"Fossies" - the Fresh Open Source Software Archive

Member "sssd-2.4.2/contrib/sssd.spec.in" (19 Feb 2021, 31616 Bytes) of package /linux/misc/sssd-2.4.2.tar.gz:


As a special service "Fossies" has tried to format the requested text file into HTML format (style: standard) with prefixed line numbers. Alternatively you can here view or download the uninterpreted source code file. See also the latest Fossies "Diffs" side-by-side code changes report for "sssd.spec.in": 2.4.1_vs_2.4.2.

    1 # SSSD SPEC file for Fedora 34+ and RHEL-9+
    2 
    3 # define SSSD user
    4 %if 0%{?rhel}
    5 %global sssd_user sssd
    6 %else
    7 %global sssd_user root
    8 %endif
    9 
   10 # Set setuid bit on child helpers if we support non-root user.
   11 %if "%{sssd_user}" == "root"
   12 %global child_attrs 0750
   13 %else
   14 %global child_attrs 4750
   15 %endif
   16 
   17 # we don't want to provide private python extension libs
   18 %define __provides_exclude_from %{python3_sitearch}/.*\.so$
   19 
   20 %define _hardened_build 1
   21 
   22 # Determine the location of the LDB modules directory
   23 %global ldb_modulesdir %(pkg-config --variable=modulesdir ldb)
   24 %global ldb_version 1.2.0
   25 
   26 %global samba_package_version %(rpm -q samba-devel --queryformat %{version}-%{release})
   27 
   28 Name: @PACKAGE_NAME@
   29 Version: @PACKAGE_VERSION@
   30 Release: 0@PRERELEASE_VERSION@%{?dist}
   31 Summary: System Security Services Daemon
   32 License: GPLv3+
   33 URL: https://github.com/SSSD/sssd/
   34 Source0: %{url}/archive/%{version}/%{name}-%{version}.tar.gz
   35 
   36 ### Patches ###
   37 # Place your patches here:
   38 # Patch0001:  0001-patch-file.patch
   39 
   40 ### Downstream only patches ###
   41 # Place your downstream only patches here:
   42 # Patch0901: 0901-downstream-only-patch-file.patch
   43 
   44 ### Dependencies ###
   45 
   46 Requires: sssd-ad = %{version}-%{release}
   47 Requires: sssd-common = %{version}-%{release}
   48 Requires: sssd-ipa = %{version}-%{release}
   49 Requires: sssd-krb5 = %{version}-%{release}
   50 Requires: sssd-ldap = %{version}-%{release}
   51 Recommends: sssd-proxy = %{version}-%{release}
   52 Recommends: logrotate
   53 Suggests: python3-sssdconfig = %{version}-%{release}
   54 Suggests: sssd-dbus = %{version}-%{release}
   55 
   56 %global servicename sssd
   57 %global sssdstatedir %{_localstatedir}/lib/sss
   58 %global dbpath %{sssdstatedir}/db
   59 %global keytabdir %{sssdstatedir}/keytabs
   60 %global pipepath %{sssdstatedir}/pipes
   61 %global mcpath %{sssdstatedir}/mc
   62 %global pubconfpath %{sssdstatedir}/pubconf
   63 %global gpocachepath %{sssdstatedir}/gpo_cache
   64 %global secdbpath %{sssdstatedir}/secrets
   65 %global deskprofilepath %{sssdstatedir}/deskprofile
   66 
   67 ### Build Dependencies ###
   68 
   69 BuildRequires: autoconf
   70 BuildRequires: automake
   71 BuildRequires: bind-utils
   72 BuildRequires: c-ares-devel
   73 BuildRequires: check-devel
   74 BuildRequires: cifs-utils-devel
   75 BuildRequires: dbus-devel
   76 BuildRequires: docbook-style-xsl
   77 BuildRequires: doxygen
   78 BuildRequires: findutils
   79 BuildRequires: gcc
   80 BuildRequires: gdm-pam-extensions-devel
   81 BuildRequires: gettext-devel
   82 BuildRequires: glib2-devel
   83 # required for p11_child smartcard tests
   84 BuildRequires: gnutls-utils
   85 BuildRequires: jansson-devel
   86 BuildRequires: keyutils-libs-devel
   87 BuildRequires: krb5-devel
   88 BuildRequires: libcmocka-devel >= 1.0.0
   89 BuildRequires: libdhash-devel >= 0.4.2
   90 BuildRequires: libini_config-devel >= 1.1
   91 BuildRequires: libldb-devel >= %{ldb_version}
   92 BuildRequires: libnfsidmap-devel
   93 BuildRequires: libnl3-devel
   94 BuildRequires: libselinux-devel
   95 BuildRequires: libsemanage-devel
   96 BuildRequires: libsmbclient-devel
   97 BuildRequires: libtalloc-devel
   98 BuildRequires: libtdb-devel
   99 BuildRequires: libtevent-devel
  100 BuildRequires: libtool
  101 BuildRequires: libuuid-devel
  102 BuildRequires: libxml2
  103 BuildRequires: libxslt
  104 BuildRequires: m4
  105 BuildRequires: make
  106 BuildRequires: nss_wrapper
  107 BuildRequires: openldap-devel
  108 BuildRequires: openssh
  109 BuildRequires: openssl-devel
  110 BuildRequires: p11-kit-devel
  111 BuildRequires: pam_wrapper
  112 BuildRequires: pam-devel
  113 BuildRequires: pcre-devel
  114 BuildRequires: pkgconfig
  115 BuildRequires: popt-devel
  116 BuildRequires: python3-devel
  117 BuildRequires: samba-devel
  118 # required for idmap_sss.so
  119 BuildRequires: samba-winbind
  120 BuildRequires: selinux-policy-targeted
  121 # required for p11_child smartcard tests
  122 BuildRequires: softhsm >= 2.1.0
  123 BuildRequires: systemd-devel
  124 BuildRequires: systemtap-sdt-devel
  125 BuildRequires: uid_wrapper
  126 
  127 %description
  128 Provides a set of daemons to manage access to remote directories and
  129 authentication mechanisms. It provides an NSS and PAM interface toward
  130 the system and a pluggable back end system to connect to multiple different
  131 account sources. It is also the basis to provide client auditing and policy
  132 services for projects like FreeIPA.
