#

#               Red Hat BIND package .spec file

#

%{?!SDB:        %define SDB         1}

%{?!LIBBIND:    %define LIBBIND	    1}

%{?!efence:     %define efence      0}

%{?!test:       %define test        0}

%{?!WITH_DBUS:  %define WITH_DBUS   1} # + dynamic forwarder table management with D-BUS

%{?!DEBUGINFO:  %define DEBUGINFO   1}

%{?!bind_uid:   %define bind_uid   25}

%{?!bind_gid:   %define bind_gid   25}

%{?!selinux:	%define selinux     1}

%define		bind_dir      /var/named

%define    	chroot_prefix %{bind_dir}/chroot

#

Summary: 	The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) server.

Name: 		bind

License: 	BSD-like

Version: 	9.3.2

Release: 	20.FC6

Epoch:   	30

Url: 		http://www.isc.org/products/BIND/

Buildroot: 	%{_tmppath}/%{name}-root

Group: 		System Environment/Daemons

#

Source: 	ftp://ftp.isc.org/isc/bind9/%{version}/bind-%{version}.tar.gz

Source1: 	named.sysconfig

Source2: 	named.init

Source3: 	named.logrotate

Source4: 	keygen.c

Source5: 	rfc1912.txt

Source6: 	bind-chroot.tar.gz

Source7: 	bind-9.3.1rc1-sdb_tools-Makefile.in

Source8: 	http://www.venaas.no/ldap/bind-sdb/dnszone.schema

Source9: 	libbind-man.tar.gz

Source10: 	named-dbus.conf

Source11: 	named.service

Source12: 	README.sdb_pgsql

Source13: 	namedSetForwarders

Source14: 	namedGetForwarders

Source15: 	filter_requires.sh

Source16: 	named.caching-nameserver.conf

Source17: 	named.root

Source18: 	named.local

Source19: 	localhost.zone

Source20: 	localdomain.zone

Source21: 	named.ip6.local

Source22: 	named.broadcast

Source23: 	named.zero

Source24:	Copyright.caching-nameserver

Source25: 	rfc1912.txt

Source26: 	bind-chroot-admin.in

Source27:       named.rfc1912.zones

Source28:	libbind.pc

Source29:	named.conf.sample

Source30:       named.rfc1912.zones.sample

Source31:       named.root.hints

#

Patch:  	bind-9.2.0rc3-varrun.patch

Patch1: 	bind-9.3.2b2-rndckey.patch

Patch2: 	bind-9.3.1beta2-openssl-suffix.patch

Patch3: 	bind-posixthreads.patch

Patch4: 	bind-bsdcompat.patch

Patch5: 	bind-nonexec.patch

Patch6: 	bind-9.2.2-nsl.patch

Patch7: 	bind-9.2.4rc7-pie.patch

Patch8: 	bind-9.3.0-handle-send-errors.patch

Patch9: 	bind-9.3.0-missing-dnssec-tools.patch

Patch10: 	bind-9.3.2b1-PIE.patch

Patch11: 	bind-9.3.2b2-sdbsrc.patch

Patch12: 	bind-9.3.1rc1-sdb.patch

Patch13: 	bind-9.3.1rc1-fix_libbind_includedir.patch

Patch14: 	libbind-9.3.1rc1-fix_h_errno.patch

Patch15: 	bind-9.3.2b2-dbus.patch

Patch16: 	bind-9.3.2-redhat_doc.patch

Patch17: 	bind-9.3.2b1-fix_sdb_ldap.patch

Patch18: 	bind-9.3.1-reject_resolv_conf_errors.patch

Patch19: 	bind-9.3.1-next_server_on_referral.patch

Patch20: 	bind-9.3.2b2-no_servfail_stops.patch

Patch21: 	bind-9.3.2b1-fix_sdb_pgsql.patch

Patch22: 	bind-9.3.1-sdb_dbus.patch

Patch23: 	bind-9.3.1-dbus_archdep_libdir.patch

Patch24: 	bind-9.3.1-t_no_default_lookups.patch

Patch25: 	bind-9.3.1-fix_no_dbus_daemon.patch

Patch26: 	bind-9.3.1-flush-cache.patch

Patch27: 	bind-9.3.1-dbus_restart.patch

Patch28: 	bind-9.3.2rc1-dbus-0.6.patch

Patch29: 	bind-9.3.2-bz177854.patch

Patch30:	bind-9.3.2-bz187286_fix_host_cname.patch

Patch31:	bind-9.3.2-bz173961.patch

Patch32:	bind-9.3.2-prctl_set_dumpable.patch

#

Requires:	bind-libs = %{epoch}:%{version}-%{release}, glibc  >= 2.2

Requires(post): bash, coreutils, sed, grep, chkconfig >= 1.3.26

Requires(pre): 	shadow-utils

Requires(preun):chkconfig >= 1.3.26

%if %{selinux}

Requires(post):	policycoreutils

%endif

BuildRequires: 	gcc, glibc-devel >= 2.2.5-26,  glibc-kernheaders >= 2.4-7.10, openssl-devel, libtool, pkgconfig, tar

