sbonazzo / rpms / cyrus-sasl

Forked from rpms/cyrus-sasl 2 years ago
Clone

Blame SPECS/cyrus-sasl.spec

b9abc1
%define username	saslauth
b9abc1
%define hint		Saslauthd user
b9abc1
%define homedir		/run/saslauthd
b9abc1
b9abc1
%define _plugindir2 %{_libdir}/sasl2
b9abc1
%define bootstrap_cyrus_sasl 0
b9abc1
b9abc1
%global _performance_build 1
b9abc1
b9abc1
Summary: The Cyrus SASL library
b9abc1
Name: cyrus-sasl
b9abc1
Version: 2.1.26
b9abc1
Release: 23%{?dist}
b9abc1
License: BSD with advertising
b9abc1
Group: System Environment/Libraries
b9abc1
# Source0 originally comes from ftp://ftp.andrew.cmu.edu/pub/cyrus-mail/;
b9abc1
# make-no-dlcompatorsrp-tarball.sh removes the "dlcompat" subdirectory and builds a
b9abc1
# new tarball.
b9abc1
Source0: cyrus-sasl-%{version}-nodlcompatorsrp.tar.gz
b9abc1
Source5: saslauthd.service
b9abc1
Source7: sasl-mechlist.c
b9abc1
Source8: sasl-checkpass.c
b9abc1
Source9: saslauthd.sysconfig
b9abc1
Source10: make-no-dlcompatorsrp-tarball.sh
b9abc1
URL: http://asg.web.cmu.edu/sasl/sasl-library.html
b9abc1
Requires: %{name}-lib%{?_isa} = %{version}-%{release}
b9abc1
Patch11: cyrus-sasl-2.1.25-no_rpath.patch
b9abc1
Patch15: cyrus-sasl-2.1.20-saslauthd.conf-path.patch
b9abc1
Patch23: cyrus-sasl-2.1.23-man.patch
b9abc1
Patch24: cyrus-sasl-2.1.21-sizes.patch
b9abc1
Patch31: cyrus-sasl-2.1.22-kerberos4.patch
b9abc1
Patch32: cyrus-sasl-2.1.26-warnings.patch
b9abc1
Patch34: cyrus-sasl-2.1.22-ldap-timeout.patch
b9abc1
# removed due to #759334
b9abc1
#Patch38: cyrus-sasl-2.1.23-pam_rhosts.patch
b9abc1
Patch42: cyrus-sasl-2.1.26-relro.patch
b9abc1
# https://bugzilla.redhat.com/show_bug.cgi?id=816250
b9abc1
Patch43: cyrus-sasl-2.1.26-null-crypt.patch
b9abc1
Patch44: cyrus-sasl-2.1.26-release-server_creds.patch
b9abc1
# AM_CONFIG_HEADER is obsolete, use AC_CONFIG_HEADERS instead
b9abc1
Patch45: cyrus-sasl-2.1.26-obsolete-macro.patch
b9abc1
# missing size_t declaration in sasl.h
b9abc1
Patch46: cyrus-sasl-2.1.26-size_t.patch
b9abc1
# disable incorrect check for MkLinux
b9abc1
Patch47: cyrus-sasl-2.1.26-ppc.patch
b9abc1
# detect gsskrb5_register_acceptor_identity macro (#976538)
b9abc1
Patch48: cyrus-sasl-2.1.26-keytab.patch
b9abc1
Patch49: cyrus-sasl-2.1.26-md5global.patch
b9abc1
# improve sql libraries detection (#1029918)
b9abc1
Patch50: cyrus-sasl-2.1.26-sql.patch
b9abc1
# Treat SCRAM-SHA-1/DIGEST-MD5 as more secure than PLAIN (#970718)
b9abc1
Patch51: cyrus-sasl-2.1.26-prefer-SCRAM-SHA-1-over-PLAIN.patch
b9abc1
# Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566)
b9abc1
Patch52: cyrus-sasl-2.1.26-revert-gssapi-flags.patch
b9abc1
# Document ability to run saslauthd unprivileged (#1188065)
b9abc1
Patch53: cyrus-sasl-2.1.26-saslauthd-user.patch
b9abc1
# Support non-confidentiality/non-integrity requests from AIX SASL GSSAPI implementation (#1174322)
b9abc1
Patch54: cyrus-sasl-2.1.26-gssapi-non-encrypt.patch
b9abc1
# Update client library to be thread safe (#1147659)
b9abc1
Patch55: cyrus-sasl-2.1.26-make-client-thread-sage.patch
b9abc1
# Parsing short prefix matches the whole mechanism name (#1089267)
b9abc1
Patch56: cyrus-sasl-2.1.26-handle-single-character-mechanisms.patch
b9abc1
# Fix confusing message when config file has typo (#1022479)
b9abc1
Patch57: cyrus-sasl-2.1.26-error-message-when-config-has-typo.patch
b9abc1
# GSSAPI: Use per-connection mutex where possible (#1263017)
b9abc1
Patch58: cyrus-sasl-2.1.26-gssapi-use-per-connection-mutex.patch
b9abc1
# GSS-SPNEGO compatible with Windows clients (#1421663)
b9abc1
Patch59: cyrus-sasl-2.1.26-gss-spnego.patch
b9abc1
# Allow cyrus sasl to get the ssf from gssapi (#1431586)
b9abc1
Patch60: cyrus-sasl-2.1.26-gss-ssf.patch
b9abc1
b9abc1
Buildroot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
b9abc1
BuildRequires: autoconf, automake, libtool, gdbm-devel, groff
b9abc1
BuildRequires: krb5-devel >= 1.2.2, openssl-devel, pam-devel, pkgconfig
b9abc1
BuildRequires: mysql-devel, postgresql-devel, zlib-devel
b9abc1
BuildRequires: libdb-devel
b9abc1
%if ! %{bootstrap_cyrus_sasl}
b9abc1
BuildRequires: openldap-devel
b9abc1
%endif
b9abc1
Requires(post): chkconfig, /sbin/service systemd-units
b9abc1
Requires(pre): /usr/sbin/useradd /usr/sbin/groupadd systemd-units
b9abc1
Requires(postun): /usr/sbin/userdel /usr/sbin/groupdel systemd-units
b9abc1
Requires: /sbin/nologin
b9abc1
Requires: systemd >= 219
b9abc1
Provides: user(%username)
b9abc1
Provides: group(%username)
b9abc1
b9abc1
b9abc1
%description
b9abc1
The %{name} package contains the Cyrus implementation of SASL.
b9abc1
SASL is the Simple Authentication and Security Layer, a method for
b9abc1
adding authentication support to connection-based protocols.
b9abc1
b9abc1
%package lib
b9abc1
Group: System Environment/Libraries
b9abc1
Summary: Shared libraries needed by applications which use Cyrus SASL
b9abc1
b9abc1
%description lib
b9abc1
The %{name}-lib package contains shared libraries which are needed by
b9abc1
applications which use the Cyrus SASL library.
b9abc1
b9abc1
%package devel
b9abc1
Requires: %{name}-lib%{?_isa} = %{version}-%{release}
b9abc1
Requires: %{name}%{?_isa} = %{version}-%{release}
b9abc1
Requires: pkgconfig
b9abc1
Group: Development/Libraries
b9abc1
Summary: Files needed for developing applications with Cyrus SASL
b9abc1
b9abc1
%description devel
b9abc1
The %{name}-devel package contains files needed for developing and
b9abc1
compiling applications which use the Cyrus SASL library.
b9abc1
b9abc1
%package gssapi
b9abc1
Requires: %{name}-lib%{?_isa} = %{version}-%{release}
b9abc1
Group: System Environment/Libraries
b9abc1
Summary: GSSAPI authentication support for Cyrus SASL
b9abc1
b9abc1
%description gssapi
b9abc1
The %{name}-gssapi package contains the Cyrus SASL plugins which
b9abc1
support GSSAPI authentication. GSSAPI is commonly used for Kerberos
b9abc1
authentication.
b9abc1
b9abc1
%package plain
b9abc1
Requires: %{name}-lib%{?_isa} = %{version}-%{release}
b9abc1
Group: System Environment/Libraries
b9abc1
Summary: PLAIN and LOGIN authentication support for Cyrus SASL
b9abc1
b9abc1
%description plain
b9abc1
The %{name}-plain package contains the Cyrus SASL plugins which support
b9abc1
PLAIN and LOGIN authentication schemes.
