Главная   Изменения   Спек   Патчи   Sources   Загрузить   Gear   Bugs and FR  Repocop 

%def_without test

Name: krb5
Version: 1.6.3
Release: alt3.M41.3

%define _docdir %_defaultdocdir/%name-%version

Summary: The Kerberos network authentication system
License: MIT
Group: System/Libraries
Url: http://web.mit.edu/kerberos/www/

Source0: %name-%version.tar.bz2
Source1: %name-doc.tar.bz2
Source2: %name-alt.tar

#CVE-2009-4212
Patch0: krb5-1.6.3-MITKRB5-SA-2009-004.patch

BuildRequires(pre): /dev/pts /proc
%{?_with_test:buildrequires: tcsh dejagnu telnet}
BuildRequires: flex libe2fs-devel libkeyutils-devel libldap-devel libncurses-devel libssl-devel libtinfo-devel tcl-devel

%description
Kerberos V5 is a trusted-third-party network authentication system,
which can improve your network's security by eliminating the insecure
practice of cleartext passwords.

# {{{ subpackages

%package -n lib%name
Summary: The shared libraries used by Kerberos 5
Group: System/Libraries
Requires: gawk

%package -n lib%name-ldap
Summary: The shared Kerberos 5 libraries, LDAP support
Group: System/Libraries

%package -n lib%name-devel
Summary: Development files needed to compile Kerberos 5 programs
Group: System/Libraries
Requires: lib%name = %version-%release
Requires: libe2fs-devel
Requires: libkeyutils-devel

%package kdc
Group: System/Servers
Summary: The Kerberos 5 Key Distribution Center
Requires: lib%name = %version-%release

%package kadmin
Group: System/Servers
Summary: The KDC admin programs for Kerberos 5
Requires: lib%name = %version-%release

%package kinit
Summary: Kerberos 5 programs for use on workstations
Group: System/Base
Requires: lib%name = %version-%release

%package services
Group: System/Servers
Summary: Set of commonly used kerberized services
Requires: lib%name = %version-%release

%package clients
Group: Networking/Other
Summary: Set of commonly used kerberized network programs
Requires: lib%name = %version-%release

%package doc
Group: Books/Computer books
Summary: Kerberos 5 documentation

# compat subpackages
%package server
Group: System/Servers
Summary: The server programs for Kerberos 5
Requires: %name-kdc = %version-%release
Requires: %name-services = %version-%release

%package workstation
Group: System/Base
Summary: Kerberos 5 programs for use on workstations
Requires: %name-kinit = %version-%release
Requires: %name-clients = %version-%release


%description -n lib%name
Kerberos is a network authentication system.  This package contains
the shared libraries needed by Kerberos 5.  If you are using Kerberos,
you need to install this package.

%description -n lib%name-ldap
Kerberos is a network authentication system.  This package contains
the shared Kerberos 5 libraries needed for LDAP backend support.

%description -n lib%name-devel
Kerberos is a network authentication system.  This package contains the
header files and libraries needed for compiling Kerberos 5 programs.
If you want to develop Kerberos-aware programs, you need to install
this package.

%description kdc
Kerberos is a network authentication system.
This package contains the programs that must be installed
on a Kerberos 5 Key Distribution Center.

%description kadmin
Kerberos is a network authentication system.
This package contains set of programs helping to manage
a Kerberos 5 Key Distribution Center.

%description kinit
Kerberos is a network authentication system.
This package contains the basic Kerberos programs.
If your network uses Kerberos, this package should be installed
on every workstation.

%description services
Kerberos is a network authentication system.
This package contains kerberized versions of commonly used services,
such as Telnet or FTP.
You should have good reasons to install it.

%description clients
Kerberos is a network authentication system.
This package contains kerberized versions of common
network-related client programs such as Telnet or FTP.

%description doc
Kerberos is a network authentication system.
This packages contains documentation bundled with
MIT Kerberos.