  133 
  134 The sssd subpackage is a meta-package that contains the daemon as well as all
  135 the existing back ends.
  136 
  137 %package common
  138 Summary: Common files for the SSSD
  139 License: GPLv3+
  140 # Requires
  141 # due to ABI changes in 1.1.30/1.2.0
  142 Requires: libldb >= %{ldb_version}
  143 Requires: sssd-client%{?_isa} = %{version}-%{release}
  144 Recommends: libsss_sudo = %{version}-%{release}
  145 Recommends: libsss_autofs%{?_isa} = %{version}-%{release}
  146 Recommends: sssd-nfs-idmap = %{version}-%{release}
  147 Requires: libsss_idmap = %{version}-%{release}
  148 Requires: libsss_certmap = %{version}-%{release}
  149 %if 0%{?rhel}
  150 Requires(pre): shadow-utils
  151 %endif
  152 %{?systemd_requires}
  153 
  154 ### Provides ###
  155 Provides: libsss_sudo-devel = %{version}-%{release}
  156 Obsoletes: libsss_sudo-devel <= 1.10.0-7%{?dist}.beta1
  157 
  158 %description common
  159 Common files for the SSSD. The common package includes all the files needed
  160 to run a particular back end, however, the back ends are packaged in separate
  161 subpackages such as sssd-ldap.
  162 
  163 %package client
  164 Summary: SSSD Client libraries for NSS and PAM
  165 License: LGPLv3+
  166 Requires: libsss_nss_idmap = %{version}-%{release}
  167 Requires: libsss_idmap = %{version}-%{release}
  168 Requires(post): /sbin/ldconfig
  169 Requires(post):  /usr/sbin/alternatives
  170 Requires(preun): /usr/sbin/alternatives
  171 
  172 %description client
  173 Provides the libraries needed by the PAM and NSS stacks to connect to the SSSD
  174 service.
  175 
  176 %package -n libsss_sudo
  177 Summary: A library to allow communication between SUDO and SSSD
  178 License: LGPLv3+
  179 Conflicts: sssd-common < %{version}-%{release}
  180 
  181 %description -n libsss_sudo
  182 A utility library to allow communication between SUDO and SSSD
  183 
  184 %package -n libsss_autofs
  185 Summary: A library to allow communication between Autofs and SSSD
  186 License: LGPLv3+
  187 Conflicts: sssd-common < %{version}-%{release}
  188 
  189 %description -n libsss_autofs
  190 A utility library to allow communication between Autofs and SSSD
  191 
  192 %package tools
  193 Summary: Userspace tools for use with the SSSD
  194 License: GPLv3+
  195 Requires: sssd-common = %{version}-%{release}
  196 # required by sss_obfuscate
  197 Requires: python3-sss = %{version}-%{release}
  198 Requires: python3-sssdconfig = %{version}-%{release}
  199 Requires: libsss_certmap = %{version}-%{release}
  200 Recommends: sssd-dbus
  201 
  202 %description tools
  203 Provides userspace tools for manipulating users, groups, and nested groups in
  204 SSSD when using id_provider = local in /etc/sssd/sssd.conf.
  205 
  206 Also provides several other administrative tools:
  207     * sss_debuglevel to change the debug level on the fly
  208     * sss_seed which pre-creates a user entry for use in kickstarts
  209     * sss_obfuscate for generating an obfuscated LDAP password
  210     * sssctl -- an sssd status and control utility
  211 
  212 %package -n python3-sssdconfig
  213 Summary: SSSD and IPA configuration file manipulation classes and functions
  214 License: GPLv3+
  215 BuildArch: noarch
  216 %{?python_provide:%python_provide python3-sssdconfig}
  217 
  218 %description -n python3-sssdconfig
  219 Provides python3 files for manipulation SSSD and IPA configuration files.
  220 
  221 %package -n python3-sss
  222 Summary: Python3 bindings for sssd
  223 License: LGPLv3+
  224 Requires: sssd-common = %{version}-%{release}
  225 %{?python_provide:%python_provide python3-sss}
  226 
  227 %description -n python3-sss
  228 Provides python3 module for manipulating users, groups, and nested groups in
  229 SSSD when using id_provider = local in /etc/sssd/sssd.conf.
  230 
  231 Also provides several other useful python3 bindings:
  232     * function for retrieving list of groups user belongs to.
  233     * class for obfuscation of passwords
  234 
  235 %package -n python3-sss-murmur
  236 Summary: Python3 bindings for murmur hash function
  237 License: LGPLv3+
  238 %{?python_provide:%python_provide python3-sss-murmur}
  239 
  240 %description -n python3-sss-murmur
  241 Provides python3 module for calculating the murmur hash version 3
  242 
  243 %package ldap
  244 Summary: The LDAP back end of the SSSD
  245 License: GPLv3+
  246 Requires: sssd-common = %{version}-%{release}
  247 Requires: sssd-krb5-common = %{version}-%{release}
  248 Requires: libsss_idmap = %{version}-%{release}
  249 Requires: libsss_certmap = %{version}-%{release}
  250 
  251 %description ldap
  252 Provides the LDAP back end that the SSSD can utilize to fetch identity data
  253 from and authenticate against an LDAP server.
