%global username    saslauth

%global hint        Saslauthd user

%global homedir     /run/saslauthd

%global _plugindir2 %{_libdir}/sasl2

%global bootstrap_cyrus_sasl 0

%global gdbm_db_file /etc/sasl2/sasldb2

Summary: The Cyrus SASL library

Name: cyrus-sasl

Version: 2.1.27

Release: 21%{?dist}

License: BSD with advertising

URL: https://www.cyrusimap.org/sasl/

# Source0 originally comes from https://www.cyrusimap.org/releases/;

# make-no-dlcompatorsrp-tarball.sh removes the "dlcompat" subdirectory and builds a

# new tarball.

Source0: cyrus-sasl-%{version}-nodlcompatorsrp.tar.gz

Source5: saslauthd.service

Source7: sasl-mechlist.c

Source9: saslauthd.sysconfig

Source10: make-no-dlcompatorsrp-tarball.sh

# From upstream git, required for reconfigure after applying patches to configure.ac

# https://raw.githubusercontent.com/cyrusimap/cyrus-sasl/master/autogen.sh

Source11: autogen.sh

Patch11: cyrus-sasl-2.1.25-no_rpath.patch

Patch15: cyrus-sasl-2.1.20-saslauthd.conf-path.patch

Patch23: cyrus-sasl-2.1.23-man.patch

Patch24: cyrus-sasl-2.1.21-sizes.patch

# The 64 bit *INT8 type is not used anywhere and other types match

Patch49: cyrus-sasl-2.1.26-md5global.patch

Patch60: cyrus-sasl-pr559-RC4-openssl.patch

Patch100: cyrus-sasl-cve-2019-19906.patch

Patch101: cyrus-sasl-2.1.27-Add-basic-test-infrastructure.patch

Patch102: cyrus-sasl-2.1.27-Add-Channel-Binding-support-for-GSSAPI-GSS-SPNEGO.patch

Patch103: cyrus-sasl-2.1.27-Add-support-for-setting-max-ssf-0-to-GSS-SPNEGO.patch

Patch104: cyrus-sasl-2.1.27-Emit-debug-log-only-in-case-of-errors.patch

Patch105: cyrus-sasl-2.1.27-fix-for-autoconf270.patch

#https://github.com/simo5/cyrus-sasl/commit/ebd2387f06c84c7f9aac3167ec041bb01e5c6e48

Patch106: cyrus-sasl-2.1.27-nostrncpy.patch

# Upstream PR: https://github.com/cyrusimap/cyrus-sasl/pull/635

Patch107: cyrus-sasl-2.1.27-Add-basic-test-plain-auth.patch

#Migration tool should be removed from RHEL10

Patch108: cyrus-sasl-2.1.27-Migration-from-BerkeleyDB.patch

Patch500: cyrus-sasl-2.1.27-coverity.patch

Patch501: cyrus-sasl-2.1.27-cumulative-digestmd5.patch

Patch502: cyrus-sasl-2.1.27-cumulative-ossl3.patch

Patch900: 0001-CVE-2022-24407-Escape-password-for-SQL-insert-update.patch

BuildRequires: autoconf, automake, libtool, gdbm-devel, groff

BuildRequires: krb5-devel >= 1.19, openssl-devel, pam-devel, pkgconfig

BuildRequires: mariadb-connector-c-devel, libpq-devel, zlib-devel

%if ! %{bootstrap_cyrus_sasl}

BuildRequires: openldap-devel

%endif

#build reqs for migration from BerkeleyDB

#should be removed from RHEL10

BuildRequires: libdb-devel-static

#build reqs for make check

BuildRequires: python3 nss_wrapper socket_wrapper krb5-server

%{?systemd_requires}

Requires: %{name}-lib = %{version}-%{release}

Requires: systemd

#Requires/Provides related to the saslauthd user creation

Requires: /sbin/nologin

Requires(pre): /usr/sbin/useradd /usr/sbin/groupadd

Requires(postun): /usr/sbin/userdel /usr/sbin/groupdel

Provides: user(%username)

Provides: group(%username)

%description

The %{name} package contains the Cyrus implementation of SASL.