b9abc1
b9abc1
%package md5
b9abc1
Requires: %{name}-lib%{?_isa} = %{version}-%{release}
b9abc1
Group: System Environment/Libraries
b9abc1
Summary: CRAM-MD5 and DIGEST-MD5 authentication support for Cyrus SASL
b9abc1
b9abc1
%description md5
b9abc1
The %{name}-md5 package contains the Cyrus SASL plugins which support
b9abc1
CRAM-MD5 and DIGEST-MD5 authentication schemes.
b9abc1
b9abc1
%package ntlm
b9abc1
Requires: %{name}-lib%{?_isa} = %{version}-%{release}
b9abc1
Group: System Environment/Libraries
b9abc1
Summary: NTLM authentication support for Cyrus SASL
b9abc1
b9abc1
%description ntlm
b9abc1
The %{name}-ntlm package contains the Cyrus SASL plugin which supports
b9abc1
the NTLM authentication scheme.
b9abc1
b9abc1
# This would more appropriately be named cyrus-sasl-auxprop-sql.
b9abc1
%package sql
b9abc1
Requires: %{name}-lib%{?_isa} = %{version}-%{release}
b9abc1
Group: System Environment/Libraries
b9abc1
Summary: SQL auxprop support for Cyrus SASL
b9abc1
b9abc1
%description sql
b9abc1
The %{name}-sql package contains the Cyrus SASL plugin which supports
b9abc1
using a RDBMS for storing shared secrets.
b9abc1
b9abc1
%if ! %{bootstrap_cyrus_sasl}
b9abc1
# This was *almost* named cyrus-sasl-auxprop-ldapdb, but that's a lot of typing.
b9abc1
%package ldap
b9abc1
Requires: %{name}-lib%{?_isa} = %{version}-%{release}
b9abc1
Group: System Environment/Libraries
b9abc1
Summary: LDAP auxprop support for Cyrus SASL
b9abc1
b9abc1
%description ldap
b9abc1
The %{name}-ldap package contains the Cyrus SASL plugin which supports using
b9abc1
a directory server, accessed using LDAP, for storing shared secrets.
b9abc1
%endif
b9abc1
b9abc1
%package scram
b9abc1
Requires: %{name}-lib%{?_isa} = %{version}-%{release}
b9abc1
Group: System Environment/Libraries
b9abc1
Summary: SCRAM auxprop support for Cyrus SASL
b9abc1
b9abc1
%description scram
b9abc1
The %{name}-scram package contains the Cyrus SASL plugin which supports
b9abc1
the SCRAM authentication scheme.
b9abc1
b9abc1
%package gs2
b9abc1
Requires: %{name}-lib%{?_isa} = %{version}-%{release}
b9abc1
Group: System Environment/Libraries
b9abc1
Summary: GS2 support for Cyrus SASL
b9abc1
b9abc1
%description gs2
b9abc1
The %{name}-gs2 package contains the Cyrus SASL plugin which supports
b9abc1
the GS2 authentication scheme.
b9abc1
b9abc1
###
b9abc1
b9abc1
b9abc1
%prep
b9abc1
%setup -q
b9abc1
chmod -x doc/*.html
b9abc1
chmod -x include/*.h
b9abc1
%patch11 -p1 -b .no_rpath
b9abc1
%patch15 -p1 -b .path
b9abc1
%patch23 -p1 -b .man
b9abc1
%patch24 -p1 -b .sizes
b9abc1
%patch31 -p1 -b .krb4
b9abc1
%patch32 -p1 -b .warnings
b9abc1
%patch34 -p1 -b .ldap-timeout
b9abc1
%patch42 -p1 -b .relro
b9abc1
%patch43 -p1 -b .null-crypt
b9abc1
%patch44 -p1 -b .release-server_creds
b9abc1
%patch45 -p1 -b .obsolete-macro
b9abc1
%patch46 -p1 -b .size_t
b9abc1
%patch47 -p1 -b .ppc
b9abc1
%patch48 -p1 -b .keytab
b9abc1
%patch49 -p1 -b .md5global.h
b9abc1
%patch50 -p1 -b .sql
b9abc1
%patch51 -p1 -b .sha1vsplain
b9abc1
%patch52 -p1 -b .revert
b9abc1
%patch53 -p1 -b .man-unprivileged
b9abc1
%patch54 -p1 -b .gssapi_non_encrypt
b9abc1
%patch55 -p1 -b .threads
b9abc1
%patch56 -p1 -b .prefix
b9abc1
%patch57 -p1 -b .typo
b9abc1
%patch58 -p1 -b .mutex
b9abc1
%patch59 -p1 -b .spnego
b9abc1
%patch60 -p1 -b .ssf
b9abc1
b9abc1
b9abc1
%build
b9abc1
# Find Kerberos.
b9abc1
krb5_prefix=`krb5-config --prefix`
b9abc1
if test x$krb5_prefix = x%{_prefix} ; then
b9abc1
        krb5_prefix=
b9abc1
else
b9abc1
        CPPFLAGS="-I${krb5_prefix}/include $CPPFLAGS"; export CPPFLAGS
b9abc1
        LDFLAGS="-L${krb5_prefix}/%{_lib} $LDFLAGS"; export LDFLAGS
b9abc1
fi
b9abc1
b9abc1
# Find OpenSSL.
b9abc1
LIBS="-lcrypt"; export LIBS
b9abc1
if pkg-config openssl ; then
b9abc1
        CPPFLAGS="`pkg-config --cflags-only-I openssl` $CPPFLAGS"; export CPPFLAGS
b9abc1
        LDFLAGS="`pkg-config --libs-only-L openssl` $LDFLAGS"; export LDFLAGS
b9abc1
fi
b9abc1
b9abc1
# Find the MySQL libraries used needed by the SQL auxprop plugin.
b9abc1
INC_DIR="`mysql_config --include`"
b9abc1
if test x"$INC_DIR" != "x-I%{_includedir}"; then
b9abc1
        CPPFLAGS="$INC_DIR $CPPFLAGS"; export CPPFLAGS
b9abc1
fi
b9abc1
LIB_DIR="`mysql_config --libs | sed -e 's,-[^L][^ ]*,,g' -e 's,^ *,,' -e 's, *$,,' -e 's,  *, ,g'`"
b9abc1
if test x"$LIB_DIR" != "x-L%{_libdir}"; then
b9abc1
        LDFLAGS="$LIB_DIR $LDFLAGS"; export LDFLAGS
b9abc1
fi
b9abc1
b9abc1
# Find the PostgreSQL libraries used needed by the SQL auxprop plugin.
b9abc1
INC_DIR="-I`pg_config --includedir`"
b9abc1
if test x"$INC_DIR" != "x-I%{_includedir}"; then
b9abc1
        CPPFLAGS="$INC_DIR $CPPFLAGS"; export CPPFLAGS
b9abc1
fi
b9abc1
LIB_DIR="-L`pg_config --libdir`"
b9abc1
if test x"$LIB_DIR" != "x-L%{_libdir}"; then
b9abc1
        LDFLAGS="$LIB_DIR $LDFLAGS"; export LDFLAGS
b9abc1
fi
b9abc1
b9abc1
CFLAGS="$RPM_OPT_FLAGS $CFLAGS $CPPFLAGS -fPIE"; export CFLAGS
b9abc1
LDFLAGS="$LDFLAGS -pie -Wl,-z,now"; export LDFLAGS
b9abc1
b9abc1
echo "$CFLAGS"
b9abc1
echo "$CPPFLAGS"
b9abc1
echo "$LDFLAGS"
b9abc1
b9abc1
%configure \
b9abc1
        --enable-shared --disable-static \
b9abc1
        --disable-java \
b9abc1
        --with-plugindir=%{_plugindir2} \
b9abc1
        --with-configdir=%{_plugindir2}:%{_sysconfdir}/sasl2 \
b9abc1
        --disable-krb4 \
b9abc1
        --enable-gssapi${krb5_prefix:+=${krb5_prefix}} \
b9abc1
        --with-gss_impl=mit \
b9abc1
        --with-rc4 \
b9abc1
        --with-dblib=berkeley \
b9abc1
        --with-bdb=db \
b9abc1
        --with-saslauthd=/run/saslauthd --without-pwcheck \
b9abc1
%if ! %{bootstrap_cyrus_sasl}
b9abc1
        --with-ldap \
b9abc1
%endif
b9abc1
        --with-devrandom=/dev/urandom \
b9abc1
        --enable-anon \
b9abc1
        --enable-cram \
b9abc1
        --enable-digest \
b9abc1
        --enable-ntlm \
b9abc1
        --enable-plain \
b9abc1
        --enable-login \
b9abc1
        --enable-alwaystrue \
b9abc1
        --enable-httpform \
b9abc1
        --disable-otp \
b9abc1
%if ! %{bootstrap_cyrus_sasl}
b9abc1
        --enable-ldapdb \
b9abc1
%endif
b9abc1
        --enable-sql --with-mysql=yes --with-pgsql=yes \
b9abc1
        --without-sqlite \
b9abc1
        "$@"
