Name:    realmd

Version: 0.17.1

Release: 1%{?dist}

Summary: Kerberos realm enrollment service

License: LGPLv2+

URL:     https://gitlab.freedesktop.org/realmd/realmd

Source0: https://gitlab.freedesktop.org/realmd/realmd/uploads/204d05bd487908ece2ce2705a01d2b26/realmd-%{version}.tar.gz

### Downstream Patches ###

# In RHEL the RHEL the FreeIPA packages are call only ipa-* while upstream is

# using freeipa-*, the following patch applies the needed changes.

Patch0100: ipa-packages.patch

BuildRequires: make

BuildRequires: gcc

BuildRequires: automake

BuildRequires: autoconf

BuildRequires: intltool pkgconfig

BuildRequires: gettext-devel

BuildRequires: glib2-devel >= 2.32.0

BuildRequires: openldap-devel

BuildRequires: polkit-devel

BuildRequires: krb5-devel

BuildRequires: systemd-devel

BuildRequires: libxslt

BuildRequires: xmlto

BuildRequires: samba-common-tools

BuildRequires: python3

Requires: authselect

Requires: polkit

Conflicts: realmd-devel-docs < %{version}-%{release}

# This build will use Samba's new command line options so it cannot be used

# with older versions of Samba.

Conflicts:     samba-common-tools < 4.15

%description

realmd is a DBus system service which manages discovery and enrollment in realms

and domains like Active Directory or IPA. The control center uses realmd as the

back end to 'join' a domain simply and automatically configure things correctly.

%package devel-docs

Summary: Developer documentation files for %{name}

Conflicts: realmd < %{version}-%{release}

%description devel-docs

The %{name}-devel package contains developer documentation for developing

applications that use %{name}.

%define _hardened_build 1

%prep

%autosetup -p1

%build

autoreconf -fi

%configure --disable-silent-rules \

    --with-new-samba-cli-options=yes \

%if 0%{?rhel}

    --with-vendor-error-message='Please check\n    https://red.ht/support_rhel_ad \nto get help for common issues.' \

%endif

    %{nil}

make %{?_smp_mflags}

%check

make check

%install

make install DESTDIR=%{buildroot}

%find_lang realmd

%post

%systemd_post realmd.service

%preun

%systemd_preun realmd.service

%postun

%systemd_postun_with_restart realmd.service

%files -f realmd.lang

%doc AUTHORS COPYING NEWS README

%config(noreplace) %{_sysconfdir}/dbus-1/system.d/org.freedesktop.realmd.conf

%{_sbindir}/realm

%dir %{_prefix}/lib/realmd

%{_libexecdir}/realmd

%{_prefix}/lib/realmd/realmd-defaults.conf

%{_prefix}/lib/realmd/realmd-distro.conf

%{_unitdir}/realmd.service

%{_datadir}/dbus-1/system-services/org.freedesktop.realmd.service

%{_datadir}/polkit-1/actions/org.freedesktop.realmd.policy

%{_mandir}/man8/realm.8.gz

%{_mandir}/man5/realmd.conf.5.gz

%{_localstatedir}/cache/realmd/

%files devel-docs

%doc %{_datadir}/doc/realmd/

%doc ChangeLog

%changelog

* Fri Oct 21 2022 Sumit Bose <sbose@redhat.com> - 0.17.1-1

- Update to upstream release 0.17.1

  Resolves: rhbz#2133841

* Mon Jan 10 2022 Sumit Bose <sbose@redhat.com> - 0.16.3-25

- add LDAP socket timeout

 Resolves: rhbz#2037864

* Wed Dec 15 2021 Sumit Bose <sbose@redhat.com> - 0.16.3-24

- Avoid duplicated log messages and use Samba's new CLI options

  Resolves: rhbz#2024248

  Resolves: rhbz#2028528

* Tue May 11 2021 Sumit Bose <sbose@redhat.com> - 0.16.3-23

- Add restart macro and vendor message to spec file

  Resolves: rhbz#1926046

* Thu Dec 03 2020 Sumit Bose <sbose@redhat.com> - 0.16.3-22

- Add fixes LDAPS functionality

  Resolves: rhbz#1826964

* Thu Nov 26 2020 Sumit Bose <sbose@redhat.com> - 0.16.3-21

- Add missing patch for LDAPS functionality

  Resolves: rhbz#1826964

* Thu Nov 05 2020 Sumit Bose <sbose@redhat.com> - 0.16.3-20

- realmd should handle default_realm in krb5.conf

  Resolves: rhbz#1791016

- [RFE] Enable LDAPS functionality in realmd join

  Resolves: rhbz#1826964

* Thu Aug 13 2020 Sumit Bose <sbose@redhat.com> - 0.16.3-19

- Realm join fails with error 'Failed to join domain: failed to lookup

  DC info ...'