SASL is the Simple Authentication and Security Layer, a method for

adding authentication support to connection-based protocols.

%package lib

Summary: Shared libraries needed by applications which use Cyrus SASL

%description lib

The %{name}-lib package contains shared libraries which are needed by

applications which use the Cyrus SASL library.

%package devel

Requires: %{name}-lib = %{version}-%{release}

Requires: %{name} = %{version}-%{release}

Requires: pkgconfig

Summary: Files needed for developing applications with Cyrus SASL

%description devel

The %{name}-devel package contains files needed for developing and

compiling applications which use the Cyrus SASL library.

%package gssapi

Requires: %{name}-lib%{?_isa} = %{version}-%{release}

Summary: GSSAPI authentication support for Cyrus SASL

%description gssapi

The %{name}-gssapi package contains the Cyrus SASL plugins which

support GSSAPI authentication. GSSAPI is commonly used for Kerberos

authentication.

%package plain

Requires: %{name}-lib%{?_isa} = %{version}-%{release}

Summary: PLAIN and LOGIN authentication support for Cyrus SASL

%description plain

The %{name}-plain package contains the Cyrus SASL plugins which support

PLAIN and LOGIN authentication schemes.

%package md5

Requires: %{name}-lib%{?_isa} = %{version}-%{release}

Summary: CRAM-MD5 and DIGEST-MD5 authentication support for Cyrus SASL

%description md5

The %{name}-md5 package contains the Cyrus SASL plugins which support

CRAM-MD5 and DIGEST-MD5 authentication schemes.

%package ntlm

Requires: %{name}-lib%{?_isa} = %{version}-%{release}

Summary: NTLM authentication support for Cyrus SASL

%description ntlm

The %{name}-ntlm package contains the Cyrus SASL plugin which supports

the NTLM authentication scheme.

# This would more appropriately be named cyrus-sasl-auxprop-sql.

%package sql

Requires: %{name}-lib%{?_isa} = %{version}-%{release}

Summary: SQL auxprop support for Cyrus SASL

%description sql

The %{name}-sql package contains the Cyrus SASL plugin which supports

using a RDBMS for storing shared secrets.

%if ! %{bootstrap_cyrus_sasl}

# This was *almost* named cyrus-sasl-auxprop-ldapdb, but that's a lot of typing.

%package ldap

Requires: %{name}-lib%{?_isa} = %{version}-%{release}

Summary: LDAP auxprop support for Cyrus SASL

%description ldap

The %{name}-ldap package contains the Cyrus SASL plugin which supports using

a directory server, accessed using LDAP, for storing shared secrets.

%endif

%package scram

Requires: %{name}-lib%{?_isa} = %{version}-%{release}

Summary: SCRAM auxprop support for Cyrus SASL

%description scram

The %{name}-scram package contains the Cyrus SASL plugin which supports

the SCRAM authentication scheme.

%package gs2

Requires: %{name}-lib%{?_isa} = %{version}-%{release}

Summary: GS2 support for Cyrus SASL

%description gs2

The %{name}-gs2 package contains the Cyrus SASL plugin which supports

the GS2 authentication scheme.