b9abc1
        # --enable-auth-sasldb -- EXPERIMENTAL
b9abc1
make sasldir=%{_plugindir2}
b9abc1
make -C saslauthd testsaslauthd
b9abc1
make -C sample
b9abc1
b9abc1
# Build a small program to list the available mechanisms, because I need it.
b9abc1
pushd lib
b9abc1
../libtool --mode=link %{__cc} -o sasl2-shared-mechlist -I../include $CFLAGS %{SOURCE7} $LDFLAGS ./libsasl2.la
b9abc1
b9abc1
b9abc1
%install
b9abc1
test "$RPM_BUILD_ROOT" != "/" && rm -rf $RPM_BUILD_ROOT
b9abc1
b9abc1
make install DESTDIR=$RPM_BUILD_ROOT sasldir=%{_plugindir2}
b9abc1
make install DESTDIR=$RPM_BUILD_ROOT sasldir=%{_plugindir2} -C plugins
b9abc1
b9abc1
install -m755 -d $RPM_BUILD_ROOT%{_bindir}
b9abc1
./libtool --mode=install \
b9abc1
install -m755 sample/client $RPM_BUILD_ROOT%{_bindir}/sasl2-sample-client
b9abc1
./libtool --mode=install \
b9abc1
install -m755 sample/server $RPM_BUILD_ROOT%{_bindir}/sasl2-sample-server
b9abc1
./libtool --mode=install \
b9abc1
install -m755 saslauthd/testsaslauthd $RPM_BUILD_ROOT%{_sbindir}/testsaslauthd
b9abc1
b9abc1
# Install the saslauthd mdoc page in the expected location.  Sure, it's not
b9abc1
# really a man page, but groff seems to be able to cope with it.
b9abc1
install -m755 -d $RPM_BUILD_ROOT%{_mandir}/man8/
b9abc1
install -m644 -p saslauthd/saslauthd.mdoc $RPM_BUILD_ROOT%{_mandir}/man8/saslauthd.8
b9abc1
install -m644 -p saslauthd/testsaslauthd.8 $RPM_BUILD_ROOT%{_mandir}/man8/testsaslauthd.8
b9abc1
b9abc1
# Install the init script for saslauthd and the init script's config file.
b9abc1
install -m755 -d $RPM_BUILD_ROOT/etc/rc.d/init.d $RPM_BUILD_ROOT/etc/sysconfig
b9abc1
install -d -m755 $RPM_BUILD_ROOT/%{_unitdir}
b9abc1
install -m644 -p %{SOURCE5} $RPM_BUILD_ROOT/%{_unitdir}/saslauthd.service
b9abc1
install -m644 -p %{SOURCE9} $RPM_BUILD_ROOT/etc/sysconfig/saslauthd
b9abc1
b9abc1
# Install the config dirs if they're not already there.
b9abc1
install -m755 -d $RPM_BUILD_ROOT/%{_sysconfdir}/sasl2
b9abc1
install -m755 -d $RPM_BUILD_ROOT/%{_plugindir2}
b9abc1
b9abc1
# Provide an easy way to query the list of available mechanisms.
b9abc1
./libtool --mode=install \
b9abc1
install -m755 lib/sasl2-shared-mechlist $RPM_BUILD_ROOT/%{_sbindir}/
b9abc1
b9abc1
# Remove unpackaged files from the buildroot.
b9abc1
rm -f $RPM_BUILD_ROOT%{_libdir}/sasl2/libotp.*
b9abc1
rm -f $RPM_BUILD_ROOT%{_libdir}/sasl2/*.a
b9abc1
rm -f $RPM_BUILD_ROOT%{_libdir}/sasl2/*.la
b9abc1
rm -f $RPM_BUILD_ROOT%{_libdir}/*.la
b9abc1
rm -f $RPM_BUILD_ROOT%{_mandir}/cat8/saslauthd.8
b9abc1
b9abc1
b9abc1
%clean
b9abc1
test "$RPM_BUILD_ROOT" != "/" && rm -rf $RPM_BUILD_ROOT
b9abc1
b9abc1
%pre
b9abc1
getent group %{username} >/dev/null || groupadd -g 76 -r %{username}
b9abc1
getent passwd %{username} >/dev/null || useradd -r -g %{username} -d %{homedir} -s /sbin/nologin -c "%{hint}" %{username}
b9abc1
b9abc1
%post
b9abc1
%systemd_post saslauthd.service
b9abc1
b9abc1
%preun
b9abc1
%systemd_preun saslauthd.service
b9abc1
b9abc1
%postun
b9abc1
%systemd_postun_with_restart saslauthd.service
b9abc1
b9abc1
%triggerun -n cyrus-sasl -- cyrus-sasl < 2.1.23-32
b9abc1
/usr/bin/systemd-sysv-convert --save saslauthd >/dev/null 2>&1 || :
b9abc1
/sbin/chkconfig --del saslauthd >/dev/null 2>&1 || :
b9abc1
/bin/systemctl try-restart saslauthd.service >/dev/null 2>&1 || :
b9abc1
b9abc1
%post lib -p /sbin/ldconfig
b9abc1
%postun lib -p /sbin/ldconfig
b9abc1
b9abc1
%files
b9abc1
%defattr(-,root,root)
b9abc1
%doc saslauthd/LDAP_SASLAUTHD
b9abc1
%{_mandir}/man8/*
b9abc1
%{_sbindir}/pluginviewer
b9abc1
%{_sbindir}/saslauthd
b9abc1
%{_sbindir}/testsaslauthd
b9abc1
%config(noreplace) /etc/sysconfig/saslauthd
b9abc1
%{_unitdir}/saslauthd.service
b9abc1
%ghost /run/saslauthd
b9abc1
b9abc1
%files lib
b9abc1
%defattr(-,root,root)
b9abc1
%doc AUTHORS COPYING NEWS README doc/*.html
b9abc1
%{_libdir}/libsasl*.so.*
b9abc1
%dir %{_sysconfdir}/sasl2
b9abc1
%dir %{_plugindir2}/
b9abc1
%{_plugindir2}/*anonymous*.so*
b9abc1
%{_plugindir2}/*sasldb*.so*
b9abc1
%{_sbindir}/saslpasswd2
b9abc1
%{_sbindir}/sasldblistusers2
b9abc1
b9abc1
%files plain
b9abc1
%defattr(-,root,root)
b9abc1
%{_plugindir2}/*plain*.so*
b9abc1
%{_plugindir2}/*login*.so*
b9abc1
b9abc1
%if ! %{bootstrap_cyrus_sasl}
b9abc1
%files ldap
b9abc1
%defattr(-,root,root)
b9abc1
%{_plugindir2}/*ldapdb*.so*
b9abc1
%endif
b9abc1
b9abc1
%files md5
b9abc1
%defattr(-,root,root)
b9abc1
%{_plugindir2}/*crammd5*.so*
b9abc1
%{_plugindir2}/*digestmd5*.so*
b9abc1
b9abc1
%files ntlm
b9abc1
%defattr(-,root,root)
b9abc1
%{_plugindir2}/*ntlm*.so*
b9abc1
b9abc1
%files sql
b9abc1
%defattr(-,root,root)
b9abc1
%{_plugindir2}/*sql*.so*
b9abc1
b9abc1
%files gssapi
b9abc1
%defattr(-,root,root)
b9abc1
%{_plugindir2}/*gssapi*.so*
b9abc1
b9abc1
%files scram
b9abc1
%defattr(-,root,root)
b9abc1
%{_plugindir2}/libscram.so*
b9abc1
b9abc1
%files gs2
b9abc1
%defattr(-,root,root)
b9abc1
%{_plugindir2}/libgs2.so*
b9abc1
b9abc1
%files devel
b9abc1
%defattr(-,root,root)
b9abc1
%doc doc/*.txt
b9abc1
%{_bindir}/sasl2-sample-client
b9abc1
%{_bindir}/sasl2-sample-server
b9abc1
%{_includedir}/*
b9abc1
%{_libdir}/libsasl*.*so
b9abc1
%{_libdir}/pkgconfig/*.pc
b9abc1
%{_mandir}/man3/*
b9abc1
%{_sbindir}/sasl2-shared-mechlist
b9abc1
b9abc1
%changelog
b9abc1
* Wed Nov 22 2017 Jakub Jelen <jjelen@redhat.com> - 2.1.26-23
b9abc1
- Avoid undefined symbols on s390x (#1516193)
b9abc1
b9abc1
* Thu Sep 21 2017 Jakub Jelen <jjelen@redhat.com> - 2.1.26-22
b9abc1
- Allow cyrus sasl to get the ssf from gssapi (#1431586)
b9abc1
b9abc1
* Mon Mar 06 2017 Jakub Jelen <jjelen@redhat.com> - 2.1.26-21
b9abc1
- support proper SASL GSS-SPNEGO (#1421663)
b9abc1
b9abc1
* Fri Dec 04 2015 Jakub Jelen <jjelen@redhat.com> 2.1.26-20
b9abc1
