%global _hardened_build 1 %global libdir %{_libdir}/heimdal %global bindir %{_exec_prefix}/lib/heimdal %global commitdate 20140621 %global commit a5adc061079ddab92b9520e9c55f1c157c354f38 %global shortcommit %(c=%{commit}; echo ${c:0:7}) %if 0%{?el5} %global need_autogen 0 %else %global need_autogen 1 %endif # Use systemd unit files on RHEL 7 and above. %if ! (0%{?rhel} && 0%{?rhel} < 7) %global _with_systemd 1 %endif Name: heimdal Version: 1.6.0 Release: 0.9.%{commitdate}git%{shortcommit}%{?dist}.art Summary: A Kerberos 5 implementation without export restrictions License: BSD and MIT URL: http://www.h5l.org/ Group: System Environment/Libraries Source0: https://github.com/%{name}/%{name}/archive/%{commit}/%{name}-%{version}-%{shortcommit}.tar.gz # We need Source1 (pregenerated autoconf files) on EL5. # To create this tarball: # 1. Download the Source0 tarball # 2. Ensure the COMMIT sha1 is correct in heimdal-generate-autoconf-tarball # 2. Run ./heimdal-generate-autoconf-tarball Source1: %{name}-%{shortcommit}-autoconf.tar.gz Source2: %{name}-generate-autoconf-tarball Source3: %{name}.sysconfig Source4: %{name}.sh Source5: %{name}.csh Source6: %{name}-rshd.xinetd Source7: %{name}-ftpd.xinetd Source8: %{name}-telnetd.xinetd Source9: krb5.conf.sample Source10: %{name}.logrotate Source11: %{name}-bashrc Source12: %{name}-hpropd.xinetd Source20: %{name}-kdc.init Source21: %{name}-ipropd-master.init Source22: %{name}-ipropd-slave.init Source23: %{name}-kadmind.init Source24: %{name}-kpasswdd.init Source25: %{name}-kdc.conf Source26: %{name}-kdc.service Source27: %{name}-ipropd-master.service Source28: %{name}-ipropd-slave.service Source29: %{name}-kadmind.service Source30: %{name}-kpasswdd.service Source31: %{name}-ipropd-slave-wrapper # klist, kswitch, and kvno are symlinks to "heimtools", and this utility needs # to know how to interpret the "heimdal-" prefixes. Patch1: heimdal-1.6.0-229d8c7-rename-commands.patch Patch3: ipv6_loopbacks_fix.patch # Submitted upstream for 1.6 at https://github.com/heimdal/heimdal/pull/90 Patch4: heimdal-1.6.0-d60ba47-ldap-declarations.patch # Remove deprecated autoconf/libtool macro # Submitted upstream for master at https://github.com/heimdal/heimdal/pull/95 Patch5: heimdal-1.6.0-229d8c7-libtool-macro.patch # Fix kadmin's setpgid() call under systemd # Submitted upstream for master at https://github.com/heimdal/heimdal/pull/100 Patch6: heimdal-1.6.0-ddde77b-kadmin-setpgid.patch # Fix race condition with building kadm5 # Submitted upstream for master at https://github.com/heimdal/heimdal/pull/108 Patch7: heimdal-1.6.0-a5adc06-kadm5_err.patch BuildRequires: bison BuildRequires: flex BuildRequires: libedit-devel BuildRequires: libtermcap-devel BuildRequires: libtool BuildRequires: ncurses-devel BuildRequires: openldap-devel #Required for tests/ldap BuildRequires: openldap-servers BuildRequires: pam-devel BuildRequires: perl(JSON) BuildRequires: sqlite-devel BuildRequires: texinfo %if (0%{?rhel} && 0%{?rhel} < 6) BuildRequires: e2fsprogs-devel %else BuildRequires: libcom_err-devel BuildRequires: libcap-ng-devel %endif %if (0%{?rhel} && 0%{?rhel} < 7) BuildRequires: db4-devel %else BuildRequires: libdb-devel %endif %if 0%{?need_autogen} BuildRequires: doxygen BuildRequires: graphviz BuildRequires: python %endif %if (0%{?rhel} && 0%{?rhel} < 7) BuildRequires: groff %else BuildRequires: groff-base %endif %if 0%{?_with_systemd} BuildRequires: systemd-units %endif %if 0%{?el5} BuildRoot: %(mktemp -ud %{_tmppath}/%{name}-%{version}-%{release}-XXXXXX) %endif # This macro was added in Fedora 20. Use the old version if it's undefined # on older Fedoras and RHELs prior to RHEL 8. # https://fedoraproject.org/wiki/Changes/UnversionedDocdirs %{!?