%global username    saslauth

%global hint        Saslauthd user

%global homedir     /run/saslauthd

%global _plugindir2 %{_libdir}/sasl2

%global bootstrap_cyrus_sasl 0

Summary: The Cyrus SASL library

Name: cyrus-sasl

Version: 2.1.27

Release: 5%{?dist}

License: BSD with advertising

Group: System Environment/Libraries

# Source0 originally comes from https://www.cyrusimap.org/releases/;

# make-no-dlcompatorsrp-tarball.sh removes the "dlcompat" subdirectory and builds a

# new tarball.

Source0: cyrus-sasl-%{version}-nodlcompatorsrp.tar.gz

Source5: saslauthd.service

Source7: sasl-mechlist.c

Source9: saslauthd.sysconfig

Source10: make-no-dlcompatorsrp-tarball.sh

# From upstream git, required for reconfigure after applying patches to configure.ac

# https://raw.githubusercontent.com/cyrusimap/cyrus-sasl/master/autogen.sh

Source11: autogen.sh

URL: https://www.cyrusimap.org/sasl/

Requires: %{name}-lib%{?_isa} = %{version}-%{release}

Patch11: cyrus-sasl-2.1.25-no_rpath.patch

Patch15: cyrus-sasl-2.1.20-saslauthd.conf-path.patch

Patch23: cyrus-sasl-2.1.23-man.patch

Patch24: cyrus-sasl-2.1.21-sizes.patch

Patch49: cyrus-sasl-2.1.26-md5global.patch

Patch60: cyrus-sasl-pr559-RC4-openssl.patch

Patch830: cyrus-sasl-2.1.27-CVE-2019-19906.patch

Patch831: cyrus-sasl-2.1.27-Add-basic-test-infrastructure.patch

Patch832: cyrus-sasl-2.1.27-Add-Channel-Binding-support-for-GSSAPI-GSS-SPNEGO.patch

Patch833: cyrus-sasl-2.1.27-Add-support-for-setting-max-ssf-0-to-GSS-SPNEGO.patch

Patch834: cyrus-sasl-2.1.27-Emit-debug-log-only-in-case-of-errors.patch

Buildroot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)

BuildRequires: autoconf, automake, libtool, gdbm-devel, groff

BuildRequires: krb5-devel >= 1.2.2, openssl-devel, pam-devel, pkgconfig

BuildRequires: mariadb-connector-c-devel, postgresql-devel, zlib-devel

BuildRequires: libdb-devel

%if ! %{bootstrap_cyrus_sasl}

BuildRequires: openldap-devel

%endif

#build reqs for make check

BuildRequires: python36 nss_wrapper socket_wrapper krb5-server

%{?systemd_requires}

Requires(post): chkconfig

Requires(pre): /usr/sbin/useradd /usr/sbin/groupadd

Requires(postun): /usr/sbin/userdel /usr/sbin/groupdel

Requires: /sbin/nologin

Requires: systemd >= 211

Provides: user(%username)

Provides: group(%username)

%description

The %{name} package contains the Cyrus implementation of SASL.

SASL is the Simple Authentication and Security Layer, a method for

adding authentication support to connection-based protocols.

%package lib

Group: System Environment/Libraries

Summary: Shared libraries needed by applications which use Cyrus SASL

%description lib

The %{name}-lib package contains shared libraries which are needed by

applications which use the Cyrus SASL library.

%package devel

Requires: %{name}-lib%{?_isa} = %{version}-%{release}

Requires: %{name}%{?_isa} = %{version}-%{release}

Requires: pkgconfig

Group: Development/Libraries

Summary: Files needed for developing applications with Cyrus SASL

%description devel

The %{name}-devel package contains files needed for developing and

compiling applications which use the Cyrus SASL library.

%package gssapi

Requires: %{name}-lib%{?_isa} = %{version}-%{release}

Group: System Environment/Libraries

Summary: GSSAPI authentication support for Cyrus SASL

%description gssapi

The %{name}-gssapi package contains the Cyrus SASL plugins which

support GSSAPI authentication. GSSAPI is commonly used for Kerberos

authentication.