- GSSAPI: Use per-connection mutex where possible (#1263017)
b9abc1
b9abc1
* Thu Jul 16 2015 Jakub Jelen <jjelen@redhat.com> 2.1.26-19.2
b9abc1
- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)
b9abc1
b9abc1
* Wed May 20 2015 Jakub Jelen <jjelen@redhat.com> 2.1.26-18
b9abc1
- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566)
b9abc1
- Add and document ability to run saslauth as non-root user (#1188065)
b9abc1
- Support AIX SASL GSSAPI (#1174322)
b9abc1
- Update client library to be thread safe (#1147659)
b9abc1
- Fix problem, that parsing short prefix matches the whole mechanism name (#1089267)
b9abc1
- Don't use unnecessary quotes around user description (#1082564)
b9abc1
- Fix confusing message when config file has typo (#1022479)
b9abc1
b9abc1
* Fri Jan 24 2014 Daniel Mach <dmach@redhat.com> - 2.1.26-17
b9abc1
- Mass rebuild 2014-01-24
b9abc1
b9abc1
* Wed Jan 15 2014 Honza Horak <hhorak@redhat.com> - 2.1.26-16
b9abc1
- Rebuild for mariadb-libs
b9abc1
  Related: #1045013
b9abc1
b9abc1
* Tue Jan 14 2014 Petr Lautrbach <plautrba@redhat.com> 2.1.26-15
b9abc1
- compile cyrus-sasl with -O3 on ppc64 (#1051063)
b9abc1
b9abc1
* Fri Dec 27 2013 Daniel Mach <dmach@redhat.com> - 2.1.26-14
b9abc1
- Mass rebuild 2013-12-27
b9abc1
b9abc1
* Tue Nov 19 2013 Petr Lautrbach <plautrba@redhat.com> 2.1.26-13
b9abc1
- Treat SCRAM-SHA-1/DIGEST-MD5 as more secure than PLAIN (#970718)
b9abc1
b9abc1
* Tue Oct 01 2013 Petr Lautrbach <plautrba@redhat.com> 2.1.26-12.1
b9abc1
- rebuild for https://bugzilla.redhat.com/show_bug.cgi?id=1002625
b9abc1
b9abc1
* Mon Sep 09 2013 Petr Lautrbach <plautrba@redhat.com> 2.1.26-11
b9abc1
- build with RPM_OPT_FLAGS <ville.skytta@iki.fi> (#1005535)
b9abc1
b9abc1
* Tue Sep 03 2013 Petr Lautrbach <plautrba@redhat.com> 2.1.26-10
b9abc1
- fix hardening for /usr/sbin/saslauthd
b9abc1
- add testsaslauthd.8 man page to the package
b9abc1
- use static md5global.h file
b9abc1
b9abc1
* Mon Jun 24 2013 Petr Lautrbach <plautrba@redhat.com> 2.1.26-9
b9abc1
- detect gsskrb5_register_acceptor_identity macro <nalin@redhat.com> (#976538)
b9abc1
b9abc1
* Tue Jun 04 2013 Karsten Hopp <karsten@redhat.com> 2.1.26-8
b9abc1
- disable incorrect check for MkLinux to allow building with shared libraries on PPC
b9abc1
b9abc1
* Tue May 21 2013 Petr Lautrbach <plautrba@redhat.com> 2.1.26-7
b9abc1
- fix the spec file in order to build the cyrus-sasl-sql plugin
b9abc1
  with support for PostgreSQL and MySQL
b9abc1
b9abc1
* Thu Feb 21 2013 Petr Lautrbach <plautrba@redhat.com> 2.1.26-6
b9abc1
- don't include system sasl2 library needed for rebuilds after rebase
b9abc1
b9abc1
* Mon Feb 11 2013 Petr Lautrbach <plautrba@redhat.com> 2.1.26-5
b9abc1
- enable full relro and PIE compiler flags for saslauthd
b9abc1
b9abc1
* Fri Feb 01 2013 Petr Lautrbach <plautrba@redhat.com> 2.1.26-4
b9abc1
- fix library symlinks
b9abc1
b9abc1
* Thu Jan 31 2013 Rex Dieter <rdieter@fedoraproject.org> 2.1.26-3
b9abc1
- actually apply size_t patch (#906519)
b9abc1
b9abc1
* Thu Jan 31 2013 Rex Dieter <rdieter@fedoraproject.org> 2.1.26-2
b9abc1
- sasl.h: +#include<sys/types.h> for missing size_t type (#906519)
b9abc1
- tighten subpkg deps via %%?_isa
b9abc1
b9abc1
* Thu Dec 20 2012 Petr Lautrbach <plautrba@redhat.com> 2.1.26-1
b9abc1
- update to 2.1.26
b9abc1
- fix segfaults in sasl_gss_encode (#886140)
b9abc1
b9abc1
* Mon Dec 10 2012 Petr Lautrbach <plautrba@redhat.com> 2.1.25-2
b9abc1
- always use the current external Berkeley DB when linking
b9abc1
b9abc1
* Fri Dec 07 2012 Petr Lautrbach <plautrba@redhat.com> 2.1.25-1
b9abc1
- update to 2.1.25
b9abc1
- add cyrus-sasl-scram and cyrus-sasl-gs2 packages
b9abc1
b9abc1
* Fri Sep 14 2012 Petr Lautrbach <plautrba@redhat.com> 2.1.23-36
b9abc1
- replace scriptlets with systemd macros (#856666)
b9abc1
b9abc1
* Wed Jul 18 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.23-35
b9abc1
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
b9abc1
b9abc1
* Tue Jul 17 2012 Petr Lautrbach <plautrba@redhat.com> 2.1.23-34
b9abc1
- move /etc/tmpfiles.d/saslauthd.conf to /usr/lib/tmpfiles.d/saslauthd.conf (#840193)
b9abc1
b9abc1
* Wed Jun 20 2012 Petr Lautrbach <plautrba@redhat.com> 2.1.23-33
b9abc1
- properly deal with crypt() returning NULL (#816250)
b9abc1
- use fixed gid 76 for saslauth
b9abc1
b9abc1
* Mon Apr 16 2012 Jindrich Novy <jnovy@redhat.com> 2.1.23-32
b9abc1
- re-enable libdb support and utilities
b9abc1
b9abc1
* Wed Apr 04 2012 Jindrich Novy <jnovy@redhat.com> 2.1.23-31
b9abc1
- temporarily disable libdb support to resolve cyrus-sasl
b9abc1
  chicken and egg build problem against libdb
b9abc1
b9abc1
* Tue Apr 03 2012 Jindrich Novy <jnovy@redhat.com> 2.1.23-30
b9abc1
- rebuild against new libdb
b9abc1
b9abc1
* Wed Feb 08 2012 Petr Lautrbach <plautrba@redhat.com> 2.1.23-29
b9abc1
- Change saslauth user homedir to /run/saslauthd (#752889)
b9abc1
- Change all /var/run/ to /run/
b9abc1
- DAEMONOPTS are not supported any more in systemd units
b9abc1
b9abc1
* Mon Jan 09 2012 Jeroen van Meeuwen <vanmeeuwen@kolabsys.com> - 2.1.23-28
b9abc1
- Ship with sasl_pwcheck_method: alwaystrue
b9abc1
b9abc1
* Mon Dec 12 2011 Petr Lautrbach <plautrba@redhat.com> 2.1.23-27
b9abc1
- remove support for logging of the remote host via PAM (#759334)
b9abc1
- fix systemd files (#750436)
b9abc1
b9abc1
* Wed Aug 10 2011 Jan F. Chadima <jchadima@redhat.com> - 2.1.23-26
b9abc1
- Add partial relro support for libraries
b9abc1
b9abc1
* Mon Jul 25 2011 Jan F. Chadima <jchadima@redhat.com> - 2.1.23-25
b9abc1
- Add support for berkeley db 5
b9abc1
b9abc1
* Wed Jun 29 2011 Jan F. Chadima <jchadima@redhat.com> - 2.1.23-23
b9abc1
- Migrate the package to full native systemd unit files, according to the Fedora
b9abc1
  packaging guidelines.