  Resolves: rhbz#1859503

- realm command to use option like dnshostname=fqdn

  Resolves: rhbz#1867912

* Fri Feb 21 2020 Sumit Bose <sbose@redhat.com> - 0.16.3-18

- Fix kerberos method

  Resolves: rhbz#1801195

* Sun Dec 01 2019 Sumit Bose <sbose@redhat.com> - 0.16.3-17

- rebuild fails if DISTRO variable is exported

  Resolves: rhbz#1747454

- realmd.conf user-principal RFE and clarification

  Resolves: rhbz#1747452

- realmd.conf documentation incorrect

  Resolves: rhbz#1747457

- Document realmd.conf and how realmd reads the configuration

  Resolves: rhbz#1747456

* Thu Sep 27 2018 Sumit Bose <sbose@redhat.com> - 0.16.3-16

- Do not call authselect for IPA domains

  Resolves: rhbz#1633572

* Wed Aug 22 2018 Sumit Bose <sbose@redhat.com> - 0.16.3-15

- Change IPA defaults

  Resolves: rhbz#1619162

* Tue Aug 14 2018 Sumit Bose <sbose@redhat.com> - 0.16.3-14

- Fix python BuildRequires

  Resolves: rhbz#1615564

- Add RHEL specific patch for IPA

  Resolves: rhbz#1615320

- Fix issues found by Coverity

  Resolves: rhbz#1602677

* Wed Jul 04 2018 Sumit Bose <sbose@redhat.com> - 0.16.3-13

- Add latests patches from RHEL7

- Add polkit runtime dependency

  Resolves: rhbz#1577179

- Drop python2 build dependency

  Resolves: rhbz#1595813

- Fix documentation reference in systemd unit file

  Resolves: rhbz#1596325

* Sun Mar 18 2018 René Genz <liebundartig@freenet.de> - 0.16.3-12

- use correct authselect syntax for *-disable-logins to fix rhbz#1558245

- Iryna Shcherbina <ishcherb@redhat.com>

  Update Python 2 dependency declarations to new packaging standards

  (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)

* Thu Mar 01 2018 Sumit Bose <sbose@redhat.com> - 0.16.3-11

- Require authselect instead of authconfig, related: rhbz#1537246

* Tue Feb 20 2018 Sumit Bose <sbose@redhat.com> - 0.16.3-10

- added BuildRequires gcc

- Use authselect instead of authconfig, related: rhbz#1537246

* Fri Feb 09 2018 Fedora Release Engineering <releng@fedoraproject.org> - 0.16.3-9

- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

* Tue Sep 05 2017 Petr Pisar <ppisar@redhat.com> - 0.16.3-8

- Update all m4 macros to prevent from mismatching between Automake versions

* Thu Aug 03 2017 Fedora Release Engineering <releng@fedoraproject.org> - 0.16.3-7

- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild

* Thu Jul 27 2017 Fedora Release Engineering <releng@fedoraproject.org> - 0.16.3-6

- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

* Tue Apr 25 2017 Sumit Bose <sbose@redhat.com> - 0.16.3-5

- Resolves: rhbz#1445017

* Sat Feb 11 2017 Fedora Release Engineering <releng@fedoraproject.org> - 0.16.3-4

- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

* Thu Jan 19 2017 Merlin Mathesius <mmathesi@redhat.com> - 0.16.3-3

- Add BuildRequires: python to fix FTBFS (BZ#1415000).

* Tue Dec 13 2016 Sumit Bose <sbose@redhat.com> - 0.16.3-2

- Resolves: rhbz#1401605

* Wed Nov 30 2016 Sumit Bose <sbose@redhat.com> - 0.16.3-1

- Updated to upstream 0.16.3 plus patches from git master

* Fri Jun 03 2016 Sumit Bose <sbose@redhat.com> - 0.16.2-5

- properly apply patch for rhbz#1330766

- Resolves: rhbz#1330766

* Wed May 18 2016 Sumit Bose <sbose@redhat.com> - 0.16.2-4

- Resolves: rhbz#1330766

* Thu Feb 04 2016 Fedora Release Engineering <releng@fedoraproject.org> - 0.16.2-3

- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

* Fri Sep 11 2015 Stef Walter <stefw@redhat.com> - 0.16.2-2

- Fixed --computer-ou regression

- Show message when installing packages

* Fri Jul 31 2015 Stef Walter <stefw@redhat.com> - 0.16.2-1

- Updated to upstream 0.16.2

- Install to $prefix/lib instead of $libdir

- Resolves: rhbz#1246741

* Tue Jul 14 2015 Stef Walter <stefw@redhat.com> - 0.16.1-1

- Updated to upstream 0.16.1

- Resolves: rhbz#1231128

* Thu Jun 18 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.16.0-2

- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

* Tue Apr 14 2015 Stef Walter <stefw@redhat.com> - 0.16.0-1

- Updated to upstream 0.16.0

- Resolves: rhbz#1205753

- Resolves: rhbz#1142190

- Resolves: rhbz#1061091

- Resolves: rhbz#1205752

* Thu Apr 09 2015 Stephen Gallagher <sgallagh@redhat.com> - 0.15.2-2

- Resolves: rhbz#1210483

* Mon Oct 06 2014 Stef Walter <stefw@redhat.com> - 0.15.2-1

- Update to upstream 0.15.2

* Sun Aug 17 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.15.1-4

- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild

* Sun Jun 08 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.15.1-3

- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

* Sat May 31 2014 Peter Robinson <pbrobinson@fedoraproject.org> 0.15.1-2

- Move ChangeLog to devel-docs. NEWS is probably riveting enough for users

* Fri May 23 2014 Stef Walter <stefw@redhat.com> - 0.15.1-1

- Update to upstream 0.15.1

- Remove the packagekit patch that's now integrated upstream

* Thu Jan 30 2014 Richard Hughes <rhughes@redhat.com> - 0.15.0-2

- Rebuild for libpackagekit-glib soname bump

* Tue Jan 07 2014 Stef Walter <stefw@redhat.com> - 0.15.0-1

- Update to upstream 0.15.0 release, fixing various bugs

* Mon Sep 09 2013 Stef Walter <stefw@redhat.com> - 0.14.6-1

- Update to upstream 0.14.6 point release

- Set 'kerberos method = system keytab' in smb.conf properly

- Limit Netbios name to 15 chars when joining AD domain

* Thu Aug 15 2013 Stef Walter <stefw@redhat.com> - 0.14.5-1

- Update to upstream 0.14.5 point release

- Fix regression conflicting --unattended and -U as in --user args

- Pass discovered server address to adcli tool

* Wed Aug 07 2013 Stef Walter <stefw@redhot.com> - 0.14.4-1

- Update to upstream 0.14.4 point release

- Fix up the [sssd] section in sssd.conf if it's screwed up

- Add an --unattended argument to realm command line client

- Clearer 'realm permit' manual page example

* Wed Aug 07 2013 Stef Walter <stefw@redhot.com> - 0.14.3-1

- Update to upstream 0.14.3 point release

- Populate LoginFormats correctly [#961442]

- Documentation clarifications

- Set sssd.conf default_shell per domain

- Notify in terminal output when installing packages

- If joined via adcli, delete computer with adcli too [#961244]

- If input is not a tty, read from stdin without getpass() [#983153]

- Configure pam_winbind.conf appropriately [#983153]

- Refer to FreeIPA as IPA

- Support use of kerberos ccache to join when winbind

* Sun Aug 04 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.14.2-5

- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild

* Mon Jul 15 2013 Stef Walter <stefw@redhat.com> - 0.14.2-4

- Build with verbose automake output

* Tue Jun 11 2013 Stef Walter <stefw@redhat.com> - 0.14.2-3

- Run test suite when building the package

- Fix rpmlint errors

* Thu Jun 06 2013 Stef Walter <stefw@redhat.com> - 0.14.2-2

- Install oddjobd and oddjob-mkhomedir when joining domains [#969441]

* Mon May 27 2013 Stef Walter <stefw@redhat.com> - 0.14.2-1

- Update to upstream 0.14.2 version

- Discover FreeIPA 3.0 with AD trust correctly [#966148]

- Only allow joining one realm by default [#966650]

- Enable the oddjobd service after joining a domain [#964971]

- Remove sssd.conf allow lists when permitting all [#965760]

- Add dependency on authconfig [#964675]

- Remove glib-networking dependency now that we no longer use SSL.