%if %{SDB}

BuildRequires:  openldap-devel, postgresql-devel

%endif

%if %{WITH_DBUS}

BuildRequires:  dbus-devel

%endif

%if %{test}

BuildRequires:  net-tools, perl

%endif

#

# fix bug 176100: do not Require: perl just for namedGetForwarders !

%define __perl_requires %SOURCE15

%define __find_requires %SOURCE15

%define _use_internal_dependency_generator 0

#

%description

BIND (Berkeley Internet Name Domain) is an implementation of the DNS

(Domain Name System) protocols. BIND includes a DNS server (named),

which resolves host names to IP addresses; a resolver library

(routines for applications to use when interfacing with DNS); and

tools for verifying that the DNS server is operating properly.

%package  libs

Summary:  Libraries used by the BIND DNS packages

Group:    Applications/System

%description libs

Contains libraries used by both the bind server package as well as the utils packages.

%package  utils

Summary:  Utilities for querying DNS name servers.

Group:    Applications/System

Requires: bind-libs = %{epoch}:%{version}-%{release}

%description utils

Bind-utils contains a collection of utilities for querying DNS (Domain

Name System) name servers to find out information about Internet

hosts. These tools will provide you with the IP addresses for given

host names, as well as other information about registered domains and

network addresses.

You should install bind-utils if you need to get information from DNS name

servers.

%package   devel

Summary:   Header files and libraries needed for BIND DNS development.

Group:     Development/Libraries

Requires:  bind-libs = %{epoch}:%{version}-%{release}

%description devel

The bind-devel package contains all the header files and libraries

required for DNS (Domain Name System) development with ISC BIND 9.x.x.

%package   config

Summary:   Default BIND configuration files for a caching nameserver

Group: 	   System Environment/Daemons

Obsoletes: caching-nameserver

Provides:  caching-nameserver

Requires:  bind = %{epoch}:%{version}-%{release}

Requires(post):   bash, coreutils, sed, grep

Requires(postun): bash, coreutils, sed, grep

%if %{selinux}

Requires(post): policycoreutils

%endif

%description config

The bind-config package includes the configuration files which will make

the ISC BIND named DNS name server act as a simple caching nameserver.

A caching nameserver is a DNS Resolver, as defined in RFC 1035, section 7.

ISC BIND named(8) provides a very efficient, flexible and robust resolver as

well as a server of authoritative DNS data - many users use this package

along with BIND to implement their primary system DNS resolver service.

If you would like to set up a caching name server, you'll need to install

bind, bind-libs, and bind-utils along with this package.

This package replaces the caching-nameserver package.

%package   chroot

Summary:   A chroot runtime environment for the ISC BIND DNS server, named(8)

Group: 	   System Environment/Daemons

Prefix:    %{chroot_prefix}

Requires:  bind = %{epoch}:%{version}-%{release}

Requires(post):  bash, coreutils, sed, grep

Requires(preun): bash, coreutils, sed, grep

%if %{selinux}

Requires(post): policycoreutils

%endif

%description chroot

This package contains a tree of files which can be used as a

chroot(2) jail for the named(8) program from the BIND package.

Based off code from Jan "Yenya" Kasprzak <kas@fi.muni.cz>

%if %{LIBBIND}

%package libbind-devel

Summary: Include files and library needed to use the BIND resolver library.

Group: Development/Libraries

Requires: bind-libs = %{epoch}:%{version}-%{release}

%description libbind-devel

The bind-libbind-devel package contains the libbind BIND resolver library,

compatible with that from ISC BIND 8, and the /usr/include/bind include files

necessary to develop software that uses it.

%endif

%if %{SDB}

%package sdb

Summary: The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) server with database backends.

Group: System Environment/Daemons

Requires: bind-libs = %{epoch}:%{version}-%{release}, bind-utils = %{epoch}:%{version}-%{release},  glibc  >= 2.2

Requires(post):   bash, coreutils, sed, grep, mktemp

Requires(preun):  bash, coreutils, sed, grep

%if %{selinux}

Requires(post): policycoreutils

%endif

%description sdb

BIND (Berkeley Internet Name Domain) is an implementation of the DNS

(Domain Name System) protocols. BIND includes a DNS server (named),

which resolves host names to IP addresses; a resolver library

(routines for applications to use when interfacing with DNS); and

tools for verifying that the DNS server is operating properly.

BIND SDB (Simplified Database Backend) provides named_sdb, the DNS

name server compiled to include support for using alternative Zone Databases

stored in an LDAP server (ldapdb), a postgreSQL database (pgsqldb), or in the

filesystem (dirdb), in addition  to the standard in-memory RBT (Red Black Tree)

zone database.