_pkgdocdir: %global _pkgdocdir %{_docdir}/%{name}-%{version}} %description Kerberos 5 is a network authentication and single sign-on system. Heimdal is a free Kerberos 5 implementation without export restrictions written from the spec (rfc1510 and successors) including advanced features like thread safety, IPv6, master-slave replication of Kerberos Key Distribution Center server and support for ticket delegation (S4U2Self, S4U2Proxy). This package can coexist with MIT Kerberos 5 packages. Hesiod is disabled by default since it is deemed too big a security risk by the packager. %package workstation Summary: Heimdal kerberos programs for use on workstations Group: System Environment/Base %description workstation This package contains Heimdal Kerberos 5 programs and utilities for use on workstations (kinit, klist, kdestroy, kpasswd) %package appl-clients Summary: Heimdal kerberized client applications Group: System Environment/Base # For the login.access symlink. Requires: pam %description appl-clients This package contains Heimdal Kerberos-aware versions of the telnet, ftp, rcp, rsh, and rlogin clients. While these have been replaced by tools such as OpenSSH in most environments, they remain in use in others. %package appl-servers Summary: Heimdal kerberized server applications Group: System Environment/Daemons Requires: xinetd %description appl-servers This package contains Heimdal Kerberos-aware versions of the pop3, telnet, ftp, rcp, rsh, and rlogin servers. While these have been replaced by tools such as OpenSSH in most environments, they remain in use in others. %package server Summary: Heimdal kerberos server Group: System Environment/Daemons Requires: logrotate %if 0%{?_with_systemd} Requires(preun): systemd Requires(postun): systemd Requires(post): systemd %else Requires(post): chkconfig Requires(preun): chkconfig Requires(preun): initscripts Requires(postun): initscripts Requires: xinetd %endif Provides: heimdal-kdc = %{version}-%{release} Obsoletes: heimdal-kdc < 1.5 %description server This package contains the master Heimdal kerberos Key Distribution Center (KDC), admin interface server (admind) and master-slave synchronisation daemons. Install this package if you intend to set up Kerberos server. %package libs Summary: Heimdal kerberos shared libraries Group: System Environment/Libraries Requires(post): info Requires(preun): info %description libs This package contains shared libraries required by several of the other Heimdal packages. %package devel Summary: Header and other development files for Heimdal kerberos Group: System Environment/Libraries Provides: %{name}-static = %{version}-%{release} %description devel Contains files needed to compile and link software using the Heimdal kerberos headers/libraries. %package path Summary: Heimdal kerberos PATH manipulation Group: System Environment/Base Requires: %{name}-libs # For /etc/profile.d Requires: setup %description path This package prepends the Heimdal binary directory to the beginning of PATH. %prep %setup -b 1 -qn %{name}-%{commit} %patch1 -p1 -b .cmds %patch3 -p1 -b .getaddrinfo %patch4 -p1 -b .declarations %patch5 -p1 -b .libtool %patch6 -p1 -b .setpgid %patch7 -p1 -b .kadm5 %if 0%{?need_autogen} ./autogen.sh %endif %build %ifarch i386 %global build_fix "-march=i686" %else %global build_fix "" %endif %configure \ --prefix=%{_prefix} \ --includedir=%{_includedir}/%{name} \ --libdir=%{libdir} \ --enable-static \ --enable-shared \ --enable-pthread-support \ --without-x \ --without-hesiod \ --with-ipv6 \ --enable-kcm \ --enable-pk-init \ --with-openldap=%{_prefix} \ --with-sqlite3=%{_prefix} \ --with-libedit=%{_prefix} \ LIBS="-ltermcap" \ CFLAGS="-fPIC %{optflags} %{build_fix}" %if 0%{?need_autogen} make %{?_smp_mflags} dist %endif # Building on EL5 with %{?_smp_mflags} passed causes # the make to fail. So for EL5 don't do that. %if 0%{?el5} make %else make %{?_smp_mflags} %endif make %{?