%package plain

Requires: %{name}-lib%{?_isa} = %{version}-%{release}

Group: System Environment/Libraries

Summary: PLAIN and LOGIN authentication support for Cyrus SASL

%description plain

The %{name}-plain package contains the Cyrus SASL plugins which support

PLAIN and LOGIN authentication schemes.

%package md5

Requires: %{name}-lib%{?_isa} = %{version}-%{release}

Group: System Environment/Libraries

Summary: CRAM-MD5 and DIGEST-MD5 authentication support for Cyrus SASL

%description md5

The %{name}-md5 package contains the Cyrus SASL plugins which support

CRAM-MD5 and DIGEST-MD5 authentication schemes.

%package ntlm

Requires: %{name}-lib%{?_isa} = %{version}-%{release}

Group: System Environment/Libraries

Summary: NTLM authentication support for Cyrus SASL

%description ntlm

The %{name}-ntlm package contains the Cyrus SASL plugin which supports

the NTLM authentication scheme.

# This would more appropriately be named cyrus-sasl-auxprop-sql.

%package sql

Requires: %{name}-lib%{?_isa} = %{version}-%{release}

Group: System Environment/Libraries

Summary: SQL auxprop support for Cyrus SASL

%description sql

The %{name}-sql package contains the Cyrus SASL plugin which supports

using a RDBMS for storing shared secrets.

%if ! %{bootstrap_cyrus_sasl}

# This was *almost* named cyrus-sasl-auxprop-ldapdb, but that's a lot of typing.

%package ldap

Requires: %{name}-lib%{?_isa} = %{version}-%{release}

Group: System Environment/Libraries

Summary: LDAP auxprop support for Cyrus SASL

%description ldap

The %{name}-ldap package contains the Cyrus SASL plugin which supports using

a directory server, accessed using LDAP, for storing shared secrets.

%endif

%package scram

Requires: %{name}-lib%{?_isa} = %{version}-%{release}

Group: System Environment/Libraries

Summary: SCRAM auxprop support for Cyrus SASL

%description scram

The %{name}-scram package contains the Cyrus SASL plugin which supports

the SCRAM authentication scheme.

%package gs2

Requires: %{name}-lib%{?_isa} = %{version}-%{release}

Group: System Environment/Libraries

Summary: GS2 support for Cyrus SASL

%description gs2

The %{name}-gs2 package contains the Cyrus SASL plugin which supports

the GS2 authentication scheme.

###

%prep

%setup -q -n cyrus-sasl-%{version}

%patch11 -p1 -b .no_rpath

%patch15 -p1 -b .path

%patch23 -p1 -b .man

%patch24 -p1 -b .sizes

%patch49 -p1 -b .md5global.h

%patch60 -p1 -b .openssl_rc4

%patch830 -p1 -b .CVE-2019-19906

%patch831 -p1 -b .tests

%patch832 -p1 -b .gssapi_cbs

%patch833 -p1 -b .maxssf0

%patch834 -p1 -b .nolog

%build

# reconfigure

cp %{SOURCE11} ./

rm configure aclocal.m4 config/ltmain.sh Makefile.in

export NOCONFIGURE=yes

sh autogen.sh

# Find Kerberos.

krb5_prefix=`krb5-config --prefix`

if test x$krb5_prefix = x%{_prefix} ; then

        krb5_prefix=

else

        CPPFLAGS="-I${krb5_prefix}/include $CPPFLAGS"; export CPPFLAGS

        LDFLAGS="-L${krb5_prefix}/%{_lib} $LDFLAGS"; export LDFLAGS

fi

# Find OpenSSL.

LIBS="-lcrypt"; export LIBS

if pkg-config openssl ; then

        CPPFLAGS="`pkg-config --cflags-only-I openssl` $CPPFLAGS"; export CPPFLAGS

        LDFLAGS="`pkg-config --libs-only-L openssl` $LDFLAGS"; export LDFLAGS

fi

# Find the MySQL libraries used needed by the SQL auxprop plugin.

INC_DIR="`mysql_config --include`"