###

%prep

%setup -q -n cyrus-sasl-%{version}

%patch11 -p1 -b .no_rpath

%patch15 -p1 -b .path

%patch23 -p1 -b .man

%patch24 -p1 -b .sizes

%patch49 -p1 -b .md5global.h

%patch60 -p1 -b .openssl_rc4

%patch100 -p1 -b .cve_2019_19906

%patch101 -p1 -b .tests

%patch102 -p1 -b .gssapi_cbs

%patch103 -p1 -b .maxssf0

%patch104 -p1 -b .nolog

%patch105 -p1 -b .autoconf270

%patch106 -p1 -b .nostrncpy

%patch107 -p1 -b .plaintests

%patch108 -p1 -b .frombdb

%patch500 -p1 -b .coverity

%patch501 -p1 -b .digestmd5

%patch502 -p1 -b .ossl3

%patch900 -p1 -b .CVE-2022-24407

%build

# reconfigure

cp %{SOURCE11} ./

rm configure aclocal.m4 config/ltmain.sh Makefile.in

export NOCONFIGURE=yes

sh autogen.sh

# Find Kerberos.

krb5_prefix=`krb5-config --prefix`

if test x$krb5_prefix = x%{_prefix} ; then

        krb5_prefix=

else

        CPPFLAGS="-I${krb5_prefix}/include $CPPFLAGS"; export CPPFLAGS

        LDFLAGS="-L${krb5_prefix}/%{_lib} $LDFLAGS"; export LDFLAGS

fi

# Find OpenSSL.

LIBS="-lcrypt"; export LIBS

if pkg-config openssl ; then

        CPPFLAGS="`pkg-config --cflags-only-I openssl` $CPPFLAGS"; export CPPFLAGS

        LDFLAGS="`pkg-config --libs-only-L openssl` $LDFLAGS"; export LDFLAGS

fi

# Find the MySQL libraries used needed by the SQL auxprop plugin.

INC_DIR="`mysql_config --include`"

if test x"$INC_DIR" != "x-I%{_includedir}"; then

        CPPFLAGS="$INC_DIR $CPPFLAGS"; export CPPFLAGS

fi

LIB_DIR="`mysql_config --libs | sed -e 's,-[^L][^ ]*,,g' -e 's,^ *,,' -e 's, *$,,' -e 's,  *, ,g'`"

if test x"$LIB_DIR" != "x-L%{_libdir}"; then

        LDFLAGS="$LIB_DIR $LDFLAGS"; export LDFLAGS

fi

# Find the PostgreSQL libraries used needed by the SQL auxprop plugin.

INC_DIR="-I`pg_config --includedir`"

if test x"$INC_DIR" != "x-I%{_includedir}"; then

        CPPFLAGS="$INC_DIR $CPPFLAGS"; export CPPFLAGS

fi

LIB_DIR="-L`pg_config --libdir`"

if test x"$LIB_DIR" != "x-L%{_libdir}"; then

        LDFLAGS="$LIB_DIR $LDFLAGS"; export LDFLAGS

fi

CFLAGS="$RPM_OPT_FLAGS $CFLAGS $CPPFLAGS -fPIC -pie -Wl,-z,relro -Wl,-z,now"; export CFLAGS

echo "$CFLAGS"

echo "$CPPFLAGS"

echo "$LDFLAGS"

%configure \

        --enable-shared --disable-static \

        --disable-java \

        --with-plugindir=%{_plugindir2} \

        --with-configdir=%{_plugindir2}:%{_sysconfdir}/sasl2 \

        --disable-krb4 \

        --enable-gssapi${krb5_prefix:+=${krb5_prefix}} \

        --with-gss_impl=mit \

        --with-rc4 \

        --with-dblib=gdbm \

        --with-dbpath=%{gdbm_db_file} \

        --with-saslauthd=/run/saslauthd --without-pwcheck \

%if ! %{bootstrap_cyrus_sasl}

        --with-ldap \

%endif

        --with-devrandom=/dev/urandom \

        --enable-anon \

        --enable-cram \

        --enable-digest \

        --enable-ntlm \

        --enable-plain \

        --enable-login \

        --enable-alwaystrue \

        --enable-httpform \

        --disable-otp \

%if ! %{bootstrap_cyrus_sasl}

        --enable-ldapdb \

%endif

        --enable-sql --with-mysql=yes --with-pgsql=yes \

        --without-sqlite \

        "$@"

        # --enable-auth-sasldb -- EXPERIMENTAL

make sasldir=%{_plugindir2}

make -C saslauthd testsaslauthd

make -C sample

# Build a small program to list the available mechanisms, because I need it.

pushd lib

../libtool --mode=link %{__cc} -o sasl2-shared-mechlist -I../include $CFLAGS %{SOURCE7} $LDFLAGS ./libsasl2.la