_smp_mflags} -C doc html #%check #make check %install rm -rf %{buildroot} make DESTDIR=%{buildroot} install # install the init files %if 0%{?_with_systemd} # install systemd service files mkdir -p %{buildroot}%{_unitdir} pushd %{buildroot}%{_unitdir} install -p -D -m 644 %{SOURCE26} heimdal-kdc.service install -p -D -m 644 %{SOURCE27} heimdal-ipropd-master.service install -p -D -m 644 %{SOURCE28} heimdal-ipropd-slave.service install -p -D -m 644 %{SOURCE29} heimdal-kadmind.service install -p -D -m 644 %{SOURCE30} heimdal-kpasswdd.service popd install -p -D -m 755 %{SOURCE31} %{buildroot}%{_libexecdir}/ipropd-slave-wrapper %else # install legacy SysV init scripts mkdir -p %{buildroot}%{_sysconfdir}/rc.d/init.d pushd %{buildroot}%{_sysconfdir}/rc.d/init.d install -p -D -m 755 %{SOURCE20} heimdal-kdc install -p -D -m 755 %{SOURCE21} heimdal-ipropd-master install -p -D -m 755 %{SOURCE22} heimdal-ipropd-slave install -p -D -m 755 %{SOURCE23} heimdal-kadmind install -p -D -m 755 %{SOURCE24} heimdal-kpasswdd popd %endif install -p -D -m 644 %{SOURCE3} %{buildroot}%{_sysconfdir}/sysconfig/heimdal install -p -D -m 644 %{SOURCE4} %{buildroot}%{_sysconfdir}/profile.d/heimdal.sh install -p -D -m 644 %{SOURCE5} %{buildroot}%{_sysconfdir}/profile.d/heimdal.csh %if ! 0%{?_with_systemd} mkdir -p %{buildroot}%{_sysconfdir}/xinetd.d/ install -p -D -m 644 %{SOURCE6} %{buildroot}%{_sysconfdir}/xinetd.d/heimdal-rshd install -p -D -m 644 %{SOURCE7} %{buildroot}%{_sysconfdir}/xinetd.d/heimdal-ftpd install -p -D -m 644 %{SOURCE8} %{buildroot}%{_sysconfdir}/xinetd.d/heimdal-telnetd install -p -D -m 644 %{SOURCE12} %{buildroot}%{_sysconfdir}/xinetd.d/heimdal-hpropd %endif install -p -D -m 644 %{SOURCE10} %{buildroot}%{_sysconfdir}/logrotate.d/heimdal mkdir -p %{buildroot}%{_localstatedir}/heimdal/ install -p -D -m 755 %{SOURCE25} %{buildroot}%{_sysconfdir}/heimdal-kdc.conf ln -s %{_sysconfdir}/heimdal-kdc.conf %{buildroot}%{_localstatedir}/heimdal/kdc.conf echo "# see man heimdal-kadmind(8)" > %{buildroot}%{_sysconfdir}/heimdal-kadmind.acl ln -s %{_sysconfdir}/heimdal-kadmind.acl %{buildroot}%{_localstatedir}/heimdal/kadmind.acl touch %{buildroot}%{_sysconfdir}/heimdal-slaves ln -s %{_sysconfdir}/heimdal-slaves %{buildroot}%{_localstatedir}/heimdal/slaves install -d -m 700 %{buildroot}%{_localstatedir}/log/heimdal install -d -m 755 %{buildroot}/%{_pkgdocdir} install -p -D -m 644 LICENSE %{buildroot}/%{_pkgdocdir}/LICENSE install -p -D -m 644 %{SOURCE9} %{buildroot}/%{_pkgdocdir}/krb5.conf.sample install -p -D -m 644 %{SOURCE11} %{buildroot}/%{_pkgdocdir}/bashrc # we don't need pkgconfig file and info/dir rm -rf %{buildroot}%{libdir}/pkgconfig rm -rf %{buildroot}%{_infodir}/dir # NOTICE: no support for X11 rm -f %{buildroot}%{_mandir}/man1/kx.1* rm -f %{buildroot}%{_mandir}/man1/rxtelnet.1* rm -f %{buildroot}%{_mandir}/man1/rxterm.1* rm -f %{buildroot}%{_mandir}/man1/tenletxr.1* rm -f %{buildroot}%{_mandir}/man1/xnlock.1* rm -f %{buildroot}%{_mandir}/man8/kxd.8* # Remove CAT files, they are not needed rm -rf %{buildroot}%{_mandir}/cat* # Remove libtool archives find %{buildroot} -type f -name '*.la' -exec rm -f {} ';' mkdir -p %{buildroot}%{_sysconfdir}/ld.so.conf.d/ echo "%{libdir}" > %{buildroot}%{_sysconfdir}/ld.so.conf.d/heimdal.conf mkdir -p %{buildroot}%{bindir}/bin mkdir -p %{buildroot}%{_mandir}/%{name}/man{1,5,8} # rename clashes with other pkgs from to heimdal- for prog in kadmin kadmind kdestroy kinit klist kpasswd krb5-config ktutil ftp ftpd rcp rsh rshd telnet telnetd login su pagsh compile_et do if [ -e %{buildroot}%{_bindir}/${prog} ]; then mv %{buildroot}%{_bindir}/{,%{name}-}${prog} ln -s %{_bindir}/%{name}-${prog} %{buildroot}%{bindir}/bin/${prog} elif [ -e %{buildroot}%{_sbindir}/${prog} ]; then mv %{buildroot}%{_sbindir}/{,%{name}-}${prog} ln -s %{_sbindir}/%{name}-${prog} %{buildroot}%{bindir}/bin/${prog} elif [ -e %{buildroot}%{_libexecdir}/${prog} ]; then