|
 |
ecf709 |
From c9358747b25b257d82b050967812e54860fe7685 Mon Sep 17 00:00:00 2001
|
|
|
ecf709 |
From: =?UTF-8?q?Pavel=20B=C5=99ezina?= <pbrezina@redhat.com>
|
|
|
ecf709 |
Date: Tue, 28 Mar 2017 15:24:01 +0200
|
|
|
ecf709 |
Subject: [PATCH 81/90] ci: do not build secrets on rhel6
|
|
|
ecf709 |
MIME-Version: 1.0
|
|
|
ecf709 |
Content-Type: text/plain; charset=UTF-8
|
|
|
ecf709 |
Content-Transfer-Encoding: 8bit
|
|
|
ecf709 |
|
|
|
ecf709 |
We require newer libcurl version than is available on rhel6. We don't
|
|
|
ecf709 |
ship secrets responder in rhel6 so we just disable its build.
|
|
|
ecf709 |
|
|
|
ecf709 |
Reviewed-by: Lukáš Slebodník <lslebodn@redhat.com>
|
|
|
ecf709 |
(cherry picked from commit 6698d40512e55e7c2d03e14c227c51b1edc77ffa)
|
|
|
ecf709 |
---
|
|
|
ecf709 |
contrib/ci/configure.sh | 1 +
|
|
|
ecf709 |
contrib/sssd.spec.in | 15 +++++++++++++++
|
|
|
ecf709 |
src/tests/intg/test_secrets.py | 4 ++++
|
|
|
ecf709 |
3 files changed, 20 insertions(+)
|
|
|
ecf709 |
|
|
|
ecf709 |
diff --git a/contrib/ci/configure.sh b/contrib/ci/configure.sh
|
|
|
ecf709 |
index 7590743c2aa5fe31bcdf1a3e92a3f482dbec699b..9d18d0c187561a2dc3bc47d3e8913626e7ff3046 100644
|
|
|
ecf709 |
--- a/contrib/ci/configure.sh
|
|
|
ecf709 |
+++ b/contrib/ci/configure.sh
|
|
|
ecf709 |
@@ -38,6 +38,7 @@ if [[ "$DISTRO_BRANCH" == -redhat-redhatenterprise*-6.*- ||
|
|
|
ecf709 |
"--disable-cifs-idmap-plugin"
|
|
|
ecf709 |
"--with-syslog=syslog"
|
|
|
ecf709 |
"--without-python3-bindings"
|
|
|
ecf709 |
+ "--without-secrets"
|
|
|
ecf709 |
"--without-kcm"
|
|
|
ecf709 |
)
|
|
|
ecf709 |
fi
|
|
|
ecf709 |
diff --git a/contrib/sssd.spec.in b/contrib/sssd.spec.in
|
|
|
ecf709 |
index af14d4e3d6b9ffeb4696f1517113b8daa575cb99..39a974edebba3dbcd7625d1729b4a7330eaa8a27 100644
|
|
|
ecf709 |
--- a/contrib/sssd.spec.in
|
|
|
ecf709 |
+++ b/contrib/sssd.spec.in
|
|
|
ecf709 |
@@ -112,6 +112,12 @@
|
|
|
ecf709 |
%global enable_systemtap_opt --enable-systemtap
|
|
|
ecf709 |
%endif
|
|
|
ecf709 |
|
|
|
ecf709 |
+%if (0%{?fedora} || 0%{?epel} >= 7)
|
|
|
ecf709 |
+ %global with_secrets 1
|
|
|
ecf709 |
+%else
|
|
|
ecf709 |
+ %global with_secret_responder --without-secrets
|
|
|
ecf709 |
+%endif
|
|
|
ecf709 |
+
|
|
|
ecf709 |
%if (0%{?fedora} >= 23 || 0%{?rhel} >= 7)
|
|
|
ecf709 |
%global with_kcm 1
|
|
|
ecf709 |
%global with_kcm_option --with-kcm
|
|
|
ecf709 |
@@ -220,8 +226,10 @@ BuildRequires: libsmbclient-devel
|
|
|
ecf709 |
%if (0%{?enable_systemtap} == 1)
|
|
|
ecf709 |
BuildRequires: systemtap-sdt-devel
|
|
|
ecf709 |
%endif
|
|
|
ecf709 |
+%if (0%{?with_secrets} == 1)
|
|
|
ecf709 |
BuildRequires: http-parser-devel
|
|
|
ecf709 |
BuildRequires: jansson-devel
|
|
|
ecf709 |
+%endif
|
|
|
ecf709 |
BuildRequires: libuuid-devel
|
|
|
ecf709 |
BuildRequires: libcurl-devel
