sssd-io/contrib/sssd.spec.in

	sssd.spec.in revision 346d6d8bf5fdb446921d754c07c8a7d913a048d5
2454dfa32c93c20a8522c6ed42fe057baaac9f9aStephan Bosch# SSSD is running as root user by default.
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo Sirainen# Set --with sssd_user or bcond_without to run SSSD as non-root user(sssd).
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo Sirainen%bcond_with sssd_user
c6227d7ecc972b6c58602d78602210f75190ae3fTimo Sirainen
bca919b207e27d0d08b431bdb0f2ac099ef8b512Timo Sirainen%global rhel6_minor %(%{__grep} -o "6\\.[0-9]*" /etc/redhat-release |%{__sed} -s 's/6.//')
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo Sirainen%global rhel7_minor %(%{__grep} -o "7\\.[0-9]*" /etc/redhat-release |%{__sed} -s 's/7.//')
b9f564d00b7a115f465ffd6840341c7b8f9bfc8aTimo Sirainen
7a7d2aa11e46195e2d92d6c337d7e78052a5ce67Timo Sirainen%if 0%{?rhel} && 0%{?rhel} <= 6
a956137aa86d16e5a90b9d4a9e69d3854d824380Timo Sirainen%{!?__python2: %global __python2 /usr/bin/python2}
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo Sirainen%{!?python2_sitelib: %global python2_sitelib %(%{__python2} -c "from distutils.sysconfig import get_python_lib; print(get_python_lib())")}
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo Sirainen%{!?python2_sitearch: %global python2_sitearch %(%{__python2} -c "from distutils.sysconfig import get_python_lib; print(get_python_lib(1))")}
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo Sirainen%endif
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo Sirainen
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo Sirainen%{!?python_provide: %global need_python_provide 1}
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo Sirainen%if 0%{?need_python_provide}
2b9e49e4e65e3e2dca38f56971029a3051ccdb99Timo Sirainen%define python_provide() %{lua:
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo Sirainen        function string.starts(String, Start)
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo Sirainen                return string.sub(String, 1, string.len(Start)) == Start
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo Sirainen        end
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo Sirainen        package = rpm.expand("%{?1:%{1}}");
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo Sirainen        vr = rpm.expand("%{?epoch:%{epoch}:}%{version}-%{release}")
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo Sirainen        if (string.starts(package, "python2-")) then
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo Sirainen                if (rpm.expand("%{?buildarch}") ~= "noarch") then
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo Sirainen                        str = "Provides: python-" ..
2b9e49e4e65e3e2dca38f56971029a3051ccdb99Timo Sirainen                              string.sub(package, 9, string.len(package)) ..
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo Sirainen                              "%{?_isa} = " .. vr;
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo Sirainen                        print(rpm.expand(str));
afa201e7e1d2447e8dfa1aff43de0fdad564105fTimo Sirainen                end
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo Sirainen                print("\\nProvides: python-");
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo Sirainen                print(string.sub(package, 9, string.len(package)));
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo Sirainen                print(" = ");
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo Sirainen                print(vr);
c6227d7ecc972b6c58602d78602210f75190ae3fTimo Sirainen                --Obsoleting the previous default python package
c6227d7ecc972b6c58602d78602210f75190ae3fTimo Sirainen                if (rpm.expand("%{?buildarch}") ~= "noarch") then
c6227d7ecc972b6c58602d78602210f75190ae3fTimo Sirainen                        str = "\\nObsoletes: python-" ..
c6227d7ecc972b6c58602d78602210f75190ae3fTimo Sirainen                              string.sub(package, 9, string.len(package)) ..