if test x"$INC_DIR" != "x-I%{_includedir}"; then

        CPPFLAGS="$INC_DIR $CPPFLAGS"; export CPPFLAGS

fi

LIB_DIR="`mysql_config --libs | sed -e 's,-[^L][^ ]*,,g' -e 's,^ *,,' -e 's, *$,,' -e 's,  *, ,g'`"

if test x"$LIB_DIR" != "x-L%{_libdir}"; then

        LDFLAGS="$LIB_DIR $LDFLAGS"; export LDFLAGS

fi

# Find the PostgreSQL libraries used needed by the SQL auxprop plugin.

INC_DIR="-I`pg_config --includedir`"

if test x"$INC_DIR" != "x-I%{_includedir}"; then

        CPPFLAGS="$INC_DIR $CPPFLAGS"; export CPPFLAGS

fi

LIB_DIR="-L`pg_config --libdir`"

if test x"$LIB_DIR" != "x-L%{_libdir}"; then

        LDFLAGS="$LIB_DIR $LDFLAGS"; export LDFLAGS

fi

# Patch config.sub to support ppc64p7 subarch (Fedora specific)

# This is similar to what the config.sub from automake has

for i in `find . -name config.sub`; do

  perl -pi -e "s/ppc64-\*/ppc64-\* \| ppc64p7-\*/" $i

done

CFLAGS="$RPM_OPT_FLAGS $CFLAGS $CPPFLAGS -fPIC -pie -Wl,-z,relro -Wl,-z,now"; export CFLAGS

LDFLAGS="$LDFLAGS -pie -Wl,-z,now"; export LDFLAGS

echo "$CFLAGS"

echo "$CPPFLAGS"

echo "$LDFLAGS"

%configure \

        --enable-shared --disable-static \

        --disable-java \

        --with-plugindir=%{_plugindir2} \

        --with-configdir=%{_plugindir2}:%{_sysconfdir}/sasl2 \

        --disable-krb4 \

        --enable-gssapi${krb5_prefix:+=${krb5_prefix}} \

        --with-gss_impl=mit \

        --with-rc4 \

        --with-dblib=berkeley \

        --with-bdb=db \

        --with-saslauthd=/run/saslauthd --without-pwcheck \

%if ! %{bootstrap_cyrus_sasl}

        --with-ldap \

%endif

        --with-devrandom=/dev/urandom \

        --enable-anon \

        --enable-cram \

        --enable-digest \

        --enable-ntlm \

        --enable-plain \

        --enable-login \

        --enable-alwaystrue \

        --enable-httpform \

        --disable-otp \

%if ! %{bootstrap_cyrus_sasl}

        --enable-ldapdb \

%endif

        --enable-sql --with-mysql=yes --with-pgsql=yes \

        --without-sqlite \

        "$@"

        # --enable-auth-sasldb -- EXPERIMENTAL

make sasldir=%{_plugindir2}

make -C saslauthd testsaslauthd

make -C sample

# Build a small program to list the available mechanisms, because I need it.

pushd lib

../libtool --mode=link %{__cc} -o sasl2-shared-mechlist -I../include $CFLAGS %{SOURCE7} $LDFLAGS ./libsasl2.la

%install

test "$RPM_BUILD_ROOT" != "/" && rm -rf $RPM_BUILD_ROOT

make install DESTDIR=$RPM_BUILD_ROOT sasldir=%{_plugindir2}

make install DESTDIR=$RPM_BUILD_ROOT sasldir=%{_plugindir2} -C plugins

install -m755 -d $RPM_BUILD_ROOT%{_bindir}

./libtool --mode=install \

install -m755 sample/client $RPM_BUILD_ROOT%{_bindir}/sasl2-sample-client

./libtool --mode=install \

install -m755 sample/server $RPM_BUILD_ROOT%{_bindir}/sasl2-sample-server

./libtool --mode=install \

install -m755 saslauthd/testsaslauthd $RPM_BUILD_ROOT%{_sbindir}/testsaslauthd

# Install the saslauthd mdoc page in the expected location.  Sure, it's not

# really a man page, but groff seems to be able to cope with it.

install -m755 -d $RPM_BUILD_ROOT%{_mandir}/man8/

install -m644 -p saslauthd/saslauthd.mdoc $RPM_BUILD_ROOT%{_mandir}/man8/saslauthd.8

install -m644 -p saslauthd/testsaslauthd.8 $RPM_BUILD_ROOT%{_mandir}/man8/testsaslauthd.8

