%global servicename sssd %define sssdstatedir %{_localstatedir}/lib/sss %define dbpath %{sssdstatedir}/db %global keytabdir %{sssdstatedir}/keytabs %define pipepath %{sssdstatedir}/pipes %define mcpath %{sssdstatedir}/mc %define pubconfpath %{sssdstatedir}/pubconf %global gpocachepath %{sssdstatedir}/gpo_cache # Determine the location of the LDB modules directory %global ldb_modulesdir %(pkg-config --variable=modulesdir ldb) %global ldb_version 1.1.20 %define _disable_ld_no_undefined 1 Name: sssd Version: 1.13.4 %define subrel 2 Release: %mkrel 9 Group: System/Libraries Summary: System Security Services Daemon License: GPLv3+ URL: http://fedorahosted.org/sssd/ Source0: https://fedorahosted.org/released/sssd/%{name}-%{version}.tar.gz Source1: sssd.conf # Patches Patch0001: 0001-IPA-terminate-properly-if-view-name-lookup-fails.patch Patch0002: 0002-UTIL-Add-ERR_SBUS_REQUEST_HANDLED.patch Patch0003: 0003-IFP-Do-not-crash-on-invalid-arguments-to-GetUserAttr.patch Patch0004: 0004-tests-Extend-test_child_common.c-to-include-tests-fo.patch Patch0005: 0005-TOOLS-Fix-warning-maybe-uninitialized.patch Patch0006: 0006-UTIL-exit-the-forked-process-if-exec-ing-a-child-pro.patch Patch0007: 0007-AD-Do-not-schedule-the-machine-renewal-task-if-adcli.patch Patch0008: 0008-IPA-use-forest-name-when-looking-up-the-Global-Catal.patch Patch0009: 0009-AD-Do-not-leak-file-descriptors-during-machine-passw.patch Patch0010: 0010-Do-not-leak-fds-in-case-of-failures-setting-up-a-chi.patch Patch0011: 0011-LDAP-Try-also-the-AD-access-control-for-IPA-users.patch Patch0012: 0012-libwbclient-wbcSidsToUnixIds-don-t-fail-on-errors.patch Patch0013: 0013-RESPONDER-Fix-error-check-in-cache_req.c.patch Patch0014: 0014-AD-use-krb5_keytab-for-subdomain-initialization.patch Patch0015: 0015-RESPONDER-Remove-usage-of-CACHE_REQ_DEBUG.patch Patch0016: 0016-pam-srv-tests-Increase-cached_auth_timeout.patch Patch0017: 0017-Changes-to-allow-SSSD-to-be-used-for-access-control-.patch Patch0018: 0018-IPA-Handle-requests-for-netgroups-from-trusted-domai.patch Patch0019: 0019-SYSDB-Fixing-DB-update.patch Patch0020: 0020-views-allow-override-added-for-non-default-views-at-.patch Patch0021: 0021-dyndns-Add-checks-for-NULL.patch Patch0022: 0022-LDAP-remove-unused-param.-in-sdap_fallback_local_use.patch Patch0023: 0023-sdap-Fix-ldap_rfc_2307_fallback_to_local_users.patch Patch0024: 0024-Fix-packet-size-calculation-in-sss_packet_new.patch Patch0025: 0025-SUDO-Create-the-socket-with-stricter-permissions.patch Patch1000: sssd-1.13.4-krb5-1.15.patch Patch1001: 1001-Netlink-Ignore-RTM_NEWADDR-signals-from-link-local.patch # opensuse patches Patch0101: 0001-build-detect-endianness-at-configure-time.patch Patch0102: 0002-sss_client-Defer-thread-cancellation-until-completio.patch Patch0103: 0003-GPO-ignore-non-KVP-lines-if-possible.patch Patch0104: 0004-sysdb-sanitize-search-filter-input.patch BuildRequires: pkgconfig(popt) BuildRequires: pkgconfig(talloc) BuildRequires: pkgconfig(tevent) BuildRequires: pkgconfig(tdb) BuildRequires: pkgconfig(ldb) BuildRequires: pkgconfig(libnl-3.0) BuildRequires: pkgconfig(dbus-1) BuildRequires: pkgconfig(nss) BuildRequires: pkgconfig(nspr) BuildRequires: pkgconfig(libpcre) BuildRequires: pkgconfig(krb5) >= 1.10 BuildRequires: pkgconfig(libcares) BuildRequires: pkgconfig(python) BuildRequires: pkgconfig(python3) BuildRequires: pkgconfig(check) BuildRequires: pkgconfig(dhash) BuildRequires: pkgconfig(collection) BuildRequires: pkgconfig(ini_config) BuildRequires: pkgconfig(path_utils) BuildRequires: pkgconfig(libselinux) BuildRequires: pkgconfig(glib-2.0) BuildRequires: ldb-utils BuildRequires: openldap-devel BuildRequires: pam-devel BuildRequires: keyutils-devel BuildRequires: libunistring-devel