c6227d7ecc972b6c58602d78602210f75190ae3fTimo Sirainen                              "%{?_isa} < " .. vr;
c6227d7ecc972b6c58602d78602210f75190ae3fTimo Sirainen                        print(rpm.expand(str));
c6227d7ecc972b6c58602d78602210f75190ae3fTimo Sirainen                end
c6227d7ecc972b6c58602d78602210f75190ae3fTimo Sirainen                print("\\nObsoletes: python-");
c6227d7ecc972b6c58602d78602210f75190ae3fTimo Sirainen                print(string.sub(package, 9, string.len(package)));
c6227d7ecc972b6c58602d78602210f75190ae3fTimo Sirainen                print(" < ");
c6227d7ecc972b6c58602d78602210f75190ae3fTimo Sirainen                print(vr);
c6227d7ecc972b6c58602d78602210f75190ae3fTimo Sirainen        elseif (string.starts(package, "python3-")) then
c6227d7ecc972b6c58602d78602210f75190ae3fTimo Sirainen                --No unversioned provides as python3 is not default
c6227d7ecc972b6c58602d78602210f75190ae3fTimo Sirainen        else
c6227d7ecc972b6c58602d78602210f75190ae3fTimo Sirainen                print("%python_provide: ERROR: ");
c6227d7ecc972b6c58602d78602210f75190ae3fTimo Sirainen                print(package);
c6227d7ecc972b6c58602d78602210f75190ae3fTimo Sirainen                print(" not recognized.");
c6227d7ecc972b6c58602d78602210f75190ae3fTimo Sirainen        end
c6227d7ecc972b6c58602d78602210f75190ae3fTimo Sirainen}
c6227d7ecc972b6c58602d78602210f75190ae3fTimo Sirainen%endif
c6227d7ecc972b6c58602d78602210f75190ae3fTimo Sirainen
eadbca0f2b78fcc36332678fee9ee08003df63deTimo Sirainen# Fedora and RHEL 6+
eadbca0f2b78fcc36332678fee9ee08003df63deTimo Sirainen# we don't want to provide private python extension libs
eadbca0f2b78fcc36332678fee9ee08003df63deTimo Sirainen%define __provides_exclude_from %{python2_sitearch}/.*\.so$
eadbca0f2b78fcc36332678fee9ee08003df63deTimo Sirainen%define __provides_exclude_from %{python3_sitearch}/.*\.so$
eadbca0f2b78fcc36332678fee9ee08003df63deTimo Sirainen
eadbca0f2b78fcc36332678fee9ee08003df63deTimo Sirainen# workaround for rpm 4.13
860e6dd603921f61b0cd53c1cc16e1d66d312699Timo Sirainen%define _empty_manifest_terminate_build 0
860e6dd603921f61b0cd53c1cc16e1d66d312699Timo Sirainen
eadbca0f2b78fcc36332678fee9ee08003df63deTimo Sirainen%if (0%{?fedora} || 0%{?rhel} >= 7)
eadbca0f2b78fcc36332678fee9ee08003df63deTimo Sirainen    %global use_systemd 1
eadbca0f2b78fcc36332678fee9ee08003df63deTimo Sirainen%endif
eadbca0f2b78fcc36332678fee9ee08003df63deTimo Sirainen
eadbca0f2b78fcc36332678fee9ee08003df63deTimo Sirainen# on Fedora and RHEL7 p11_child needs a polkit config snippet to be allowed to
eadbca0f2b78fcc36332678fee9ee08003df63deTimo Sirainen# talk to pcscd if SSSD runs as unprivileged user
eadbca0f2b78fcc36332678fee9ee08003df63deTimo Sirainen%if (%{with sssd_user} && (0%{?fedora} || 0%{?rhel} >= 7))
eadbca0f2b78fcc36332678fee9ee08003df63deTimo Sirainen    %global install_pcscd_polkit_rule 1
eadbca0f2b78fcc36332678fee9ee08003df63deTimo Sirainen%else
eadbca0f2b78fcc36332678fee9ee08003df63deTimo Sirainen    %global enable_polkit_rules_option --disable-polkit-rules-path
eadbca0f2b78fcc36332678fee9ee08003df63deTimo Sirainen%endif
eadbca0f2b78fcc36332678fee9ee08003df63deTimo Sirainen
eadbca0f2b78fcc36332678fee9ee08003df63deTimo Sirainen%if (0%{?use_systemd} == 1)
eadbca0f2b78fcc36332678fee9ee08003df63deTimo Sirainen    %global with_initscript --with-initscript=systemd --with-systemdunitdir=%{_unitdir}
eadbca0f2b78fcc36332678fee9ee08003df63deTimo Sirainen    %global with_syslog --with-syslog=journald
eadbca0f2b78fcc36332678fee9ee08003df63deTimo Sirainen%else
eadbca0f2b78fcc36332678fee9ee08003df63deTimo Sirainen    %global with_initscript --with-initscript=sysv
