After update to openEuler bind 9.18.21-3, those cves introduced new database interface change, backport upstream patch and modify it to adapte openEuler bind version.
155 lines
4.2 KiB
RPMSpec
155 lines
4.2 KiB
RPMSpec
%define bind_version 32:9.16.16
|
|
%global openssl_pkcs11_version 0.4.10-6
|
|
%global softhsm_version 2.5.0-4
|
|
%global with_bind_pkcs11 0
|
|
|
|
Name: bind-dyndb-ldap
|
|
Version: 11.10
|
|
Release: 4
|
|
Summary: LDAP back-end plug-in for BIND
|
|
License: GPLv2+
|
|
URL: https://releases.pagure.org/bind-dyndb-ldap
|
|
Source0: https://releases.pagure.org/%{name}/%{name}-%{version}.tar.bz2
|
|
Source1: https://releases.pagure.org/%{name}/%{name}-%{version}.tar.bz2.asc
|
|
|
|
Patch1: bind-dyndb-ldap-bind-9.18.10-db-options.patch
|
|
Patch2: bind-dyndb-ldap-bind-9.18.10-logs.patch
|
|
Patch3: bind-dyndb-ldap-bind-9.18.10-staleok.patch
|
|
Patch4: bind-dyndb-ldap-11.10-bind-9.18.11.patch
|
|
Patch5: backport-bind-dyndb-ldap-11.10-bind-9.18.13.patch
|
|
Patch6: backport-bind-dyndb-ldap-11.10-bind-9.18.19.patch
|
|
Patch7: backport-bind-dyndb-ldap-11.10-dns_name_init.patch
|
|
Patch8: backport-bind-dyndb-ldap-bind-9.18.24.patch
|
|
Patch9: backport-bind-dyndb-ldap-11.10-support-for-bind-9.18.21.3.patch
|
|
|
|
BuildRequires: bind-devel >= %{bind_version}
|
|
BuildRequires: krb5-devel
|
|
BuildRequires: openldap-devel
|
|
BuildRequires: libuuid-devel
|
|
BuildRequires: automake, autoconf, libtool, make
|
|
BuildRequires: openssl-devel
|
|
BuildRequires: autoconf-archive
|
|
|
|
%if %{with_bind_pkcs11}
|
|
BuildRequires: bind-pkcs11-devel >= %{bind_version}
|
|
Requires(pre): bind-pkcs11 >= %{bind_version}
|
|
Requires: bind-pkcs11 >= %{bind_version}, bind-pkcs11-utils >= %{bind_version}
|
|
%else
|
|
Requires(pre): bind >= %{bind_version}
|
|
Requires: softhsm >= %{softhsm_version}, openssl-pkcs11 >= %{openssl_pkcs11_version}, bind >= %{bind_version}
|
|
%endif
|
|
|
|
%description
|
|
This package provides an LDAP back-end, the dynamic LDAP back-end is
|
|
a plug-in for BIND that provides an LDAP database back-end capabilities.
|
|
|
|
%prep
|
|
%autosetup -n %{name}-%{version} -p1
|
|
|
|
%build
|
|
autoreconf -fiv
|
|
export BIND9_CFLAGS='-I /usr/include/bind9 -DHAVE_TLS -DHAVE_THREAD_LOCAL'