b9abc1
b9abc1
* Wed Jun  1 2011 Jan F. Chadima <jchadima@redhat.com> - 2.1.23-22
b9abc1
- repair rimap support (more packets in response)
b9abc1
b9abc1
* Wed May 25 2011 Jan F. Chadima <jchadima@redhat.com> - 2.1.23-21
b9abc1
- repair ntlm support
b9abc1
b9abc1
* Mon May 23 2011 Jan F. Chadima <jchadima@redhat.com> - 2.1.23-20
b9abc1
- add logging of the remote host via PAM
b9abc1
b9abc1
* Thu Apr 28 2011 Jan F. Chadima <jchadima@redhat.com> - 2.1.23-19
b9abc1
- temporarilly revert systemd units
b9abc1
b9abc1
* Tue Apr 26 2011 Jan F. Chadima <jchadima@redhat.com> - 2.1.23-18
b9abc1
- update scriptlets
b9abc1
b9abc1
* Fri Apr 22 2011 Jan F. Chadima <jchadima@redhat.com> - 2.1.23-17
b9abc1
- Add systemd units
b9abc1
b9abc1
* Wed Mar 23 2011 Tomas Mraz <tmraz@redhat.com> - 2.1.23-16
b9abc1
- Rebuilt with new mysqlclient
b9abc1
b9abc1
* Fri Feb 25 2011 Jan F. Chadima <jchadima@redhat.com> - 2.1.23-15
b9abc1
- set correct license tag
b9abc1
- add ghost to /var/run/saslauthd
b9abc1
b9abc1
* Tue Feb 08 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.23-14
b9abc1
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
b9abc1
b9abc1
* Fri Apr  9 2010 Jan F. Chadima <jchadima@redhat.com> - 2.1.23-13
b9abc1
- Add /etc/tmpfiles.d element (#662734)
b9abc1
b9abc1
* Fri Apr  9 2010 Jan F. Chadima <jchadima@redhat.com> - 2.1.23-12
b9abc1
- Update init script to impeach pid file
b9abc1
b9abc1
* Thu Mar 11 2010 Jan F. Chadima <jchadima@redhat.com> - 2.1.23-11
b9abc1
- Update pre post preun and postun scripts (#572399)
b9abc1
b9abc1
* Wed Mar 10 2010 Jan F. Chadima <jchadima@redhat.com> - 2.1.23-10
b9abc1
- Rewrite spec file, make corect CFLAGS, CPPFLAGS and LDFLAGS
b9abc1
b9abc1
* Mon Feb 22 2010 Jan F. Chadima <jchadima@redhat.com> - 2.1.23-9
b9abc1
- solve race condition (#566875)
b9abc1
b9abc1
* Wed Feb 17 2010 Stepan Kasal <skasal@redhat.com> - 2.1.23-8
b9abc1
- improve m4 quoting to fix saslauthd/configure (#566088)
b9abc1
- call autotools in build, not in prep
b9abc1
b9abc1
* Fri Feb  5 2010 Jan F. Chadima <jchadima@redhat.com> - 2.1.23-7
b9abc1
- Add man page to testtcpauthd (#526189)
b9abc1
b9abc1
* Fri Oct 16 2009 Jan F. Chadima <jchadima@redhat.com> - 2.1.23-6
b9abc1
- Create the saslauth user according to fedora packaging guide
b9abc1
b9abc1
* Thu Sep 24 2009 Jan F. Chadima <jchadima@redhat.com> - 2.1.23-5
b9abc1
- Repair initscript to make condrestart working properly (#522103)
b9abc1
b9abc1
* Wed Sep 23 2009 Jan F. Chadima <jchadima@redhat.com> - 2.1.23-3
b9abc1
- Add possibility to run the saslauth without root privilegies (#185614)
b9abc1
b9abc1
* Fri Aug 21 2009 Tomas Mraz <tmraz@redhat.com> - 2.1.23-2
b9abc1
- rebuilt with new openssl
b9abc1
b9abc1
* Fri Aug  7 2009 Jan F. Chadima <jchadima@redhat.com> - 2.1.23-1
b9abc1
- update to 2.1.23
b9abc1
b9abc1
* Fri Jul 24 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.22-25
b9abc1
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
b9abc1
b9abc1
* Mon May 11 2009 Jan F. Chadima <jchadima@redhat.com> - 2.1.22-24
b9abc1
- repair sasl_encode64 nul termination (#487251)
b9abc1
b9abc1
* Thu Apr 16 2009 Robert Scheck <robert@fedoraproject.org> - 2.1.22-23
b9abc1
- Don't build the krb4 plugin as krb5 1.7 will drop it (#225974 #c6)
b9abc1
b9abc1
* Tue Feb 24 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.22-22
b9abc1
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
b9abc1
b9abc1
* Fri Feb  6 2009 Tomas Mraz <tmraz@redhat.com> - 2.1.22-21
b9abc1
- fix build with gcc-4.4
b9abc1
b9abc1
* Fri Jan 23 2009 Tomas Mraz <tmraz@redhat.com> - 2.1.22-20
b9abc1
- set LDAP_OPT_TIMEOUT (#326452)
b9abc1
- provide LSB compatible init script (#246900)
b9abc1
b9abc1
* Fri Sep 26 2008 Tomas Mraz <tmraz@redhat.com> - 2.1.22-19
b9abc1
- always use the current external db4 when linking,
b9abc1
  thanks to Dan Horak for the original patch (#464098)
b9abc1
b9abc1
* Wed Sep 10 2008 Tomas Mraz <tmraz@redhat.com> - 2.1.22-18
b9abc1
- fix most critical build warnings (#433583)
b9abc1
- use external db4
b9abc1
b9abc1
* Fri Aug 29 2008 Tomas Mraz <tmraz@redhat.com> - 2.1.22-17
b9abc1
- always link against the internal db4 (#459163)
b9abc1
- rediff patches for no fuzz
b9abc1
b9abc1
* Wed Jul  9 2008 Tomas Mraz <tmraz@redhat.com> - 2.1.22-16
b9abc1
- update internal db4 (#449737)
b9abc1
b9abc1
* Tue Jul  1 2008 Tomas Mraz <tmraz@redhat.com> - 2.1.22-15
b9abc1
- drop reload from initscript help (#448154)
b9abc1
- fix hang in rimap auth method (#438533)
b9abc1
- build the krb4 plugin (#154675)
b9abc1
b9abc1
* Fri May 23 2008 Dennis Gilmore <dennis@ausil.us> - 2.1.22-14
b9abc1
- make it so that bootstrap actually works
b9abc1
b9abc1
* Thu May 22 2008 Tom "spot" Callaway <tcallawa@redhat.com> - 2.1.22-13.1
b9abc1
- minor release bump for sparc rebuild
b9abc1
b9abc1
* Tue Feb 19 2008 Fedora Release Engineering <rel-eng@fedoraproject.org> - 2.1.22-13
b9abc1
- Autorebuild for GCC 4.3
b9abc1
b9abc1
* Thu Feb 14 2008 Steve Conklin <sconklin@redhat.com> - 2.1.22-12
b9abc1
- rebuild for gcc4.3
b9abc1
b9abc1
* Fri Jan 25 2008 Steve Conklin <sconklin@redhat.com> - 2.1.22-11
b9abc1
- Cleanup after merge review bz #225673
b9abc1
- no longer mark /etc/rc.d/init.d/saslauthd as config file
b9abc1
- removed -x permissions on include files
b9abc1
- added devel package dependency on cyrus-sasl
b9abc1
- removed some remaining .la files that were being delivered
b9abc1
b9abc1
* Wed Dec 05 2007 Release Engineering <rel-eng at fedoraproject dot org> - 2.1.22-10
b9abc1
 - Rebuild for deps
b9abc1
b9abc1
* Wed Nov  7 2007 Steve Conklin <sconklin@redhat.com> - 2.1.22-9
b9abc1
- Fixed a typo in the spec file