eadbca0f2b78fcc36332678fee9ee08003df63deTimo Sirainen%endif
eadbca0f2b78fcc36332678fee9ee08003df63deTimo Sirainen
eadbca0f2b78fcc36332678fee9ee08003df63deTimo Sirainen%global enable_experimental 1
eadbca0f2b78fcc36332678fee9ee08003df63deTimo Sirainen
eadbca0f2b78fcc36332678fee9ee08003df63deTimo Sirainen%if (0%{?enable_experimental} == 1)
eadbca0f2b78fcc36332678fee9ee08003df63deTimo Sirainen    %global experimental --enable-all-experimental-features
eadbca0f2b78fcc36332678fee9ee08003df63deTimo Sirainen%endif
eadbca0f2b78fcc36332678fee9ee08003df63deTimo Sirainen
eadbca0f2b78fcc36332678fee9ee08003df63deTimo Sirainen# Determine the location of the LDB modules directory
eadbca0f2b78fcc36332678fee9ee08003df63deTimo Sirainen%global ldb_modulesdir %(pkg-config --variable=modulesdir ldb)
eadbca0f2b78fcc36332678fee9ee08003df63deTimo Sirainen
eadbca0f2b78fcc36332678fee9ee08003df63deTimo Sirainen%if (0%{?fedora} || 0%{?rhel} >= 7)
eadbca0f2b78fcc36332678fee9ee08003df63deTimo Sirainen%define _hardened_build 1
eadbca0f2b78fcc36332678fee9ee08003df63deTimo Sirainen%endif
eadbca0f2b78fcc36332678fee9ee08003df63deTimo Sirainen
eadbca0f2b78fcc36332678fee9ee08003df63deTimo Sirainen%if (0%{?fedora} || 0%{?rhel} >= 7)
eadbca0f2b78fcc36332678fee9ee08003df63deTimo Sirainen    %global with_cifs_utils_plugin 1
eadbca0f2b78fcc36332678fee9ee08003df63deTimo Sirainen%else
eadbca0f2b78fcc36332678fee9ee08003df63deTimo Sirainen    %global with_cifs_utils_plugin_option --disable-cifs-idmap-plugin
eadbca0f2b78fcc36332678fee9ee08003df63deTimo Sirainen%endif
eadbca0f2b78fcc36332678fee9ee08003df63deTimo Sirainen
eadbca0f2b78fcc36332678fee9ee08003df63deTimo Sirainen%if (0%{?fedora} || 0%{?rhel} > 7)
eadbca0f2b78fcc36332678fee9ee08003df63deTimo Sirainen    %global with_python3 1
eadbca0f2b78fcc36332678fee9ee08003df63deTimo Sirainen%else
eadbca0f2b78fcc36332678fee9ee08003df63deTimo Sirainen    %global with_python3_option --without-python3-bindings
eadbca0f2b78fcc36332678fee9ee08003df63deTimo Sirainen%endif
eadbca0f2b78fcc36332678fee9ee08003df63deTimo Sirainen
eadbca0f2b78fcc36332678fee9ee08003df63deTimo Sirainen%global enable_systemtap 1
eadbca0f2b78fcc36332678fee9ee08003df63deTimo Sirainen%if (0%{?enable_systemtap} == 1)
eadbca0f2b78fcc36332678fee9ee08003df63deTimo Sirainen    %global enable_systemtap_opt --enable-systemtap
eadbca0f2b78fcc36332678fee9ee08003df63deTimo Sirainen%endif
eadbca0f2b78fcc36332678fee9ee08003df63deTimo Sirainen
eadbca0f2b78fcc36332678fee9ee08003df63deTimo Sirainen%if (0%{?fedora} || (0%{?rhel} >= 7 && 0%{rhel7_minor} >= 4))
e5fd6dfd0a492e4708d4dbb7971d7fc5d7b8fd85Timo Sirainen    %global with_secrets 1
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo Sirainen%else
c0a87e5f3316a57e6f915882fa1951d0fbb74a61Timo Sirainen    %global with_secret_responder --without-secrets
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo Sirainen%endif
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo Sirainen
d22301419109ed4a38351715e6760011421dadecTimo Sirainen%if (0%{?fedora} >= 23 || 0%{?rhel} >= 7)
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo Sirainen    %global with_kcm 1
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo Sirainen    %global with_kcm_option --with-kcm
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo Sirainen%else
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo Sirainen    %global with_kcm_option --without-kcm
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo Sirainen%endif
2b9e49e4e65e3e2dca38f56971029a3051ccdb99Timo Sirainen
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo Sirainen%if (0%{?fedora} >= 27 || (0%{?rhel} >= 7 && 0%{?rhel7_minor} > 4))
d22301419109ed4a38351715e6760011421dadecTimo Sirainen    %global with_gdm_pam_extensions 1