# Install the init script for saslauthd and the init script's config file.

install -m755 -d $RPM_BUILD_ROOT/etc/rc.d/init.d $RPM_BUILD_ROOT/etc/sysconfig

install -d -m755 $RPM_BUILD_ROOT/%{_unitdir}

install -m644 -p %{SOURCE5} $RPM_BUILD_ROOT/%{_unitdir}/saslauthd.service

install -m644 -p %{SOURCE9} $RPM_BUILD_ROOT/etc/sysconfig/saslauthd

# Install the config dirs if they're not already there.

install -m755 -d $RPM_BUILD_ROOT/%{_sysconfdir}/sasl2

install -m755 -d $RPM_BUILD_ROOT/%{_plugindir2}

# Provide an easy way to query the list of available mechanisms.

./libtool --mode=install \

install -m755 lib/sasl2-shared-mechlist $RPM_BUILD_ROOT/%{_sbindir}/

# Remove unpackaged files from the buildroot.

rm -f $RPM_BUILD_ROOT%{_libdir}/sasl2/libotp.*

rm -f $RPM_BUILD_ROOT%{_libdir}/sasl2/*.a

rm -f $RPM_BUILD_ROOT%{_libdir}/sasl2/*.la

rm -f $RPM_BUILD_ROOT%{_libdir}/*.la

rm -f $RPM_BUILD_ROOT%{_mandir}/cat8/saslauthd.8

%check

make check %{?_smp_mflags}

%pre

getent group %{username} >/dev/null || groupadd -g 76 -r %{username}

getent passwd %{username} >/dev/null || useradd -r -g %{username} -d %{homedir} -s /sbin/nologin -c "%{hint}" %{username}

%post

%systemd_post saslauthd.service

%preun

%systemd_preun saslauthd.service

%postun

%systemd_postun_with_restart saslauthd.service

%triggerun -n cyrus-sasl -- cyrus-sasl < 2.1.23-32

/usr/bin/systemd-sysv-convert --save saslauthd >/dev/null 2>&1 || :

/sbin/chkconfig --del saslauthd >/dev/null 2>&1 || :

/bin/systemctl try-restart saslauthd.service >/dev/null 2>&1 || :

%post lib -p /sbin/ldconfig

%postun lib -p /sbin/ldconfig

%files

%defattr(-,root,root)

%doc saslauthd/LDAP_SASLAUTHD

%{_mandir}/man8/*

%{_sbindir}/pluginviewer

%{_sbindir}/saslauthd

%{_sbindir}/testsaslauthd

%config(noreplace) /etc/sysconfig/saslauthd

%{_unitdir}/saslauthd.service

%ghost /run/saslauthd

%files lib

%defattr(-,root,root)

%license COPYING

%doc AUTHORS doc/html/*.html

%{_libdir}/libsasl*.so.*

%dir %{_sysconfdir}/sasl2

%dir %{_plugindir2}/

%{_plugindir2}/*anonymous*.so*

%{_plugindir2}/*sasldb*.so*

%{_sbindir}/saslpasswd2

%{_sbindir}/sasldblistusers2

%files plain

%defattr(-,root,root)

%{_plugindir2}/*plain*.so*

%{_plugindir2}/*login*.so*

%if ! %{bootstrap_cyrus_sasl}

%files ldap

%defattr(-,root,root)

%{_plugindir2}/*ldapdb*.so*

%endif

%files md5

%defattr(-,root,root)

%{_plugindir2}/*crammd5*.so*

%{_plugindir2}/*digestmd5*.so*

%files ntlm

%defattr(-,root,root)

