Blame SPECS/mod_auth_kerb.spec

b2b3b1
%{?scl:%scl_package mod_auth_kerb}
b2b3b1
b2b3b1
%if 0%{?scl:1}
b2b3b1
%{!?_httpd24_apxs:       %{expand: %%global _httpd24_apxs       %%{_sbindir}/apxs}}
b2b3b1
%{!?_httpd24_mmn:        %{expand: %%global _httpd24_mmn        %%(cat %{_includedir}/httpd/.mmn 2>/dev/null || echo missing-httpd-devel)}}
b2b3b1
%{!?_httpd24_confdir:    %{expand: %%global _httpd24_confdir    %%{_sysconfdir}/httpd/conf.d}}
b2b3b1
# /etc/httpd/conf.d with httpd < 2.4 and defined as /etc/httpd/conf.modules.d with httpd >= 2.4
b2b3b1
%{!?_httpd24_modconfdir: %{expand: %%global _httpd24_modconfdir %%{_sysconfdir}/httpd/conf.d}}
b2b3b1
%{!?_httpd24_moddir:    %{expand: %%global _httpd24_moddir    %%{_libdir}/httpd/modules}}
b2b3b1
%else
b2b3b1
%{!?_httpd_apxs:       %{expand: %%global _httpd_apxs       %%{_sbindir}/apxs}}
b2b3b1
%{!?_httpd_mmn:        %{expand: %%global _httpd_mmn        %%(cat %{_includedir}/httpd/.mmn 2>/dev/null || echo missing-httpd-devel)}}
b2b3b1
%{!?_httpd_confdir:    %{expand: %%global _httpd_confdir    %%{_sysconfdir}/httpd/conf.d}}
b2b3b1
# /etc/httpd/conf.d with httpd < 2.4 and defined as /etc/httpd/conf.modules.d with httpd >= 2.4
b2b3b1
%{!?_httpd_modconfdir: %{expand: %%global _httpd_modconfdir %%{_sysconfdir}/httpd/conf.d}}
b2b3b1
%{!?_httpd_moddir:    %{expand: %%global _httpd_moddir    %%{_libdir}/httpd/modules}}
b2b3b1
%endif
b2b3b1
b2b3b1
Summary: Kerberos authentication module for HTTP
b2b3b1
Name: %{?scl:%scl_prefix}mod_auth_kerb
b2b3b1
Version: 5.4
cf1328
Release: 30%{?dist}
b2b3b1
# src/mod_auth_kerb.c is under 3-clause BSD, ASL 2.0 code is patched in (-s4u2proxy.patch)
b2b3b1
# src/mit-internals.h contains MIT-licensed code.
b2b3b1
License: BSD and MIT and ASL 2.0
b2b3b1
Group: System Environment/Daemons
b2b3b1
URL: http://modauthkerb.sourceforge.net/
b2b3b1
Source0: http://downloads.sourceforge.net/modauthkerb/mod_auth_kerb-%{version}.tar.gz
b2b3b1
Source1: auth_kerb.conf
b2b3b1
Source2: LICENSE.ASL
b2b3b1
Patch1: mod_auth_kerb-5.4-rcopshack.patch
b2b3b1
Patch2: mod_auth_kerb-5.4-fixes.patch
b2b3b1
Patch3: mod_auth_kerb-5.4-s4u2proxy.patch
b2b3b1
Patch4: mod_auth_kerb-5.4-httpd24.patch
b2b3b1
Patch5: mod_auth_kerb-5.4-delegation.patch
b2b3b1
Patch6: mod_auth_kerb-5.4-cachedir.patch
b2b3b1
Patch7: mod_auth_kerb-5.4-longuser.patch
b2b3b1
Patch8: mod_auth_kerb-5.4-handle-continue.patch
b2b3b1
BuildRequires: %{?scl:%scl_prefix}httpd-devel, krb5-devel
b2b3b1
%if 0%{?scl:1}
b2b3b1
Requires: %{?scl:%scl_prefix}httpd-mmn = %{_httpd24_mmn}
b2b3b1
%else
b2b3b1
Requires: httpd-mmn = %{_httpd_mmn}
b2b3b1
%endif
b2b3b1
Requires(pre): %{?scl:%scl_prefix}httpd
b2b3b1
%{?scl:Requires:%scl_runtime}
b2b3b1
b2b3b1
# Suppres auto-provides for module DSO
b2b3b1
%{?filter_provides_in: %filter_provides_in %{_libdir}/httpd/modules/.*\.so$}
b2b3b1
%{?filter_setup}
b2b3b1
b2b3b1
%description
b2b3b1
mod_auth_kerb is module for the Apache HTTP Server designed to
b2b3b1
provide Kerberos authentication over HTTP.  The module supports the
b2b3b1
Negotiate authentication method, which performs full Kerberos
b2b3b1
authentication based on ticket exchanges.
