summary}
207 %{libdir}/libsss_idmap.so
208 %{libdir}/pkgconfig/sss_idmap.pc
209 %{includedir}/sss_idmap.h
214 summary = FreeIPA HBAC Evaluator library.
216 Utility library to validate FreeIPA HBAC rules for authorization requests.
220 %{libdir}/libipa_hbac.so.*
224 package libipa_hbac-devel
225 summary = Development files for libipa_hbac.
226 description = %{summary}
229 %{libdir}/libipa_hbac.so
230 %{libdir}/pkgconfig/ipa_hbac.pc
231 %{includedir}/ipa_hbac.h
235 package python-libipa_hbac
236 summary = Python bindings for the FreeIPA HBAC Evaluator library.
238 This package contains the bindings so that libipa_hbac can be
239 used by Python applications.
243 %{python_sitearch}/pyhbac.so
248 summary = A library to allow communication between SUDO and SSSD.
250 A utility library to allow communication between SUDO and SSSD.
254 %{libdir}/libsss_sudo.so.*
258 package libsss_sudo-devel
259 summary = Development header for libsss_sudo.
260 description = %{summary}
263 %{libdir}/libsss_sudo.so
264 %{libdir}/pkgconfig/sss_sudo.pc
265 %{includedir}/sss_sudo.h
269 package %{name}-debuginfo