  254 
  255 %package krb5-common
  256 Summary: SSSD helpers needed for Kerberos and GSSAPI authentication
  257 License: GPLv3+
  258 Requires: cyrus-sasl-gssapi%{?_isa}
  259 Requires: sssd-common = %{version}-%{release}
  260 
  261 %description krb5-common
  262 Provides helper processes that the LDAP and Kerberos back ends can use for
  263 Kerberos user or host authentication.
  264 
  265 %package krb5
  266 Summary: The Kerberos authentication back end for the SSSD
  267 License: GPLv3+
  268 Requires: sssd-common = %{version}-%{release}
  269 Requires: sssd-krb5-common = %{version}-%{release}
  270 
  271 %description krb5
  272 Provides the Kerberos back end that the SSSD can utilize authenticate
  273 against a Kerberos server.
  274 
  275 %package common-pac
  276 Summary: Common files needed for supporting PAC processing
  277 License: GPLv3+
  278 Requires: sssd-common = %{version}-%{release}
  279 Requires: libsss_idmap = %{version}-%{release}
  280 
  281 %description common-pac
  282 Provides common files needed by SSSD providers such as IPA and Active Directory
  283 for handling Kerberos PACs.
  284 
  285 %package ipa
  286 Summary: The IPA back end of the SSSD
  287 License: GPLv3+
  288 Requires: samba-client-libs >= %{samba_package_version}
  289 Requires: sssd-common = %{version}-%{release}
  290 Requires: sssd-krb5-common = %{version}-%{release}
  291 Requires: libipa_hbac%{?_isa} = %{version}-%{release}
  292 Requires: libsss_certmap = %{version}-%{release}
  293 Recommends: bind-utils
  294 Requires: sssd-common-pac = %{version}-%{release}
  295 Requires: libsss_idmap = %{version}-%{release}
  296 
  297 %description ipa
  298 Provides the IPA back end that the SSSD can utilize to fetch identity data
  299 from and authenticate against an IPA server.
  300 
  301 %package ad
  302 Summary: The AD back end of the SSSD
  303 License: GPLv3+
  304 Requires: samba-client-libs >= %{samba_package_version}
  305 Requires: sssd-common = %{version}-%{release}
  306 Requires: sssd-krb5-common = %{version}-%{release}
  307 Requires: sssd-common-pac = %{version}-%{release}
  308 Requires: libsss_idmap = %{version}-%{release}
  309 Requires: libsss_certmap = %{version}-%{release}
  310 Recommends: bind-utils
  311 Recommends: adcli
  312 Suggests: sssd-winbind-idmap = %{version}-%{release}
  313 
  314 %description ad
  315 Provides the Active Directory back end that the SSSD can utilize to fetch
  316 identity data from and authenticate against an Active Directory server.
  317 
  318 %package proxy
  319 Summary: The proxy back end of the SSSD
  320 License: GPLv3+
  321 Requires: sssd-common = %{version}-%{release}
  322 
  323 %description proxy
  324 Provides the proxy back end which can be used to wrap an existing NSS and/or
  325 PAM modules to leverage SSSD caching.
  326 
  327 %package -n libsss_idmap
  328 Summary: FreeIPA Idmap library
  329 License: LGPLv3+
  330 
  331 %description -n libsss_idmap
  332 Utility library to convert SIDs to Unix uids and gids
  333 
  334 %package -n libsss_idmap-devel
  335 Summary: FreeIPA Idmap library
  336 License: LGPLv3+
  337 Requires: libsss_idmap = %{version}-%{release}
  338 
  339 %description -n libsss_idmap-devel
  340 Utility library to SIDs to Unix uids and gids
  341 
  342 %package -n libipa_hbac
  343 Summary: FreeIPA HBAC Evaluator library
  344 License: LGPLv3+
  345 
  346 %description -n libipa_hbac
  347 Utility library to validate FreeIPA HBAC rules for authorization requests
  348 
  349 %package -n libipa_hbac-devel
  350 Summary: FreeIPA HBAC Evaluator library
  351 License: LGPLv3+
  352 Requires: libipa_hbac = %{version}-%{release}
  353 
  354 %description -n libipa_hbac-devel
  355 Utility library to validate FreeIPA HBAC rules for authorization requests
  356 
  357 %package -n python3-libipa_hbac
  358 Summary: Python3 bindings for the FreeIPA HBAC Evaluator library
  359 License: LGPLv3+
  360 Requires: libipa_hbac = %{version}-%{release}
  361 %{?python_provide:%python_provide python3-libipa_hbac}
  362 
  363 %description -n python3-libipa_hbac
  364 The python3-libipa_hbac contains the bindings so that libipa_hbac can be
  365 used by Python applications.
  366 
  367 %package -n libsss_nss_idmap
  368 Summary: Library for SID and certificate based lookups
  369 License: LGPLv3+
  370 
  371 %description -n libsss_nss_idmap
  372 Utility library for SID and certificate based lookups
  373 
  374 %package -n libsss_nss_idmap-devel
  375 Summary: Library for SID and certificate based lookups
  376 License: LGPLv3+
  377 Requires: libsss_nss_idmap = %{version}-%{release}
  378 
  379 %description -n libsss_nss_idmap-devel
  380 Utility library for SID and certificate based lookups
  381 
  382 %package -n python3-libsss_nss_idmap
  383 Summary: Python3 bindings for libsss_nss_idmap
  384 License: LGPLv3+
  385 Requires: libsss_nss_idmap = %{version}-%{release}
  386 %{?python_provide:%python_provide python3-libsss_nss_idmap}
  387 
  388 %description -n python3-libsss_nss_idmap
  389 The python3-libsss_nss_idmap contains the bindings so that libsss_nss_idmap can
  390 be used by Python applications.
  391 
  392 %package dbus
  393 Summary: The D-Bus responder of the SSSD
  394 License: GPLv3+
  395 Requires: sssd-common = %{version}-%{release}
  396 %{?systemd_requires}
  397 
  398 %description dbus
  399 Provides the D-Bus responder of the SSSD, called the InfoPipe, that allows
  400 the information from the SSSD to be transmitted over the system bus.