%endif

%prep

%setup -q -n %{name}-%{version}

%patch -p1 -b .varrun

%patch1 -p1 -b .key

%patch2 -p1 -b .openssl_suffix

#%define         posix_threads       0

#%if %{posix_threads}

#%patch3 -p1 -b .posixthreads

#^- This patch is no longer required and would not work anyway (see BZ 87525).

#%endif

%patch4 -p1 -b .bsdcompat

%patch5 -p1 -b .nonexec

%patch6 -p1 -b .nsl

#%patch7 -p1 -b .pie

# This patch now in patch10

#%patch8 -p1 -b .handle_send_errors

# This patch is now in ISC bind-9.3.1x

#

#%patch9 -p1 -b .missing_dnssec_tools

#RIP dnssec-signkey and dnssec-makekeyset:

#1852.	[cleanup]	Remove last vestiges of dnssec-signkey and

#			dnssec-makekeyset (removed from Makefile years ago).

#

%patch10 -p1 -b .PIE

%if %{SDB}

%patch11 -p1 -b .sdbsrc

# BUILD 'Simplified Database Backend' (SDB) version of named: named_sdb

cp -rfp bin/named bin/named_sdb

# SDB ldap

cp -fp contrib/sdb/ldap/ldapdb.[ch] bin/named_sdb

# SDB postgreSQL

cp -fp contrib/sdb/pgsql/pgsqldb.[ch] bin/named_sdb

# SDB Berkeley DB - needs to be ported to DB4!

#cp -fp contrib/sdb/bdb/bdb.[ch] bin/named_sdb

# SDB dir

cp -fp contrib/sdb/dir/dirdb.[ch] bin/named_sdb

# SDB tools

mkdir -p bin/sdb_tools

cp -fp %{SOURCE7} bin/sdb_tools/Makefile.in

#cp -fp contrib/sdb/bdb/zone2bdb.c bin/sdb_tools

cp -fp contrib/sdb/ldap/{zone2ldap.1,zone2ldap.c} bin/sdb_tools

cp -fp contrib/sdb/pgsql/zonetodb.c bin/sdb_tools

%patch12 -p1 -b .sdb

%endif

%if %{LIBBIND}

%patch13 -p1 -b .fix_libbind_includedir

%patch14 -p1 -b .fix_h_errno

%endif

%if %{WITH_DBUS}

%patch15 -p1 -b .dbus

%if %{SDB}

%patch22 -p1 -b .sdb_dbus

%endif

%patch23 -p1 -b .dbus_archdep_libdir

%else

%patch16 -p1 -b .redhat_doc

%endif

%if %{SDB}

%patch17 -p1 -b .fix_sdb_ldap

%endif

# %patch18 -p1 -b .reject_resolv_conf_errors

# patch now upstream.

%patch19 -p1 -b .next_server_on_referral

%patch20 -p1 -b .no_servfail_stops

# patches now upstream :

#%patch21 -p1 -b .fix_sdb_pgsql

#%patch24 -p1 -b .-t_no_default_lookups

%if %{WITH_DBUS}

%patch25 -p1 -b .fix_no_dbus_daemon

%patch26 -p1 -b .flush_cache

%patch27 -p1 -b .dbus_restart

%patch28 -p1 -b .dbus-0.6

# this patch no longer required (kernel now fixed):

# %patch29 -p1 -b .bz177854

%patch30 -p1 -b .bz187286_fix_host_cname

%patch31 -p1 -b .bz173961

%patch32 -p1 -b .prctl_set_dumpable

#

# this must follow all dbus patches:

%if %{SDB}

cp -fp bin/named/{dbus_mgr.c,dbus_service.c,log.c,server.c} bin/named_sdb

cp -fp bin/named/include/named/{dbus_mgr.h,dbus_service.h,globals.h,server.h,log.h,types.h} bin/named_sdb/include/named

%endif

%endif

:;

%build

libtoolize --copy --force; aclocal; autoconf

cp -f /usr/share/libtool/config.{guess,sub} .

%if %{DEBUGINFO}

export CFLAGS="$RPM_OPT_FLAGS";

%else

export CFLAGS=`echo $RPM_OPT_FLAGS | sed 's/-O2 -g/-g3 -gdwarf-2/g'`;

%endif

export CPPFLAGS="$CFLAGS";