d22301419109ed4a38351715e6760011421dadecTimo Sirainen%else
d22301419109ed4a38351715e6760011421dadecTimo Sirainen    %global with_gdm_pam_extensions 0
d22301419109ed4a38351715e6760011421dadecTimo Sirainen%endif
d22301419109ed4a38351715e6760011421dadecTimo Sirainen
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo SirainenName: @PACKAGE_NAME@
8c909e451d14075c05d90382cf8eebc4e354f569Timo SirainenVersion: @PACKAGE_VERSION@
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo SirainenRelease: 0@PRERELEASE_VERSION@%{?dist}
d22301419109ed4a38351715e6760011421dadecTimo SirainenGroup: Applications/System
d22301419109ed4a38351715e6760011421dadecTimo SirainenSummary: System Security Services Daemon
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo SirainenLicense: GPLv3+
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo SirainenURL: https://pagure.io/SSSD/sssd/
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo SirainenSource0: %{name}-%{version}.tar.gz
d22301419109ed4a38351715e6760011421dadecTimo SirainenBuildRoot: %(mktemp -ud %{_tmppath}/%{name}-%{version}-%{release}-XXXXXX)
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo Sirainen
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo Sirainen### Patches ###
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo Sirainen
9865d9e7c5713e41db939222ed9c0225a11fb99eTimo Sirainen### Dependencies ###
9865d9e7c5713e41db939222ed9c0225a11fb99eTimo Sirainen
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo SirainenRequires: sssd-common = %{version}-%{release}
e5fb952c6d49d3b6bff1746551566202e92947daTimo SirainenRequires: sssd-ldap = %{version}-%{release}
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo SirainenRequires: sssd-krb5 = %{version}-%{release}
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo SirainenRequires: sssd-ipa = %{version}-%{release}
6b8043a4d96d696a6b65ebe9ae4f56fbec638348Timo SirainenRequires: sssd-ad = %{version}-%{release}
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo SirainenRequires: sssd-proxy = %{version}-%{release}
9fc97c8aa8190df87624d214bcc5d0b5362bec93Timo Sirainen%if (0%{?with_python3} == 1)
9fc97c8aa8190df87624d214bcc5d0b5362bec93Timo SirainenRequires: python3-sssdconfig = %{version}-%{release}
e5fb952c6d49d3b6bff1746551566202e92947daTimo Sirainen%else
e5fb952c6d49d3b6bff1746551566202e92947daTimo SirainenRequires: python2-sssdconfig = %{version}-%{release}
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo Sirainen%endif
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo Sirainen
7baab0b0b60df7ce9093d0881cd322dff1e79491Timo Sirainen%global servicename sssd
4b2a4c8c762e3eaddf7fd2abfe7d4cca6e5e3fd8Timo Sirainen%global sssdstatedir %{_localstatedir}/lib/sss
4b2a4c8c762e3eaddf7fd2abfe7d4cca6e5e3fd8Timo Sirainen%global dbpath %{sssdstatedir}/db
4b2a4c8c762e3eaddf7fd2abfe7d4cca6e5e3fd8Timo Sirainen%global keytabdir %{sssdstatedir}/keytabs
2b9e49e4e65e3e2dca38f56971029a3051ccdb99Timo Sirainen%global pipepath %{sssdstatedir}/pipes
ca98892a6b8a30ffc1fe26fcf02c7d59e3204e7eTimo Sirainen%global mcpath %{sssdstatedir}/mc
4b2a4c8c762e3eaddf7fd2abfe7d4cca6e5e3fd8Timo Sirainen%global pubconfpath %{sssdstatedir}/pubconf
e5fb952c6d49d3b6bff1746551566202e92947daTimo Sirainen%global gpocachepath %{sssdstatedir}/gpo_cache
e5fb952c6d49d3b6bff1746551566202e92947daTimo Sirainen%global secdbpath %{sssdstatedir}/secrets
efe78d3ba24fc866af1c79b9223dc0809ba26cadStephan Bosch%global deskprofilepath %{sssdstatedir}/deskprofile
e5fb952c6d49d3b6bff1746551566202e92947daTimo Sirainen
607a8bc27298b711270381364f2a9a999a810a87Timo Sirainen### Build Dependencies ###
607a8bc27298b711270381364f2a9a999a810a87Timo Sirainen