  401 
  402 %if 0%{?rhel}
  403 %package polkit-rules
  404 Summary: Rules for polkit integration for SSSD
  405 Group: Applications/System
  406 License: GPLv3+
  407 Requires: polkit >= 0.106
  408 Requires: sssd-common = %{version}-%{release}
  409 
  410 %description polkit-rules
  411 Provides rules for polkit integration with SSSD. This is required
  412 for smartcard support.
  413 %endif
  414 
  415 %package -n libsss_simpleifp
  416 Summary: The SSSD D-Bus responder helper library
  417 License: GPLv3+
  418 Requires: sssd-dbus = %{version}-%{release}
  419 
  420 %description -n libsss_simpleifp
  421 Provides library that simplifies D-Bus API for the SSSD InfoPipe responder.
  422 
  423 %package -n libsss_simpleifp-devel
  424 Summary: The SSSD D-Bus responder helper library
  425 License: GPLv3+
  426 Requires: dbus-devel
  427 Requires: libsss_simpleifp = %{version}-%{release}
  428 
  429 %description -n libsss_simpleifp-devel
  430 Provides library that simplifies D-Bus API for the SSSD InfoPipe responder.
  431 
  432 %package winbind-idmap
  433 Summary: SSSD's idmap_sss Backend for Winbind
  434 License: GPLv3+ and LGPLv3+
  435 Requires: libsss_nss_idmap = %{version}-%{release}
  436 Requires: libsss_idmap = %{version}-%{release}
  437 Conflicts: sssd-common < %{version}-%{release}
  438 
  439 %description winbind-idmap
  440 The idmap_sss module provides a way for Winbind to call SSSD to map UIDs/GIDs
  441 and SIDs.
  442 
  443 %package nfs-idmap
  444 Summary: SSSD plug-in for NFSv4 rpc.idmapd
  445 License: GPLv3+
  446 Conflicts: sssd-common < %{version}-%{release}
  447 
  448 %description nfs-idmap
  449 The libnfsidmap sssd module provides a way for rpc.idmapd to call SSSD to map
  450 UIDs/GIDs to names and vice versa. It can be also used for mapping principal
  451 (user) name to IDs(UID or GID) or to obtain groups which user are member of.
  452 
  453 %package -n libsss_certmap
  454 Summary: SSSD Certificate Mapping Library
  455 License: LGPLv3+
  456 Conflicts: sssd-common < %{version}-%{release}
  457 
  458 %description -n libsss_certmap
  459 Library to map certificates to users based on rules
  460 
  461 %package -n libsss_certmap-devel
  462 Summary: SSSD Certificate Mapping Library
  463 License: LGPLv3+
  464 Requires: libsss_certmap = %{version}-%{release}
  465 
  466 %description -n libsss_certmap-devel
  467 Library to map certificates to users based on rules
  468 
  469 %package kcm
  470 Summary: An implementation of a Kerberos KCM server
  471 License: GPLv3+
  472 Requires: sssd-common = %{version}-%{release}
  473 %{?systemd_requires}
  474 
  475 %description kcm
  476 An implementation of a Kerberos KCM server. Use this package if you want to
  477 use the KCM: Kerberos credentials cache.
  478 
  479 %prep
  480 %autosetup -p1
  481 
  482 %build
  483 
  484 autoreconf -ivf
  485 
  486 %configure \
  487     --disable-rpath \
  488     --disable-static \
  489     --enable-gss-spnego-for-zero-maxssf \
  490     --enable-nfsidmaplibdir=%{_libdir}/libnfsidmap \
  491     --enable-nsslibdir=%{_libdir} \
  492     --enable-pammoddir=%{_libdir}/security \
  493     --enable-sss-default-nss-plugin \
  494     --enable-systemtap \
  495     --with-db-path=%{dbpath} \
  496     --with-gpo-cache-path=%{gpocachepath} \
  497     --with-init-dir=%{_initrddir} \
  498     --with-initscript=systemd \
  499     --with-krb5-rcache-dir=%{_localstatedir}/cache/krb5rcache \
  500     --with-mcache-path=%{mcpath} \
  501     --with-pid-path=%{_rundir} \
  502     --with-pipe-path=%{pipepath} \
  503     --with-pubconf-path=%{pubconfpath} \
  504     --with-sssd-user=%{sssd_user} \
  505     --with-syslog=journald \
  506     --with-test-dir=/dev/shm \
  507 %if 0%{?fedora}
  508     --enable-files-domain \
  509     --disable-polkit-rules-path \
  510 %endif
  511     %{nil}
  512 
  513 %make_build all docs runstatedir=%{_rundir}
  514 
  515 sed -i -e 's:/usr/bin/python:/usr/bin/python3:' src/tools/sss_obfuscate
  516 
  517 %check
  518 export CK_TIMEOUT_MULTIPLIER=10
  519 %make_build check VERBOSE=yes
  520 unset CK_TIMEOUT_MULTIPLIER
  521 
  522 %install
  523 
  524 %make_install
  525 
  526 # Prepare language files
  527 /usr/lib/rpm/find-lang.sh $RPM_BUILD_ROOT sssd
  528 
  529 # Copy default logrotate file
  530 mkdir -p $RPM_BUILD_ROOT/%{_sysconfdir}/logrotate.d
  531 install -m644 src/examples/logrotate $RPM_BUILD_ROOT%{_sysconfdir}/logrotate.d/sssd
  532 
  533 # Make sure SSSD is able to run on read-only root