%if %{WITH_DBUS}

%ifarch s390x x86_64 ppc64

# every 64-bit arch EXCEPT ia64 has dbus architecture dependant

# includes in  /usr/lib64/dbus-1.0/include

export DBUS_ARCHDEP_LIBDIR=lib64

%endif

%endif

if pkg-config openssl ; then

	export CFLAGS="$CFLAGS `pkg-config --cflags openssl`"

	export CPPFLAGS="$CPPFLAGS `pkg-config --cflags-only-I openssl`"

	export LDFLAGS="$LDFLAGS `pkg-config --libs-only-L openssl`"

fi

%if %{efence}

export LDFLAGS=-lefence

%endif

%configure \

	--with-libtool \

	--localstatedir=/var \

	--enable-threads \

	--enable-ipv6 \

	--with-pic \

	--with-openssl=/usr \

%if %{LIBBIND}

	--enable-libbind \

%endif

	CFLAGS="$CFLAGS" \

;

make %{?_smp_mflags}

%if !%{DEBUGINFO}

%define debug_package %{nil}

%endif

%install

rm -rf ${RPM_BUILD_ROOT}

cp %{SOURCE5} doc/rfc

gzip -9       doc/rfc/*

mkdir -p ${RPM_BUILD_ROOT}/etc/{rc.d/init.d,logrotate.d}

mkdir -p ${RPM_BUILD_ROOT}/usr/{bin,lib,sbin,include}

mkdir -p ${RPM_BUILD_ROOT}/var/named

mkdir -p ${RPM_BUILD_ROOT}/var/named/slaves

mkdir -p ${RPM_BUILD_ROOT}/var/named/data

mkdir -p ${RPM_BUILD_ROOT}%{_mandir}/{man1,man5,man8}

mkdir -p ${RPM_BUILD_ROOT}/var/run/named

#chroot

mkdir -p ${RPM_BUILD_ROOT}/%{chroot_prefix}

tar --no-same-owner -zxvf %{SOURCE6} --directory ${RPM_BUILD_ROOT}/%{chroot_prefix}

# these are required to prevent them being erased during upgrade of previous

# versions that included them (bug #130121):

touch ${RPM_BUILD_ROOT}/%{chroot_prefix}/etc/named.conf

touch ${RPM_BUILD_ROOT}/%{chroot_prefix}/etc/named.rfc1912.zones

touch ${RPM_BUILD_ROOT}/%{chroot_prefix}/etc/rndc.key

touch ${RPM_BUILD_ROOT}/%{chroot_prefix}/dev/null

touch ${RPM_BUILD_ROOT}/%{chroot_prefix}/dev/random

#end chroot

make DESTDIR=${RPM_BUILD_ROOT} install

touch ${RPM_BUILD_ROOT}%{_sysconfdir}/rndc.conf

install -c -m 755 contrib/named-bootconf/named-bootconf.sh ${RPM_BUILD_ROOT}%{_sbindir}/named-bootconf

install -c -m 755 %SOURCE2 ${RPM_BUILD_ROOT}/etc/rc.d/init.d/named

install -c -m 644 %SOURCE3 ${RPM_BUILD_ROOT}/etc/logrotate.d/named

touch ${RPM_BUILD_ROOT}%{_sysconfdir}/rndc.key

%{__cc} $RPM_OPT_FLAGS -o ${RPM_BUILD_ROOT}%{_sbindir}/dns-keygen %{SOURCE4}

mkdir -p ${RPM_BUILD_ROOT}%{_sysconfdir}/sysconfig

cp %{SOURCE1} ${RPM_BUILD_ROOT}%{_sysconfdir}/sysconfig/named

%if %{SDB}

mkdir -p ${RPM_BUILD_ROOT}/etc/openldap/schema

install -c -m 644 %{SOURCE8} ${RPM_BUILD_ROOT}/etc/openldap/schema/dnszone.schema

cp -fp %{SOURCE12} contrib/sdb/pgsql/

%endif

%if %{LIBBIND}

gunzip < %{SOURCE9} | (cd ${RPM_BUILD_ROOT}/usr/share; tar -xpf -)

mkdir -p ${RPM_BUILD_ROOT}/%{_libdir}/pkgconfig

install -m 644 %{SOURCE28} $RPM_BUILD_ROOT%{_libdir}/pkgconfig/libbind.pc

%endif

%if %{WITH_DBUS}

mkdir -p ${RPM_BUILD_ROOT}/etc/dbus-1/system.d

mkdir -p ${RPM_BUILD_ROOT}%{_datadir}/dbus-1/services

cp -fp %{SOURCE10} ${RPM_BUILD_ROOT}/etc/dbus-1/system.d/named.conf

cp -fp %{SOURCE11} ${RPM_BUILD_ROOT}%{_datadir}/dbus-1/services/named.service

cp -fp %{SOURCE13} ${RPM_BUILD_ROOT}%{_sbindir}/namedSetForwarders

cp -fp %{SOURCE14} ${RPM_BUILD_ROOT}%{_sbindir}/namedGetForwarders

%endif

%if %{test}

if [ "`whoami`" = 'root' ]; then

   set -e

   chmod -R a+rwX .

   pushd bin/tests

   pushd system

   ./ifconfig.sh up

   popd

   make test

   e=$?

   pushd system

   ./ifconfig.sh down

   popd

   popd

   if [ "$e" -ne 0 ]; then

      echo "ERROR: this build of BIND failed 'make test'. Aborting."

