300 lines
8.3 KiB
RPMSpec
300 lines
8.3 KiB
RPMSpec
|
Name: krb5
|
||
|
|
Version: 1.17
|
||
|
|
Release: 2
|
||
|
|
Summary: The Kerberos network authentication protocol
|
||
|
|
License: MIT
|
||
|
|
URL: http://web.mit.edu/kerberos/www/
|
||
|
|
Source0: https://web.mit.edu/kerberos/dist/krb5/1.17/%{name}-%{version}.tar.gz
|
||
|
|
Source1: https://web.mit.edu/kerberos/dist/krb5/1.17/%{name}-%{version}.tar.gz.asc
|
||
|
|
Source2: kprop.service
|
||
|
|
Source3: kadmin.service
|
||
|
|
Source4: krb5kdc.service
|
||
|
|
Source5: krb5.conf
|
||
|
|
Source6: kdc.conf
|
||
|
|
Source7: kadm5.acl
|
||
|
|
Source8: krb5kdc.sysconfig
|
||
|
|
Source9: kadmin.sysconfig
|
||
|
|
Source10: kprop.sysconfig
|
||
|
|
Source11: ksu.pamd
|
||
|
|
Source12: krb5kdc.logrotate
|
||
|
|
Source13: kadmind.logrotate
|
||
|
|
Source14: krb5-krb5kdc.conf
|
||
|
|
|
||
|
|
Patch26: krb5-1.12.1-pam.patch
|
||
|
|
Patch27: krb5-1.15.1-selinux-label.patch
|
||
|
|
Patch28: krb5-1.12-ksu-path.patch
|
||
|
|
Patch29: krb5-1.12-ktany.patch
|
||
|
|
Patch30: krb5-1.15-beta1-buildconf.patch
|
||
|
|
Patch31: krb5-1.3.1-dns.patch
|
||
|
|
Patch32: krb5-1.12-api.patch
|
||
|
|
Patch33: krb5-1.13-dirsrv-accountlock.patch
|
||
|
|
Patch34: krb5-1.9-debuginfo.patch
|
||
|
|
Patch35: krb5-1.11-run_user_0.patch
|
||
|
|
Patch36: krb5-1.11-kpasswdtest.patch
|
||
|
|
|
||
|
|
BuildRequires: gcc make automake autoconf pkgconfig pam-devel libselinux-devel
|
||
|
|
BuildRequires: libcom_err-devel openssl-devel openldap-devel libss-devel libverto-module-base
|
||
|
|
|
||
|
|
# tests
|
||
|
|
BuildRequires: perl-interpreter dejagnu python3 tcl-devel
|
||
|
|
BuildRequires: net-tools rpcbind hostname iproute libverto-devel
|
||
|
|
BuildRequires: nss_wrapper socket_wrapper keyutils, keyutils-libs-devel
|
||
|
|
|
||
|
|
Requires: coreutils gawk grep sed keyutils
|
||
|
|
Obsoletes: libkadm5 krb5-libs
|
||
|
|
Provides: libkadm5 krb5-libs
|
||
|
|
|
||
|
|
%description
|
||
|
|
Kerberos is a network authentication protocol.
|
||
|
|
It is designed to provide strong authentication
|
||
|
|
for client/server applications by using secret-key
|
||
|
|
cryptography.
|
||
|
|
|
||
|
|
|
||
|
|
%package server
|
||
|
|
Summary: krb5 server
|
||
|
|
Requires: %{name} = %{version}-%{release}
|
||
|
|
Requires: logrotate libverto systemd words crypto-policies
|
||
|
|
Obsoletes: krb5-pkinit krb5-server-ldap
|
||
|
|
Provides: krb5-pkinit krb5-server-ldap
|
||
|
|
Obsoletes: krb5-pkinit-openssl < %{version}-%{release}
|
||
|
|
Provides: krb5-pkinit-openssl = %{version}-%{release}
|
||
|
|
|
||
|
|
%description server
|
||
|
|
This package provides krb5 server programs.
|
||
|
|
|
||
|
|
%package client
|
||
|
|
Summary: krb5 client
|
||
|
|
Requires: %{name} = %{version}-%{release}
|
||
|
|
Obsoletes: %{name}-workstation
|
||
|
|
Provides: %{name}-workstation
|
||
|
|
|
||
|
|
%description client
|
||
|
|
This package provides krb5 client programs.