%install

test "$RPM_BUILD_ROOT" != "/" && rm -rf $RPM_BUILD_ROOT

make install DESTDIR=$RPM_BUILD_ROOT sasldir=%{_plugindir2}

make install DESTDIR=$RPM_BUILD_ROOT sasldir=%{_plugindir2} -C plugins

install -m755 -d $RPM_BUILD_ROOT%{_bindir}

./libtool --mode=install \

install -m755 sample/client $RPM_BUILD_ROOT%{_bindir}/sasl2-sample-client

./libtool --mode=install \

install -m755 sample/server $RPM_BUILD_ROOT%{_bindir}/sasl2-sample-server

#Migration tool should be removed from RHEL10

mv $RPM_BUILD_ROOT%{_sbindir}/cyrusbdb2current $RPM_BUILD_ROOT%{_bindir}/cyrusbdb2current

./libtool --mode=install \

install -m755 saslauthd/testsaslauthd $RPM_BUILD_ROOT%{_sbindir}/testsaslauthd

# Install the saslauthd mdoc page in the expected location.  Sure, it's not

# really a man page, but groff seems to be able to cope with it.

install -m755 -d $RPM_BUILD_ROOT%{_mandir}/man8/

install -m644 -p saslauthd/saslauthd.mdoc $RPM_BUILD_ROOT%{_mandir}/man8/saslauthd.8

install -m644 -p saslauthd/testsaslauthd.8 $RPM_BUILD_ROOT%{_mandir}/man8/testsaslauthd.8

# Install the systemd unit file for saslauthd and the config file.

install -d -m755 $RPM_BUILD_ROOT/%{_unitdir} $RPM_BUILD_ROOT/etc/sysconfig

install -m644 -p %{SOURCE5} $RPM_BUILD_ROOT/%{_unitdir}/saslauthd.service

install -m644 -p %{SOURCE9} $RPM_BUILD_ROOT/etc/sysconfig/saslauthd

# Install the config dirs if they're not already there.

install -m755 -d $RPM_BUILD_ROOT/%{_sysconfdir}/sasl2

install -m755 -d $RPM_BUILD_ROOT/%{_plugindir2}

# Provide an easy way to query the list of available mechanisms.

./libtool --mode=install \

install -m755 lib/sasl2-shared-mechlist $RPM_BUILD_ROOT/%{_sbindir}/

# Remove unpackaged files from the buildroot.

rm -f $RPM_BUILD_ROOT%{_libdir}/sasl2/libotp.*

rm -f $RPM_BUILD_ROOT%{_libdir}/sasl2/*.a

rm -f $RPM_BUILD_ROOT%{_libdir}/sasl2/*.la

rm -f $RPM_BUILD_ROOT%{_libdir}/*.la

rm -f $RPM_BUILD_ROOT%{_mandir}/cat8/saslauthd.8

%check

make check %{?_smp_mflags}

%pre

getent group %{username} >/dev/null || groupadd -g 76 -r %{username}

getent passwd %{username} >/dev/null || useradd -r -g %{username} -d %{homedir} -s /sbin/nologin -c "%{hint}" %{username}