|
|
%configure
|
|
%if %{?openEuler:1}0
|
|
%make_build
|
|
%else
|
|
# unset SOURCE_DATE_EPOCH eliminate bep differences
|
|
unset SOURCE_DATE_EPOCH
|
|
%make_build
|
|
set SOURCE_DATE_EPOCH
|
|
%endif
|
|
|
|
%install
|
|
rm -rf %{buildroot}
|
|
%make_install
|
|
install -d -m 770 %{buildroot}/%{_localstatedir}/named/dyndb-ldap
|
|
|
|
%post
|
|
[ -f /etc/named.conf ] || exit 0
|
|
# Transform named.conf if it still has old-style API.
|
|
PLATFORM=$(uname -m)
|
|
|
|
if [ $PLATFORM == "x86_64" ] ; then
|
|
LIBPATH=/usr/lib64
|
|
else
|
|
LIBPATH=/usr/lib
|
|
fi
|
|
|
|
while read -r PATTERN
|
|
do
|
|
SEDSCRIPT+="$PATTERN"
|
|
done <<EOF
|
|
/^\s*dynamic-db/,/};/ {
|
|
s/\(\s*\)arg\s\+\(["']\)\([a-zA-Z_]\+\s\)/\1\3\2/g;
|
|
s/^dynamic-db/dyndb/;
|
|
s@\(dyndb "[^"]\+"\)@\1 "$LIBPATH/bind/ldap.so"@;
|
|
s@\(dyndb '[^']\+'\)@\1 '$LIBPATH/bind/ldap.so'@;
|
|
/\s*library[^;]\+;/d;
|
|
/\s*cache_ttl[^;]\+;/d;
|
|
/\s*psearch[^;]\+;/d;
|
|
/\s*serial_autoincrement[^;]\+;/d;
|
|
/\s*zone_refresh[^;]\+;/d;
|
|
}
|
|
EOF
|
|
|
|
sed -i.bak -e "$SEDSCRIPT" /etc/named.conf
|
|
|
|
%files
|
|
%exclude %{_libdir}/bind/ldap.la
|
|
%doc NEWS README.md COPYING doc/{example,schema}.ldif
|
|
%dir %attr(770, root, named) %{_localstatedir}/named/dyndb-ldap
|
|
%{_libdir}/bind/ldap.so
|
|
|
|
|
|
%changelog
|
|
* Wed Aug 07 2024 Zhao Mengmeng <zhaomengmeng@kylinos.cn> - 11.10-4
|
|
- Type:bugfix
|
|
- CVE:NA
|
|
- SUG:NA
|
|
- DESC: fix build failure caused by bind update to 9.18.21-3
|
|
|
|
* Wed Mar 20 2024 xinghe <xinghe2@h-partners.com> - 11.10-3
|
|
- Type:bugfix
|
|
- CVE:NA
|
|
- SUG:NA
|
|
- DESC:fix build failed
|
|
|
|
* Tue Mar 05 2024 xinghe <xinghe2@h-partners.com> - 11.10-2
|
|
- Type:bugfix
|
|
- CVE:NA
|
|
- SUG:NA
|
|
- DESC:fix build error
|
|
|
|
* Sun Jan 29 2023 xinghe <xinghe2@h-partners.com> - 11.10-1
|
|
- Type:requirement
|
|
- CVE:NA
|
|
- SUG:NA
|
|
- DESC:update to 11.10
|
|
|
|
* Fri Jun 10 2022 gaihuiying <eaglegai@163.com> - 11.9-2
|
|
- Type:bugfix
|
|
- CVE:NA
|
|
- SUG:NA
|
|
- DESC:add macros to control if need to eliminate bep differences
|
|
|
|
* Mon Mar 21 2022 xihaochen <xihaochen@h-partners.com> - 11.9-1
|
|
- Type:requirement
|
|
- ID:NA
|
|
- SUG:NA
|
|
- DESC:update to 11.9
|
|
|
|
* Mon Jul 27 2020 gaihuiying <gaihuiying1@huawei.com> - 11.3-1
|
|
- Type:requirement
|
|
- ID:NA
|
|
- SUG:NA
|
|
- DESC:update to 11.3
|
|
|
|
* Mon Jun 22 2020 gaihuiying <gaihuiying1@huawei.com> - 11.1-14
|
|
- Type:bugfix
|
|
- ID:NA
|
|
- SUG:NA
|
|
- DESC:fix build error with gcc9
|
|
|
|
* Wed Sep 11 2019 AlexChao <zhaolei746@huawei.com> - 11.1-13
|
|
- Package init
|