BuildRequires: cifs-utils-devel BuildRequires: samba-devel BuildRequires: smbclient-devel BuildRequires: nfsidmap-devel BuildRequires: gettext-devel BuildRequires: xsltproc BuildRequires: libxml2 BuildRequires: xsltproc BuildRequires: docbook-style-xsl BuildRequires: docbook-dtd44-xml BuildRequires: doxygen BuildRequires: bind-utils Recommends: sssd-ad = %{version}-%{release} Recommends: sssd-ipa = %{version}-%{release} Recommends: sssd-krb5 = %{version}-%{release} Recommends: sssd-ldap = %{version}-%{release} Recommends: sssd-proxy = %{version}-%{release} Recommends: sssd-dbus = %{version}-%{release} Requires: sssd-common = %{version}-%{release} Requires: python3-sssdconfig = %{version}-%{release} %description Provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a pluggable backend system to connect to multiple different account sources. It is also the basis to provide client auditing and policy services for projects like FreeIPA. %package common Summary: Common files for the SSSD Group: System/Libraries License: GPLv3+ Conflicts: sssd < 1.10.0 Requires: sssd-client = %{version}-%{release} Requires: libsss_sudo = %{version}-%{release} Requires: libsss_autofs = %{version}-%{release} Requires: libsss_idmap = %{version}-%{release} %description common Common files for the SSSD. The common package includes all the files needed to run a particular back end, however, the back ends are packaged in separate sub-packages such as sssd-ldap. %package client Summary: SSSD Client libraries for NSS and PAM Group: System/Libraries License: LGPLv3+ %description client Provides the libraries needed by the PAM and NSS stacks to connect to the SSSD service. %package -n libsss_sudo Summary: A library to allow communication between SUDO and SSSD Group: System/Libraries License: LGPLv3+ %description -n libsss_sudo A utility library to allow communication between SUDO and SSSD %package -n libsss_autofs Summary: A library to allow communication between Autofs and SSSD Group: System/Libraries License: LGPLv3+ %description -n libsss_autofs A utility library to allow communication between Autofs and SSSD %package tools Summary: Userspace tools for use with the SSSD Group: System/Libraries License: GPLv3+ Requires: sssd = %{version}-%{release} %description tools Provides userspace tools for manipulating users, groups, and nested groups in SSSD when using id_provider = local in /etc/sssd/sssd.conf. Also provides several other administrative tools: * sss_debuglevel to change the debug level on the fly * sss_seed which pre-creates a user entry for use in kickstarts * sss_obfuscate for generating an obfuscated LDAP password %package -n python-sssdconfig Summary: SSSD and IPA configuration file manipulation classes and functions Group: System/Libraries License: GPLv3+ BuildArch: noarch %description -n python-sssdconfig Provides python2 files for manipulation SSSD and IPA configuration files. %package -n python3-sssdconfig Summary: SSSD and IPA configuration file manipulation classes and functions Group: System/Libraries License: GPLv3+ BuildArch: noarch %description -n python3-sssdconfig Provides python3 files for manipulation SSSD and IPA configuration files. %package -n python-sss Summary: Python2 bindings for sssd Group: System/Libraries License: LGPLv3+ Requires: sssd-common = %{version}-%{release} %description -n python-sss Provides python2 module for manipulating users, groups, and nested groups in SSSD when using id_provider = local in /etc/sssd/sssd.conf. Also provides several other useful python2 bindings: * function for retrieving list of groups user belongs to. * class for obfuscation of passwords %package -n python3-sss Summary: Python3 bindings for sssd Group: System/Libraries License: LGPLv3+ Requires: sssd-common = %{version}-%{release} %description -n python3-sss Provides python3 module for manipulating users, groups, and nested groups in SSSD when using id_provider = local in /etc/sssd/sssd.conf. Also provides several other useful python3 bindings: * function for retrieving list of groups user belongs to. * class for obfuscation of passwords %package -n python-sss-murmur Summary: Python2 bindings for murmur hash function Group: System/Libraries License: LGPLv3+ %description -n python-sss-murmur Provides python2 module for calculating the murmur hash version 3 %package -n python3-sss-murmur Summary: Python3 bindings for murmur hash function Group: System/Libraries License: LGPLv3+ %description -n python3-sss-murmur Provides python3 module for calculating the murmur hash version 3 %package ldap Summary: The LDAP back end of the SSSD Group: System/Libraries License: GPLv3+ Requires: sssd-common = %{version}-%{release} Requires: sssd-krb5-common = %{version}-%{release} %description ldap Provides the LDAP back end that the SSSD can utilize to fetch identity data from and authenticate against an LDAP server. %package krb5-common Summary: SSSD helpers needed for Kerberos and GSSAPI authentication Group: System/Libraries License: GPLv3+ Requires: sasl-plug-gssapi Requires: sssd-common = %{version}-%{release} %description krb5-common Provides helper processes that the LDAP and Kerberos back ends can use for Kerberos user or host authentication. %package krb5 Summary: The Kerberos authentication back end for the SSSD Group: System/Libraries License: GPLv3+ Requires: sssd-common = %{version}-%{release} Requires: sssd-krb5-common = %{version}-%{release} %description krb5 Provides the Kerberos back end that the SSSD can utilize authenticate against a Kerberos server. %package common-pac Summary: Common files needed for supporting PAC processing Group: System/Libraries License: GPLv3+ Requires: sssd-common = %{version}-%{release} %description common-pac Provides common files needed by SSSD providers such as IPA and Active Directory for handling Kerberos PACs. %package ipa Summary: The IPA back end of the SSSD Group: System/Libraries License: GPLv3+ Conflicts: sssd < 1.10.0 Requires: sssd-common = %{version}-%{release} Requires: sssd-krb5-common = %{version}-%{release} Requires: libipa_hbac = %{version}-%{release} Requires: bind-utils Requires: sssd-common-pac = %{version}-%{release} %description ipa Provides the IPA back end that the SSSD can utilize to fetch identity data from and authenticate against an IPA server. %package ad Summary: The AD back end of the SSSD Group: System/Libraries License: GPLv3+ Conflicts: sssd < 1.10.0 Requires: sssd-common = %{version}-%{release} Requires: sssd-krb5-common = %{version}-%{release} Requires: bind-utils Requires: sssd-common-pac = %{version}-%{release} %description ad Provides the Active Directory back end that the SSSD can utilize to fetch identity data from and authenticate against an Active Directory server. %package proxy Summary: The proxy back end of the SSSD Group: System/Libraries License: GPLv3+ Conflicts: sssd < 1.10.0 Requires: sssd-common = %{version}-%{release} %description proxy Provides the proxy back end which can be used to wrap an existing NSS and/or PAM modules to leverage SSSD caching. %package -n libsss_idmap Summary: FreeIPA Idmap library Group: System/Libraries License: LGPLv3+ Conflicts: sssd-%{mklibname ipa_hbac 0} < 1.13.0 %description -n libsss_idmap Utility library to convert SIDs to Unix uids and gids %package -n libsss_idmap-devel Summary: FreeIPA Idmap library Group: Development/C License: LGPLv3+ Requires: libsss_idmap = %{version}-%{release} %description -n libsss_idmap-devel Utility library to