b2b3b1
b2b3b1
%prep
b2b3b1
%setup -q -n mod_auth_kerb-%{version}
b2b3b1
%patch1 -p1 -b .rcopshack
b2b3b1
%patch2 -p1 -b .fixes
b2b3b1
%patch3 -p1 -b .s4u2proxy
b2b3b1
%patch4 -p1 -b .httpd24
b2b3b1
%patch5 -p1 -b .delegation
b2b3b1
%patch6 -p1 -b .cachedir
b2b3b1
%patch7 -p1 -b .longuser
b2b3b1
%patch8 -p1 -b .handlecontinue
b2b3b1
b2b3b1
%build
b2b3b1
%if 0%{?scl:1}
b2b3b1
export APXS=%{_httpd24_apxs}
b2b3b1
%configure --without-krb4 --with-krb5=%{_root_prefix}
b2b3b1
%else
b2b3b1
export APXS=%{_httpd_apxs}
b2b3b1
%configure --without-krb4 --with-krb5=%{_prefix}
b2b3b1
%endif
b2b3b1
b2b3b1
make %{?_smp_mflags} 
b2b3b1
b2b3b1
%install
b2b3b1
rm -rf $RPM_BUILD_ROOT
b2b3b1
%if 0%{?scl:1}
b2b3b1
install -Dm 755 src/.libs/mod_auth_kerb.so \
b2b3b1
        $RPM_BUILD_ROOT%{_httpd24_moddir}/mod_auth_kerb.so
b2b3b1
%else
b2b3b1
install -Dm 755 src/.libs/mod_auth_kerb.so \
b2b3b1
        $RPM_BUILD_ROOT%{_httpd_moddir}/mod_auth_kerb.so
b2b3b1
%endif
b2b3b1
b2b3b1
%if 0%{?fedora} >= 18 || 0%{?rhel} >= 7
b2b3b1
# httpd >= 2.4.x
b2b3b1
sed -n /^LoadModule/p %{SOURCE1} > 10-auth_kerb.conf
b2b3b1
sed '/LoadModule/d;/Location /,/Location>/s,^#,,' %{SOURCE1} > example.conf
b2b3b1
%if 0%{?scl:1}
b2b3b1
install -Dp -m 0644 10-auth_kerb.conf $RPM_BUILD_ROOT%{_httpd24_modconfdir}/10-auth_kerb.conf
b2b3b1
%else
b2b3b1
install -Dp -m 0644 10-auth_kerb.conf $RPM_BUILD_ROOT%{_httpd_modconfdir}/10-auth_kerb.conf
b2b3b1
%endif
b2b3b1
%else
b2b3b1
# httpd <= 2.2.x
b2b3b1
%if 0%{?scl:1}
b2b3b1
install -Dp -m 0644 %{SOURCE1} $RPM_BUILD_ROOT%{_httpd_confdir}/auth_kerb.conf
b2b3b1
%else
b2b3b1
install -Dp -m 0644 %{SOURCE1} $RPM_BUILD_ROOT%{_httpd24_confdir}/auth_kerb.conf
b2b3b1
%endif
b2b3b1
%endif
b2b3b1
b2b3b1
%if 0%{?scl:0}
b2b3b1
# Credentials cache
b2b3b1
mkdir -p $RPM_BUILD_ROOT%{_prefix}/lib/tmpfiles.d
b2b3b1
echo 'd %{_localstatedir}/run/httpd/krbcache 700 apache apache' \
b2b3b1
     > $RPM_BUILD_ROOT%{_prefix}/lib/tmpfiles.d/httpd-krbcache.conf
b2b3b1
%endif
b2b3b1
b2b3b1
mkdir -p $RPM_BUILD_ROOT/%{_localstatedir}/run/httpd/krbcache
b2b3b1
b2b3b1
# Copy the license files here so we can include them in %doc
b2b3b1
cp -p %{SOURCE2} .