  534 mkdir -p $RPM_BUILD_ROOT/%{_sysconfdir}/rwtab.d
  535 install -m644 src/examples/rwtab $RPM_BUILD_ROOT%{_sysconfdir}/rwtab.d/sssd
  536 
  537 # Kerberos KCM credential cache by default
  538 mkdir -p $RPM_BUILD_ROOT/%{_sysconfdir}/krb5.conf.d
  539 cp $RPM_BUILD_ROOT/%{_datadir}/sssd-kcm/kcm_default_ccache \
  540    $RPM_BUILD_ROOT/%{_sysconfdir}/krb5.conf.d/kcm_default_ccache
  541 
  542 # Create directory for cifs-idmap alternative
  543 # Otherwise this directory could not be owned by sssd-client
  544 mkdir -p $RPM_BUILD_ROOT/%{_sysconfdir}/cifs-utils
  545 
  546 # Remove .la files created by libtool
  547 find $RPM_BUILD_ROOT -name "*.la" -exec rm -f {} \;
  548 
  549 # Suppress developer-only documentation
  550 rm -Rf ${RPM_BUILD_ROOT}/%{_docdir}/%{name}
  551 
  552 # Older versions of rpmbuild can only handle one -f option
  553 # So we need to append to the sssd*.lang file
  554 for file in `ls $RPM_BUILD_ROOT/%{python3_sitelib}/*.egg-info 2> /dev/null`
  555 do
  556     echo %{python3_sitelib}/`basename $file` >> python3_sssdconfig.lang
  557 done
  558 
  559 touch sssd.lang
  560 for subpackage in sssd_ldap sssd_krb5 sssd_ipa sssd_ad sssd_proxy sssd_tools \
  561                   sssd_client sssd_dbus sssd_nfs_idmap sssd_winbind_idmap \
  562                   libsss_certmap sssd_kcm
  563 do
  564     touch $subpackage.lang
  565 done
  566 
  567 for man in `find $RPM_BUILD_ROOT/%{_mandir}/??/man?/ -type f | sed -e "s#$RPM_BUILD_ROOT/%{_mandir}/##"`
  568 do
  569     lang=`echo $man | cut -c 1-2`
  570     case `basename $man` in
  571         sss_cache*)
  572             echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd.lang
  573             ;;
  574         sss_ssh*)
  575             echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd.lang
  576             ;;
  577         sss_rpcidmapd*)
  578             echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd_nfs_idmap.lang
  579             ;;
  580         sss_*)
  581             echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd_tools.lang
  582             ;;
  583         sssctl*)
  584             echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd_tools.lang
  585             ;;
  586         sssd_krb5_*)
  587             echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd_client.lang
  588             ;;
  589         pam_sss*)
  590             echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd_client.lang
  591             ;;
  592         sssd-ldap*)
  593             echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd_ldap.lang
  594             ;;
  595         sssd-krb5*)
  596             echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd_krb5.lang
  597             ;;
  598         sssd-ipa*)
  599             echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd_ipa.lang
  600             ;;
  601         sssd-ad*)
  602             echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd_ad.lang
  603             ;;
  604         sssd-proxy*)
  605             echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd_proxy.lang
  606             ;;
  607         sssd-ifp*)
  608             echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd_dbus.lang
  609             ;;
  610         sssd-kcm*)
  611             echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd_kcm.lang
  612             ;;
  613         idmap_sss*)
  614             echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd_winbind_idmap.lang
  615             ;;
  616         sss-certmap*)
  617             echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> libsss_certmap.lang
  618             ;;
  619         *)
  620             echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd.lang
  621             ;;
  622     esac
  623 done
  624 
  625 # Print these to the rpmbuild log
  626 echo "sssd.lang:"
  627 cat sssd.lang
  628 
  629 echo "python3_sssdconfig.lang:"
  630 cat python3_sssdconfig.lang
  631 
  632 for subpackage in sssd_ldap sssd_krb5 sssd_ipa sssd_ad sssd_proxy sssd_tools \
  633                   sssd_client sssd_dbus sssd_nfs_idmap sssd_winbind_idmap \
  634                   libsss_certmap sssd_kcm
  635 do
  636     echo "$subpackage.lang:"
  637     cat $subpackage.lang
  638 done
  639 
  640 %files
  641 %license COPYING
  642 
  643 %files common -f sssd.lang
  644 %license COPYING
  645 %doc src/examples/sssd-example.conf
  646 %{_sbindir}/sssd