607a8bc27298b711270381364f2a9a999a810a87Timo SirainenBuildRequires: autoconf
607a8bc27298b711270381364f2a9a999a810a87Timo SirainenBuildRequires: automake
607a8bc27298b711270381364f2a9a999a810a87Timo SirainenBuildRequires: libtool
607a8bc27298b711270381364f2a9a999a810a87Timo SirainenBuildRequires: m4
607a8bc27298b711270381364f2a9a999a810a87Timo SirainenBuildRequires: popt-devel
607a8bc27298b711270381364f2a9a999a810a87Timo SirainenBuildRequires: libtalloc-devel
607a8bc27298b711270381364f2a9a999a810a87Timo SirainenBuildRequires: libtevent-devel
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo SirainenBuildRequires: libtdb-devel
e5fb952c6d49d3b6bff1746551566202e92947daTimo SirainenBuildRequires: libldb-devel
9865d9e7c5713e41db939222ed9c0225a11fb99eTimo SirainenBuildRequires: libdhash-devel >= 0.4.2
e5fb952c6d49d3b6bff1746551566202e92947daTimo SirainenBuildRequires: libcollection-devel
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo SirainenBuildRequires: libini_config-devel >= 1.1
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo SirainenBuildRequires: dbus-devel
607a8bc27298b711270381364f2a9a999a810a87Timo SirainenBuildRequires: dbus-libs
607a8bc27298b711270381364f2a9a999a810a87Timo SirainenBuildRequires: openldap-devel
607a8bc27298b711270381364f2a9a999a810a87Timo SirainenBuildRequires: pam-devel
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo SirainenBuildRequires: nss-devel
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo SirainenBuildRequires: nspr-devel
9865d9e7c5713e41db939222ed9c0225a11fb99eTimo SirainenBuildRequires: pcre-devel
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo SirainenBuildRequires: libxslt
1127f3e1ad7135b6ee5d5e13f8fd1e72f85a76f8Timo SirainenBuildRequires: libxml2
efe78d3ba24fc866af1c79b9223dc0809ba26cadStephan BoschBuildRequires: docbook-style-xsl
1127f3e1ad7135b6ee5d5e13f8fd1e72f85a76f8Timo SirainenBuildRequires: krb5-devel
1127f3e1ad7135b6ee5d5e13f8fd1e72f85a76f8Timo SirainenBuildRequires: c-ares-devel
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo SirainenBuildRequires: python-devel
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo Sirainen%if (0%{?with_python3} == 1)
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo SirainenBuildRequires: python3-devel
de62ce819d59a529530da4b57be1b8d6dad13d6bTimo Sirainen%endif
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo SirainenBuildRequires: check-devel
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo SirainenBuildRequires: doxygen
de62ce819d59a529530da4b57be1b8d6dad13d6bTimo SirainenBuildRequires: libselinux-devel
de62ce819d59a529530da4b57be1b8d6dad13d6bTimo SirainenBuildRequires: libsemanage-devel
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo SirainenBuildRequires: bind-utils
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo SirainenBuildRequires: keyutils-libs-devel
9865d9e7c5713e41db939222ed9c0225a11fb99eTimo SirainenBuildRequires: gettext-devel
9865d9e7c5713e41db939222ed9c0225a11fb99eTimo SirainenBuildRequires: pkgconfig
9865d9e7c5713e41db939222ed9c0225a11fb99eTimo SirainenBuildRequires: findutils
9865d9e7c5713e41db939222ed9c0225a11fb99eTimo SirainenBuildRequires: glib2-devel
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo SirainenBuildRequires: selinux-policy-targeted
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo Sirainen%if (0%{?fedora} || 0%{?epel})
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo SirainenBuildRequires: libcmocka-devel >= 1.0.0
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo SirainenBuildRequires: uid_wrapper
7e1b549a1d841e59faad16430cbd1d56317db8afTimo SirainenBuildRequires: nss_wrapper
7e1b549a1d841e59faad16430cbd1d56317db8afTimo Sirainen%endif