%{_plugindir2}/*ntlm*.so*

%files sql

%defattr(-,root,root)

%{_plugindir2}/*sql*.so*

%files gssapi

%defattr(-,root,root)

%{_plugindir2}/*gssapi*.so*

%files scram

%defattr(-,root,root)

%{_plugindir2}/libscram.so*

%files gs2

%defattr(-,root,root)

%{_plugindir2}/libgs2.so*

%files devel

%defattr(-,root,root)

%{_bindir}/sasl2-sample-client

%{_bindir}/sasl2-sample-server

%{_includedir}/*

%{_libdir}/libsasl*.*so

%{_libdir}/pkgconfig/*.pc

%{_mandir}/man3/*

%{_sbindir}/sasl2-shared-mechlist

%changelog

* Tue May  5 2020 Simo Sorce <simo@redhat.com> - 2.1.27-5

- Reduce excessive GSSAPI plugin logging

- Resolves: rhbz#1274734

* Tue May  5 2020 Simo Sorce <simo@redhat.com> - 2.1.27-4

- Add support for setting maxssf=0 in GSS-SPNEGO

- Resolves: rhbz#1822133

* Tue May  5 2020 Simo Sorce <simo@redhat.com> - 2.1.27-3

- Backport GSSAPI Channel Bindings support

- Resolves: rhbz#1817054

* Tue May  5 2020 Simo Sorce <simo@redhat.com> - 2.1.27-2

- Backport fix for CVE-2019-19906

- Resolves: rhbz#1804036

* Fri Jun 14 2019 Simo Sorce <simo@redhat.com> - 2.1.27-1

- Rc7 to final source

- Resovles bz#1618744

* Thu Jun 13 2019 Simo Sorce <simo@redhat.com> - 2.1.27-0.4rc7

- Add patch form Upstream PR559 to use RC4 implementation from OpenSSL

- Resolves bz#1618744

- Fix multilib issue bz#1663120

* Mon Jul 30 2018 Florian Weimer <fweimer@redhat.com> - 2.1.27-0.3rc7

- Rebuild with fixed binutils

* Wed Jul 25 2018 Petr Kubat <pkubat@redhat.com> - 2.1.27-0.2rc7

- Rebuilt for gdbm

* Mon Mar 05 2018 Jakub Jelen <jjelen@redhat.com> - 2.1.27-0.1rc7

- New upstream (pre-)release

- Import LDFLAGS from redhat-rpm-config (#1548437)

* Wed Feb 07 2018 Fedora Release Engineering <releng@fedoraproject.org> - 2.1.26-37

- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

* Sat Jan 20 2018 Björn Esser <besser82@fedoraproject.org> - 2.1.26-36

- Rebuilt for switch to libxcrypt

* Mon Oct 23 2017 Jakub Jelen <jjelen@redhat.com> - 2.1.26-35

- Use mariadb-connector-c-devel instead of mysql-devel (#1493620)

* Wed Aug 02 2017 Fedora Release Engineering <releng@fedoraproject.org> - 2.1.26-34

- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild

* Wed Jul 26 2017 Fedora Release Engineering <releng@fedoraproject.org> - 2.1.26-33

- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

* Wed Apr 19 2017 Jakub Jelen <jjelen@redhat.com> - 2.1.26-32

- Add missing patch for separate mutexes per connection in GSSAPI

* Tue Apr 18 2017 Jakub Jelen <jjelen@redhat.com> - 2.1.26-31

- Allow cyrus sasl to get the ssf from gssapi

* Wed Apr 12 2017 Petr Šabata <contyk@redhat.com> - 2.1.26-30

- Removing the obsolete scriptlet /sbin/service dependency

* Tue Mar 07 2017 Jakub Jelen <jjelen@redhat.com> - 2.1.26-29

- Fix GSS SPNEGO support (#1421663)

* Fri Feb 10 2017 Fedora Release Engineering <releng@fedoraproject.org> - 2.1.26-28

- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

* Mon Nov 07 2016 Jakub Jelen <jjelen@redhat.com> - 2.1.26-27

- Add support for OpenSSL 1.1.0

* Wed Feb 03 2016 Fedora Release Engineering <releng@fedoraproject.org> - 2.1.26-26.2

- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

* Thu Jul 16 2015 Jakub Jelen <jjelen@redhat.com> 2.1.26-25.2

- Revert tmpfiles.d and use new systemd feature RuntimeDirectory

* Wed Jun 17 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.26-24

- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

* Fri May 29 2015 Jakub Jelen <jjelen@redhat.com> 2.1.26-23

- Add ability to handle logging in gssapi plugin (#1187097)

* Mon Mar 16 2015 Jakub Jelen <jjelen@redhat.com> 2.1.26-22

- Rever "Do not leak memory in plugin_common.c ..." due the breakage of svn (#1202364)

* Thu Mar 12 2015 Jakub Jelen <jjelen@redhat.com> 2.1.26-21

- Add and Document ability to run saslauthd as non-root user, fix tpmfiles ownership (#1189203)

- Do not leak memory in sample server (#852755)

- Do not leak memory in plugin_common.c for password callback (#1191183)

- Cleanup spec file: tmpfiles.d macros and tab/space

* Wed Feb 04 2015 Petr Lautrbach <plautrba@redhat.com> 2.1.26-20

- Change the ownership of /run/saslauth to saslauth:saslauth (#1189203)

* Sat Aug 16 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.26-19

- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild

* Fri Jul 11 2014 Tom Callaway <spot@fedoraproject.org> - 2.1.26-18

- fix license handling

* Sat Jun 07 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.26-17

- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

* Sun Jan 19 2014 Ville Skyttä <ville.skytta@iki.fi> - 2.1.26-16

- Don't order service after syslog.target.

* Fri Nov 15 2013 Petr Lautrbach <plautrba@redhat.com> 2.1.26-15

- Treat SCRAM-SHA-1/DIGEST-MD5 as more secure than PLAIN (#970718)

- improve configuration error message

* Fri Nov 01 2013 Petr Lautrbach <plautrba@redhat.com> 2.1.26-14

- revert upstream commit 080e51c7fa0421eb2f0210d34cf0ac48a228b1e9 (#984079)

* Tue Oct 15 2013 Karsten Hopp <karsten@redhat.com> 2.1.26-13

- add ppc64p7 subarch support in config.sub (Fedora only)

* Mon Sep 09 2013 Petr Lautrbach <plautrba@redhat.com> 2.1.26-12

- build with RPM_OPT_FLAGS <ville.skytta@iki.fi> (#1005535)

* Tue Sep 03 2013 Petr Lautrbach <plautrba@redhat.com> 2.1.26-11

- fix hardening for /usr/sbin/saslauthd

- add testsaslauthd.8 man page to the package

- use static md5global.h file

* Sat Aug 03 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.26-10

- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild

* Mon Jun 24 2013 Petr Lautrbach <plautrba@redhat.com> 2.1.26-9

- detect gsskrb5_register_acceptor_identity macro <nalin@redhat.com> (#976538)

* Tue Jun 04 2013 Karsten Hopp <karsten@redhat.com> 2.1.26-8

- disable incorrect check for MkLinux to allow building with shared libraries on PPC

* Tue May 21 2013 Petr Lautrbach <plautrba@redhat.com> 2.1.26-7

- fix the spec file in order to build the cyrus-sasl-sql plugin

  with support for PostgreSQL and MySQL

* Thu Feb 21 2013 Petr Lautrbach <plautrba@redhat.com> 2.1.26-6

- don't include system sasl2 library needed for rebuilds after rebase

* Mon Feb 11 2013 Petr Lautrbach <plautrba@redhat.com> 2.1.26-5

- enable full relro and PIE compiler flags for saslauthd

* Fri Feb 01 2013 Petr Lautrbach <plautrba@redhat.com> 2.1.26-4

- fix library symlinks

* Thu Jan 31 2013 Rex Dieter <rdieter@fedoraproject.org> 2.1.26-3

- actually apply size_t patch (#906519)