  647 %{_unitdir}/sssd.service
  648 %{_unitdir}/sssd-autofs.socket
  649 %{_unitdir}/sssd-autofs.service
  650 %{_unitdir}/sssd-nss.socket
  651 %{_unitdir}/sssd-nss.service
  652 %{_unitdir}/sssd-pac.socket
  653 %{_unitdir}/sssd-pac.service
  654 %{_unitdir}/sssd-pam.socket
  655 %{_unitdir}/sssd-pam-priv.socket
  656 %{_unitdir}/sssd-pam.service
  657 %{_unitdir}/sssd-ssh.socket
  658 %{_unitdir}/sssd-ssh.service
  659 %{_unitdir}/sssd-sudo.socket
  660 %{_unitdir}/sssd-sudo.service
  661 
  662 %dir %{_libexecdir}/%{servicename}
  663 %{_libexecdir}/%{servicename}/sssd_be
  664 %{_libexecdir}/%{servicename}/sssd_nss
  665 %{_libexecdir}/%{servicename}/sssd_pam
  666 %{_libexecdir}/%{servicename}/sssd_autofs
  667 %{_libexecdir}/%{servicename}/sssd_ssh
  668 %{_libexecdir}/%{servicename}/sssd_sudo
  669 %{_libexecdir}/%{servicename}/p11_child
  670 %{_libexecdir}/%{servicename}/sssd_check_socket_activated_responders
  671 
  672 %dir %{_libdir}/%{name}
  673 # The files provider is intentionally packaged in -common
  674 %{_libdir}/%{name}/libsss_files.so
  675 %{_libdir}/%{name}/libsss_simple.so
  676 
  677 #Internal shared libraries
  678 %{_libdir}/%{name}/libsss_child.so
  679 %{_libdir}/%{name}/libsss_crypt.so
  680 %{_libdir}/%{name}/libsss_cert.so
  681 %{_libdir}/%{name}/libsss_debug.so
  682 %{_libdir}/%{name}/libsss_krb5_common.so
  683 %{_libdir}/%{name}/libsss_ldap_common.so
  684 %{_libdir}/%{name}/libsss_util.so
  685 %{_libdir}/%{name}/libsss_semanage.so
  686 %{_libdir}/%{name}/libifp_iface.so
  687 %{_libdir}/%{name}/libifp_iface_sync.so
  688 %{_libdir}/%{name}/libsss_iface.so
  689 %{_libdir}/%{name}/libsss_iface_sync.so
  690 %{_libdir}/%{name}/libsss_sbus.so
  691 %{_libdir}/%{name}/libsss_sbus_sync.so
  692 
  693 %{ldb_modulesdir}/memberof.so
  694 %{_bindir}/sss_ssh_authorizedkeys
  695 %{_bindir}/sss_ssh_knownhostsproxy
  696 %{_sbindir}/sss_cache
  697 %{_libexecdir}/%{servicename}/sss_signal
  698 
  699 %dir %{sssdstatedir}
  700 %dir %{_localstatedir}/cache/krb5rcache
  701 %attr(700,%{sssd_user},%{sssd_user}) %dir %{dbpath}
  702 %attr(775,%{sssd_user},%{sssd_user}) %dir %{mcpath}
  703 %attr(700,root,root) %dir %{secdbpath}
  704 %attr(751,root,root) %dir %{deskprofilepath}
  705 %ghost %attr(0664,%{sssd_user},%{sssd_user}) %verify(not md5 size mtime) %{mcpath}/passwd
  706 %ghost %attr(0664,%{sssd_user},%{sssd_user}) %verify(not md5 size mtime) %{mcpath}/group
  707 %ghost %attr(0664,%{sssd_user},%{sssd_user}) %verify(not md5 size mtime) %{mcpath}/initgroups
  708 %attr(755,%{sssd_user},%{sssd_user}) %dir %{pipepath}
  709 %attr(750,%{sssd_user},root) %dir %{pipepath}/private
  710 %attr(755,%{sssd_user},%{sssd_user}) %dir %{pubconfpath}
  711 %attr(755,%{sssd_user},%{sssd_user}) %dir %{gpocachepath}
  712 %attr(750,%{sssd_user},%{sssd_user}) %dir %{_var}/log/%{name}
  713 %attr(700,%{sssd_user},%{sssd_user}) %dir %{_sysconfdir}/sssd
  714 %attr(711,%{sssd_user},%{sssd_user}) %dir %{_sysconfdir}/sssd/conf.d
  715 %attr(711,root,root) %dir %{_sysconfdir}/sssd/pki
  716 %ghost %attr(0600,root,root) %config(noreplace) %{_sysconfdir}/sssd/sssd.conf
  717 %dir %{_sysconfdir}/logrotate.d
  718 %config(noreplace) %{_sysconfdir}/logrotate.d/sssd
  719 %dir %{_sysconfdir}/rwtab.d
  720 %config(noreplace) %{_sysconfdir}/rwtab.d/sssd
  721 %dir %{_datadir}/sssd
  722 %config(noreplace) %{_sysconfdir}/pam.d/sssd-shadowutils
  723 %dir %{_libdir}/%{name}/conf
  724 %{_libdir}/%{name}/conf/sssd.conf
  725 
  726 %{_datadir}/sssd/cfg_rules.ini
  727 %{_mandir}/man1/sss_ssh_authorizedkeys.1*
  728 %{_mandir}/man1/sss_ssh_knownhostsproxy.1*
  729 %{_mandir}/man5/sssd.conf.5*
  730 %{_mandir}/man5/sssd-files.5*
  731 %{_mandir}/man5/sssd-simple.5*
  732 %{_mandir}/man5/sssd-sudo.5*
  733 %{_mandir}/man5/sssd-session-recording.5*
  734 %{_mandir}/man8/sssd.8*
  735 %{_mandir}/man8/sss_cache.8*
  736 %dir %{_datadir}/sssd/systemtap
  737 %{_datadir}/sssd/systemtap/id_perf.stp
  738 %{_datadir}/sssd/systemtap/nested_group_perf.stp
  739 %{_datadir}/sssd/systemtap/dp_request.stp
  740 %{_datadir}/sssd/systemtap/ldap_perf.stp
  741 %dir %{_datadir}/systemtap
  742 %dir %{_datadir}/systemtap/tapset
  743 %{_datadir}/systemtap/tapset/sssd.stp
  744 %{_datadir}/systemtap/tapset/sssd_functions.stp
  745 %{_mandir}/man5/sssd-systemtap.5*
  746 
  747 %if 0%{?rhel}
  748 %files polkit-rules
  749 %{_datadir}/polkit-1/rules.d/*
  750 %endif
  751 
  752 %files ldap -f sssd_ldap.lang
  753 %license COPYING
  754 %{_libdir}/%{name}/libsss_ldap.so