b2b3b1
b2b3b1
%files
b2b3b1
%doc README LICENSE LICENSE.ASL
b2b3b1
%if 0%{?scl:1}
b2b3b1
%config(noreplace) %{_httpd24_modconfdir}/*.conf
b2b3b1
%{_httpd24_moddir}/*.so
b2b3b1
%else
b2b3b1
%config(noreplace) %{_httpd_modconfdir}/*.conf
b2b3b1
%{_httpd_moddir}/*.so
b2b3b1
%{_prefix}/lib/tmpfiles.d/httpd24-krbcache.conf
b2b3b1
%endif
b2b3b1
%if 0%{?fedora} >= 18 || 0%{?rhel} >= 7
b2b3b1
%doc example.conf
b2b3b1
%endif
b2b3b1
b2b3b1
%attr(0700,apache,apache) %dir %{_localstatedir}/run/httpd/krbcache
b2b3b1
b2b3b1
%changelog
cf1328
* Wed Jan 28 2015 Jan Kaluza <jkaluza@redhat.com> - 5.4-30
cf1328
- rebuild for rhscl-2.0
cf1328
b2b3b1
* Thu Jan 30 2014 Jan Kaluza <jkaluza@redhat.com> - 5.4-29
b2b3b1
- fix krbcache directory and apply handle-continue patch (#1059562)
b2b3b1
b2b3b1
* Tue Nov 26 2013 Joe Orton <jorton@redhat.com> - 5.4-26.2
b2b3b1
- fix httpd-mmn depenency
b2b3b1
b2b3b1
* Tue Nov 26 2013 Joe Orton <jorton@redhat.com> - 5.4-26.1
b2b3b1
- rebuild
b2b3b1
b2b3b1
* Tue Oct 29 2013 Jan Kaluza <jkaluza@redhat.com> - 5.4-25
b2b3b1
- support for software collections
b2b3b1
b2b3b1
* Tue Jun 04 2013 Jan Kaluza <jkaluza@redhat.com> - 5.4-24
b2b3b1
- don't truncate translated names with KrbLocalUserMapping
b2b3b1
b2b3b1
* Thu Feb 14 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 5.4-23
b2b3b1
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
b2b3b1
b2b3b1
* Thu Nov 15 2012 Joe Orton <jorton@redhat.com> - 5.4-22
b2b3b1
- clarify licensing; clean up spec file
b2b3b1
b2b3b1
* Tue Nov 13 2012 Joe Orton <jorton@redhat.com> - 5.4-21
b2b3b1
- fix httpd_mmn stderr filter (thanks rcollet)
b2b3b1
b2b3b1
* Tue Nov 13 2012 Joe Orton <jorton@redhat.com> - 5.4-20
b2b3b1
- hide stderr if finding httpd_mmn 
b2b3b1
- package LICENSE
b2b3b1
- filter DSO auto provides
b2b3b1
b2b3b1
* Wed Aug  8 2012 Joe Orton <jorton@redhat.com> - 5.4-19
b2b3b1
- add Requires(pre) for httpd to ensure apache uid exists at install time
b2b3b1
b2b3b1
* Wed Aug  8 2012 Joe Orton <jorton@redhat.com> - 5.4-18
b2b3b1
- move ccache to /run/httpd/ccache
b2b3b1
b2b3b1
* Fri Jul 20 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 5.4-17
b2b3b1
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
b2b3b1
b2b3b1
* Wed Jun 13 2012 Joe Orton <jorton@redhat.com> - 5.4-16
b2b3b1
- hard-code use of /run/user/apache for cache dir
b2b3b1
- package /run/user/apache
b2b3b1