%post

%systemd_post saslauthd.service

%preun

%systemd_preun saslauthd.service

%postun

%systemd_postun_with_restart saslauthd.service

%ldconfig_scriptlets lib

%files

%doc saslauthd/LDAP_SASLAUTHD

%{_mandir}/man8/*

%{_sbindir}/pluginviewer

%{_sbindir}/saslauthd

%{_sbindir}/testsaslauthd

%config(noreplace) /etc/sysconfig/saslauthd

%{_unitdir}/saslauthd.service

%ghost /run/saslauthd

%files lib

%license COPYING

%doc AUTHORS doc/html/*.html

%{_libdir}/libsasl*.so.*

%dir %{_sysconfdir}/sasl2

%dir %{_plugindir2}/

%{_plugindir2}/*anonymous*.so*

%{_plugindir2}/*sasldb*.so*

%{_sbindir}/saslpasswd2

%{_sbindir}/sasldblistusers2

%{_bindir}/cyrusbdb2current

%files plain

%{_plugindir2}/*plain*.so*

%{_plugindir2}/*login*.so*

%if ! %{bootstrap_cyrus_sasl}

%files ldap

%{_plugindir2}/*ldapdb*.so*

%endif

%files md5

%{_plugindir2}/*crammd5*.so*

%{_plugindir2}/*digestmd5*.so*

%files ntlm

%{_plugindir2}/*ntlm*.so*

%files sql

%{_plugindir2}/*sql*.so*

%files gssapi

%{_plugindir2}/*gssapi*.so*

%files scram

%{_plugindir2}/libscram.so*

%files gs2

%{_plugindir2}/libgs2.so*

%files devel

%{_bindir}/sasl2-sample-client

%{_bindir}/sasl2-sample-server

%{_includedir}/*

%{_libdir}/libsasl*.*so

%{_libdir}/pkgconfig/*.pc

%{_mandir}/man3/*

%{_sbindir}/sasl2-shared-mechlist

%changelog

* Mon Aug  1 2022 Simo Sorce <simo@redhat.com> - 2.1.27-21

- Fix memleak

* Wed Feb 23 2022 Simo Sorce <simo@redhat.com> - 2.1.27-20

- Fix for CVE-2022-24407

- Resolves: rhbz#2055848

* Wed Feb  9 2022 Simo Sorce <simo@redhat.com> - 2.1.27-19

- Fix a memleak in one of the OpenSSL 3 compat patches

  found by covscan

* Mon Feb  7 2022 Simo Sorce <simo@redhat.com> - 2.1.27-18

- Update OpenSSL 3 related compatibility patch backports

* Mon Aug 09 2021 Mohan Boddu <mboddu@redhat.com> - 2.1.27-17

- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags

  Related: rhbz#1991688

* Wed Jul 28 2021 Simo Sorce <simo@redhat.com> - 2.1.27-16

- Rebuild to pass gating after fixing rhbz#1983928

* Wed Jul 28 2021 Florian Weimer <fweimer@redhat.com> - 2.1.27-15

- Rebuild to pick up OpenSSL 3.0 Beta ABI (#1984097)

* Mon Jul 19 2021 Simo Sorce <simo@redhat.com> - 2.1.27-14

- Fix crashs on missing legacy algorithms

  Resolves: rhbz#1974354

* Wed Jun 16 2021 Mohan Boddu <mboddu@redhat.com> - 2.1.27-13

- Rebuilt for RHEL 9 BETA for openssl 3.0

  Related: rhbz#1971065

* Fri Jun 04 2021 Dmitry Belyavskiy <dbelyavs@redhat.com> - 2.1.27-12

- Incorporate the upstream gdbm specific patch from

  https://github.com/cyrusimap/cyrus-sasl/pull/554

- Resolves rhbz#1947971

* Wed Apr 28 2021 Dmitry Belyavskiy <dbelyavs@redhat.com> - 2.1.27-11

- Set default sasldb database to GDBM instead of BerkeleyDB

- Add the migration tool from BerkeleyDB

- Add some PLAIN auth tests

- Resolves rhbz#1947971

* Thu Apr 15 2021 Mohan Boddu <mboddu@redhat.com> - 2.1.27-10

- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937

* Mon Apr 12 2021 Dmitry Belyavskiy <dbelyavs@redhat.com> - 2.1.27-9

- Coverity-related fixes (#1938700)

* Mon Feb 08 2021 Pavel Raiskup <praiskup@redhat.com> - 2.1.27-8

- rebuild for libpq ABI fix rhbz#1908268

* Tue Jan 26 2021 Fedora Release Engineering <releng@fedoraproject.org> - 2.1.27-7

- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

* Mon Jul 27 2020 Fedora Release Engineering <releng@fedoraproject.org> - 2.1.27-6

- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

* Thu May  7 2020 Simo Sorce <simo@redhat.com> - 2.1.27-5

- Backport GSSAPI Channel Bindings support

- Add support for setting maxssf=0 in GSS-SPNEGO

- Reduce excessive GSSAPI plugin logging

* Thu Mar 19 2020 Simo Sorce - 2.1.27-4

- Fix CVE 2019 19906

* Tue Jan 28 2020 Fedora Release Engineering <releng@fedoraproject.org> - 2.1.27-3

- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild

* Wed Jul 24 2019 Fedora Release Engineering <releng@fedoraproject.org> - 2.1.27-2

- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild

* Thu Jun 13 2019 Simo Sorce - 2.1.27-1

- Update to final 2.1.27 sources

- Also add patch to use OpenSSL RC4, currently proposed as PR 559

* Thu Jan 31 2019 Fedora Release Engineering <releng@fedoraproject.org> - 2.1.27-0.6rc7

- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild

* Mon Jan 14 2019 Björn Esser <besser82@fedoraproject.org> - 2.1.27-0.5rc7

- Rebuilt for libcrypt.so.2 (#1666033)

* Sun Oct 14 2018 Peter Robinson <pbrobinson@fedoraproject.org> 2.1.27-0.4rc7

- Clean up remanents of sys-v, spec cleanups

* Thu Jul 12 2018 Fedora Release Engineering <releng@fedoraproject.org> - 2.1.27-0.3rc7

- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

* Thu May 17 2018 Jakub Jelen <jjelen@redhat.com> - 2.1.27-0.2rc7

- Avoid multilib conflicts between devel subpackages (#1577675)

* Mon Mar 05 2018 Jakub Jelen <jjelen@redhat.com> - 2.1.27-0.1rc7

- New upstream (pre-)release

- Import LDFLAGS from redhat-rpm-config (#1548437)

* Wed Feb 07 2018 Fedora Release Engineering <releng@fedoraproject.org> - 2.1.26-37

- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

* Sat Jan 20 2018 Björn Esser <besser82@fedoraproject.org> - 2.1.26-36

- Rebuilt for switch to libxcrypt

* Mon Oct 23 2017 Jakub Jelen <jjelen@redhat.com> - 2.1.26-35

- Use mariadb-connector-c-devel instead of mysql-devel (#1493620)

* Wed Aug 02 2017 Fedora Release Engineering <releng@fedoraproject.org> - 2.1.26-34

- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild

* Wed Jul 26 2017 Fedora Release Engineering <releng@fedoraproject.org> - 2.1.26-33

- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

* Wed Apr 19 2017 Jakub Jelen <jjelen@redhat.com> - 2.1.26-32

- Add missing patch for separate mutexes per connection in GSSAPI

* Tue Apr 18 2017 Jakub Jelen <jjelen@redhat.com> - 2.1.26-31

- Allow cyrus sasl to get the ssf from gssapi

* Wed Apr 12 2017 Petr Šabata <contyk@redhat.com> - 2.1.26-30

- Removing the obsolete scriptlet /sbin/service dependency

* Tue Mar 07 2017 Jakub Jelen <jjelen@redhat.com> - 2.1.26-29

- Fix GSS SPNEGO support (#1421663)

* Fri Feb 10 2017 Fedora Release Engineering <releng@fedoraproject.org> - 2.1.26-28

- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

* Mon Nov 07 2016 Jakub Jelen <jjelen@redhat.com> - 2.1.26-27

- Add support for OpenSSL 1.1.0

* Wed Feb 03 2016 Fedora Release Engineering <releng@fedoraproject.org> - 2.1.26-26.2

- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

* Thu Jul 16 2015 Jakub Jelen <jjelen@redhat.com> 2.1.26-25.2

- Revert tmpfiles.d and use new systemd feature RuntimeDirectory

* Wed Jun 17 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.26-24

- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

* Fri May 29 2015 Jakub Jelen <jjelen@redhat.com> 2.1.26-23

- Add ability to handle logging in gssapi plugin (#1187097)

* Mon Mar 16 2015 Jakub Jelen <jjelen@redhat.com> 2.1.26-22

- Rever "Do not leak memory in plugin_common.c ..." due the breakage of svn (#1202364)

* Thu Mar 12 2015 Jakub Jelen <jjelen@redhat.com> 2.1.26-21

- Add and Document ability to run saslauthd as non-root user, fix tpmfiles ownership (#1189203)

- Do not leak memory in sample server (#852755)

- Do not leak memory in plugin_common.c for password callback (#1191183)

- Cleanup spec file: tmpfiles.d macros and tab/space

* Wed Feb 04 2015 Petr Lautrbach <plautrba@redhat.com> 2.1.26-20

- Change the ownership of /run/saslauth to saslauth:saslauth (#1189203)

* Sat Aug 16 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.26-19

- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild

* Fri Jul 11 2014 Tom Callaway <spot@fedoraproject.org> - 2.1.26-18

- fix license handling

* Sat Jun 07 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.26-17

- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

* Sun Jan 19 2014 Ville Skyttä <ville.skytta@iki.fi> - 2.1.26-16

- Don't order service after syslog.target.