SIDs to Unix uids and gids %package -n libipa_hbac Summary: FreeIPA HBAC Evaluator library Group: System/Libraries License: LGPLv3+ Conflicts: sssd-%{mklibname ipa_hbac 0} < 1.13.0 %description -n libipa_hbac Utility library to validate FreeIPA HBAC rules for authorization requests %package -n libipa_hbac-devel Summary: FreeIPA HBAC Evaluator library Group: Development/C License: LGPLv3+ Requires: libipa_hbac = %{version}-%{release} %description -n libipa_hbac-devel Utility library to validate FreeIPA HBAC rules for authorization requests %package -n python-libipa_hbac Summary: Python2 bindings for the FreeIPA HBAC Evaluator library Group: Development/Python License: LGPLv3+ Requires: libipa_hbac = %{version}-%{release} Provides: libipa_hbac-python = %{version}-%{release} Obsoletes: libipa_hbac-python < 1.13.0 %description -n python-libipa_hbac The python-libipa_hbac contains the bindings so that libipa_hbac can be used by Python applications. %package -n python3-libipa_hbac Summary: Python3 bindings for the FreeIPA HBAC Evaluator library Group: Development/Python License: LGPLv3+ Requires: libipa_hbac = %{version}-%{release} %description -n python3-libipa_hbac The python3-libipa_hbac contains the bindings so that libipa_hbac can be used by Python applications. %package -n libsss_nss_idmap Summary: Library for SID based lookups Group: System/Libraries License: LGPLv3+ %description -n libsss_nss_idmap Utility library for SID based lookups %package -n libsss_nss_idmap-devel Summary: Library for SID based lookups Group: Development/C License: LGPLv3+ Requires: libsss_nss_idmap = %{version}-%{release} %description -n libsss_nss_idmap-devel Utility library for SID based lookups %package -n python-libsss_nss_idmap Summary: Python2 bindings for libsss_nss_idmap Group: Development/Python License: LGPLv3+ Requires: libsss_nss_idmap = %{version}-%{release} Provides: libsss_nss_idmap-python = %{version}-%{release} Obsoletes: libsss_nss_idmap-python < 1.13.0 %description -n python-libsss_nss_idmap The python-libsss_nss_idmap contains the bindings so that libsss_nss_idmap can be used by Python applications. %package -n python3-libsss_nss_idmap Summary: Python3 bindings for libsss_nss_idmap Group: Development/Python License: LGPLv3+ Requires: libsss_nss_idmap = %{version}-%{release} %description -n python3-libsss_nss_idmap The python3-libsss_nss_idmap contains the bindings so that libsss_nss_idmap can be used by Python applications. %package dbus Summary: The D-Bus responder of the SSSD Group: System/Libraries License: GPLv3+ Requires: sssd-common = %{version}-%{release} %description dbus Provides the D-Bus responder of the SSSD, called the InfoPipe, that allows the information from the SSSD to be transmitted over the system bus. %package -n libsss_simpleifp Summary: The SSSD D-Bus responder helper library Group: System/Libraries License: GPLv3+ Requires: sssd-dbus = %{version}-%{release} %description -n libsss_simpleifp Provides library that simplifies D-Bus API for the SSSD InfoPipe responder. %package -n libsss_simpleifp-devel Summary: The SSSD D-Bus responder helper library Group: Development/C License: GPLv3+ Requires: dbus-devel Requires: libsss_simpleifp = %{version}-%{release} %description -n libsss_simpleifp-devel Provides library that simplifies D-Bus API for the SSSD InfoPipe responder. %package libwbclient Summary: The SSSD libwbclient implementation Group: System/Libraries License: GPLv3+ and LGPLv3+ %description libwbclient The SSSD libwbclient implementation. %package libwbclient-devel Summary: Development libraries for the SSSD libwbclient implementation Group: Development/C License: GPLv3+ and LGPLv3+ Requires: sssd-libwbclient = %{version}-%{release} %description