- move tmpfiles drop-in to /usr/lib
b2b3b1
b2b3b1
* Wed Jun 13 2012 Joe Orton <jorton@redhat.com> - 5.4-15
b2b3b1
- fix segfault in cache dir fix (#796430)
b2b3b1
b2b3b1
* Fri May 11 2012 Joe Orton <jorton@redhat.com> - 5.4-14
b2b3b1
- add tmpfile drop-in for cred cache (#796430)
b2b3b1
- really apply delegation fix
b2b3b1
b2b3b1
* Tue May  1 2012 Joe Orton <jorton@redhat.com> - 5.4-13
b2b3b1
- add delegation fix (Ben Kahn, mgbowman, #687975)
b2b3b1
b2b3b1
* Tue Mar 27 2012 Joe Orton <jorton@redhat.com> - 5.4-12
b2b3b1
- rebuild for httpd 2.4
b2b3b1
b2b3b1
* Fri Mar  9 2012 Joe Orton <jorton@redhat.com> - 5.4-11
b2b3b1
- adapt for 2.4 API
b2b3b1
b2b3b1
* Thu Mar  1 2012 Rob Crittenden <rcritten@redhat.com> - 5.4-10
b2b3b1
- Updated s4u2proxy patch to add missing braces around conditional.
b2b3b1
b2b3b1
* Tue Jan 31 2012 Rob Crittenden <rcritten@redhat.com> - 5.4-9
b2b3b1
- Add support for Constrained Delegation/s4u2proxy (#767740)
b2b3b1
b2b3b1
* Fri Jan 13 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 5.4-8
b2b3b1
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
b2b3b1
b2b3b1
* Tue Feb 08 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 5.4-7
b2b3b1
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
b2b3b1
b2b3b1
* Thu Dec  9 2010 Joe Orton <jorton@redhat.com> - 5.4-6
b2b3b1
- fix build (thanks to Mike Bonnet, #599754)
b2b3b1
b2b3b1
* Fri Aug 07 2009 Parag <paragn@fedoraproject.org> 5.4-5
b2b3b1
- Spec cleanup as suggested in review bug #226150
b2b3b1
b2b3b1
* Sat Jul 25 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 5.4-4
b2b3b1
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
b2b3b1
b2b3b1
* Wed Feb 25 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 5.4-3
b2b3b1
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
b2b3b1
b2b3b1
* Thu Dec 11 2008 Joe Orton <jorton@redhat.com> 5.4-2
b2b3b1
- update to 5.4
b2b3b1
b2b3b1
* Tue Feb 19 2008 Fedora Release Engineering <rel-eng@fedoraproject.org> - 5.3-7
b2b3b1
- Autorebuild for GCC 4.3
b2b3b1
b2b3b1
* Tue Sep 25 2007 Joe Orton <jorton@redhat.com> 5.3-6
b2b3b1
- fix configure invocation (#301181)
b2b3b1
b2b3b1
* Sun Sep  2 2007 Joe Orton <jorton@redhat.com> 5.3-5
b2b3b1
- rebuild for fixed 32-bit APR
b2b3b1
b2b3b1
* Thu Aug 30 2007 Joe Orton <jorton@redhat.com> 5.3-4
b2b3b1
- clarify License tag
b2b3b1
b2b3b1
* Wed Nov 29 2006 Joe Orton <jorton@redhat.com> 5.3-3
b2b3b1