b9abc1
b9abc1
* Wed Nov  7 2007 Steve Conklin <sconklin@redhat.com> - 2.1.22-8
b9abc1
- Removed srp plugin source and added dist to NVR
b9abc1
b9abc1
* Tue Sep 18 2007 Steve Conklin <sconklin@redhat.com> 2.1.22-7
b9abc1
- use db4 version 4.6.19 bz#249737
b9abc1
b9abc1
* Mon Feb 26 2007 Nalin Dahyabhai <nalin@redhat.com> 2.1.22-6
b9abc1
- install config files and init scripts using -p
b9abc1
- pull in patch to build with current automake (#229010, Jacek Konieczny
b9abc1
  and Robert Scheck)
b9abc1
- remove prereq on ldconfig, RPM should pick it up based on the -libs
b9abc1
  scriptlets
b9abc1
- pull in patch to correctly detect gsskrb5_register_acceptor_identity
b9abc1
  (#200892, Mirko Streckenbach)
b9abc1
- move sasldb auxprop modules into the -lib subpackage, so that we'll pick
b9abc1
  it up for multilib systems
b9abc1
b9abc1
* Thu Feb 22 2007 Nalin Dahyabhai <nalin@redhat.com>
b9abc1
- pull CVS fix for not tripping over extra commas in digest-md5
b9abc1
  challenges (#229640)
b9abc1
b9abc1
* Fri Feb 16 2007 Nalin Dahyabhai <nalin@redhat.com>
b9abc1
- remove static build, which is no longer a useful option because not all of
b9abc1
  our dependencies are available as static libraries
b9abc1
- drop patches which were needed to keep static builds going
b9abc1
- drop gssapi-generic patch due to lack of interest
b9abc1
- update the bundled copy of db to 4.5.20 (#229012)
b9abc1
- drop dbconverter-2, as we haven't bundled v1 libraries since FC4
b9abc1
b9abc1
* Tue Dec  5 2006 Nalin Dahyabhai <nalin@redhat.com> 2.1.22-5
b9abc1
- rebuild
b9abc1
- add 'authentication' or 'auxprop' to summaries for plugin packages to
b9abc1
  better indicate what the plugin provides
b9abc1
- switch from automake 1.9 to automake 1.7
b9abc1
b9abc1
* Fri Sep 29 2006 Nalin Dahyabhai <nalin@redhat.com> 2.1.22-4
b9abc1
- rebuild without 'dlcompat' bits (#206119)
b9abc1
b9abc1
* Mon Jul 17 2006 Nalin Dahyabhai <nalin@redhat.com> 2.1.22-3
b9abc1
- rebuild
b9abc1
b9abc1
* Tue Jun 20 2006 Nalin Dahyabhai <nalin@redhat.com> 2.1.22-2
b9abc1
- fix a typo in sasl_client_start(3) (#196066)
b9abc1
b9abc1
* Mon May 22 2006 Nalin Dahyabhai <nalin@redhat.com> 2.1.22-1
b9abc1
- update to 2.1.22, adding pluginviewer to %%{_sbindir}
b9abc1
b9abc1
* Tue May 16 2006 Nalin Dahyabhai <nalin@redhat.com> 2.1.21-12
b9abc1
- add conditionalized build dependency on openldap-devel (#191855)
b9abc1
- patch md5global.h to be the same on all architectures
b9abc1
b9abc1
* Thu Apr 27 2006 Nalin Dahyabhai <nalin@redhat.com> 2.1.21-11
b9abc1
- add unapplied patch which makes the DIGEST-MD5 plugin omit the realm
b9abc1
  argument when the environment has $CYRUS_SASL_DIGEST_MD5_OMIT_REALM set to a
b9abc1
  non-zero value, for testing purposes
b9abc1
- add missing buildrequires on zlib-devel (#190113)
b9abc1
b9abc1
* Mon Feb 20 2006 Nalin Dahyabhai <nalin@redhat.com> 2.1.21-10
b9abc1
- add missing buildrequires on gdbm-devel (Karsten Hopp)
b9abc1
b9abc1
* Fri Feb 10 2006 Jesse Keating <jkeating@redhat.com> - 2.1.21-9.2
b9abc1
- bump again for double-long bug on ppc(64)
b9abc1
b9abc1
* Tue Feb 07 2006 Jesse Keating <jkeating@redhat.com> - 2.1.21-9.1
b9abc1
- rebuilt for new gcc4.1 snapshot and glibc changes
b9abc1
b9abc1
* Mon Dec 19 2005 Nalin Dahyabhai <nalin@redhat.com> 2.1.21-9
b9abc1
- use --as-needed to avoid linking dbconverter-2 with SQL libraries, which
b9abc1
  it doesn't use because it manipulates files directly (#173321)
b9abc1
b9abc1
* Fri Dec 09 2005 Jesse Keating <jkeating@redhat.com>
b9abc1
- rebuilt
b9abc1
b9abc1
* Mon Nov 14 2005 Nalin Dahyabhai <nalin@redhat.com> 2.1.21-8
b9abc1
- rebuild with new OpenLDAP, overriding the version checks to assume that
b9abc1
  2.3.11 is acceptable
b9abc1
- remove a lingering patch for 1.x which we no longer use
b9abc1
b9abc1
* Sat Nov 12 2005 Tom Lane <tgl@redhat.com> 2.1.21-7
b9abc1
- Rebuild due to mysql update.
b9abc1
b9abc1
* Tue Nov  8 2005 Tomas Mraz <tmraz@redhat.com> 2.1.21-6
b9abc1
- rebuilt with new openssl
b9abc1
b9abc1
* Fri Sep  9 2005 Nalin Dahyabhai <nalin@redhat.com> 2.1.21-5
b9abc1
- add missing buildrequires: on groff (#163032)
b9abc1
b9abc1
* Thu Sep  1 2005 Nalin Dahyabhai <nalin@redhat.com> 2.1.21-4
b9abc1
- move the ldapdb auxprop support into a subpackage (#167300)
b9abc1
  (note: the ldap password check support in saslauthd doesn't use auxprop)
b9abc1
b9abc1
* Tue Aug 30 2005 Nalin Dahyabhai <nalin@redhat.com> 2.1.21-3
b9abc1
- correct a use of uninitialized memory in the bundled libdb (Arjan van de Ven)
b9abc1
b9abc1
* Mon Aug 29 2005 Nalin Dahyabhai <nalin@redhat.com> 2.1.21-2
b9abc1
- move the ANONYMOUS mech plugin to the -lib subpackage so that multilib
b9abc1
  systems can use it without installing the main package
b9abc1
- build the static libraries without sql auxprop support
b9abc1
b9abc1
* Mon Aug 29 2005 Nalin Dahyabhai <nalin@redhat.com> 2.1.21-1
b9abc1
- update to 2.1.21
b9abc1
- turn off compilation of libsasl v1 (finally)
b9abc1
- explicitly disable sqlite to avoid the build warning
b9abc1
- change the default mechanism which is set for saslauthd from "shadow" to
b9abc1
  "pam" (#159194)
b9abc1
- split the shared library up from saslauthd so that multilib systems don't
b9abc1
  have to pull in every dependency of saslauthd for the compat arch (#166749)
b9abc1
b9abc1
* Wed Apr 13 2005 Nalin Dahyabhai <nalin@redhat.com> 2.1.20-5
b9abc1
- rebuild with new deps
b9abc1
b9abc1
* Tue Mar  1 2005 Nalin Dahyabhai <nalin@redhat.com> 2.1.20-4
b9abc1
- rebuild with new deps
b9abc1
b9abc1
* Thu Nov 11 2004 Jeff Johnson <jbj@jbj.org> 2.1.20-3
b9abc1
- rebuild against db-4.3.21.