* Thu Jan 31 2013 Rex Dieter <rdieter@fedoraproject.org> 2.1.26-2

- sasl.h: +#include<sys/types.h> for missing size_t type (#906519)

- tighten subpkg deps via %%?_isa

* Thu Dec 20 2012 Petr Lautrbach <plautrba@redhat.com> 2.1.26-1

- update to 2.1.26

- fix segfaults in sasl_gss_encode (#886140)

* Mon Dec 10 2012 Petr Lautrbach <plautrba@redhat.com> 2.1.25-2

- always use the current external Berkeley DB when linking

* Fri Dec 07 2012 Petr Lautrbach <plautrba@redhat.com> 2.1.25-1

- update to 2.1.25

- add cyrus-sasl-scram and cyrus-sasl-gs2 packages

* Fri Sep 14 2012 Petr Lautrbach <plautrba@redhat.com> 2.1.23-36

- replace scriptlets with systemd macros (#856666)

* Wed Jul 18 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.23-35

- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild

* Tue Jul 17 2012 Petr Lautrbach <plautrba@redhat.com> 2.1.23-34

- move /etc/tmpfiles.d/saslauthd.conf to /usr/lib/tmpfiles.d/saslauthd.conf (#840193)

* Wed Jun 20 2012 Petr Lautrbach <plautrba@redhat.com> 2.1.23-33

- properly deal with crypt() returning NULL (#816250)

- use fixed gid 76 for saslauth

* Mon Apr 16 2012 Jindrich Novy <jnovy@redhat.com> 2.1.23-32

- re-enable libdb support and utilities

* Wed Apr 04 2012 Jindrich Novy <jnovy@redhat.com> 2.1.23-31

- temporarily disable libdb support to resolve cyrus-sasl

  chicken and egg build problem against libdb

* Tue Apr 03 2012 Jindrich Novy <jnovy@redhat.com> 2.1.23-30

- rebuild against new libdb

* Wed Feb 08 2012 Petr Lautrbach <plautrba@redhat.com> 2.1.23-29

- Change saslauth user homedir to /run/saslauthd (#752889)

- Change all /var/run/ to /run/

- DAEMONOPTS are not supported any more in systemd units

* Mon Jan 09 2012 Jeroen van Meeuwen <vanmeeuwen@kolabsys.com> - 2.1.23-28

- Ship with sasl_pwcheck_method: alwaystrue

* Mon Dec 12 2011 Petr Lautrbach <plautrba@redhat.com> 2.1.23-27

- remove support for logging of the remote host via PAM (#759334)

- fix systemd files (#750436)

* Wed Aug 10 2011 Jan F. Chadima <jchadima@redhat.com> - 2.1.23-26

- Add partial relro support for libraries

* Mon Jul 25 2011 Jan F. Chadima <jchadima@redhat.com> - 2.1.23-25

- Add support for berkeley db 5

* Wed Jun 29 2011 Jan F. Chadima <jchadima@redhat.com> - 2.1.23-23

- Migrate the package to full native systemd unit files, according to the Fedora

  packaging guidelines.

* Wed Jun  1 2011 Jan F. Chadima <jchadima@redhat.com> - 2.1.23-22

- repair rimap support (more packets in response)

* Wed May 25 2011 Jan F. Chadima <jchadima@redhat.com> - 2.1.23-21

- repair ntlm support

* Mon May 23 2011 Jan F. Chadima <jchadima@redhat.com> - 2.1.23-20

- add logging of the remote host via PAM

* Thu Apr 28 2011 Jan F. Chadima <jchadima@redhat.com> - 2.1.23-19

- temporarilly revert systemd units

* Tue Apr 26 2011 Jan F. Chadima <jchadima@redhat.com> - 2.1.23-18

- update scriptlets

* Fri Apr 22 2011 Jan F. Chadima <jchadima@redhat.com> - 2.1.23-17

- Add systemd units

* Wed Mar 23 2011 Tomas Mraz <tmraz@redhat.com> - 2.1.23-16

- Rebuilt with new mysqlclient

* Fri Feb 25 2011 Jan F. Chadima <jchadima@redhat.com> - 2.1.23-15

- set correct license tag

- add ghost to /var/run/saslauthd

* Tue Feb 08 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.23-14

- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild

* Fri Apr  9 2010 Jan F. Chadima <jchadima@redhat.com> - 2.1.23-13

- Add /etc/tmpfiles.d element (#662734)