* Fri Nov 15 2013 Petr Lautrbach <plautrba@redhat.com> 2.1.26-15

- Treat SCRAM-SHA-1/DIGEST-MD5 as more secure than PLAIN (#970718)

- improve configuration error message

* Fri Nov 01 2013 Petr Lautrbach <plautrba@redhat.com> 2.1.26-14

- revert upstream commit 080e51c7fa0421eb2f0210d34cf0ac48a228b1e9 (#984079)

* Tue Oct 15 2013 Karsten Hopp <karsten@redhat.com> 2.1.26-13

- add ppc64p7 subarch support in config.sub (Fedora only)

* Mon Sep 09 2013 Petr Lautrbach <plautrba@redhat.com> 2.1.26-12

- build with RPM_OPT_FLAGS <ville.skytta@iki.fi> (#1005535)

* Tue Sep 03 2013 Petr Lautrbach <plautrba@redhat.com> 2.1.26-11

- fix hardening for /usr/sbin/saslauthd

- add testsaslauthd.8 man page to the package

- use static md5global.h file

* Sat Aug 03 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.26-10

- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild

* Mon Jun 24 2013 Petr Lautrbach <plautrba@redhat.com> 2.1.26-9

- detect gsskrb5_register_acceptor_identity macro <nalin@redhat.com> (#976538)

* Tue Jun 04 2013 Karsten Hopp <karsten@redhat.com> 2.1.26-8

- disable incorrect check for MkLinux to allow building with shared libraries on PPC

* Tue May 21 2013 Petr Lautrbach <plautrba@redhat.com> 2.1.26-7

- fix the spec file in order to build the cyrus-sasl-sql plugin

  with support for PostgreSQL and MySQL

* Thu Feb 21 2013 Petr Lautrbach <plautrba@redhat.com> 2.1.26-6

- don't include system sasl2 library needed for rebuilds after rebase

* Mon Feb 11 2013 Petr Lautrbach <plautrba@redhat.com> 2.1.26-5

- enable full relro and PIE compiler flags for saslauthd

* Fri Feb 01 2013 Petr Lautrbach <plautrba@redhat.com> 2.1.26-4

- fix library symlinks

* Thu Jan 31 2013 Rex Dieter <rdieter@fedoraproject.org> 2.1.26-3

- actually apply size_t patch (#906519)

* Thu Jan 31 2013 Rex Dieter <rdieter@fedoraproject.org> 2.1.26-2

- sasl.h: +#include<sys/types.h> for missing size_t type (#906519)

- tighten subpkg deps via %%?_isa

* Thu Dec 20 2012 Petr Lautrbach <plautrba@redhat.com> 2.1.26-1

- update to 2.1.26

- fix segfaults in sasl_gss_encode (#886140)

* Mon Dec 10 2012 Petr Lautrbach <plautrba@redhat.com> 2.1.25-2

- always use the current external Berkeley DB when linking

* Fri Dec 07 2012 Petr Lautrbach <plautrba@redhat.com> 2.1.25-1

- update to 2.1.25

- add cyrus-sasl-scram and cyrus-sasl-gs2 packages

* Fri Sep 14 2012 Petr Lautrbach <plautrba@redhat.com> 2.1.23-36

- replace scriptlets with systemd macros (#856666)

* Wed Jul 18 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.23-35

- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild

* Tue Jul 17 2012 Petr Lautrbach <plautrba@redhat.com> 2.1.23-34

- move /etc/tmpfiles.d/saslauthd.conf to /usr/lib/tmpfiles.d/saslauthd.conf (#840193)

* Wed Jun 20 2012 Petr Lautrbach <plautrba@redhat.com> 2.1.23-33

- properly deal with crypt() returning NULL (#816250)