|
||
|
|
|
||
|
|
%package devel
|
||
|
|
Summary: Development files for compiling with krb5
|
||
|
|
Requires: %{name} = %{version}-%{release}
|
||
|
|
Requires: e2fsprogs-devel keyutils-libs-devel libselinux-devel libverto-devel
|
||
|
|
Provides: krb5-kdb-version = 7.0
|
||
|
|
|
||
|
|
%description devel
|
||
|
|
%{summary}.
|
||
|
|
|
||
|
|
%package help
|
||
|
|
Summary: The documents for krb5
|
||
|
|
BuildArch: noarch
|
||
|
|
|
||
|
|
%description help
|
||
|
|
%{summary}.
|
||
|
|
|
||
|
|
%prep
|
||
|
|
%autosetup -n %{name}-%{version} -p1
|
||
|
|
|
||
|
|
pushd src
|
||
|
|
autoreconf -fiv
|
||
|
|
popd
|
||
|
|
|
||
|
|
%build
|
||
|
|
pushd src
|
||
|
|
%configure \
|
||
|
|
--enable-shared \
|
||
|
|
--localstatedir=%{_var}/kerberos \
|
||
|
|
--disable-rpath \
|
||
|
|
--with-netlib=-lresolv \
|
||
|
|
--with-tcl \
|
||
|
|
--enable-dns-for-realm \
|
||
|
|
--with-ldap \
|
||
|
|
--enable-pkinit \
|
||
|
|
--with-crypto-impl=openssl \
|
||
|
|
--with-tls-impl=openssl \
|
||
|
|
--with-system-verto \
|
||
|
|
--with-prng-alg=os \
|
||
|
|
--with-system-et \
|
||
|
|
--with-system-ss \
|
||
|
|
--with-pam \
|
||
|
|
--with-selinux \
|
||
|
|
--without-krb5-config
|
||
|
|
|
||
|
|
%make_build
|
||
|
|
popd
|
||
|
|
|
||
|
|
%install
|
||
|
|
pushd src
|
||
|
|
%make_install
|
||
|
|
popd
|
||
|
|
|
||
|
|
mkdir -p $RPM_BUILD_ROOT/etc
|
||
|
|
install -pm 644 %{SOURCE5} $RPM_BUILD_ROOT/etc/krb5.conf
|
||
|
|
|
||
|
|
mkdir -p $RPM_BUILD_ROOT%{_var}/kerberos/krb5kdc
|
||
|
|
install -pm 600 %{SOURCE6} $RPM_BUILD_ROOT%{_var}/kerberos/krb5kdc/
|
||
|
|
install -pm 600 %{SOURCE7} $RPM_BUILD_ROOT%{_var}/kerberos/krb5kdc/
|
||
|
|
|
||
|
|
mkdir -p $RPM_BUILD_ROOT%{_var}/kerberos/krb5/user
|
||
|
|
|
||
|
|
mkdir -p $RPM_BUILD_ROOT/etc/krb5.conf.d
|
||
|
|
ln -sv /etc/crypto-policies/back-ends/krb5.config $RPM_BUILD_ROOT/etc/krb5.conf.d/crypto-policies
|
||
|
|
|
||
|
|
mkdir -m 755 -p $RPM_BUILD_ROOT/etc/gss
|
||
|
|
|
||
|
|
mkdir -m 755 -p $RPM_BUILD_ROOT/etc/gss/mech.d
|
||
|
|
|
||
|
|
mkdir -p $RPM_BUILD_ROOT%{_unitdir}
|
||
|
|
install -pm 644 %{SOURCE2} $RPM_BUILD_ROOT%{_unitdir}
|
||
|
|
install -pm 644 %{SOURCE3} $RPM_BUILD_ROOT%{_unitdir}
|
||
|
|
install -pm 644 %{SOURCE4} $RPM_BUILD_ROOT%{_unitdir}
|
||
|
|
|
||
|
|
mkdir -p $RPM_BUILD_ROOT/%{_localstatedir}/run/krb5kdc
|
||
|
|
mkdir -p $RPM_BUILD_ROOT/%{_tmpfilesdir}
|
||
|
|
install -pm 644 %{SOURCE14} $RPM_BUILD_ROOT/%{_tmpfilesdir}/
|
||
|
|
|
||
|
|
# install sysconfig files for server
|
||
|
|
mkdir -p $RPM_BUILD_ROOT/etc/sysconfig
|
||
|
|
install -pm 644 %{SOURCE8} $RPM_BUILD_ROOT/etc/sysconfig/`basename %{SOURCE8} .sysconfig`
|
||
|
|
install -pm 644 %{SOURCE9} $RPM_BUILD_ROOT/etc/sysconfig/`basename %{SOURCE9} .sysconfig`
|
||
|
|
install -pm 644 %{SOURCE10} $RPM_BUILD_ROOT/etc/sysconfig/`basename %{SOURCE10} .sysconfig`
|
||
|
|
|
||
|
|
# install logrotate config files for server
|
||
|
|
mkdir -p $RPM_BUILD_ROOT/etc/logrotate.d/
|
||
|
|
install -pm 644 %{SOURCE12} $RPM_BUILD_ROOT/etc/logrotate.d/`basename %{SOURCE12} .logrotate`
|
||
|
|
install -pm 644 %{SOURCE13} $RPM_BUILD_ROOT/etc/logrotate.d/`basename %{SOURCE13} .logrotate`