|
|
|
ecf709 |
|
|
|
ecf709 |
@@ -727,6 +735,7 @@ autoreconf -ivf
|
|
|
ecf709 |
%{?with_python3_option} \
|
|
|
ecf709 |
%{?enable_polkit_rules_option} \
|
|
|
ecf709 |
%{?enable_systemtap_opt} \
|
|
|
ecf709 |
+ %{?with_secret_responder} \
|
|
|
ecf709 |
%{?with_kcm_option} \
|
|
|
ecf709 |
%{?experimental}
|
|
|
ecf709 |
|
|
|
ecf709 |
@@ -865,7 +874,9 @@ done
|
|
|
ecf709 |
%{_libexecdir}/%{servicename}/sssd_nss
|
|
|
ecf709 |
%{_libexecdir}/%{servicename}/sssd_pam
|
|
|
ecf709 |
%{_libexecdir}/%{servicename}/sssd_autofs
|
|
|
ecf709 |
+%if (0%{?with_secrets} == 1)
|
|
|
ecf709 |
%{_libexecdir}/%{servicename}/sssd_secrets
|
|
|
ecf709 |
+%endif
|
|
|
ecf709 |
%{_libexecdir}/%{servicename}/sssd_ssh
|
|
|
ecf709 |
%{_libexecdir}/%{servicename}/sssd_sudo
|
|
|
ecf709 |
%{_libexecdir}/%{servicename}/p11_child
|
|
|
ecf709 |
@@ -900,7 +911,9 @@ done
|
|
|
ecf709 |
%dir %{_localstatedir}/cache/krb5rcache
|
|
|
ecf709 |
%attr(700,sssd,sssd) %dir %{dbpath}
|
|
|
ecf709 |
%attr(755,sssd,sssd) %dir %{mcpath}
|
|
|
ecf709 |
+%if (0%{?with_secrets} == 1)
|
|
|
ecf709 |
%attr(700,root,root) %dir %{secdbpath}
|
|
|
ecf709 |
+%endif
|
|
|
ecf709 |
%ghost %attr(0644,sssd,sssd) %verify(not md5 size mtime) %{mcpath}/passwd
|
|
|
ecf709 |
%ghost %attr(0644,sssd,sssd) %verify(not md5 size mtime) %{mcpath}/group
|
|
|
ecf709 |
%ghost %attr(0644,sssd,sssd) %verify(not md5 size mtime) %{mcpath}/initgroups
|
|
|
ecf709 |
@@ -933,7 +946,9 @@ done
|
|
|
ecf709 |
%{_mandir}/man5/sssd.conf.5*
|
|
|
ecf709 |
%{_mandir}/man5/sssd-simple.5*
|
|
|
ecf709 |
%{_mandir}/man5/sssd-sudo.5*
|
|
|
ecf709 |
+%if (0%{?with_secrets} == 1)
|
|
|
ecf709 |
%{_mandir}/man5/sssd-secrets.5*
|
|
|
ecf709 |
+%endif
|
|
|
ecf709 |
%{_mandir}/man5/sss_rpcidmapd.5*
|
|
|
ecf709 |
%{_mandir}/man8/sssd.8*
|
|
|
ecf709 |
%{_mandir}/man8/sss_cache.8*
|
|
|
ecf709 |
diff --git a/src/tests/intg/test_secrets.py b/src/tests/intg/test_secrets.py
|
|
|
ecf709 |
index d71c1904558cc6f8a6eee36c4049582705bc30ac..202f43e61cb0e4986394ad2b32da5abdcb0be3e9 100644
|
|
|
ecf709 |
--- a/src/tests/intg/test_secrets.py
|
|
|
ecf709 |
+++ b/src/tests/intg/test_secrets.py
|
|
|
ecf709 |
@@ -46,6 +46,10 @@ def create_sssd_secrets_fixture(request):
|
|
|
ecf709 |
raise Exception("failed to regenerate confdb")
|
|
|
ecf709 |
|
|
|
ecf709 |
resp_path = os.path.join(config.LIBEXEC_PATH, "sssd", "sssd_secrets")
|
|
|
ecf709 |
+ if not os.access(resp_path, os.X_OK):
|
|
|
ecf709 |
+ # It would be cleaner to use pytest.mark.skipif on the package level
|
|
|
ecf709 |
+ # but upstream insists on supporting RHEL-6.
|
|
|
ecf709 |
+ pytest.skip("No Secrets responder, skipping")
|
|
|
ecf709 |
|
|
|
ecf709 |
secpid = os.fork()
|
|
|
ecf709 |
assert secpid >= 0
|
|
|
ecf709 |
--
|
|
|
ecf709 |
2.9.3
|
|
|
ecf709 |
|