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo SirainenBuildRequires: libnl3-devel
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo Sirainen%if (0%{?use_systemd} == 1)
f605df8a4c15cc7a11e16fdde994d51473700890Timo SirainenBuildRequires: systemd-devel
f605df8a4c15cc7a11e16fdde994d51473700890Timo Sirainen%endif
f605df8a4c15cc7a11e16fdde994d51473700890Timo Sirainen%if (0%{?with_cifs_utils_plugin} == 1)
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo SirainenBuildRequires: cifs-utils-devel
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo Sirainen%endif
dd4f30895ebbddd77e000472fbadcb3128ae2883Timo Sirainen%if (0%{?fedora} || (0%{?rhel} >= 7))
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo SirainenBuildRequires: libnfsidmap-devel
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo Sirainen%else
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo SirainenBuildRequires: nfs-utils-lib-devel
dd4f30895ebbddd77e000472fbadcb3128ae2883Timo Sirainen%endif
dd4f30895ebbddd77e000472fbadcb3128ae2883Timo Sirainen
dd4f30895ebbddd77e000472fbadcb3128ae2883Timo SirainenBuildRequires: samba4-devel
dd4f30895ebbddd77e000472fbadcb3128ae2883Timo SirainenBuildRequires: libsmbclient-devel
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo Sirainen
dd4f30895ebbddd77e000472fbadcb3128ae2883Timo Sirainen%if (0%{?enable_systemtap} == 1)
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo SirainenBuildRequires: systemtap-sdt-devel
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo Sirainen%endif
547e916f4e6f01af682f8b6e032c337f2a699364Timo Sirainen%if (0%{?with_secrets} == 1)
547e916f4e6f01af682f8b6e032c337f2a699364Timo SirainenBuildRequires: http-parser-devel
547e916f4e6f01af682f8b6e032c337f2a699364Timo Sirainen%endif
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo Sirainen%if (0%{?with_kcm} == 1)
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo SirainenBuildRequires: libuuid-devel
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo Sirainen%endif
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo Sirainen%if (0%{?with_secrets} == 1 || 0%{?with_kcm} == 1)
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo SirainenBuildRequires: jansson-devel
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo SirainenBuildRequires: libcurl-devel
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo Sirainen%endif
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo Sirainen%if (0%{?with_gdm_pam_extensions} == 1)
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo SirainenBuildRequires: gdm-pam-extensions-devel
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo Sirainen%endif
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo Sirainen
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo Sirainen%description
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo SirainenProvides a set of daemons to manage access to remote directories and
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo Sirainenauthentication mechanisms. It provides an NSS and PAM interface toward
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo Sirainenthe system and a pluggable backend system to connect to multiple different
ee9254cc7875519a9c71cc58a40610e6f320e907Timo Sirainenaccount sources. It is also the basis to provide client auditing and policy
29337701451b9c9f9dd26b2aec23a31ab5203822Timo Sirainenservices for projects like FreeIPA.
29337701451b9c9f9dd26b2aec23a31ab5203822Timo Sirainen
29337701451b9c9f9dd26b2aec23a31ab5203822Timo SirainenThe sssd subpackage is a meta-package that contains the daemon as well as all
29337701451b9c9f9dd26b2aec23a31ab5203822Timo Sirainenthe existing back ends.