- fix r->user caching (Enrico Scholz, #214207)
b2b3b1
- update to 5.3 (CVE-2006-5989, #215443)
b2b3b1
b2b3b1
* Sun Oct 01 2006 Jesse Keating <jkeating@redhat.com> - 5.1-3
b2b3b1
- rebuilt for unwind info generation, broken in gcc-4.1.1-21
b2b3b1
b2b3b1
* Tue Sep 19 2006 Joe Orton <jorton@redhat.com> 5.1-2
b2b3b1
- update to 5.1
b2b3b1
b2b3b1
* Thu Aug  3 2006 Joe Orton <jorton@redhat.com> 5.0-10
b2b3b1
- fix segfault at startup (#201145)
b2b3b1
b2b3b1
* Thu Jul 20 2006 Joe Orton <jorton@redhat.com> 5.0-9
b2b3b1
- add Russ Allbery's fix for disabling replay cache with krb15
b2b3b1
b2b3b1
* Wed Jul 12 2006 Jesse Keating <jkeating@redhat.com> - 5.0-8.2.2
b2b3b1
- rebuild
b2b3b1
b2b3b1
* Fri Feb 10 2006 Jesse Keating <jkeating@redhat.com> - 5.0-8.2.1
b2b3b1
- bump again for double-long bug on ppc(64)
b2b3b1
b2b3b1
* Tue Feb 07 2006 Jesse Keating <jkeating@redhat.com> - 5.0-8.2
b2b3b1
- rebuilt for new gcc4.1 snapshot and glibc changes
b2b3b1
b2b3b1
* Fri Dec 09 2005 Jesse Keating <jkeating@redhat.com>
b2b3b1
- rebuilt
b2b3b1
b2b3b1
* Mon Dec  5 2005 Joe Orton <jorton@redhat.com> 5.0-8
b2b3b1
- rebuild for httpd 2.2
b2b3b1
b2b3b1
* Wed Sep 21 2005 Joe Orton <jorton@redhat.com> 5.0-7
b2b3b1
- fix build without /usr/sbin in $PATH (Roozbeh Pournader, #168212)
b2b3b1
b2b3b1
* Tue May 10 2005 Joe Orton <jorton@redhat.com> 5.0-6
b2b3b1
- update to 5.0rc6
b2b3b1
- don't force CC=gcc4
b2b3b1
b2b3b1
* Fri Mar  4 2005 Joe Orton <jorton@redhat.com> 5.0-3
b2b3b1
- fix build with GCC 4
b2b3b1
- only add "auth_kerb_module" symbol to dynamic symbol table
b2b3b1
b2b3b1
* Tue Jun 15 2004 Elliot Lee <sopwith@redhat.com>
b2b3b1
- rebuilt
b2b3b1
b2b3b1
* Thu Apr  8 2004 Joe Orton <jorton@redhat.com> 5.0-0.rc4.5
b2b3b1
- remove static globals
b2b3b1
- add SSLRequireSSL
b2b3b1
b2b3b1
* Mon Mar 29 2004 Joe Orton <jorton@redhat.com> 5.0-0.rc4.3
b2b3b1
- support mutual authentication (Nalin Dahyabhai)
b2b3b1
- once authentication returns COMPLETE, cache name for the duration
b2b3b1
  of the connection
b2b3b1
b2b3b1
* Thu Mar 25 2004 Joe Orton <jorton@redhat.com> 5.0-0.rc4.2
b2b3b1
- add example config file
b2b3b1
b2b3b1
* Wed Mar 24 2004 Joe Orton <jorton@redhat.com> 5.0-0.rc4.1
b2b3b1
- update to mod_auth_kerb.c from HEAD to get workaround for
b2b3b1
  "Request is a replay" errors
b2b3b1
b2b3b1
* Tue Mar 23 2004 Joe Orton <jorton@redhat.com> 
b2b3b1
- Initial build.