libwbclient-devel Development libraries for the SSSD libwbclient implementation. %prep %setup -q %autopatch -p1 %build autoreconf -ivf %configure2_5x \ --with-db-path=%{dbpath} \ --with-mcache-path=%{mcpath} \ --with-pipe-path=%{pipepath} \ --with-pubconf-path=%{pubconfpath} \ --with-gpo-cache-path=%{gpocachepath} \ --with-init-dir=%{_initrddir} \ --with-krb5-rcache-dir=%{_localstatedir}/cache/krb5rcache \ --enable-nsslibdir=/%{_libdir} \ --enable-pammoddir=/%{_libdir}/security \ --disable-static \ --disable-rpath \ --with-initscript=systemd \ --with-syslog=journald \ --enable-sss-default-nss-plugin \ --without-semanage \ --disable-config-lib %make_build all docs %check # %%__make check %install rm -f *.lang %make_install # Prepare language files %find_lang sssd # Copy default logrotate file install -D -m 644 src/examples/logrotate \ %{buildroot}%{_sysconfdir}/logrotate.d/sssd # Make sure SSSD is able to run on read-only root install -D -m 644 src/examples/rwtab %{buildroot}%{_sysconfdir}/rwtab.d/sssd # Create directory for cifs-idmap alternative # Otherwise this directory could not be owned by sssd-client mkdir -p %{buildroot}/%{_sysconfdir}/cifs-utils # Remove .la files created by libtool find %{buildroot} -name \*.la | xargs rm -f # Suppress developer-only documentation rm -rf %{buildroot}/%{_docdir}/%{name} # Suppress systemd unit drop-in rm -rf %{buildroot}%{_sysconfdir}/systemd # Older versions of rpmbuild can only handle one -f option # So we need to append to the sssd*.lang file for file in `ls $RPM_BUILD_ROOT/%{python2_sitelib}/*.egg-info 2> /dev/null` do echo %{python2_sitelib}/`basename $file` >> python2_sssdconfig.lang done for file in `ls $RPM_BUILD_ROOT/%{python3_sitelib}/*.egg-info 2> /dev/null` do echo %{python3_sitelib}/`basename $file` >> python3_sssdconfig.lang done touch sssd_tools.lang touch sssd_client.lang for man in `find %{buildroot}%{_mandir}/??/man?/ -type f | sed -e "s#%{buildroot}%{_mandir}/##"`; do lang=`echo $man | cut -c 1-2` case `basename $man` in sss_cache*) echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd.lang ;; sss_*) echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd_tools.lang ;; sssd_krb5_*) echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd_client.lang ;; pam_sss*) echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd_client.lang ;; sssd-ldap*) echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd_ldap.lang ;; sssd-krb5*) echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd_krb5.lang ;; sssd-ipa*) echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd_ipa.lang ;; sssd-ad*) echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd_ad.lang ;; sssd-proxy*) echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd_proxy.lang ;; *) echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd.lang ;; esac done %post common %_post_service %{name} %preun common %_preun_service %{name} %files %doc COPYING %files common -f sssd.lang %doc COPYING %doc src/examples/sssd-example.conf %{_sbindir}/sssd %{_unitdir}/sssd.service %dir %{_libexecdir}/%{name} %{_libexecdir}/%{name}/sssd_be %{_libexecdir}/%{name}/sssd_nss %{_libexecdir}/%{name}/sssd_pam %{_libexecdir}/%{name}/sssd_autofs %{_libexecdir}/%{name}/sssd_ssh %{_libexecdir}/%{name}/sssd_sudo %{_libexecdir}/%{name}/p11_child %dir %{_libdir}/%{name} %{_libdir}/%{name}/libsss_simple.so #Internal shared libraries %{_libdir}/%{name}/libsss_child.so %{_libdir}/%{name}/libsss_crypt.so %{_libdir}/%{name}/libsss_cert.so %{_libdir}/%{name}/libsss_debug.so %{_libdir}/%{name}/libsss_krb5_common.so %{_libdir}/%{name}/libsss_ldap_common.so %{_libdir}/%{name}/libsss_util.so %{_libdir}/%{name}/libsss_semanage.so # 3rd party application libraries %{_libdir}/libnfsidmap/sss.so %{ldb_modulesdir}/memberof.so %{_bindir}/sss_ssh_authorizedkeys %{_bindir}/sss_ssh_knownhostsproxy %{_sbindir}/sss_cache %{_libexecdir}/%{servicename}/sss_signal %dir %{sssdstatedir} %dir %{_localstatedir}/cache/krb5rcache %attr(700,root,root) %dir %{dbpath} %attr(755,root,root) %dir %{mcpath} %ghost %attr(0644,root,root) %verify(not md5 size mtime) %{mcpath}/passwd %ghost %attr(0644,root,root) %verify(not md5 size mtime) %{mcpath}/group %ghost %attr(0644,root,root) %verify(not md5 size mtime) %{mcpath}/initgroups %attr(755,root,root) %dir %{pipepath} %attr(755,root,root) %dir %{pipepath}/private %attr(755,root,root) %dir %{pubconfpath} %attr(755,root,root) %dir %{gpocachepath} %attr(750,root,root) %dir %{_var}/log/%{name} %attr(700,root,root) %dir %{_sysconfdir}/sssd %ghost %attr(0600,root,root) %config(noreplace) %{_sysconfdir}/sssd/sssd.conf %config(noreplace) %{_sysconfdir}/logrotate.d/sssd %config(noreplace) %{_sysconfdir}/rwtab.d/sssd %dir %{_datadir}/sssd %{_datadir}/sssd/sssd.api.conf %{_datadir}/sssd/sssd.api.d %{_mandir}/man1/sss_ssh_authorizedkeys.1* %{_mandir}/man1/sss_ssh_knownhostsproxy.1* %{_mandir}/man5/sssd.conf.5* %{_mandir}/man5/sssd-simple.5* %{_mandir}/man5/sssd-sudo.5* %{_mandir}/man5/sss_rpcidmapd.5* %{_mandir}/man8/sssd.8* %{_mandir}/man8/sss_cache.8* %files ldap -f sssd_ldap.lang %defattr(-,root,root,-) %doc COPYING %{_libdir}/%{name}/libsss_ldap.so %{_mandir}/man5/sssd-ldap.5* %files krb5-common %doc COPYING %attr(755,root,root) %dir %{pubconfpath}/krb5.include.d %{_libexecdir}/%{servicename}/ldap_child %{_libexecdir}/%{servicename}/krb5_child %files krb5 -f sssd_krb5.lang %doc COPYING %{_libdir}/%{name}/libsss_krb5.so %{_mandir}/man5/sssd-krb5.5* %files common-pac %doc COPYING %{_libexecdir}/%{servicename}/sssd_pac %files ipa -f sssd_ipa.lang %doc COPYING %attr(700,root,root) %dir %{keytabdir} %{_libdir}/%{name}/libsss_ipa.so %{_mandir}/man5/sssd-ipa.5* %files ad -f sssd_ad.lang %doc COPYING %{_libdir}/%{name}/libsss_ad.so %{_libexecdir}/%{servicename}/gpo_child %{_mandir}/man5/sssd-ad.5* %files proxy %doc COPYING %{_libexecdir}/%{servicename}/proxy_child %{_libdir}/%{name}/libsss_proxy.so %files dbus %doc COPYING %{_libexecdir}/%{servicename}/sssd_ifp %{_mandir}/man5/sssd-ifp.5* # InfoPipe DBus plumbing %{_sysconfdir}/dbus-1/system.d/org.freedesktop.sssd.infopipe.conf %{_datadir}/dbus-1/system-services/org.freedesktop.sssd.infopipe.service #%%{_libdir}/%%{name}/libsss_config.so %files -n libsss_simpleifp %{_libdir}/libsss_simpleifp.so.* %files -n libsss_simpleifp-devel %doc sss_simpleifp_doc/html %{_includedir}/sss_sifp.h %{_includedir}/sss_sifp_dbus.h %{_libdir}/libsss_simpleifp.so %{_libdir}/pkgconfig/sss_simpleifp.pc %files client -f sssd_client.lang %doc src/sss_client/COPYING src/sss_client/COPYING.LESSER /%{_libdir}/libnss_sss.so.2 /%{_libdir}/security/pam_sss.so %{_libdir}/krb5/plugins/libkrb5/sssd_krb5_locator_plugin.so %{_libdir}/krb5/plugins/authdata/sssd_pac_plugin.so %dir %{_libdir}/cifs-utils %{_libdir}/cifs-utils/cifs_idmap_sss.so %dir %{_sysconfdir}/cifs-utils %ghost %{_sysconfdir}/cifs-utils/idmap-plugin %dir %{_libdir}/%{name} %dir %{_libdir}/%{name}/modules %{_libdir}/%{name}/modules/sssd_krb5_localauth_plugin.so %{_mandir}/man8/pam_sss.8* %{_mandir}/man8/sssd_krb5_locator_plugin.8* %files -n libsss_sudo %doc src/sss_client/COPYING %{_libdir}/libsss_sudo.so* %files -n libsss_autofs %doc src/sss_client/COPYING src/sss_client/COPYING.LESSER %dir %{_libdir}/%{name}/modules %{_libdir}/%{name}/modules/libsss_autofs.so %files tools -f sssd_tools.lang %doc COPYING %{_sbindir}/sss_useradd %{_sbindir}/sss_userdel %{_sbindir}/sss_usermod %{_sbindir}/sss_groupadd %{_sbindir}/sss_groupdel %{_sbindir}/sss_groupmod %{_sbindir}/sss_groupshow %{_sbindir}/sss_obfuscate %{_sbindir}/sss_override %{_sbindir}/sss_debuglevel %{_sbindir}/sss_seed %{_mandir}/man8/sss_groupadd.8* %{_mandir}/man8/sss_groupdel.8* %{_mandir}/man8/sss_groupmod.8* %{_mandir}/man8/sss_groupshow.8* %{_mandir}/man8/sss_useradd.8* %{_mandir}/man8/sss_userdel.8* %{_mandir}/man8/sss_usermod.8* %{_mandir}/man8/sss_obfuscate.8* %{_mandir}/man8/sss_override.8* %{_mandir}/man8/sss_debuglevel.8* %{_mandir}/man8/sss_seed.8* %files -n python-sssdconfig -f python2_sssdconfig.lang %dir %{python2_sitelib}/SSSDConfig %{python2_sitelib}/SSSDConfig/*.py* %files -n python3-sssdconfig -f python3_sssdconfig.lang %dir %{python3_sitelib}/SSSDConfig %{python3_sitelib}/SSSDConfig/*.py* %dir %{python3_sitelib}/SSSDConfig/__pycache__ %{python3_sitelib}/SSSDConfig/__pycache__/*.py* %files -n python-sss %{python2_sitearch}/pysss.so %files -n python3-sss %{python3_sitearch}/pysss.so %files -n python-sss-murmur %{python2_sitearch}/pysss_murmur.so %files -n python3-sss-murmur %{python3_sitearch}/pysss_murmur.so %files -n libsss_idmap %doc src/sss_client/COPYING src/sss_client/COPYING.LESSER %{_libdir}/libsss_idmap.so.* %files -n libsss_idmap-devel %doc idmap_doc/html %{_includedir}/sss_idmap.h %{_libdir}/libsss_idmap.so %{_libdir}/pkgconfig/sss_idmap.pc %files -n libipa_hbac %doc src/sss_client/COPYING src/sss_client/COPYING.LESSER %{_libdir}/libipa_hbac.so.* %files -n libipa_hbac-devel %doc hbac_doc/html %{_includedir}/ipa_hbac.h %{_libdir}/libipa_hbac.so %{_libdir}/pkgconfig/ipa_hbac.pc %files -n libsss_nss_idmap %doc src/sss_client/COPYING src/sss_client/COPYING.LESSER %{_libdir}/libsss_nss_idmap.so.* %files -n libsss_nss_idmap-devel %doc nss_idmap_doc/html %{_includedir}/sss_nss_idmap.h %{_libdir}/libsss_nss_idmap.so %{_libdir}/pkgconfig/sss_nss_idmap.pc %files -n python-libsss_nss_idmap %{python2_sitearch}/pysss_nss_idmap.so %files -n python3-libsss_nss_idmap %{python3_sitearch}/pysss_nss_idmap.so %files -n python-libipa_hbac %{python2_sitearch}/pyhbac.so %files -n python3-libipa_hbac %{python3_sitearch}/pyhbac.so %files libwbclient %dir %{_libdir}/%{name} %dir %{_libdir}/%{name}/modules %{_libdir}/%{name}/modules/libwbclient.so.* %files libwbclient-devel %{_includedir}/wbclient_sssd.h %{_libdir}/%{name}/modules/libwbclient.so %{_libdir}/pkgconfig/wbclient_sssd.pc %changelog * Mon Aug 13 2018 daviddavid <daviddavid> 1.13.4-9.2.mga6 (not released yet) + Revision: 1251292 - add upstream patch to fix CVE-2018-10852 (mga#23381) + luigiwalser <luigiwalser> - add patches from opensuse to fix CVE-2017-12173 and other bugs * Fri Feb 24 2017 luigiwalser <luigiwalser> 1.13.4-9.mga6 + Revision: 1087558 - disable internal config-lib to avoid augeas dependency - push some packaging fixes from Guillaume * Sun Feb 19 2017 luigiwalser <luigiwalser> 1.13.4-8.mga6 + Revision: 1086925 - add upstream patch to allow building with krb5 1.15 * Thu Dec 08 2016 luigiwalser <luigiwalser> 1.13.4-7.mga6 + Revision: 1073378 - rebuild for ldb * Thu Aug 11 2016 luigiwalser <luigiwalser> 1.13.4-6.mga6 + Revision: 1045939 - rebuild for updated ldb * Thu Aug 11 2016 luigiwalser <luigiwalser> 1.13.4-5.mga6 + Revision: 1045522 - add more upstream patches via fedora * Mon Aug 08 2016 luigiwalser <luigiwalser> 1.13.4-4.mga6 + Revision: 1044976 - add conflicts to fix upgrade from mga5 * Fri Jul 29 2016 luigiwalser <luigiwalser> 1.13.4-3.mga6 + Revision: 1043879 - use recommends to pull in needed subpackages to not break on upgrade from mga5 * Fri Jul 29 2016 luigiwalser <luigiwalser> 1.13.4-2.mga6 + Revision: 1043875 - fix requires * Mon May 09 2016 luigiwalser <luigiwalser> 1.13.4-1.mga6 + Revision: 1011570 - 1.13.4 - remove upstreamed patches - add two upstream patches via fedora * Fri Mar 04 2016 