29337701451b9c9f9dd26b2aec23a31ab5203822Timo Sirainen
29337701451b9c9f9dd26b2aec23a31ab5203822Timo Sirainen%package common
29337701451b9c9f9dd26b2aec23a31ab5203822Timo SirainenSummary: Common files for the SSSD
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo SirainenGroup: Applications/System
ca98d6a1bbe73499da758a36bfab2963375c8d06Timo SirainenLicense: GPLv3+
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo SirainenRequires: sssd-client%{?_isa} = %{version}-%{release}
fa7c76955c6bc62689fbdf39318194f85905e6e2Timo SirainenRequires: libsss_sudo = %{version}-%{release}
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo SirainenRequires: libsss_autofs%{?_isa} = %{version}-%{release}
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo SirainenRequires: libsss_idmap = %{version}-%{release}
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo SirainenConflicts: sssd < %{version}-%{release}
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo Sirainen%if (0%{?use_systemd} == 1)
5bcac2212ca86e72289faa7db2c509841fbdbd59Timo SirainenRequires(post): systemd-units systemd-sysv
5bcac2212ca86e72289faa7db2c509841fbdbd59Timo SirainenRequires(preun): systemd-units
5bcac2212ca86e72289faa7db2c509841fbdbd59Timo SirainenRequires(postun): systemd-units
a956137aa86d16e5a90b9d4a9e69d3854d824380Timo Sirainen%else
5bcac2212ca86e72289faa7db2c509841fbdbd59Timo SirainenRequires(post): initscripts chkconfig
a956137aa86d16e5a90b9d4a9e69d3854d824380Timo SirainenRequires(preun):  initscripts chkconfig
46219292a55094fa49aae33eee681ed075d30e17Timo SirainenRequires(postun): initscripts chkconfig
dd4f30895ebbddd77e000472fbadcb3128ae2883Timo Sirainen%endif
dd4f30895ebbddd77e000472fbadcb3128ae2883Timo Sirainen
1f1ee8db68d9ae1604350801cd8dc33ebe29fe8aTimo Sirainen### Provides ###
dd4f30895ebbddd77e000472fbadcb3128ae2883Timo SirainenProvides: libsss_sudo-devel = %{version}-%{release}
dd4f30895ebbddd77e000472fbadcb3128ae2883Timo SirainenObsoletes: libsss_sudo-devel <= 1.9.93
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo Sirainen
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo Sirainen%description common
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo SirainenCommon files for the SSSD. The common package includes all the files needed
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo Sirainento run a particular back end, however, the back ends are packaged in separate
b9f564d00b7a115f465ffd6840341c7b8f9bfc8aTimo Sirainensubpackages such as sssd-ldap.
b9f564d00b7a115f465ffd6840341c7b8f9bfc8aTimo Sirainen
b9f564d00b7a115f465ffd6840341c7b8f9bfc8aTimo Sirainen%package client
b9f564d00b7a115f465ffd6840341c7b8f9bfc8aTimo SirainenSummary: SSSD Client libraries for NSS and PAM
b9f564d00b7a115f465ffd6840341c7b8f9bfc8aTimo SirainenGroup: Applications/System
b9f564d00b7a115f465ffd6840341c7b8f9bfc8aTimo SirainenLicense: LGPLv3+
de62ce819d59a529530da4b57be1b8d6dad13d6bTimo SirainenRequires(post): /sbin/ldconfig
b9f564d00b7a115f465ffd6840341c7b8f9bfc8aTimo SirainenRequires(postun): /sbin/ldconfig
b9f564d00b7a115f465ffd6840341c7b8f9bfc8aTimo Sirainen
b9f564d00b7a115f465ffd6840341c7b8f9bfc8aTimo Sirainen%description client
0a7b04ec6441fdcf083392888b2e30844fc3e86dTimo SirainenProvides the libraries needed by the PAM and NSS stacks to connect to the SSSD
5b62dea2f88165f3f4d87bba9011343f3ff415ffTimo Sirainenservice.