%description server
Kerberos is a network authentication system. This package contains
the programs that must be installed on a Kerberos 5 server.  If you
are installing a Kerberos 5 server, you need to install this package
(in other words, most people should NOT install this package).

%description workstation
Kerberos is a network authentication system.  This package contains the
basic Kerberos programs (kinit, klist, kdestroy, kpasswd) as well as
kerberized versions of Telnet and FTP.

# }}}

%prep
%setup

%patch0 -p1

%build
util/reconf --verbose --force
DEFINES="-D_FILE_OFFSET_BITS=64" ; export DEFINES
%add_optflags -I/usr/include/et
%configure \
--enable-shared --disable-static \
--localstatedir=%_localstatedir/kerberos \
--with-system-et \
--with-system-ss \
--without-krb4 \
--with-ldap \
--enable-dns \
--enable-dns-for-kdc \
--enable-dns-for-realm \
--with-netlib=-lresolv \
--includedir=%_includedir/%name \
#
make all %{?_with_test:check}

%install
make install DESTDIR=%buildroot INSTALL_SETUID='%__install -m0755'

# Relocate *some* shared libraries
mkdir -p %buildroot/%_lib
for lib in libdes425 libgssapi_krb5 libk5crypto libkrb5 libkrb5support; do
 mv %buildroot%_libdir/${lib}.so.* %buildroot/%_lib
 ln -snf ../../%_lib/`readlink %buildroot%_libdir/${lib}.so` %buildroot%_libdir/${lib}.so
done

# Fix binaries clashes
for i in ftp rcp rlogin rsh telnet uuclient; do
 mv -f %buildroot%_bindir/$i %buildroot%_bindir/%name-$i
done

for i in ftpd telnetd uuserver; do
 mv -f %buildroot%_sbindir/$i %buildroot%_sbindir/%name-$i
done

mv -f %buildroot%_sbindir/login.krb5 %buildroot%_sbindir/%name-login
ln -s %name-login %buildroot%_sbindir/login.krb5

# Fix manpages clashes
for i in ftp rcp rlogin rsh telnet uuclient ; do
 if [ -f %buildroot%_man1dir/$i.1 ] ; then
   mv %buildroot%_man1dir/$i.1 %buildroot%_man1dir/%name-$i.1
 fi
done

for i in ftpd telnetd ; do
 if [ -f %buildroot%_man8dir/$i.8 ] ; then
   mv %buildroot%_man8dir/$i.8 %buildroot%_man8dir/%name-$i.8
 fi
done

ln -s login.krb5.8 %buildroot%_man8dir/%name-login.8

# Server init scripts, xinetd configuration files,
# sample client config file and sample KDC config files.
tar xf %SOURCE2 -C %buildroot

# Install docs
rm -rf %buildroot%_docdir
mkdir -p %buildroot%_infodir %buildroot%_docdir
tar xf %SOURCE1 -C %buildroot%_docdir
cp -p plugins/kdb/ldap/libkdb_ldap/kerberos.{ldif,schema} %buildroot%_docdir
mv %buildroot%_docdir/krb5-{admin,install,user}.info %buildroot%_infodir
gzip %buildroot%_docdir/*.ps

# cleanups
rm -rf %buildroot%_datadir/gnats %buildroot%_datadir/examples
rm -rf %buildroot%_includedir/krb5/kerberosIV
rm -f %buildroot%_man1dir/tmac.doc*

%post kdc
%post_service krb5kdc
%post_service kadmin
%post_service kprop

%preun kdc
%preun_service krb5kdc
%preun_service kadmin
%preun_service kprop

%files -n lib%name
%config %_initdir/kdcrotate
%config(noreplace) %_sysconfdir/krb5.conf

/%_lib/lib*.so.*

%_libdir/libgssrpc.so.*
%_libdir/libkadm5clnt.so.*
%_libdir/libkadm5srv.so.*
%_libdir/libkdb5.so.*