      exit $e;

   fi;

else

   echo 'test==1 : only root can run the tests (they require an ifconfig).';

fi

%endif

# Files required to run test-suite outside of build tree:

cp -fp config.h ${RPM_BUILD_ROOT}/%{_includedir}/bind9

cp -fp lib/dns/include/dns/forward.h ${RPM_BUILD_ROOT}/%{_includedir}/dns

cp -fp lib/isc/unix/include/isc/keyboard.h ${RPM_BUILD_ROOT}/%{_includedir}/isc

cp -fp lib/isc/include/isc/hash.h ${RPM_BUILD_ROOT}/%{_includedir}/isc

# Remove libtool .la files:

find ${RPM_BUILD_ROOT}/%{_libdir} -name '*.la' -exec '/bin/rm' '-f' '{}' ';';

# /usr/lib/rpm/brp-compress

#

# Ghost config files:

touch ${RPM_BUILD_ROOT}/etc/named.conf

# bind-config files:

mkdir -p ${RPM_BUILD_ROOT}/{etc,var/named}

install -m 644 %{SOURCE16} ${RPM_BUILD_ROOT}/etc/named.caching-nameserver.conf

install -m 644 %{SOURCE27} ${RPM_BUILD_ROOT}/etc/named.rfc1912.zones

install -m 644 %{SOURCE17} ${RPM_BUILD_ROOT}/var/named/named.ca

install -m 644 %{SOURCE18} ${RPM_BUILD_ROOT}/var/named/named.local

install -m 644 %{SOURCE19} ${RPM_BUILD_ROOT}/var/named/localhost.zone

install -m 644 %{SOURCE20} ${RPM_BUILD_ROOT}/var/named/localdomain.zone

install -m 644 %{SOURCE21} ${RPM_BUILD_ROOT}/var/named/named.ip6.local

install -m 644 %{SOURCE22} ${RPM_BUILD_ROOT}/var/named/named.broadcast

install -m 644 %{SOURCE23} ${RPM_BUILD_ROOT}/var/named/named.zero

for f in /etc/named.caching-nameserver.conf /var/named/{named.ca,named.local,localhost.zone,localdomain.zone,named.ip6.local,named.broadcast,named.zero}; do

    touch ${RPM_BUILD_ROOT}/%{chroot_prefix}/$f;

done

install -m 644 %{SOURCE25} ./rfc1912.txt

install -m 644 %{SOURCE24} ./Copyright

# bind-chroot-admin script:

sed -e 's^@BIND_CHROOT_PREFIX@^'%{chroot_prefix}'^;s^@BIND_DIR@^'%{bind_dir}'^' < %{SOURCE26} > bind-chroot-admin;

install -m 754 bind-chroot-admin ${RPM_BUILD_ROOT}/%{_sbindir}

# sample bind configuration files for %doc:

mkdir -p sample/etc sample/var/named/{data,slaves}

cp -fp %{SOURCE29} sample/etc/named.conf

cp -fp %{SOURCE30} sample/etc/named.rfc1912.zones

cp -fp %{SOURCE31} sample/etc/

cp -fp %{SOURCE17} %{SOURCE18} %{SOURCE19} %{SOURCE20} %{SOURCE21} %{SOURCE22} %{SOURCE23} sample/var/named

for f in my.internal.zone.db slaves/my.slave.internal.zone.db slaves/my.ddns.internal.zone.db my.external.zone.db; do 

  echo '@ in soa localhost. root 1 3H 15M 1W 1D

  ns localhost.' > sample/var/named/$f; 

done

/usr/bin/tail -n '+'`/bin/egrep -n '\\$Id: rndc.conf,v' bin/rndc/rndc.conf | sed 's/:.*$/+1/' | bc` bin/rndc/rndc.conf | sed '/Sample rndc configuration file./{p;i\

 *\

 * NOTE: you only need to create this file if it is to\

 * differ from the following default contents:

;d}' > sample/etc/rndc.conf;

#

%if !%{DEBUGINFO}

echo 'WARNING - NOT generating debuginfo!'

/usr/lib/rpm/brp-compress

exit 0

%endif

:;

%files

%defattr(0640,root,root,0750)

%dir /var/named

%defattr(0640,named,named,0750)

%dir /var/named/slaves

%dir /var/named/data

%dir /var/run/named

%defattr(0754,root,root,0755)

%config /etc/rc.d/init.d/named

%defattr(0640,root,named,0750)

%config(noreplace) /etc/sysconfig/named

%ghost %config(noreplace) /etc/rndc.key

# ^- rndc.key now created on first install only if it does not exist

# %verify(not size,not md5) %config(noreplace) %attr(0640,root,named) /etc/rndc.conf

# ^- Let the named internal default rndc.conf be used -

#    rndc.conf not required unless it differs from default.

%ghost %config(noreplace) /etc/named.conf

# ^- Ensure something owns named.conf, even though it may not be installed at all

%ghost %config(noreplace) /etc/rndc.conf

# ^- The default rndc.conf which uses rndc.key is in named's default internal config -

#    so rndc.conf is not necessary.

%config(noreplace) /etc/logrotate.d/named

%defattr(0750,root,root,0755)