b9abc1
b9abc1
* Thu Nov 11 2004 Nalin Dahyabhai <nalin@redhat.com> 2.1.20-2
b9abc1
- build with mysql-devel instead of mysqlclient10
b9abc1
b9abc1
* Mon Nov  1 2004 Nalin Dahyabhai <nalin@redhat.com> 2.1.20-1
b9abc1
- build with mysqlclient10 instead of mysql-devel
b9abc1
b9abc1
* Wed Oct 27 2004 Nalin Dahyabhai <nalin@redhat.com> 2.1.20-0
b9abc1
- update to 2.1.20, including the fix for CAN-2004-0884
b9abc1
b9abc1
* Tue Oct  5 2004 Nalin Dahyabhai <nalin@redhat.com> 2.1.19-3
b9abc1
- use notting's fix for incorrect patch for CAN-2004-0884 for 1.5.28
b9abc1
b9abc1
* Tue Oct  5 2004 Nalin Dahyabhai <nalin@redhat.com> 2.1.19-2
b9abc1
- don't trust the environment in setuid/setgid contexts (CAN-2004-0884, #134660)
b9abc1
b9abc1
* Thu Aug 19 2004 Nalin Dahyabhai <nalin@redhat.com> 2.1.19-1
b9abc1
- rebuild (the 2.1.19 changelog for fixing a buffer overflow referred to a CVS
b9abc1
  revision between 2.1.18 and 2.1.19)
b9abc1
b9abc1
* Mon Jul 19 2004 Nalin Dahyabhai <nalin@redhat.com> 2.1.19-0
b9abc1
- update to 2.1.19, maybe for update
b9abc1
b9abc1
* Tue Jun 15 2004 Elliot Lee <sopwith@redhat.com>
b9abc1
- rebuilt
b9abc1
b9abc1
* Mon Jun  7 2004 Nalin Dahyabhai <nalin@redhat.com> 2.1.18-4
b9abc1
- enable sql auxprop support in a subpackage
b9abc1
- include LDAP_SASLAUTHD documentation file (#124830)
b9abc1
b9abc1
* Fri Jun  4 2004 Nalin Dahyabhai <nalin@redhat.com>
b9abc1
- turn on ntlm in a subpackage
b9abc1
b9abc1
* Thu May 13 2004 Thomas Woerner <twoerner@redhat.com> 2.1.18-3
b9abc1
- removed rpath
b9abc1
b9abc1
* Tue Mar 16 2004 Nalin Dahyabhai <nalin@redhat.com> 2.1.18-2
b9abc1
- turn on building of libsasl v1 again
b9abc1
b9abc1
* Fri Mar 12 2004 Nalin Dahyabhai <nalin@redhat.com> 2.1.18-1
b9abc1
- update to 2.1.18
b9abc1
- saslauthd's ldap code is no longer marked experimental, so we build it
b9abc1
b9abc1
* Mon Mar  8 2004 Nalin Dahyabhai <nalin@redhat.com> 2.1.17-4
b9abc1
- rebuild
b9abc1
b9abc1
* Tue Mar 02 2004 Elliot Lee <sopwith@redhat.com>
b9abc1
- rebuilt
b9abc1
b9abc1
* Fri Feb 13 2004 Elliot Lee <sopwith@redhat.com>
b9abc1
- rebuilt
b9abc1
b9abc1
* Tue Feb  3 2004 Nalin Dahyabhai <nalin@redhat.com> 2.1.17-2
b9abc1
- include default /etc/sysconfig/saslauthd configuration file for the init
b9abc1
  script (#114868)
b9abc1
b9abc1
* Thu Jan 29 2004 Nalin Dahyabhai <nalin@redhat.com>
b9abc1
- drop saslauthd_version patch for libsasl2
b9abc1
b9abc1
* Thu Jan 29 2004 Nalin Dahyabhai <nalin@redhat.com>
b9abc1
- add a saslauthd_version option to libsasl's saslauthd client and teach it to
b9abc1
  do the right thing
b9abc1
- enable the saslauthd client code in libsasl version 1 (it's still going away!)
b9abc1
- add saslauthd1-checkpass/saslauthd2-checkpass for testing the above change
b9abc1
b9abc1
* Wed Jan  7 2004 Nalin Dahyabhai <nalin@redhat.com> 2.1.17-1
b9abc1
- forcibly disable otp and sql plugins at compile-time
b9abc1
b9abc1
* Fri Dec 19 2003 Nalin Dahyabhai <nalin@redhat.com>
b9abc1
- update to 2.1.17, forcing the gssapi plugin to be shared now, as before
b9abc1
- use a bundled libdb (#112215)
b9abc1
- build static-with-all-plugins and normal-shared libsasl versions
b9abc1
- add sasl2-{shared,static}-mechlist for very basic sanity checking
b9abc1
- make inclusion of sasl1 stuffs conditional, because it's so going away
b9abc1
b9abc1
* Sat Dec 13 2003 Jeff Johnson <jbj@jbj.org> 2.1.15-7
b9abc1
- rebuild against db-4.2.52.
b9abc1
b9abc1
* Thu Oct 23 2003 Nalin Dahyabhai <nalin@redhat.com> 2.1.15-6
b9abc1
- use /dev/urandom instead of /dev/random for SASL2 (docs indicate that this is
b9abc1
  safe if you aren't using OTP or SRP, and we build neither); SASL1 appears to
b9abc1
  use it to seed the libc RNG only (#103378)
b9abc1
b9abc1
* Mon Oct 20 2003 Nalin Dahyabhai <nalin@redhat.com>
b9abc1
- obey RPM_OPT_FLAGS again when krb5_prefix != %%{_prefix}
b9abc1
b9abc1
* Fri Oct 17 2003 Nalin Dahyabhai <nalin@redhat.com> 2.1.15-5
b9abc1
- install saslauthd's mdoc page instead of the pre-formatted man page, which
b9abc1
  would get formatted again
b9abc1
b9abc1
* Thu Sep 25 2003 Jeff Johnson <jbj@jbj.org> 2.1.15-5
b9abc1
- rebuild against db-4.2.42.
b9abc1
b9abc1
* Mon Sep 15 2003 Nalin Dahyabhai <nalin@redhat.com>
b9abc1
- include testsaslauthd
b9abc1
- note in the README that the saslauthd protocol is different for v1 and v2,
b9abc1
  so v1's clients can't talk to the v2 server
b9abc1
b9abc1
* Thu Aug 21 2003 Nalin Dahyabhai <nalin@redhat.com> 2.1.15-4
b9abc1
- rebuild
b9abc1
b9abc1
* Thu Aug 21 2003 Nalin Dahyabhai <nalin@redhat.com> 2.1.15-3
b9abc1
- add logic to build with gssapi libs in either /usr or /usr/kerberos
b9abc1
b9abc1
* Mon Jul 21 2003 Nalin Dahyabhai <nalin@redhat.com> 2.1.15-2
b9abc1
- rebuild
b9abc1
b9abc1
* Tue Jul 15 2003 Nalin Dahyabhai <nalin@redhat.com> 2.1.15-1
b9abc1
- update to 2.1.15
b9abc1
b9abc1
* Mon Jul 14 2003 Nalin Dahyabhai <nalin@redhat.com> 2.1.14-1
b9abc1
- update to 2.1.14
b9abc1
b9abc1
* Wed Jun 04 2003 Elliot Lee <sopwith@redhat.com>
b9abc1
- rebuilt
b9abc1
b9abc1
* Fri May  9 2003 Nalin Dahyabhai <nalin@redhat.com> 2.1.13-3
b9abc1
- change -m argument to saslauthd to be a directory instead of a path
b9abc1
b9abc1
* Thu May  8 2003 Nalin Dahyabhai <nalin@redhat.com> 2.1.13-2
b9abc1
- link libsasl2 with -lpthread to ensure that the sasldb plug-in can always
b9abc1
  be loaded
b9abc1
b9abc1
* Tue Apr 29 2003 Nalin Dahyabhai <nalin@redhat.com> 2.1.13-1
b9abc1
- update to 2.1.13
b9abc1
b9abc1
* Wed Jan 22 2003 Tim Powers <timp@redhat.com>
b9abc1
- rebuilt
b9abc1
b9abc1
* Tue Jan  7 2003 Nalin Dahyabhai <nalin@redhat.com> 2.1.10-3
b9abc1
- rebuild
b9abc1
b9abc1
* Thu Dec 12 2002 Nalin Dahyabhai <nalin@redhat.com>
b9abc1
- consider either des_cbc_encrypt or DES_cbc_encrypt to be sufficient when
b9abc1
  searching for a DES implementation in libcrypto
b9abc1
- pull in CPPFLAGS and LDFLAGS from openssl's pkg-config data, if it exists
b9abc1
b9abc1
* Mon Dec  9 2002 Nalin Dahyabhai <nalin@redhat.com> 2.1.10-2
b9abc1
- rebuild
b9abc1
b9abc1
* Mon Dec  9 2002 Nalin Dahyabhai <nalin@redhat.com> 2.1.10-1
b9abc1
- update to 2.1.10, fixing buffer overflows in libsasl2 noted by Timo Sirainen
b9abc1
b9abc1
* Tue Nov 12 2002 Tim Powers <timp@redhat.com> 2.1.7-5
b9abc1
- remove files from $RPM_BUILD_ROOT that we don't intend to include
b9abc1
b9abc1