%dir %_libdir/%name
%dir %_libdir/%name/plugins
%dir %_libdir/%name/plugins/kdb
%dir %_libdir/%name/plugins/preauth
%_libdir/%name/plugins/kdb/db2.so
%_libdir/%name/plugins/preauth/pkinit.so

%_man5dir/krb5.conf.5*

%files -n lib%name-ldap
%_libdir/libkdb_ldap.so.*
%_libdir/%name/plugins/kdb/kldap.so

%files -n lib%name-devel
%dir %_includedir/krb5
%_includedir/krb5/*
%_libdir/lib*.so
%_bindir/gss-client
%_bindir/sclient
%_bindir/krb5-config
%_bindir/sim_client
%_sbindir/gss-server
%_sbindir/krb5-send-pr
%_sbindir/sim_server
%_sbindir/sserver
%_man1dir/sclient.1*
%_man1dir/krb5-config.1*
%_man1dir/krb5-send-pr.1*
%_man8dir/sserver.8*

%files kdc
%dir %_localstatedir/kerberos
%dir %_localstatedir/kerberos/krb5kdc
%config(noreplace) %_localstatedir/kerberos/krb5kdc/kdc.conf
%config(noreplace) %_localstatedir/kerberos/krb5kdc/kadm5.acl
%config %_initdir/kadmin
%config %_initdir/krb5kdc
%config %_initdir/kprop

%_sbindir/kadmin.local
%_sbindir/kadmind
%_sbindir/k5srvutil
%_sbindir/kdb5_util
%_sbindir/kdb5_ldap_util
%_sbindir/kprop
%_sbindir/kpropd
%_sbindir/krb5kdc

%_infodir/%name-admin.info*
%_infodir/%name-install.info*

%_man5dir/kdc.conf.5*
%_man8dir/kadmin.local.8*
%_man8dir/kadmind.8*
%_man8dir/kdb5_util.8*
%_man8dir/kdb5_ldap_util.8*
%_man8dir/kprop.8*
%_man8dir/kpropd.8*
%_man8dir/krb5kdc.8*
%_man8dir/k5srvutil.8*

%files kadmin
%_sbindir/kadmin
%_sbindir/ktutil
%_man8dir/kadmin.8*
%_man8dir/ktutil.8*

%files kinit
%_bindir/kdestroy
%_bindir/kinit
%_bindir/klist
%_bindir/kpasswd
%_bindir/ksu
%_bindir/kvno

%_infodir/%name-user.info*

%_man1dir/kdestroy.1*
%_man1dir/kerberos.1*
%_man1dir/kinit.1*
%_man1dir/klist.1*
%_man1dir/kpasswd.1*
%_man1dir/ksu.1*
%_man1dir/kvno.1*
%_man5dir/.k5login.5*

%files services
%config(noreplace) %_sysconfdir/xinetd.d/*
%_sbindir/%name-login
%_sbindir/login.krb5

%_sbindir/klogind
%_sbindir/kshd

%_sbindir/%name-ftpd
%_sbindir/%name-telnetd
%_sbindir/%name-uuserver

%_man8dir/%name-login.8*
%_man8dir/login.%name.8*

%_man8dir/klogind.8*
%_man8dir/kshd.8*

%_man8dir/%name-ftpd.8*
%_man8dir/%name-telnetd.8*

%files clients
%_bindir/%name-ftp
%_bindir/%name-rcp
%_bindir/%name-rlogin
%_bindir/%name-rsh
%_bindir/%name-telnet
%_bindir/%name-uuclient

%_man1dir/%name-ftp.1*
%_man1dir/%name-rsh.1*
%_man1dir/%name-rlogin.1*
%_man1dir/%name-rcp.1*
%_man1dir/%name-telnet.1*

%files doc
%_docdir

%files server
%files workstation

# {{{ changelog

%changelog
…
Полный changelog можно просмотреть здесь