  755 %{_mandir}/man5/sssd-ldap.5*
  756 %{_mandir}/man5/sssd-ldap-attributes.5*
  757 
  758 %files krb5-common
  759 %license COPYING
  760 %attr(755,%{sssd_user},%{sssd_user}) %dir %{pubconfpath}/krb5.include.d
  761 %attr(%{child_attrs},root,%{sssd_user}) %{_libexecdir}/%{servicename}/ldap_child
  762 %attr(%{child_attrs},root,%{sssd_user}) %{_libexecdir}/%{servicename}/krb5_child
  763 
  764 %files krb5 -f sssd_krb5.lang
  765 %license COPYING
  766 %{_libdir}/%{name}/libsss_krb5.so
  767 %{_mandir}/man5/sssd-krb5.5*
  768 
  769 %files common-pac
  770 %license COPYING
  771 %{_libexecdir}/%{servicename}/sssd_pac
  772 
  773 %files ipa -f sssd_ipa.lang
  774 %license COPYING
  775 %attr(700,%{sssd_user},%{sssd_user}) %dir %{keytabdir}
  776 %{_libdir}/%{name}/libsss_ipa.so
  777 %attr(%{child_attrs},root,%{sssd_user}) %{_libexecdir}/%{servicename}/selinux_child
  778 %{_mandir}/man5/sssd-ipa.5*
  779 
  780 %files ad -f sssd_ad.lang
  781 %license COPYING
  782 %{_libdir}/%{name}/libsss_ad.so
  783 %{_libexecdir}/%{servicename}/gpo_child
  784 %{_mandir}/man5/sssd-ad.5*
  785 
  786 %files proxy
  787 %license COPYING
  788 %attr(%{child_attrs},root,%{sssd_user}) %{_libexecdir}/%{servicename}/proxy_child
  789 %{_libdir}/%{name}/libsss_proxy.so
  790 
  791 %files dbus -f sssd_dbus.lang
  792 %license COPYING
  793 %{_libexecdir}/%{servicename}/sssd_ifp
  794 %{_mandir}/man5/sssd-ifp.5*
  795 %{_unitdir}/sssd-ifp.service
  796 # InfoPipe DBus plumbing
  797 %{_sysconfdir}/dbus-1/system.d/org.freedesktop.sssd.infopipe.conf
  798 %{_datadir}/dbus-1/system-services/org.freedesktop.sssd.infopipe.service
  799 
  800 %files -n libsss_simpleifp
  801 %{_libdir}/libsss_simpleifp.so.*
  802 
  803 %files -n libsss_simpleifp-devel
  804 %doc sss_simpleifp_doc/html
  805 %{_includedir}/sss_sifp.h
  806 %{_includedir}/sss_sifp_dbus.h
  807 %{_libdir}/libsss_simpleifp.so
  808 %{_libdir}/pkgconfig/sss_simpleifp.pc
  809 
  810 %files client -f sssd_client.lang
  811 %license src/sss_client/COPYING src/sss_client/COPYING.LESSER
  812 %{_libdir}/libnss_sss.so.2
  813 %{_libdir}/security/pam_sss.so
  814 %{_libdir}/security/pam_sss_gss.so
  815 %{_libdir}/krb5/plugins/libkrb5/sssd_krb5_locator_plugin.so
  816 %{_libdir}/krb5/plugins/authdata/sssd_pac_plugin.so
  817 %dir %{_libdir}/cifs-utils
  818 %{_libdir}/cifs-utils/cifs_idmap_sss.so
  819 %dir %{_sysconfdir}/cifs-utils
  820 %ghost %{_sysconfdir}/cifs-utils/idmap-plugin
  821 %dir %{_libdir}/%{name}
  822 %dir %{_libdir}/%{name}/modules
  823 %{_libdir}/%{name}/modules/sssd_krb5_localauth_plugin.so
  824 %{_mandir}/man8/pam_sss.8*
  825 %{_mandir}/man8/pam_sss_gss.8*
  826 %{_mandir}/man8/sssd_krb5_locator_plugin.8*
  827 
  828 %files -n libsss_sudo
  829 %license src/sss_client/COPYING
  830 %{_libdir}/libsss_sudo.so*
  831 
  832 %files -n libsss_autofs
  833 %license src/sss_client/COPYING src/sss_client/COPYING.LESSER
  834 %dir %{_libdir}/%{name}/modules
  835 %{_libdir}/%{name}/modules/libsss_autofs.so
  836 
  837 %files tools -f sssd_tools.lang
  838 %license COPYING
  839 %{_sbindir}/sss_obfuscate
  840 %{_sbindir}/sss_override
  841 %{_sbindir}/sss_debuglevel
  842 %{_sbindir}/sss_seed
  843 %{_sbindir}/sssctl
  844 %{_mandir}/man8/sss_obfuscate.8*
  845 %{_mandir}/man8/sss_override.8*
  846 %{_mandir}/man8/sss_debuglevel.8*
  847 %{_mandir}/man8/sss_seed.8*
  848 %{_mandir}/man8/sssctl.8*
  849 
  850 %files -n python3-sssdconfig -f python3_sssdconfig.lang
  851 %dir %{python3_sitelib}/SSSDConfig
  852 %{python3_sitelib}/SSSDConfig/*.py*
  853 %dir %{python3_sitelib}/SSSDConfig/__pycache__
  854 %{python3_sitelib}/SSSDConfig/__pycache__/*.py*
  855 %dir %{_datadir}/sssd
  856 %{_datadir}/sssd/sssd.api.conf
  857 %{_datadir}/sssd/sssd.api.d
  858 
  859 %files -n python3-sss
  860 %{python3_sitearch}/pysss.so
  861 
  862 %files -n python3-sss-murmur
  863 %{python3_sitearch}/pysss_murmur.so
  864 
  865 %files -n libsss_idmap
  866 %license src/sss_client/COPYING src/sss_client/COPYING.LESSER
  867 %{_libdir}/libsss_idmap.so.*
  868 
  869 %files -n libsss_idmap-devel
  870 %doc idmap_doc/html
  871 %{_includedir}/sss_idmap.h
  872 %{_libdir}/libsss_idmap.so
  873 %{_libdir}/pkgconfig/sss_idmap.pc
  874 
  875 %files -n libipa_hbac
  876 %license src/sss_client/COPYING src/sss_client/COPYING.LESSER
  877 %{_libdir}/libipa_hbac.so.*
  878 
  879 %files -n libipa_hbac-devel
  880 %doc hbac_doc/html
  881 %{_includedir}/ipa_hbac.h
  882 %{_libdir}/libipa_hbac.so
  883 %{_libdir}/pkgconfig/ipa_hbac.pc
  884 