mv %{buildroot}%{_libexecdir}/{,%{name}-}${prog} fi if [ -e %{buildroot}%{_mandir}/man1/${prog}.1 ]; then mv %{buildroot}%{_mandir}/man1/{,%{name}-}${prog}.1 elif [ -e %{buildroot}%{_mandir}/man8/${prog}.8 ]; then mv %{buildroot}%{_mandir}/man8/{,%{name}-}${prog}.8 fi done # If we have the prefixed name in one pkg we want it in all. %if (0%{?rhel} && 0%{?rhel} <= 5) ln -s kswitch %{buildroot}%{_bindir}/%{name}-kswitch %else mv %{buildroot}%{_bindir}/{,%{name}-}kswitch ln -s %{_bindir}/%{name}-kswitch %{buildroot}%{bindir}/bin/kswitch mv %{buildroot}%{_mandir}/man1/{,%{name}-}kswitch.1 %endif ln -s %{name}-kinit %{buildroot}%{_bindir}/kauth mv %{buildroot}%{_mandir}/man5/{,%{name}-}krb5.conf.5 # Essentially a duplicate of ftpusers(5) from man-pages. Don't ship. rm %{buildroot}%{_mandir}/man5/ftpusers.5 rm %{buildroot}%{_mandir}/man5/qop.5 ln -s mech.5.gz %{buildroot}%{_mandir}/man5/qop.5.gz ln -s /etc/security/access.conf %{buildroot}%{_sysconfdir}/login.access # Remove translations on EL5 to avoid a find-lang bug with --all-name. # https://bugzilla.redhat.com/213041 %if 0%{?el5} find %{buildroot} -name '*.mo' | xargs rm %endif if find %{buildroot} -name '*.mo' | grep .; then %find_lang %{name} --all-name else touch %{name}.lang fi %clean rm -rf %{buildroot} %post appl-servers %if 0%{?_with_systemd} # We do not support xinetd on newer distros that have systemd. %else /sbin/service xinetd reload > /dev/null 2>&1 || : %endif %postun appl-servers %if 0%{?_with_systemd} # We do not support xinetd on newer distros that have systemd. %else /sbin/service xinetd reload > /dev/null 2>&1 || : %endif %post server %if 0%{?_with_systemd} %systemd_post heimdal-kdc.service %systemd_post heimdal-ipropd-master.service %systemd_post heimdal-ipropd-slave.service %systemd_post heimdal-kadmind.service %systemd_post heimdal-kpasswdd.service %else /sbin/chkconfig --add heimdal-kdc /sbin/chkconfig --add heimdal-ipropd-master /sbin/chkconfig --add heimdal-ipropd-slave /sbin/chkconfig --add heimdal-kadmind /sbin/chkconfig --add heimdal-kpasswdd /sbin/service xinetd reload > /dev/null 2>&1 || : %endif %preun server %if 0%{?_with_systemd} %systemd_preun heimdal-kdc.service %systemd_preun heimdal-ipropd-master.service %systemd_preun heimdal-ipropd-slave.service %systemd_preun heimdal-kadmind.service %systemd_preun heimdal-kpasswdd.service %else if [ $1 -eq 0 ] ; then /sbin/service heimdal-kdc stop >/dev/null 2>&1 || : /sbin/chkconfig --del heimdal-kdc /sbin/service heimdal-ipropd-master stop >/dev/null 2>&1 || : /sbin/chkconfig --del heimdal-ipropd-master /sbin/service heimdal-ipropd-slave stop >/dev/null 2>&1 || : /sbin/chkconfig --del heimdal-ipropd-slave /sbin/service heimdal-kadmind stop >/dev/null 2>&1 || : /sbin/chkconfig --del heimdal-kadmind /sbin/service heimdal-kpasswdd stop >/dev/null 2>&1 || : /sbin/chkconfig --del >/dev/null fi %endif %postun server %if 0%{?_with_systemd} %systemd_postun heimdal-kdc.service %systemd_postun heimdal-ipropd-master.service %systemd_postun heimdal-ipropd-slave.service %systemd_postun heimdal-kadmind.service %systemd_postun heimdal-kpasswdd.service %else if [ $1 -eq 1 ] ; then /sbin/service heimdal-kdc condrestart >/dev/null 2>&1 || : /sbin/service heimdal-ipropd-master condrestart >/dev/null 2>&1 || : /sbin/service heimdal-ipropd-slave condrestart >/dev/null 2>&1 || : /sbin/service heimdal-kadmind condrestart >/dev/null 2>&1 || : /sbin/service heimdal-kpasswdd condrestart >/dev/null 2>&1 || : fi /sbin/service xinetd reload > /dev/null 2>&1 || : %endif %post libs %if 0%{?el5} || 0%{?el6} /sbin/ldconfig /sbin/install-info %{_infodir}/%{name}.info %{_infodir}/dir || : %else %{_sbindir}/ldconfig %{_sbindir}/install-info %{_infodir}/%{name}.info %{_infodir}/dir || : %endif %preun libs if [ $1 = 0 ] ; then %if 0%{?el5} || 0%{?el6} /sbin/install-info --delete %{_infodir}/%{name}.info %{_infodir}/dir || : %else %{_sbindir}/install-info --delete %{_infodir}/%{name}.info %{_infodir}/dir || : %endif fi %postun libs %if 0%{?el5} || 0%{?el6} /sbin/ldconfig %else %{_sbindir}/ldconfig %endif %files libs -f %{name}.lang %dir %{bindir} %dir %{bindir}/bin %dir %{libdir} %{_sysconfdir}/ld.so.conf.d/heimdal.conf %{libdir}/lib*.so* %{libdir}/windc.so* %{_infodir}/heimdal.info* %{_infodir}/hx509.info* %{_mandir}/man5/%{name}-krb5.conf.5* %{_mandir}/man5/qop.5* %{_mandir}/man5/mech.5* %{_mandir}/man8/kerberos.8* %{_prefix}/bin/string2key %{_mandir}/man8/string2key.8* %{_libexecdir}/kdigest %{_mandir}/man8/kdigest.8* %{_prefix}/bin/verify_krb5_conf %{_mandir}/man8/verify_krb5_conf.8* %{_libexecdir}/digest-service %doc %{_pkgdocdir} %files server %if 0%{?_with_systemd} %{_unitdir}/*.service %else %{_initrddir}/* %config(noreplace) %{_sysconfdir}/xinetd.d/heimdal-hpropd %endif %{_sysconfdir}/logrotate.d/heimdal %config(noreplace) %{_sysconfdir}/sysconfig/heimdal %dir %attr(700,root,root) %{_localstatedir}/heimdal %dir %attr(700,root,root) %{_localstatedir}/log/heimdal %config(noreplace) %attr(600,root,root) %{_sysconfdir}/heimdal-kdc.conf %config(noreplace) %{_localstatedir}/heimdal/kdc.conf %config(noreplace) %attr(600,root,root) %{_sysconfdir}/heimdal-kadmind.acl %config(noreplace) %{_localstatedir}/heimdal/kadmind.acl %config(noreplace) %attr(600,root,root) %{_sysconfdir}/heimdal-slaves %config(noreplace) %{_localstatedir}/heimdal/slaves %{_libexecdir}/hprop %{_mandir}/man8/hprop.8* %{_libexecdir}/hpropd %{_mandir}/man8/hpropd.8* %{_mandir}/man8/iprop.8* %{_sbindir}/iprop-log %{_mandir}/man8/iprop-log.8* %{_libexecdir}/ipropd-master %{_mandir}/man8/ipropd-master.8* %{_libexecdir}/ipropd-slave %{_mandir}/man8/ipropd-slave.8* %if 0%{?_with_systemd} %{_libexecdir}/ipropd-slave-wrapper %endif %{_libexecdir}/%{name}-kadmind %{_mandir}/man8/%{name}-kadmind.8* %{_libexecdir}/kdc %{_mandir}/man8/kdc.8* %{_libexecdir}/kpasswdd %{_mandir}/man8/kpasswdd.8* %{_sbindir}/kstash %{_mandir}/man8/kstash.8* %files workstation %{_prefix}/bin/afslog %{_mandir}/man1/afslog.1* %{_prefix}/bin/bsearch %{_mandir}/man1/bsearch.1* %{_prefix}/bin/%{name}-pagsh %{bindir}/bin/pagsh %{_mandir}/man1/%{name}-pagsh.1* %{_prefix}/bin/gsstool %{_prefix}/bin/heimtools %{_prefix}/bin/hxtool %{_prefix}/bin/idn-lookup %{_prefix}/bin/%{name}-kdestroy %{bindir}/bin/kdestroy %{_mandir}/man1/%{name}-kdestroy.1* %{_prefix}/bin/kf %{_mandir}/man1/kf.1* %{_prefix}/bin/kgetcred %{_mandir}/man1/kgetcred.1* %{_libexecdir}/kimpersonate %{_mandir}/man8/kimpersonate.8* %{_prefix}/bin/%{name}-kinit %{bindir}/bin/kinit %{_prefix}/bin/kauth %{_mandir}/man1/%{name}-kinit.1* %{_prefix}/bin/%{name}-klist %{bindir}/bin/klist %{_mandir}/man1/%{name}-klist.1* %{_prefix}/bin/%{name}-kpasswd %{bindir}/bin/kpasswd %{_mandir}/man1/%{name}-kpasswd.1* %{_prefix}/bin/heimdal-kswitch %if (0%{?rhel} && 0%{?rhel} <= 5) %{_prefix}/bin/kswitch %{_mandir}/man1/kswitch.1* %else %{bindir}/bin/kswitch %{_mandir}/man1/heimdal-kswitch.1* %endif %{_prefix}/bin/otp %{_mandir}/man1/otp.1* %{_prefix}/bin/otpprint %{_mandir}/man1/otpprint.1* %{_prefix}/bin/pfrom %{_mandir}/man1/pfrom.1* %{_sbindir}/%{name}-kadmin %{bindir}/bin/kadmin %{_mandir}/man8/%{name}-kadmin.8* %{_libexecdir}/kcm %{_mandir}/man8/kcm.8* %{_libexecdir}/kfd %{_mandir}/man8/kfd.8* %{_sbindir}/%{name}-ktutil %{bindir}/bin/ktutil %{_mandir}/man8/%{name}-ktutil.8* # NOTICE: no support for X11 #%%{_libexecdir}/kxd #%%{_mandir}/man8/kxd.8* #%%{_mandir}/cat8/kxd.8* %{_libexecdir}/popper %{_mandir}/man8/popper.8* # TODO: PUSH needs to go to bin!!! %{_libexecdir}/push %{_mandir}/man8/push.8* %attr(04550,root,root) %{_prefix}/bin/%{name}-su %{bindir}/bin/su %{_mandir}/man1/%{name}-su.1* %files appl-clients %config(noreplace) %{_sysconfdir}/login.access %{_prefix}/bin/%{name}-ftp %{bindir}/bin/ftp %{_mandir}/man1/%{name}-ftp.1* %{_prefix}/bin/%{name}-login %{bindir}/bin/login %{_mandir}/man1/%{name}-login.1* %{_mandir}/man5/login.access.5* %{_prefix}/bin/%{name}-rcp %{bindir}/bin/rcp %{_mandir}/man1/%{name}-rcp.1* %{_prefix}/bin/%{name}-rsh %{bindir}/bin/rsh %{_mandir}/man1/%{name}-rsh.1* %{_prefix}/bin/%{name}-telnet %{bindir}/bin/telnet %{_mandir}/man1/%{name}-telnet.1* # NOTICE: no support for X11 #%%{_prefix}/bin/rxtelnet #%%{_mandir}/man1/rxtelnet.1* #%%{_mandir}/cat1/rxtelnet.1* %files appl-servers %if ! 