* Mon May 13 2013 Stef Walter <stefw@redhat.com> - 0.14.1-1

- Update to upstream 0.14.1 version

- Fix crasher/regression using passwords with joins [#961435]

- Make second Ctrl-C just quit realm tool [#961325]

- Fix critical warning when leaving IPA realm [#961320]

- Don't print out journalctl command in obvious situations [#961230]

- Document the --all option to 'realm discover' [#961279]

- No need to require sssd-tools package [#961254]

- Enable services even in install mode [#960887]

- Use the AD domain name in sssd.conf directly [#960270]

- Fix critical warning when service Release() method [#961385]

* Mon May 06 2013 Stef Walter <stefw@redhat.com> - 0.14.0-1

- Work around broken krb5 with empty passwords [#960001]

- Add manual page for realmd.conf [#959357]

- Update to upstream 0.14.0 version

* Thu May 02 2013 Stef Walter <stefw@redhat.com> - 0.13.91-1

- Fix regression when using one time password [#958667]

- Support for permitting logins by group [#887675]

* Mon Apr 29 2013 Stef Walter <stefw@redhat.com> - 0.13.90-1

- Add option to disable package-kit installs [#953852]

- Add option to use unqualified names [#953825]

- Better discovery of domains [#953153]

- Concept of managing parts of the system [#914892]

- Fix problems with cache directory [#913457]

- Clearly explain when realm cannot be joined [#878018]

- Many other upstream enhancements and fixes

* Wed Apr 17 2013 Stef Walter <stefw@redhat.com> - 0.13.3-2

- Add missing glib-networking dependency, currently used

  for FreeIPA discovery [#953151]

* Wed Apr 17 2013 Stef Walter <stefw@redhat.com> - 0.13.3-1

- Update for upstream 0.13.3 version

- Add dependency on systemd for installing service file

* Tue Apr 16 2013 Stef Walter <stefw@redhat.com> - 0.13.2-2

- Fix problem with sssd not starting after joining

* Mon Feb 18 2013 Stef Walter <stefw@redhat.com> - 0.13.2-1

- Update to upstream 0.13.2 version

* Mon Feb 18 2013 Stef Walter <stefw@redhat.com> - 0.13.1-1

- Update to upstream 0.13.1 version for bug fixes

* Thu Feb 14 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.12-2

- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild

* Mon Nov 12 2012 Stef Walter <stefw@redhat.com> - 0.12-1

- Update to upstream 0.12 version for bug fixes

* Tue Oct 30 2012 Stef Walter <stefw@redhat.com> - 0.11-1

- Update to upstream 0.11 version

* Sat Oct 20 2012 Stef Walter <stefw@redhat.com> - 0.10-1

- Update to upstream 0.10 version

* Wed Oct 17 2012 Stef Walter <stefw@redhat.com> - 0.9-1

- Update to upstream 0.9 version

* Wed Sep 19 2012 Stef Walter <stefw@redhat.com> - 0.8-2

- Add openldap-devel build requirement

* Wed Sep 19 2012 Stef Walter <stefw@redhat.com> - 0.8-1

- Update to upstream 0.8 version

- Add support for translations

* Mon Aug 20 2012 Stef Walter <stefw@redhat.com> - 0.7-2

- Build requires gtk-doc

* Mon Aug 20 2012 Stef Walter <stefw@redhat.com> - 0.7-1

- Update to upstream 0.7 version

- Remove files no longer present in upstream version

- Put documentation in its own realmd-devel-docs subpackage

- Update upstream URLs

* Mon Aug 6 2012 Stef Walter <stefw@redhat.com> - 0.6-1

- Update to upstream 0.6 version

* Tue Jul 17 2012 Stef Walter <stefw@redhat.com> - 0.5-2

- Remove missing SssdIpa.service file from the files list.

  This file will return upstream in 0.6

* Tue Jul 17 2012 Stef Walter <stefw@redhat.com> - 0.5-1

- Update to upstream 0.5 version

* Tue Jun 19 2012 Stef Walter <stefw@redhat.com> - 0.4-1

- Update to upstream 0.4 version

- Cleanup various rpmlint warnings

* Tue Jun 19 2012 Stef Walter <stefw@redhat.com> - 0.3-2

- Add doc files

- Own directories

- Remove obsolete parts of spec file

- Remove explicit dependencies

- Updated License line to LGPLv2+

* Tue Jun 19 2012 Stef Walter <stefw@redhat.com> - 0.3

- Build fixes

* Mon Jun 18 2012 Stef Walter <stefw@redhat.com> - 0.2

- Initial RPM