|
||
|
|
|
||
|
|
# PAM configuration files.
|
||
|
|
mkdir -p $RPM_BUILD_ROOT/etc/pam.d/
|
||
|
|
install -pm 644 %{SOURCE11} $RPM_BUILD_ROOT/etc/pam.d/`basename %{SOURCE11} .pamd`
|
||
|
|
|
||
|
|
install -d -m 755 $RPM_BUILD_ROOT/%{_libdir}/krb5/plugins/preauth
|
||
|
|
install -d -m 755 $RPM_BUILD_ROOT/%{_libdir}/krb5/plugins/kdb
|
||
|
|
install -d -m 755 $RPM_BUILD_ROOT/%{_libdir}/krb5/plugins/authdata
|
||
|
|
|
||
|
|
rm -vf %{buildroot}/%{_sbindir}/krb5-send-pr
|
||
|
|
rm -vrf %{buildroot}/%{_datadir}/examples
|
||
|
|
rm -vf %{buildroot}/%{_libdir}/krb5/plugins/preauth/test.so
|
||
|
|
|
||
|
|
%find_lang mit-krb5
|
||
|
|
|
||
|
|
|
||
|
|
%check
|
||
|
|
make -C src runenv.py
|
||
|
|
make -C src check || :
|
||
|
|
|
||
|
|
%post -p /sbin/ldconfig
|
||
|
|
|
||
|
|
%postun -p /sbin/ldconfig
|
||
|
|
|
||
|
|
%post server
|
||
|
|
%systemd_post krb5kdc.service kadmin.service kprop.service
|
||
|
|
/bin/systemctl daemon-reload
|
||
|
|
|
||
|
|
%preun server
|
||
|
|
%systemd_preun krb5kdc.service kadmin.service kprop.service
|
||
|
|
|
||
|
|
%postun server
|
||
|
|
%systemd_postun_with_restart krb5kdc.service kadmin.service kprop.service
|
||
|
|
|
||
|
|
%files -f mit-krb5.lang
|
||
|
|
%defattr(-,root,root)
|
||
|
|
%doc NOTICE README
|
||
|
|
%dir /etc/gss
|
||
|
|
%dir /etc/gss/mech.d
|
||
|
|
%dir /etc/krb5.conf.d
|
||
|
|
%config(noreplace) /etc/krb5.conf
|
||
|
|
%config(noreplace) /etc/krb5.conf.d/crypto-policies
|
||
|
|
%{_libdir}/libgssapi_krb5.so.*
|
||
|
|
%{_libdir}/libgssrpc.so.*
|
||
|
|
%{_libdir}/libk5crypto.so.*
|
||
|
|
%{_libdir}/libkdb5.so.*
|
||
|
|
%{_libdir}/libkrad.so.*
|
||
|
|
%{_libdir}/libkrb5.so.*
|
||
|
|
%{_libdir}/libkrb5support.so.*
|
||
|
|
%{_libdir}/libkadm5clnt_mit.so.*
|
||
|
|
%{_libdir}/libkadm5srv_mit.so.*
|
||
|
|
|
||
|
|
%files server
|
||
|
|
%defattr(-,root,root)
|
||
|
|
%{_unitdir}/krb5kdc.service
|
||
|
|
%{_unitdir}/kadmin.service
|
||
|
|
%{_unitdir}/kprop.service
|
||
|
|
%{_tmpfilesdir}/krb5-krb5kdc.conf
|
||
|
|
%dir %{_localstatedir}/run/krb5kdc
|
||
|
|
%config(noreplace) /etc/sysconfig/krb5kdc
|
||
|
|
%config(noreplace) /etc/sysconfig/kadmin
|
||
|
|
%config(noreplace) /etc/sysconfig/kprop
|
||
|
|
%config(noreplace) /etc/logrotate.d/krb5kdc
|
||
|
|
%config(noreplace) /etc/logrotate.d/kadmind
|
||
|
|
%dir %{_var}/kerberos
|
||
|
|
%dir %{_var}/kerberos/krb5kdc
|
||
|
|
%config(noreplace) %{_var}/kerberos/krb5kdc/kdc.conf
|
||