%{_sbindir}/dnssec*

%{_sbindir}/lwresd

%{_sbindir}/named

%{_sbindir}/named-bootconf

%{_sbindir}/named-check*

%{_sbindir}/rndc*

%{_sbindir}/dns-keygen

%{_sbindir}/bind-chroot-admin

%defattr(0644,root,root,0755)

%{_mandir}/man5/named.conf.5*

%{_mandir}/man5/rndc.conf.5*

%{_mandir}/man8/rndc.8*

%{_mandir}/man8/named.8*

%{_mandir}/man8/lwresd.8*

%{_mandir}/man8/dnssec*.8*

%{_mandir}/man8/named-checkconf.8*

%{_mandir}/man8/named-checkzone.8*

%{_mandir}/man8/rndc-confgen.8*

%doc CHANGES COPYRIGHT README

%doc doc/arm doc/misc

%doc sample/

%if %{WITH_DBUS}

%doc doc/README.DBUS

%attr(644,root,root) %config /etc/dbus-1/system.d/named.conf

%attr(644,root,root) %config /usr/share/dbus-1/services/named.service

%attr(754,root,root) %{_sbindir}/namedGetForwarders

%attr(754,root,root) %{_sbindir}/namedSetForwarders

%endif

%files libs

%defattr(0755,root,root,0755)

%{_libdir}/*so*

%files utils

%defattr(0755,root,root,0755)

%{_bindir}/dig

%{_bindir}/host

%{_bindir}/nslookup

%{_bindir}/nsupdate

%defattr(0644,root,root,0755)

%{_mandir}/man1/host.1*

%{_mandir}/man8/nsupdate.8*

%{_mandir}/man1/dig.1*

%{_mandir}/man1/nslookup.1*

%files devel

%defattr(0644,root,root,0755)

%{_libdir}/libbind9.a

%{_libdir}/libdns.a

%{_libdir}/libisc.a

%{_libdir}/libisccc.a

%{_libdir}/libisccfg.a

%{_libdir}/liblwres.a

%{_includedir}/bind9

%{_includedir}/dns

%{_includedir}/dst

%{_includedir}/isc

%{_includedir}/isccc

%{_includedir}/isccfg

%{_includedir}/lwres

%{_mandir}/man3/lwres*

%{_bindir}/isc-config.sh

%doc doc/draft doc/rfc

%files config

%defattr(0640,root,named,0750)

%config /etc/named.caching-nameserver.conf

%ghost %config %{chroot_prefix}/etc/named.caching-nameserver.conf

%config /etc/named.rfc1912.zones

%ghost %config %{chroot_prefix}/etc/named.rfc1912.zones

%ghost %config(noreplace) /etc/named.conf

%ghost %config(noreplace) %{chroot_prefix}/etc/named.conf

%config /var/named/named.ca

%ghost  %config %{chroot_prefix}/var/named/named.ca

%config /var/named/named.local

%ghost  %config %{chroot_prefix}/var/named/named.local

%config /var/named/localhost.zone

%ghost  %config %{chroot_prefix}/var/named/localhost.zone

%config /var/named/localdomain.zone

%ghost  %config %{chroot_prefix}/var/named/localdomain.zone

%config /var/named/named.ip6.local

%ghost  %config %{chroot_prefix}/var/named/named.ip6.local

%config /var/named/named.broadcast

%ghost  %config %{chroot_prefix}/var/named/named.broadcast

%config /var/named/named.zero

%ghost  %config %{chroot_prefix}/var/named/named.zero

%defattr(0644,root,root,0755)

%doc Copyright

%doc rfc1912.txt

%files chroot

%defattr(0640,root,named,0750)

%dir %prefix

%dir %prefix/dev

%dir %prefix/etc

%dir %prefix/var

%dir  %prefix/var/run

%dir  %prefix/var/named

%ghost %config(noreplace) %prefix/etc/named.conf

%ghost %config(noreplace) %prefix/etc/named.caching-nameserver.conf

%ghost %config(noreplace) %prefix/etc/rndc.key

%defattr(0660,named,named,0770)

%dir %prefix/var/named/slaves

%dir %prefix/var/named/data

%dir %prefix/var/run/named

%dir %prefix/var/tmp

%ghost %prefix/dev/null

%ghost %prefix/dev/random

%ghost %prefix/dev/zero

%if %{LIBBIND}

%files libbind-devel

%defattr(0755,root,root,0755)

%{_libdir}/libbind.so*

%defattr(0644,root,root,0755) 

