diff --git a/.gitignore b/.gitignore new file mode 100644 index 0000000..3a621be --- /dev/null +++ b/.gitignore @@ -0,0 +1 @@ +SOURCES/mod_lookup_identity-1.0.0.tar.gz diff --git a/.mod_lookup_identity.metadata b/.mod_lookup_identity.metadata new file mode 100644 index 0000000..b668d2c --- /dev/null +++ b/.mod_lookup_identity.metadata @@ -0,0 +1 @@ +45fd1b93f34e3f49dc82430112437a9876ca3b1a SOURCES/mod_lookup_identity-1.0.0.tar.gz diff --git a/SPECS/mod_lookup_identity.spec b/SPECS/mod_lookup_identity.spec new file mode 100644 index 0000000..fefe2f5 --- /dev/null +++ b/SPECS/mod_lookup_identity.spec @@ -0,0 +1,159 @@ +%{!?_httpd_mmn: %{expand: %%global _httpd_mmn %%(cat %{_includedir}/httpd/.mmn || echo 0-0)}} +%{!?_httpd_apxs: %{expand: %%global _httpd_apxs %%{_sbindir}/apxs}} +%{!?_httpd_confdir: %{expand: %%global _httpd_confdir %%{_sysconfdir}/httpd/conf.d}} +# /etc/httpd/conf.d with httpd < 2.4 and defined as /etc/httpd/conf.modules.d with httpd >= 2.4 +%{!?_httpd_modconfdir: %{expand: %%global _httpd_modconfdir %%{_sysconfdir}/httpd/conf.d}} +%{!?_httpd_moddir: %{expand: %%global _httpd_moddir %%{_libdir}/httpd/modules}} + +Summary: Apache module to retrieve additional information about the authenticated user +Name: mod_lookup_identity +Version: 1.0.0 +Release: 4%{?dist} +License: ASL 2.0 +Group: System Environment/Daemons +URL: http://www.adelton.com/apache/mod_lookup_identity/ +Source0: http://www.adelton.com/apache/mod_lookup_identity/%{name}-%{version}.tar.gz +BuildRequires: httpd-devel +BuildRequires: dbus-devel +BuildRequires: pkgconfig +Requires: httpd-mmn = %{_httpd_mmn} + +# Suppres auto-provides for module DSO per +# https://fedoraproject.org/wiki/Packaging:AutoProvidesAndRequiresFiltering#Summary +%{?filter_provides_in: %filter_provides_in %{_libdir}/httpd/modules/.*\.so$} +%{?filter_setup} + +%description +mod_lookup_identity can retrieve additional pieces of information +about user authenticated in Apache httpd server and store these values +in notes/environment variables to be consumed by web applications. +Use of REMOTE_USER_* environment variables is recommended. + +%prep +%setup -q -n %{name}-%{version} + +%build +%{_httpd_apxs} -c -Wc,"%{optflags} -Wall -pedantic -std=c99 $(pkg-config --cflags dbus-1)" $(pkg-config --libs dbus-1) mod_lookup_identity.c +%if "%{_httpd_modconfdir}" != "%{_httpd_confdir}" +echo > lookup_identity.confx +echo "# Load the module in %{_httpd_modconfdir}/55-lookup_identity.conf" >> lookup_identity.confx +cat lookup_identity.conf >> lookup_identity.confx +%else +cat lookup_identity.module > lookup_identity.confx +cat lookup_identity.conf >> lookup_identity.confx +%endif + +%install +rm -rf $RPM_BUILD_ROOT +install -Dm 755 .libs/mod_lookup_identity.so $RPM_BUILD_ROOT%{_httpd_moddir}/mod_lookup_identity.so + +%if "%{_httpd_modconfdir}" != "%{_httpd_confdir}" +# httpd >= 2.4.x +install -Dp -m 0644 lookup_identity.module $RPM_BUILD_ROOT%{_httpd_modconfdir}/55-lookup_identity.conf +%endif +install -Dp -m 0644 lookup_identity.confx $RPM_BUILD_ROOT%{_httpd_confdir}/lookup_identity.conf + +%files +%doc README LICENSE +%if "%{_httpd_modconfdir}" != "%{_httpd_confdir}" +%config(noreplace) %{_httpd_modconfdir}/55-lookup_identity.conf +%endif +%config(noreplace) %{_httpd_confdir}/lookup_identity.conf +%{_httpd_moddir}/*.so + +%changelog +* Thu Aug 03 2017 