luigiwalser <luigiwalser> 1.13.3-3.mga6 + Revision: 985752 - fix sasl-plug-gssapi requires * Tue Feb 23 2016 guillomovitch <guillomovitch> 1.13.3-2.mga6 + Revision: 977407 - bump release - new version 1.13.3 * Wed Feb 17 2016 umeabot <umeabot> 1.9.7-6.mga6 + Revision: 962930 - Mageia 6 Mass Rebuild * Thu Nov 05 2015 luigiwalser <luigiwalser> 1.9.7-5.mga6 + Revision: 897972 - disable semanage support - start sssd after time-sync so that kerberos will work * Tue Oct 20 2015 danf <danf> 1.9.7-4.mga6 + Revision: 892994 - Added installsh.patch to fix missing install-sh build error * Sun Mar 15 2015 tmb <tmb> 1.9.7-3.mga5 + Revision: 818635 - rebuild for missing signatures * Thu Mar 12 2015 luigiwalser <luigiwalser> 1.9.7-2.mga5 + Revision: 818469 - remove f18 changes of krb5 ccache location, does not work reliably * Fri Dec 26 2014 luigiwalser <luigiwalser> 1.9.7-1.mga5 + Revision: 806067 - 1.9.7 - backport libnl3 support from 1.10 and build with libnl3 * Wed Oct 15 2014 umeabot <umeabot> 1.9.6-4.mga5 + Revision: 744245 - Second Mageia 5 Mass Rebuild * Sat Sep 27 2014 tv <tv> 1.9.6-3.mga5 + Revision: 730256 - rebuild for missing pythoneggs deps * Tue Sep 16 2014 umeabot <umeabot> 1.9.6-2.mga5 + Revision: 689332 - Mageia 5 Mass Rebuild * Sun Aug 17 2014 luigiwalser <luigiwalser> 1.9.6-1.mga5 + Revision: 664526 - 1.9.6 * Sat Jul 19 2014 daviddavid <daviddavid> 1.9.5-6.mga5 + Revision: 653727 - rebuild for new libini_config.so.5 (pkg ding-libs) + pterjan <pterjan> - Rebuild for new Python * Tue Oct 22 2013 umeabot <umeabot> 1.9.5-4.mga4 + Revision: 544672 - Mageia 4 Mass Rebuild * Tue Oct 15 2013 pterjan <pterjan> 1.9.5-3.mga4 + Revision: 499893 - Rebuild to add different pythonegg provides for python 2 and 3 * Sun Aug 25 2013 luigiwalser <luigiwalser> 1.9.5-2.mga4 + Revision: 471535 - re-add ccache location patch from fedora (not upstreamed) * Sun Aug 25 2013 luigiwalser <luigiwalser> 1.9.5-1.mga4 + Revision: 471529 - 1.9.5 - remove upstreamed patches * Wed Mar 20 2013 luigiwalser <luigiwalser> 1.9.4-2.mga3 + Revision: 404186 - add upstream patches to fix CVE-2013-0287 * Fri Feb 15 2013 luigiwalser <luigiwalser> 1.9.4-1.mga3 + Revision: 398567 - BR gettext-devel for autoreconf - 1.9.4 - add patches from fedora to fix build and other issues + umeabot <umeabot> - Mass Rebuild - https://wiki.mageia.org/en/Feature:Mageia3MassRebuild * Mon Dec 31 2012 guillomovitch <guillomovitch> 1.9.3-1.mga3 + Revision: 336684 - new version * Sat Dec 01 2012 fwang <fwang> 1.7.0-2.mga3 + Revision: 323909 - br selinux * Tue Mar 20 2012 tmb <tmb> 1.7.0-2.mga2 + Revision: 225041 - rebuild against libnl3 * Thu Jan 26 2012 nanardon <nanardon> 1.7.0-1.mga2 + Revision: 201914 - disable test (don't pass on bs) - 1.7.0 + dmorgan <dmorgan> - imported package sssd * Tue Feb 01 2011 Guillaume Rousse <guillomovitch@mandriva.org> 1.5.1-1mdv2011.0 + Revision: 634648 - new version * Fri Dec 31 2010 Guillaume Rousse <guillomovitch@mandriva.org> 1.5.0-3mdv2011.0 + Revision: 626831 - more dependencies fix * Thu Dec 30 2010 Guillaume Rousse <guillomovitch@mandriva.org> 1.5.0-2mdv2011.0 + Revision: 626422 - fix post/postun scripts - drop explicit dependencies * Tue Dec 28 2010 Guillaume Rousse <guillomovitch@mandriva.org> 1.5.0-1mdv2011.0 + Revision: 625516 - new version * Fri Nov 05 2010 Guillaume Rousse <guillomovitch@mandriva.org> 1.4.1-1mdv2011.0 + Revision: 593703 - update to new version 1.4.1 * Wed Nov 03 2010 Guillaume Rousse <guillomovitch@mandriva.org> 1.4.0-2mdv2011.0 + Revision: 592981 - new version + Michael Scherer <misc@mandriva.org> - fix build on 2.7 - rebuild for python 2.7 * Sun Aug 08 2010 Guillaume Rousse <guillomovitch@mandriva.org> 1.3.0-1mdv2011.0 + Revision: 567789 - new version - import sssd