* Wed Oct  9 2002 Nalin Dahyabhai <nalin@redhat.com> 2.1.7-4
b9abc1
- update to SASLv1 to final 1.5.28
b9abc1
b9abc1
* Fri Sep 13 2002 Nalin Dahyabhai <nalin@redhat.com> 2.1.7-3
b9abc1
- rebuild, overriding sasldir when running make so that on multilib systems
b9abc1
  applications will be able to load modules for the right arch
b9abc1
b9abc1
* Mon Sep  2 2002 Nalin Dahyabhai <nalin@redhat.com> 2.1.7-2
b9abc1
- include dbconverter-2 (#68741)
b9abc1
b9abc1
* Fri Aug  9 2002 Nalin Dahyabhai <nalin@redhat.com> 2.1.7-1
b9abc1
- update to 2.1.7, fixing a race condition in digest-md5
b9abc1
b9abc1
* Wed Jul 17 2002 Nalin Dahyabhai <nalin@redhat.com> 2.1.6-1
b9abc1
- update to 2.1.6 and 1.5.28
b9abc1
b9abc1
* Fri Jun 21 2002 Tim Powers <timp@redhat.com>
b9abc1
- automated rebuild
b9abc1
b9abc1
* Thu Jun 13 2002 Nalin Dahyabhai <nalin@redhat.com> 2.1.5-1
b9abc1
- update to 2.1.5
b9abc1
b9abc1
* Mon Jun 10 2002 Nalin Dahyabhai <nalin@redhat.com> 2.1.4-1
b9abc1
- update to 2.1.4
b9abc1
b9abc1
* Sun May 26 2002 Tim Powers <timp@redhat.com>
b9abc1
- automated rebuild
b9abc1
b9abc1
* Thu May 16 2002 Nalin Dahyabhai <nalin@redhat.com> 2.1.2-1
b9abc1
- modify to build with db 4.x
b9abc1
b9abc1
* Thu Apr 18 2002 Nalin Dahyabhai <nalin@redhat.com>
b9abc1
- update cyrus-sasl 2 to 2.1.2
b9abc1
- change buildreq to db3-devel
b9abc1
b9abc1
* Tue Feb 12 2002 Nalin Dahyabhai <nalin@redhat.com> 2.1.1-3
b9abc1
- suppress output to stdout/stderr in %%postun
b9abc1
b9abc1
* Sun Feb 10 2002 Nalin Dahyabhai <nalin@redhat.com> 2.1.1-2
b9abc1
- configure sasldb2 to use berkeley DB instead of gdbm
b9abc1
b9abc1
* Wed Feb  6 2002 Nalin Dahyabhai <nalin@redhat.com> 2.1.1-1
b9abc1
- update to 2.1.1
b9abc1
b9abc1
* Thu Jan 31 2002 Nalin Dahyabhai <nalin@redhat.com> 2.1.0-1
b9abc1
- marge 1.5.24 back in, making a note that it should be removed at some
b9abc1
  point in the future
b9abc1
b9abc1
* Wed Jan 30 2002 Nalin Dahyabhai <nalin@redhat.com>
b9abc1
- update to 2.1.0, which is designed to be installed in parallel with cyrus sasl
b9abc1
  1.x, so fork the package and rename it to cyrus-sasl2
b9abc1
- add the sasldb auxprop plugin to the main package
b9abc1
- add disabled-by-default saslauthd init script
b9abc1
- move the .la files for plugins into their respective packages -- they're
b9abc1
  needed by the library
b9abc1
b9abc1
* Wed Jan 23 2002 Nalin Dahyabhai <nalin@redhat.com> 1.5.24-24
b9abc1
- free ride through the build system
b9abc1
b9abc1
* Fri Nov  2 2001 Nalin Dahyabhai <nalin@redhat.com> 1.5.24-23
b9abc1
- patch to fix possible syslog format-string vulnerability 
b9abc1
b9abc1
* Mon Oct 29 2001 Nalin Dahyabhai <nalin@redhat.com> 1.5.24-22
b9abc1
- add pam-devel as a buildprereq
b9abc1
b9abc1
* Wed Aug 29 2001 Nalin Dahyabhai <nalin@redhat.com> 1.5.24-21
b9abc1
- include sample programs in the -devel subpackage, prefixing their names
b9abc1
  with "sasl-" to reduce future potential naming conflicts
b9abc1
b9abc1
* Tue Aug 14 2001 Nalin Dahyabhai <nalin@redhat.com> 1.5.24-20
b9abc1
- build without -ggdb
b9abc1
b9abc1
* Fri Aug  3 2001 Nalin Dahyabhai <nalin@redhat.com>
b9abc1
- add gdbm-devel as a build dependency (#44990)
b9abc1
- split off CRAM-MD5 and DIGEST-MD5 into a subpackage of their own (#43079,
b9abc1
  and dialogs with David L. Parsley)
b9abc1
b9abc1
* Fri Apr 27 2001 Nalin Dahyabhai <nalin@redhat.com>
b9abc1
- split out the PLAIN and LOGIN mechanisms into their own package (this allows
b9abc1
  an administrator to disable them by simply removing the package)
b9abc1
b9abc1
* Fri Jan 19 2001 Nalin Dahyabhai <nalin@redhat.com>
b9abc1
- rebuild in new environment
b9abc1
b9abc1
* Wed Dec  6 2000 Nalin Dahyabhai <nalin@redhat.com>
b9abc1
- fix gssapi-over-tls
b9abc1
b9abc1
* Fri Oct 27 2000 Nalin Dahyabhai <nalin@redhat.com>
b9abc1
- enable static libraries, but always build with -fPIC
b9abc1
b9abc1
* Wed Oct 25 2000 Nalin Dahyabhai <nalin@redhat.com>
b9abc1
- make sure the version of 1.5.24 in the package matches the masters (#18968)
b9abc1
b9abc1
* Mon Oct  9 2000 Nalin Dahyabhai <nalin@redhat.com>
b9abc1
- re-add the libsasl.so symlink to the -devel package (oops)
b9abc1
b9abc1
* Fri Oct  6 2000 Nalin Dahyabhai <nalin@redhat.com>
b9abc1
- move .so files for modules to their respective packages -- they're not -devel
b9abc1
  links meant for use by ld anyway
b9abc1
b9abc1
* Thu Oct  5 2000 Nalin Dahyabhai <nalin@redhat.com>
b9abc1
- split off -devel subpackage
b9abc1
- add a -gssapi subpackage for the gssapi plugins
b9abc1
b9abc1
* Wed Aug 16 2000 Nalin Dahyabhai <nalin@redhat.com>
b9abc1
- fix the summary text
b9abc1
b9abc1
* Sun Aug 13 2000 Nalin Dahyabhai <nalin@redhat.com>
b9abc1
- re-enable arcfour and CRAM
b9abc1
b9abc1
* Fri Aug  4 2000 Nalin Dahyabhai <nalin@redhat.com>
b9abc1
- force use of gdbm for database files to avoid DB migration weirdness
b9abc1
- enable login mechanism
b9abc1
- disable gssapi until it can coexist peacefully with non-gssapi setups
b9abc1
- actually do a make in the build section (#15410)
b9abc1
b9abc1
* Fri Jul 21 2000 Nalin Dahyabhai <nalin@redhat.com>
b9abc1
- update to 1.5.24
b9abc1
b9abc1
* Wed Jul 12 2000 Prospector <bugzilla@redhat.com>
b9abc1
- automatic rebuild
b9abc1
b9abc1
* Tue Jun 27 2000 Nalin Dahyabhai <nalin@redhat.com>
b9abc1
- rebuild in new environment (release 3)
b9abc1
b9abc1
* Mon Jun 19 2000 Nalin Dahyabhai <nalin@redhat.com>
b9abc1
- don't muck with syslogd in post
b9abc1
- remove patch for db-3.0 wackiness, no longer needed
b9abc1
b9abc1
* Thu Jun  8 2000 Nalin Dahyabhai <nalin@redhat.com>
b9abc1
- FHS cleanup
b9abc1
- don't strip anything by default
b9abc1
b9abc1
* Fri Feb 11 2000 Tim Powers <timp@redhat.com>
b9abc1
- fixed man pages not being gzipped
b9abc1
b9abc1
* Tue Nov 16 1999 Tim Powers <timp@redhat.com>
b9abc1
- incorporated changes from Mads Kiilerich
b9abc1
- release number is 1, not mk1
b9abc1
b9abc1
* Wed Nov 10 1999 Mads Kiilerich <mads@kiilerich.com>
b9abc1
- updated to sasl 1.5.11
b9abc1
- configure --disable-krb4 --without-rc4 --disable-cram 
b9abc1
  because of missing libraries and pine having cram as default...
b9abc1
- handle changing libsasl.so versions
b9abc1
b9abc1
* Mon Aug 30 1999 Tim Powers <timp@redhat.com>
b9abc1
- changed group
b9abc1
b9abc1
* Fri Aug 13 1999 Tim Powers <timp@redhat.com>
b9abc1
- first build for Powertools