- use fixed gid 76 for saslauth

* Mon Apr 16 2012 Jindrich Novy <jnovy@redhat.com> 2.1.23-32

- re-enable libdb support and utilities

* Wed Apr 04 2012 Jindrich Novy <jnovy@redhat.com> 2.1.23-31

- temporarily disable libdb support to resolve cyrus-sasl

  chicken and egg build problem against libdb

* Tue Apr 03 2012 Jindrich Novy <jnovy@redhat.com> 2.1.23-30

- rebuild against new libdb

* Wed Feb 08 2012 Petr Lautrbach <plautrba@redhat.com> 2.1.23-29

- Change saslauth user homedir to /run/saslauthd (#752889)

- Change all /var/run/ to /run/

- DAEMONOPTS are not supported any more in systemd units

* Mon Jan 09 2012 Jeroen van Meeuwen <vanmeeuwen@kolabsys.com> - 2.1.23-28

- Ship with sasl_pwcheck_method: alwaystrue

* Mon Dec 12 2011 Petr Lautrbach <plautrba@redhat.com> 2.1.23-27

- remove support for logging of the remote host via PAM (#759334)

- fix systemd files (#750436)

* Wed Aug 10 2011 Jan F. Chadima <jchadima@redhat.com> - 2.1.23-26

- Add partial relro support for libraries

* Mon Jul 25 2011 Jan F. Chadima <jchadima@redhat.com> - 2.1.23-25

- Add support for berkeley db 5

* Wed Jun 29 2011 Jan F. Chadima <jchadima@redhat.com> - 2.1.23-23

- Migrate the package to full native systemd unit files, according to the Fedora

  packaging guidelines.

* Wed Jun  1 2011 Jan F. Chadima <jchadima@redhat.com> - 2.1.23-22

- repair rimap support (more packets in response)

* Wed May 25 2011 Jan F. Chadima <jchadima@redhat.com> - 2.1.23-21

- repair ntlm support

* Mon May 23 2011 Jan F. Chadima <jchadima@redhat.com> - 2.1.23-20

- add logging of the remote host via PAM

* Thu Apr 28 2011 Jan F. Chadima <jchadima@redhat.com> - 2.1.23-19

- temporarilly revert systemd units

* Tue Apr 26 2011 Jan F. Chadima <jchadima@redhat.com> - 2.1.23-18

- update scriptlets

* Fri Apr 22 2011 Jan F. Chadima <jchadima@redhat.com> - 2.1.23-17

- Add systemd units

* Wed Mar 23 2011 Tomas Mraz <tmraz@redhat.com> - 2.1.23-16

- Rebuilt with new mysqlclient

* Fri Feb 25 2011 Jan F. Chadima <jchadima@redhat.com> - 2.1.23-15

- set correct license tag

- add ghost to /var/run/saslauthd

* Tue Feb 08 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.23-14

- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild

* Fri Apr  9 2010 Jan F. Chadima <jchadima@redhat.com> - 2.1.23-13

- Add /etc/tmpfiles.d element (#662734)

* Fri Apr  9 2010 Jan F. Chadima <jchadima@redhat.com> - 2.1.23-12

- Update init script to impeach pid file

* Thu Mar 11 2010 Jan F. Chadima <jchadima@redhat.com> - 2.1.23-11

- Update pre post preun and postun scripts (#572399)

* Wed Mar 10 2010 Jan F. Chadima <jchadima@redhat.com> - 2.1.23-10

- Rewrite spec file, make corect CFLAGS, CPPFLAGS and LDFLAGS

* Mon Feb 22 2010 Jan F. Chadima <jchadima@redhat.com> - 2.1.23-9

- solve race condition (#566875)

* Wed Feb 17 2010 Stepan Kasal <skasal@redhat.com> - 2.1.23-8

- improve m4 quoting to fix saslauthd/configure (#566088)

- call autotools in build, not in prep

* Fri Feb  5 2010 Jan F. Chadima <jchadima@redhat.com> - 2.1.23-7

- Add man page to testtcpauthd (#526189)