  885 %files -n libsss_nss_idmap
  886 %license src/sss_client/COPYING src/sss_client/COPYING.LESSER
  887 %{_libdir}/libsss_nss_idmap.so.*
  888 
  889 %files -n libsss_nss_idmap-devel
  890 %doc nss_idmap_doc/html
  891 %{_includedir}/sss_nss_idmap.h
  892 %{_libdir}/libsss_nss_idmap.so
  893 %{_libdir}/pkgconfig/sss_nss_idmap.pc
  894 
  895 %files -n python3-libsss_nss_idmap
  896 %{python3_sitearch}/pysss_nss_idmap.so
  897 
  898 %files -n python3-libipa_hbac
  899 %{python3_sitearch}/pyhbac.so
  900 
  901 %files winbind-idmap -f sssd_winbind_idmap.lang
  902 %dir %{_libdir}/samba/idmap
  903 %{_libdir}/samba/idmap/sss.so
  904 %{_mandir}/man8/idmap_sss.8*
  905 
  906 %files nfs-idmap -f sssd_nfs_idmap.lang
  907 %{_mandir}/man5/sss_rpcidmapd.5*
  908 %{_libdir}/libnfsidmap/sss.so
  909 
  910 %files -n libsss_certmap -f libsss_certmap.lang
  911 %license src/sss_client/COPYING src/sss_client/COPYING.LESSER
  912 %{_libdir}/libsss_certmap.so.*
  913 %{_mandir}/man5/sss-certmap.5*
  914 
  915 %files -n libsss_certmap-devel
  916 %doc certmap_doc/html
  917 %{_includedir}/sss_certmap.h
  918 %{_libdir}/libsss_certmap.so
  919 %{_libdir}/pkgconfig/sss_certmap.pc
  920 
  921 %files kcm -f sssd_kcm.lang
  922 %{_libexecdir}/%{servicename}/sssd_kcm
  923 %config(noreplace) %{_sysconfdir}/krb5.conf.d/kcm_default_ccache
  924 %dir %{_datadir}/sssd-kcm
  925 %{_datadir}/sssd-kcm/kcm_default_ccache
  926 %{_unitdir}/sssd-kcm.socket
  927 %{_unitdir}/sssd-kcm.service
  928 %{_mandir}/man8/sssd-kcm.8*
  929 %{_libdir}/%{name}/libsss_secrets.so
  930 
  931 %if 0%{?rhel}
  932 %pre common
  933 getent group sssd >/dev/null || groupadd -r sssd
  934 getent passwd sssd >/dev/null || useradd -r -g sssd -d / -s /sbin/nologin -c "User for sssd" sssd
  935 %endif
  936 
  937 %post common
  938 %systemd_post sssd.service
  939 %systemd_post sssd-autofs.socket
  940 %systemd_post sssd-nss.socket
  941 %systemd_post sssd-pac.socket
  942 %systemd_post sssd-pam.socket
  943 %systemd_post sssd-pam-priv.socket
  944 %systemd_post sssd-ssh.socket
  945 %systemd_post sssd-sudo.socket
  946 
  947 %preun common
  948 %systemd_preun sssd.service
  949 %systemd_preun sssd-autofs.socket
  950 %systemd_preun sssd-nss.socket
  951 %systemd_preun sssd-pac.socket
  952 %systemd_preun sssd-pam.socket
  953 %systemd_preun sssd-pam-priv.socket
  954 %systemd_preun sssd-ssh.socket
  955 %systemd_preun sssd-sudo.socket
  956 
  957 %postun common
  958 %systemd_postun_with_restart sssd-autofs.socket
  959 %systemd_postun_with_restart sssd-autofs.service
  960 %systemd_postun_with_restart sssd-nss.socket
  961 %systemd_postun_with_restart sssd-nss.service
  962 %systemd_postun_with_restart sssd-pac.socket
  963 %systemd_postun_with_restart sssd-pac.service
  964 %systemd_postun_with_restart sssd-pam.socket
  965 %systemd_postun_with_restart sssd-pam-priv.socket
  966 %systemd_postun_with_restart sssd-pam.service
  967 %systemd_postun_with_restart sssd-ssh.socket
  968 %systemd_postun_with_restart sssd-ssh.service
  969 %systemd_postun_with_restart sssd-sudo.socket
  970 %systemd_postun_with_restart sssd-sudo.service
  971 
  972 %post dbus
  973 %systemd_post sssd-ifp.service
  974 
  975 %preun dbus
  976 %systemd_preun sssd-ifp.service
  977 
  978 %postun dbus
  979 %systemd_postun_with_restart sssd-ifp.service
  980 
  981 %post kcm
  982 %systemd_post sssd-kcm.socket
  983 
  984 %preun kcm
  985 %systemd_preun sssd-kcm.socket
  986 
  987 %postun kcm
  988 %systemd_postun_with_restart sssd-kcm.socket
  989 %systemd_postun_with_restart sssd-kcm.service
  990 
  991 %post client
  992 %{?ldconfig}
  993 /usr/sbin/alternatives --install /etc/cifs-utils/idmap-plugin cifs-idmap-plugin %{_libdir}/cifs-utils/cifs_idmap_sss.so 20
  994 
  995 %preun client
  996 if [ $1 -eq 0 ] ; then
  997         /usr/sbin/alternatives --remove cifs-idmap-plugin %{_libdir}/cifs-utils/cifs_idmap_sss.so
  998 fi
  999 
 1000 %ldconfig_postun client
 1001 
 1002 %ldconfig_scriptlets -n libsss_sudo
 1003 
 1004 %ldconfig_scriptlets -n libipa_hbac
 1005 
 1006 %ldconfig_scriptlets -n libsss_idmap
 1007 
 1008 %ldconfig_scriptlets -n libsss_nss_idmap
 1009 
 1010 %ldconfig_scriptlets -n libsss_simpleifp
 1011 
 1012 %ldconfig_scriptlets -n libsss_certmap
 1013 
 1014 %posttrans common
 1015 %systemd_postun_with_restart sssd.service
 1016 
 1017 %changelog
 1018 * Thu Jan 21 2021 Pavel Březina <pbrezina@redhat.com> - @PACKAGE_NAME@-@PACKAGE_VERSION@-0@PRERELEASE_VERSION@
 1019 - Built from upstream sources.