* Fri Apr  9 2010 Jan F. Chadima <jchadima@redhat.com> - 2.1.23-12

- Update init script to impeach pid file

* Thu Mar 11 2010 Jan F. Chadima <jchadima@redhat.com> - 2.1.23-11

- Update pre post preun and postun scripts (#572399)

* Wed Mar 10 2010 Jan F. Chadima <jchadima@redhat.com> - 2.1.23-10

- Rewrite spec file, make corect CFLAGS, CPPFLAGS and LDFLAGS

* Mon Feb 22 2010 Jan F. Chadima <jchadima@redhat.com> - 2.1.23-9

- solve race condition (#566875)

* Wed Feb 17 2010 Stepan Kasal <skasal@redhat.com> - 2.1.23-8

- improve m4 quoting to fix saslauthd/configure (#566088)

- call autotools in build, not in prep

* Fri Feb  5 2010 Jan F. Chadima <jchadima@redhat.com> - 2.1.23-7

- Add man page to testtcpauthd (#526189)

* Fri Oct 16 2009 Jan F. Chadima <jchadima@redhat.com> - 2.1.23-6

- Create the saslauth user according to fedora packaging guide

* Thu Sep 24 2009 Jan F. Chadima <jchadima@redhat.com> - 2.1.23-5

- Repair initscript to make condrestart working properly (#522103)

* Wed Sep 23 2009 Jan F. Chadima <jchadima@redhat.com> - 2.1.23-3

- Add possibility to run the saslauth without root privilegies (#185614)

* Fri Aug 21 2009 Tomas Mraz <tmraz@redhat.com> - 2.1.23-2

- rebuilt with new openssl

* Fri Aug  7 2009 Jan F. Chadima <jchadima@redhat.com> - 2.1.23-1

- update to 2.1.23

* Fri Jul 24 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.22-25

- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild

* Mon May 11 2009 Jan F. Chadima <jchadima@redhat.com> - 2.1.22-24

- repair sasl_encode64 nul termination (#487251)

* Thu Apr 16 2009 Robert Scheck <robert@fedoraproject.org> - 2.1.22-23

- Don't build the krb4 plugin as krb5 1.7 will drop it (#225974 #c6)

* Tue Feb 24 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.22-22

- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild

* Fri Feb  6 2009 Tomas Mraz <tmraz@redhat.com> - 2.1.22-21

- fix build with gcc-4.4

* Fri Jan 23 2009 Tomas Mraz <tmraz@redhat.com> - 2.1.22-20

- set LDAP_OPT_TIMEOUT (#326452)

- provide LSB compatible init script (#246900)

* Fri Sep 26 2008 Tomas Mraz <tmraz@redhat.com> - 2.1.22-19

- always use the current external db4 when linking,

  thanks to Dan Horak for the original patch (#464098)

* Wed Sep 10 2008 Tomas Mraz <tmraz@redhat.com> - 2.1.22-18

- fix most critical build warnings (#433583)

- use external db4

* Fri Aug 29 2008 Tomas Mraz <tmraz@redhat.com> - 2.1.22-17

- always link against the internal db4 (#459163)

- rediff patches for no fuzz

* Wed Jul  9 2008 Tomas Mraz <tmraz@redhat.com> - 2.1.22-16

- update internal db4 (#449737)

* Tue Jul  1 2008 Tomas Mraz <tmraz@redhat.com> - 2.1.22-15

- drop reload from initscript help (#448154)

- fix hang in rimap auth method (#438533)

- build the krb4 plugin (#154675)