0%{?_with_systemd} %config(noreplace) %{_sysconfdir}/xinetd.d/%{name}-ftpd %config(noreplace) %{_sysconfdir}/xinetd.d/%{name}-rshd %config(noreplace) %{_sysconfdir}/xinetd.d/%{name}-telnetd %endif %{_libexecdir}/%{name}-telnetd %{_mandir}/man8/%{name}-telnetd.8* %{_libexecdir}/%{name}-ftpd %{_mandir}/man8/%{name}-ftpd.8* %{_libexecdir}/%{name}-rshd %{_mandir}/man8/%{name}-rshd.8* %files devel %dir %{_libexecdir}/%{name} %{_bindir}/%{name}-krb5-config %{bindir}/bin/krb5-config %{_mandir}/man1/%{name}-krb5-config.1* %{_includedir}/* %{libdir}/lib*.a %{libdir}/windc.a %{_mandir}/man3/* %{_mandir}/man7/* %if (0%{?rhel} && 0%{?rhel} < 6) %{_bindir}/%{name}-compile_et %{bindir}/bin/compile_et %endif %{_libexecdir}/%{name}/asn1_compile %{_libexecdir}/%{name}/asn1_print %{_libexecdir}/%{name}/slc %files path %{_sysconfdir}/profile.d/%{name}.sh %{_sysconfdir}/profile.d/%{name}.csh %changelog * Mon Jul 07 2014 Ken Dreyer - 1.6.0-0.9.20140621gita5adc06 - Remove OpenSSL BR and go back to using hcrypto with bundled libtommath. OpenSSL is not thread safe without callbacks (RHBZ #1118462) * Tue Jul 01 2014 Ken Dreyer - 1.6.0-0.8.20140621gita5adc06 - Patch for parallel build failure in kadm5. Thanks Jakub Čajka. - Remove comments about X11 binaries (we will never ship those). * Sun Jun 22 2014 Ken Dreyer - 1.6.0-0.7.20140621gita5adc06 - Update git snapshot to latest tip of heimdal-1-6-branch * Sat Jun 07 2014 Ken Dreyer - 1.6.0-0.6.20140606git966108b - Update git snapshot to latest tip of heimdal-1-6-branch - Don't ship xinetd support if the distro has systemd (RHBZ #613001) * Fri May 30 2014 Ken Dreyer - 1.6.0-0.5.20140529gitddde77b - Update git snapshot to latest tip of heimdal-1-6-branch - Use /sbin path in %%pre/%%post scripts for EL6 and EL5 - Install login.users(5) normally, since it doesn't conflict with anything (RHBZ #613001) - Don't ship ftpusers(5) (RHBZ #613001) - Patch heimtools to deal with the commands' "heimdal-" prefixes (RHBZ #613001) - Use "simple" systemd service type for kdc, kadmind, kpasswdd - Add "--detach" flag in heimdal-ipropd-slave-wrapper to match the systemd forking service type - Patch kadmind to handle systemd's restrictions on setpgid() (RHBZ #613001) * Thu May 22 2014 Ken Dreyer - 1.6.0-0.4.20140522git229d8c7 - Update git snapshot to latest tip of heimdal-1-6-branch - Drop upstreamed text-fx patch - Install Texinfo files (RHBZ #613001) - Add Provides: heimdal-static to -devel subpackage (RHBZ #613001) - Drop %%defattr (RHBZ #613001) - Add text content to kadmind.acl to help users (and remove a zero-length file) - Install profile.d scripts with non-executable permissions - Remove .la files - Patch to remove AC_PROG_LIBTOOL macro - Reload xinetd when using systemd - Require logrotate and setup, since we drop config files into directories that these packages own. - Add unowned Heimdal directories in %%files - Replace "heimdal" with %%{name} in %%files - Do not BR libcap-ng-devel on EL5 * Tue Apr 29 2014 Ken Dreyer - 1.6.0-0.3.20140429gitd60ba47 - Add BR libdb-devel on Fedora (RHBZ #613001) - Add BR openssl-devel and libcap-ng-devel (RHBZ #613001) - Only set BuildRoot on el5 - Alphabetize non-conditional BuildRequires - Remove duplicate BR openldap-devel * Tue Apr 29 2014 Ken Dreyer - 1.6.0-0.2.20140326git7e6b55 - Update git snapshot to latest tip of heimdal-1-6-branch - Rename Source11 with "heimdal-" prefix - Use newer macro for UnversionedDocdirs change * Mon Jan 06 2014 Ken Dreyer - 1.6.0-0.1.20140106git46a508 - Package git snapshot from master branch * Wed Oct 16 2013 Ken Dreyer - 1.5.3-24.20130903gitb074e0b - Disable autogen and parallel make on EL5 - Add pregenerated autoconf tarball as Source1 - Add script to pregenerate autoconf files as Source2 * Tue Sep 10 2013 Alexander Boström - 1.5.3-23.20130903gitb074e0b - Fix build. (Problem with symlinks to kcc.) * Thu Sep 05 2013 Alexander Boström - 1.5.3-22.20130903gitb074e0b - Rename rename kcc to heimdal-kcc (conflicts in el5 and fedora) - Rename kswitch to heimdal-kswitch in el6 too * Tue Sep 03 2013 Alexander Boström - 1.5.3-21.20130903gitb074e0b - Update to latest git snapshot of heimdal-1-5-branch - remove upstreamed patch * Tue Sep 03 2013 Alexander Boström - 1.5.3-20.20130813gitdcc7c13 - Split ipv6_loopbacks_fix.patch into one backport and one smaller change * Tue Aug 20 2013 Ken Dreyer - 1.5.3-19.20130813gitdcc7c13 - Build against libedit instead of readline (avoid GPL entanglements) * Tue Aug 13 2013 Ken Dreyer - 1.5.3-18.20130813gitdcc7c13 - Update to latest git snapshot of heimdal-1-5-branch - remove upstreamed texinfo patches * Tue Aug 13 2013 Alexander Boström - 1.5.3-17.20130730gitd9b3691 - remove workaround for bogus check-iprop check failure * Mon Aug 12 2013 Alexander Boström - 1.5.3-16.20130730gitd9b3691 - buildreq groff on el6 and older - remove most comments from sysconfig file - systemd: only use /etc/sysconfig/heimdal to specify the iprop master host, via a wrapper script - systemd: use Type=forking - make systemd the default, check for known sysv systems * Mon Aug 12 2013 Ken Dreyer - 1.5.3-15.20130812git29f0a90 - Update to latest git snapshot of heimdal-1-5-branch * Mon Aug 12 2013 Alexander Boström - 1.5.3-14.20130730gitd9b3691 - do not ghost files in owned directory * Mon Aug 12 2013 Alexander Boström - 1.5.3-13.20130730gitd9b3691 - use global instead of define * Mon Aug 12 2013 Alexander Boström - 1.5.3-12.20130730gitd9b3691 - add doc references to unit files * Mon Aug 12 2013 Alexander Boström - 1.5.3-11.20130730gitd9b3691 - add missing req on xinetd - remove slash after buildroot macro usage - preserve timestamps of installed files - move slaves config file to /etc - no attributes on symlinks - only ghost own the slave-stats file * Fri Aug 09 2013 Ken Dreyer - 1.5.3-10.20130730gitd9b3691 - add systemd files and _with_systemd conditional - remove "--detach" from sysconfig comments - tweak kadmind service description - add comments about texinfo patches * Fri Aug 09 2013 Alexander Boström - 1.5.3-9.20130730gitd9b3691 - SysV scriptlets and initscript cleanups - xinetd services ipv6 enabled * Thu Aug 08 2013 Ken Dreyer - 1.5.3-8.20130730gitd9b3691 - Add Debian's texinfo patch to hx509, plus my own hacks for 5.1 * Thu Aug 08 2013 Ken Dreyer - 1.5.3-7.20130730gitd9b3691 - Add missing groff buildreq on F19 and above - Tweak Summary * Thu Aug 08 2013 Alexander Boström - 1.5.3-6 - Add missing buildreqs * Thu Aug 08 2013 Alexander Boström - 1.5.3-5 - Update to post 1.5.3 snapshot, deprecating a couple of patches - Add autogen.sh and extra BRs, build fixes. * Thu Aug 08 2013 Alexander Boström - 1.5.3-4 - No autoreconf - More robust ?rhel macro usage - BR libcom_err-devel instead of e2fsprogs-devel (but not on el5) - el5 build fixes * Tue Aug 06 2013 Alexander Boström - 1.5.3-3 - Add heimdal-des-key-selection.patch * Tue Aug 06 2013 Alexander Boström - 1.5.3-2 - Use upstream tarball. - Remove unused patches. - Fix heimdal-kdc.conf - Handle the case of no .mo files * Tue Aug 06 2013 Ken Dreyer - 1.5.3-1 - Update to 1.5.3 (tag from Git) - Use the find_lang macro to include the translation files - Add Getopt patch in order to build with Fedora's newer Perl - Adjust Group to satisfy