%{_libdir}/libbind.a

%{_libdir}/pkgconfig/libbind.pc

%{_includedir}/bind

%{_mandir}/man3/libbind-*

%{_mandir}/man7/libbind-*

%{_mandir}/man5/libbind-*

%endif

%if %{SDB}

%files sdb

%defattr(0750,root,named,0755)

%{_sbindir}/named_sdb

%{_sbindir}/zone2ldap

%{_sbindir}/ldap2zone

%{_sbindir}/zonetodb

%defattr(0640,root,named,0755)

%config /etc/openldap/schema/dnszone.schema

%defattr(0644,root,named,0755)

%{_mandir}/man1/zone2ldap.1*

%doc contrib/sdb/ldap/README.ldap contrib/sdb/ldap/INSTALL.ldap contrib/sdb/pgsql/README.sdb_pgsql

%endif

%pre

if [ "$1" -eq 1 ]; then

   /usr/sbin/groupadd -g %{bind_gid} -f -r named >/dev/null 2>&1 || :;

   /usr/sbin/useradd  -u %{bind_uid} -r -n -M -g named -s /sbin/nologin -d /var/named -c Named named >/dev/null 2>&1 || :;

fi;

:;

%post

/sbin/ldconfig

/sbin/chkconfig --add named

if [ "$1" -eq 1 ]; then

	# no more named.boot autoconversion! No-one should be using BIND-4 anymore.

	if [ ! -e /etc/rndc.key ]; then

	# create the rndc.key file:

	   echo 'key "rndckey" {

	algorithm	hmac-md5;

	secret		"'`/usr/sbin/dns-keygen`'";

};'  >     /etc/rndc.key;

	elif /bin/egrep -q '@KEY@' /etc/rndc.key; then

	   # fix potential problem with older versions

	   /bin/sed -i -e 's^@KEY@^'`/usr/sbin/dns-keygen`'^' /etc/rndc.key ;

	fi

        [ -e /selinux/enforce ] && [ -x /sbin/restorecon ] && /sbin/restorecon /etc/rndc.* /etc/named.* >/dev/null 2>&1 ;

fi

:;

%preun

if [ "$1" = 0 ]; then

   /etc/rc.d/init.d/named stop >/dev/null 2>&1 || :;

   /sbin/chkconfig --del named || :;

fi

:;

%postun

/sbin/ldconfig

if [ "$1" -ge 1 ]; then

   /etc/rc.d/init.d/named condrestart >/dev/null 2>&1 || :;

fi;

:;

%triggerpostun -- bind < 8.2.2_P5-15

/sbin/chkconfig --add named

/sbin/ldconfig

:;

%triggerpostun -n bind -- bind <= 24:9.3.1-11

if [ "$1" -gt 0 ]; then

# bind <= 22:9.3.0-2:

# These versions of bind installed named service at order 55 in

# runlevel startup order, after programs like  nis / ntp / nfs

# which may need its services if using no nameservers in resolv.conf.

# bind <= 24:9.3.1-11:

# These versions ran bind with order 11 in runlevel 2, after syslog

# at order 12 . BIND should run after syslog and now has order '- 13 87'.

#

    /sbin/chkconfig named resetpriorities

fi

:;

%postun utils

if [ $1 = 0 ]; then

   if [ -f /var/lock/subsys/named ]; then

      /etc/rc.d/init.d/named stop >/dev/null  2>&1 || :;

   fi;

fi;

:;

%post libs -p /sbin/ldconfig

%postun libs -p /sbin/ldconfig

%post config

if [ "$1" -gt 0 ]; then

   /usr/bin/chcon system_u:object_r:named_conf_t  /etc/named.caching-nameserver.conf >/dev/null 2>&1 || :;

   /usr/bin/chcon system_u:object_r:named_conf_t  /etc/named.rfc1912.zones >/dev/null 2>&1 || :;

   . /usr/sbin/bind-chroot-admin --sync;

fi;

:;

%post chroot

if [ "$1" -gt 0 ]; then

   . /usr/sbin/bind-chroot-admin --enable;

fi;

:;

%preun chroot

if [ "$1" -eq 0 ]; then

   . /usr/sbin/bind-chroot-admin --disable;

fi

:;

%if %{LIBBIND}

%post libbind-devel -p /sbin/ldconfig

%postun libbind-devel -p /sbin/ldconfig

%endif

%if %{SDB}

%post sdb

if [ "$1" -ge 1 ]; then

   # check that dnszone.schema is installed in OpenLDAP's slapd.conf

   if [ -x /usr/sbin/named_sdb ] && [ -f /etc/openldap/slapd.conf ]; then

   # include the LDAP dnszone.schema in slapd.conf:

      if ! /bin/egrep -q '^include.*\dnszone.schema' /etc/openldap/slapd.conf; then

         tf=`/bin/mktemp /tmp/XXXXXX`

         let n=`/bin/grep -n '^include.*\.schema' /etc/openldap/slapd.conf | /usr/bin/tail -1 | /bin/sed 's/:.*//'`

         if [ "$n" -gt 0 ]; then

   	    /bin/cp -fp /etc/openldap/slapd.conf /etc/openldap/slapd.conf.rpmsave;