|
|
%config(noreplace) %{_var}/kerberos/krb5kdc/kadm5.acl
|
||
|
|
%dir %{_libdir}/krb5
|
||
|
|
%dir %{_libdir}/krb5/plugins
|
||
|
|
%dir %{_libdir}/krb5/plugins/kdb
|
||
|
|
%dir %{_libdir}/krb5/plugins/preauth
|
||
|
|
%dir %{_libdir}/krb5/plugins/authdata
|
||
|
|
%dir %{_libdir}/krb5/plugins/tls
|
||
|
|
%{_libdir}/krb5/plugins/preauth/otp.so
|
||
|
|
%{_libdir}/krb5/plugins/preauth/pkinit.so
|
||
|
|
%{_libdir}/krb5/plugins/preauth/spake.so
|
||
|
|
%{_libdir}/krb5/plugins/kdb/db2.so
|
||
|
|
%{_libdir}/krb5/plugins/kdb/kldap.so
|
||
|
|
%{_libdir}/krb5/plugins/tls/k5tls.so
|
||
|
|
%{_libdir}/libkdb_ldap.so
|
||
|
|
%{_libdir}/libkdb_ldap.so.*
|
||
|
|
%{_sbindir}/kdb5_ldap_util
|
||
|
|
%{_sbindir}/kadmin.local
|
||
|
|
%{_sbindir}/kadmind
|
||
|
|
%{_sbindir}/kdb5_util
|
||
|
|
%{_sbindir}/kprop
|
||
|
|
%{_sbindir}/kpropd
|
||
|
|
%{_sbindir}/kproplog
|
||
|
|
%{_sbindir}/krb5kdc
|
||
|
|
%{_bindir}/sclient
|
||
|
|
%{_sbindir}/sserver
|
||
|
|
|
||
|
|
%files client
|
||
|
|
%defattr(-,root,root)
|
||
|
|
%config(noreplace) /etc/pam.d/ksu
|
||
|
|
%{_bindir}/kdestroy
|
||
|
|
%{_bindir}/kinit
|
||
|
|
%{_bindir}/klist
|
||
|
|
%{_bindir}/kpasswd
|
||
|
|
%{_bindir}/kswitch
|
||
|
|
%{_bindir}/kvno
|
||
|
|
%{_bindir}/kadmin
|
||
|
|
%{_bindir}/k5srvutil
|
||
|
|
%{_bindir}/ktutil
|
||
|
|
%attr(4755,root,root) %{_bindir}/ksu
|
||
|
|
|
||
|
|
%files devel
|
||
|
|
%defattr(-,root,root)
|
||
|
|
%{_includedir}/*
|
||
|
|
%{_libdir}/{libgssapi_krb5.so,libgssrpc.so,libk5crypto.so,libkdb5.so,libkrad.so,libkrb5.so,libkrb5support.so}
|
||
|
|
%{_libdir}/pkgconfig/*
|
||
|
|
%{_libdir}/libkadm5clnt.so
|
||
|
|
%{_libdir}/libkadm5clnt_mit.so
|
||
|
|
%{_libdir}/libkadm5srv.so
|
||
|
|
%{_libdir}/libkadm5srv_mit.so
|
||
|
|
%{_bindir}/krb5-config
|
||
|
|
%{_bindir}/sim_client
|
||
|
|
%{_bindir}/gss-client
|
||
|
|
%{_bindir}/uuclient
|
||
|
|
%{_sbindir}/sim_server
|
||
|
|
%{_sbindir}/gss-server
|
||
|
|
%{_sbindir}/uuserver
|
||
|
|
|
||
|
|
%files help
|
||
|
|
%defattr(-,root,root)
|
||
|
|
%{_mandir}/man1/*
|
||
|
|
%{_mandir}/man5/*
|
||
|
|
%{_mandir}/man5/{.k5identity.5.*,.k5login.5.*}
|
||
|
|
%{_mandir}/man7/*
|
||
|
|
%{_mandir}/man8/*
|
||
|
|
|
||
|
|
%changelog
|
||
|
|
* Tue Sep 24 2019 openEuler Buildteam <buildteam@openeuler.org> - 1.17-2
|
||
|
|
- Adjust requires
|
||
|
|
|
||
|
|
* Thu Sep 19 2019 openEuler Buildteam <buildteam@openeuler.org> - 1.17-1
|
||
|
|
- Package init
|