rpmlint - Remove macros from comments to satisfy rpmlint * Mon Jul 29 2013 Alexander Boström - 1.5.2-3.kth.19 - really fix prefix munge patch - fix texi build * Wed Jul 3 2013 Alexander Boström - 1.5.2-3.kth.18 - fix prefix munge patch * Tue Jul 2 2013 Alexander Boström - 1.5.2-3.kth.17 - rename kswitch to heimdal-kswitch (except on el6) * Tue Jul 2 2013 Alexander Boström - 1.5.2-3.kth.16 - ignore missing otp binaries * Fri Jun 28 2013 Alexander Boström - 1.5.2-3.kth.15 - fix license, fix macro-in-changelog * Fri Jun 28 2013 Alexander Boström - 1.5.2-3.kth.14 - enable dns_lookup_realm and dns_lookup_kdc in the sample config file - changed logrotate conf, postrotate should not be required - add kdc.conf - move kadmind.acl to sysconfdir * Thu Jun 27 2013 Alexander Boström - 1.5.2-3.kth.13 - fix qop man symlink * Thu Jun 27 2013 Alexander Boström - 1.5.2-3.kth.12 - workstation does not require xinetd - fix paths in xinetd confs * Wed Jun 26 2013 Alexander Boström - 1.5.2-3.kth.11 - fix symlinks * Wed Jun 26 2013 Alexander Boström - 1.5.2-3.kth.10 - provide/obsolete heimdal-kdc * Wed Apr 10 2013 Alexander Boström - 1.5.2-3.kth.9 - make PATH manipulation an optional subpackage * Wed Apr 10 2013 Alexander Boström - 1.5.2-3.kth.8 - rename to heimdal-* instead of *.heimdal * Tue Apr 9 2013 Alexander Boström - 1.5.2-3.kth.7 - split init script into multiple services * Tue Apr 9 2013 Alexander Boström - 1.5.2-3.kth.6 - move su to the workstation subpkg * Tue Apr 9 2013 Alexander Boström - 1.5.2-3.kth.5 - Add symlinks in the bin dir. * Tue Apr 9 2013 Alexander Boström - 1.5.2-3.kth.4 - Reuse /etc/security/access.conf from PAM. * Tue Apr 9 2013 Alexander Boström - 1.5.2-3.kth.3 - move daemon binaries to regular libexec dir, with executable name suffix * Mon Apr 8 2013 Alexander Boström - 1.5.2-3.kth.2 - move binaries from /usr/lib64/heimdal/bin to /usr/lib/heimdal/bin * Mon Apr 8 2013 Alexander Boström - 1.5.2-3.kth.1 - disable tests * Wed Jul 4 2012 Rok Papež, ARNES - 1.5.2-3 - updated to upstream 1.5.2 - added support for Fedora 17 - fixed wrong PATH on x86_64 - fixed IPv6 and multiple interfaces bug in krb5_parse_address: https://bugzilla.redhat.com/show_bug.cgi?id=808147 - added support for .heimdal prefix to kcc * Tue Oct 4 2011 Rok Papež, ARNES - 1.5.1-1 - updated to upstream 1.5.1 * Tue Sep 27 2011 Rok Papež, ARNES - 1.5.1.pre20110912git-2 - FESCo updates: https://fedorahosted.org/fesco/ticket/577 - Implicit requires removed, rpmbuild can figure them out itself - Implicit provides removed, we are NOT compatible with krb5 - Enable hardened build: https://fedoraproject.org/wiki/Packaging:Guidelines#PIE https://fedoraproject.org/wiki/User:Kevin/DRAFT_When_to_use_PIE_compiler_flags - Merged updates from Orion Poplawski * Mon Sep 12 2011 Rok Papež, ARNES - 1.5.1.pre20110912git-1.arnes - Updated to Heimdal 1.5.1.pre20110912git * Tue Nov 30 2010 Rok Papež, ARNES - 1.4.1rc1-1.arnes - Updated to Heimdal 1.4.1rc1 * Fri Jul 09 2010 Rok Papež, ARNES - 1.3.3-1.arnes - Updated to Heimdal 1.3.3 * Wed Apr 21 2010 Rok Papež, ARNES - 1.3.2-2.arnes - Updated to Heimdal 1.3.2 * Thu Sep 17 2009 Rok Papež, ARNES - 1.3.0pre9-1 - Updated to Heimdal 1.3.0pre9 - Building on CentOS 5.3 i386 and Fedora 11 x86_64. * Wed Jun 10 2009 Rok Papež, ARNES - 1.2.1-9 - Fixed build for CentOS 4.7 (thanks to Nitzan Zaifman for bugreport) * Mon Jun 8 2009 Rok Papež, ARNES - 1.2.1-8 - Fixed paths for building on CentOS 5.3 - Rebuilt for CentOS 5.3 - removed obsolete X11 dependency * Thu Feb 19 2009 Mitja Mihelic, ARNES - 1.2.1-7 - added dependency on xinetd for heimdal-workstation * Tue Jan 20 2009 Rok Papež, ARNES - Fixed permissions * Wed Oct 8 2008 Rok Papež, ARNES - New specs for Heimdel 1.2.1, suggestions taken from both PDC and Mandrake specs file. - Need to be compatible with MIT Kerberos 5 installation. - Let MIT have priority