Fedora Release Engineering - 1.0.0-4 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild + +* Wed Jul 26 2017 Fedora Release Engineering - 1.0.0-3 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild + +* Fri Jul 07 2017 Igor Gnatenko - 1.0.0-2 +- Rebuild due to bug in RPM (RHBZ #1468476) + +* Thu Apr 06 2017 Jan Pazdziora - 1.0.0-1 +- 1439711 - Rebase to upstream version 1.0.0. +- Make LookupUserGECOS optional (no default) to support non-POSIX + user identities. + +* Wed Mar 22 2017 Jan Pazdziora - 0.9.9-1 +- 1434814 - Rebase to upstream version 0.9.9. +- Add support for multiple users mapped to single certificate. + +* Fri Feb 10 2017 Fedora Release Engineering - 0.9.8-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild + +* Wed Nov 23 2016 Jan Pazdziora - 0.9.8-1 +- Logging improvements; lookup_user_by_certificate logging moved from + notice to info level. + +* Thu Jun 16 2016 Jan Pazdziora - 0.9.7-1 +- 1347490 - Rebase to upstream version 0.9.7. +- Ensure lookup_user_by_certificate runs after mod_nss as well. + +* Mon Mar 21 2016 Jan Pazdziora - 0.9.6-1 +- 1319138 - the Requires(pre) httpd does not seem to be needed. + +* Thu Feb 04 2016 Fedora Release Engineering - 0.9.5-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild + +* Wed Jan 20 2016 Jan Pazdziora - 0.9.5-1 +- Fix LookupUserByCertificate httpd-2.2 compatibility issue. + +* Wed Jan 20 2016 Jan Pazdziora - 0.9.4-1 +- Added LookupUserOutput headers and headers-base64. + +* Mon Aug 03 2015 Jan Pazdziora - 0.9.3-1 +- Added LookupUserByCertificate. + +* Wed Jun 17 2015 Fedora Release Engineering - 0.9.2-3 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild + +* Sun Aug 17 2014 Fedora Release Engineering - 0.9.2-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild + +* Fri Jun 27 2014 Jan Pazdziora - 0.9.2-1 +- Fix error handling and reporting. +- Fix module loading/configuration for Apache 2.4. + +* Tue May 13 2014 Jan Pazdziora - 0.9.1-1 +- Address code issues revealed by coverity scan. +- Minor README fixes. + +* Tue May 13 2014 Jan Pazdziora - 0.9.0-1 +- Add support for '+'-prefixed note/variable names. +- Silence compile warnings by specifying C99. +- Fix format of logs of dbus calls. + +* Sat Feb 01 2014 Jan Pazdziora - 0.8.3-1 +- 1058812 - drop explicit dbus-libs dependency. + +* Thu Jan 30 2014 Jan Pazdziora - 0.8.2-1 +- 1058812 - .spec changes for Fedora package review. + +* Fri Jan 17 2014 Jan Pazdziora - 0.8.1-1 +- Ensure we run before mod_headers so that our result can be put to + request headers for mod_proxy. + +* Thu Jan 09 2014 Jan Pazdziora - 0.8-1 +- Declare all functions static for proper isolation. + +* Thu Nov 21 2013 Jan Pazdziora - 0.7.1-1 +- Address segfault when no LookupUserAttrIter is set. + +* Tue Nov 19 2013 Jan Pazdziora - 0.7-1 +- Define lookup_identity_hook as optional function, callable from + other modules. + +* Mon Nov 18 2013 Jan Pazdziora - 0.6-1 +- Use org.freedesktop.sssd.infopipe.GetUserGroups for group lists. +- Support new org.freedesktop.sssd.infopipe.GetUserAttr parameters / + return values. +- Removed LookupOutputGroupsSeparator. +- LookupOutputGroups and LookupUserAttr now support separator as + optional second parameter. +- Added LookupUserGroupsIter and LookupUserAttrIter. +- Added LookupDbusTimeout. + +* Mon Oct 28 2013 Jan Pazdziora - 0.5-1 +- Initial release.