	    /usr/bin/head -$n /etc/openldap/slapd.conf > $tf

            echo 'include         /etc/openldap/schema/dnszone.schema' >> $tf

            let n='n+1'

            /usr/bin/tail -n +$n /etc/openldap/slapd.conf >> $tf

            /bin/mv -f $tf /etc/openldap/slapd.conf;

            /bin/chmod --reference=/etc/openldap/slapd.conf.rpmsave /etc/openldap/slapd.conf

            [ -e /selinux/enforce ] && [ -x /sbin/restorecon ] && /sbin/restorecon /etc/openldap/slapd.conf >/dev/null 2>&1 || :;

            [ -x /etc/init.d/ldap ] && /etc/init.d/ldap condrestart >/dev/null 2>&1

         fi

         rm -f $tf >/dev/null 2>&1 || :;

      fi;

   fi;

fi;

:;

%preun sdb

if [ "$1" -eq 0 ] && [ -x /usr/sbin/named_sdb ] && [ -f /etc/openldap/slapd.conf ]; then

   if /bin/egrep -q '^include.*\dnszone.schema' /etc/openldap/slapd.conf; then

      tf=`/bin/mktemp /tmp/XXXXXX`

      /bin/egrep -v '^include.*dnszone\.schema' /etc/openldap/slapd.conf > $tf

      /bin/mv -f $tf /etc/openldap/slapd.conf;

      rm -f $tf >/dev/null 2>&1

      [ -e /selinux/enforce ] && [ -x /sbin/restorecon ] && /sbin/restorecon /etc/openldap/slapd.conf >/dev/null 2>&1 || :;

      [ -x /etc/init.d/ldap ] && /etc/init.d/ldap condrestart >/dev/null 2>&1 || :;

   fi;

fi;

:;

%endif # SDB

%clean

rm -rf ${RPM_BUILD_ROOT}

:;

%changelog

* Tue Apr 04 2006 Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-20

- fix resolver.c ncache_adderesult segfault reported in addenda to bug 173961 

  (upstream bugs #15642, #15528 ?)

- allow named ability to generate core dumps after setuid (upstream bug #15753)

* Mon Apr 03 2006 Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-18

- fix bug 187529: make bind-chroot-admin deal with subdirectories properly

* Thu Mar 30 2006 Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-16

- fix bug 187286: 

     prevent host(1) printing duplicate 'is an alias for' messages

     for the default AAAA and MX lookups as well as for the A lookup

     (it now uses the CNAME returned for the A lookup for the AAAA and MX lookups).

     This is upstream bug #15702 fixed in the unreleased bind-9.3.3

- fix bug 187333: fix SOURCE24 and SOURCE25 transposition

* Wed Mar 29 2006 Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-14

- fix bug 186577: remove -L/usr/lib from libbind.pc and more .spec file cleanup

- add '%doc' sample configuration files in /usr/share/doc/bind*/sample

- rebuild with new gcc and glibc

* Wed Mar 22 2006 Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-12

- fix typo in initscript

- fix Requires(post): policycoreutils in sub-packages

* Mon Mar 20 2006 Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-10

- fix bug 185969: more .spec file cleanup

* Wed Mar 08 2006 Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-8

- Do not allow package to be installed if named:25 userid creation fails

- Give libbind a pkg-config file

- remove restorecon from bind-chroot-admin (not required).

- fix named.caching-nameserver.conf (listen-on-v6 port 53 { ::1 };)

* Tue Mar 07 2006 Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-7

- fix issues with bind-chroot-admin

* Mon Mar 06 2006 Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-6

- replace caching-nameserver with bind-config sub-package

- fix bug 177595: handle case where $ROOTDIR is a link in initscript

- fix bug 177001: bind-config creates symlinks OK now

- fix bug 176388: named.conf is now never replaced by any RPM

- fix bug 176248: remove unecessary creation of rpmsave links

- fix bug 174925: no replacement of named.conf

- fix bug 173963: existing named.conf never modified

- major .spec file cleanup

* Fri Feb 10 2006 Jesse Keating <jkeating@redhat.com> - 30:9.3.2-4.1

- bump again for double-long bug on ppc(64)

* Tue Feb 07 2006 Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-4

- regenerate redhat_doc patch for non-DBUS builds

- allow dbus builds to work with dbus version < 0.6 (bz #179816)

* Tue Feb 07 2006 Florian La Roche <laroche@redhat.com> 30:9.3.2-3

- try supporting without dbus support

* Mon Feb 06 2006 Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2.1

- Rebuild for new gcc, glibc, glibc-kernheaders

* Mon Jan 16 2006 Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-2

- fix bug 177854: temporary fix for broken kernel-2.6.15-1854+

  /proc/net/if_inet6 format

* Wed Dec 21 2005 Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-1