e5fb952c6d49d3b6bff1746551566202e92947daTimo Sirainen
e5fb952c6d49d3b6bff1746551566202e92947daTimo Sirainen%package -n libsss_sudo
9865d9e7c5713e41db939222ed9c0225a11fb99eTimo SirainenSummary: A library to allow communication between SUDO and SSSD
e5fb952c6d49d3b6bff1746551566202e92947daTimo SirainenGroup: Development/Libraries
9865d9e7c5713e41db939222ed9c0225a11fb99eTimo SirainenLicense: LGPLv3+
9865d9e7c5713e41db939222ed9c0225a11fb99eTimo SirainenRequires(post): /sbin/ldconfig
e5fb952c6d49d3b6bff1746551566202e92947daTimo SirainenRequires(postun): /sbin/ldconfig
e5fb952c6d49d3b6bff1746551566202e92947daTimo Sirainen
e5fb952c6d49d3b6bff1746551566202e92947daTimo Sirainen%description -n libsss_sudo
5b62dea2f88165f3f4d87bba9011343f3ff415ffTimo SirainenA utility library to allow communication between SUDO and SSSD
5b62dea2f88165f3f4d87bba9011343f3ff415ffTimo Sirainen
57bf90f66f393c2807b2fc543655013f61d1d9e4Timo Sirainen%package -n libsss_autofs
57bf90f66f393c2807b2fc543655013f61d1d9e4Timo SirainenSummary: A library to allow communication between Autofs and SSSD
57bf90f66f393c2807b2fc543655013f61d1d9e4Timo SirainenGroup: Development/Libraries
57bf90f66f393c2807b2fc543655013f61d1d9e4Timo SirainenLicense: LGPLv3+
57bf90f66f393c2807b2fc543655013f61d1d9e4Timo Sirainen
57bf90f66f393c2807b2fc543655013f61d1d9e4Timo Sirainen%description -n libsss_autofs
57bf90f66f393c2807b2fc543655013f61d1d9e4Timo SirainenA utility library to allow communication between Autofs and SSSD
607a8bc27298b711270381364f2a9a999a810a87Timo Sirainen
607a8bc27298b711270381364f2a9a999a810a87Timo Sirainen%package tools
607a8bc27298b711270381364f2a9a999a810a87Timo SirainenSummary: Userspace tools for use with the SSSD
607a8bc27298b711270381364f2a9a999a810a87Timo SirainenGroup: Applications/System
607a8bc27298b711270381364f2a9a999a810a87Timo SirainenLicense: GPLv3+
607a8bc27298b711270381364f2a9a999a810a87Timo SirainenRequires: sssd-common = %{version}-%{release}
607a8bc27298b711270381364f2a9a999a810a87Timo Sirainen# required by sss_obfuscate
607a8bc27298b711270381364f2a9a999a810a87Timo Sirainen%if (0%{?with_python3} == 1)
607a8bc27298b711270381364f2a9a999a810a87Timo SirainenRequires: python3-sss = %{version}-%{release}
607a8bc27298b711270381364f2a9a999a810a87Timo SirainenRequires: python3-sssdconfig = %{version}-%{release}
607a8bc27298b711270381364f2a9a999a810a87Timo Sirainen%else
efe78d3ba24fc866af1c79b9223dc0809ba26cadStephan BoschRequires: python2-sss = %{version}-%{release}
607a8bc27298b711270381364f2a9a999a810a87Timo SirainenRequires: python2-sssdconfig = %{version}-%{release}
607a8bc27298b711270381364f2a9a999a810a87Timo Sirainen%endif
607a8bc27298b711270381364f2a9a999a810a87Timo Sirainen%if (0%{?use_systemd} == 0)
607a8bc27298b711270381364f2a9a999a810a87Timo SirainenRequires: /sbin/service
607a8bc27298b711270381364f2a9a999a810a87Timo Sirainen%endif
607a8bc27298b711270381364f2a9a999a810a87Timo Sirainen
b9f564d00b7a115f465ffd6840341c7b8f9bfc8aTimo Sirainen%description tools
b9f564d00b7a115f465ffd6840341c7b8f9bfc8aTimo SirainenProvides userspace tools for manipulating users, groups, and nested groups in
b9f564d00b7a115f465ffd6840341c7b8f9bfc8aTimo SirainenSSSD when using id_provider = local in /etc/sssd/sssd.conf.
b9f564d00b7a115f465ffd6840341c7b8f9bfc8aTimo Sirainen
9865d9e7c5713e41db939222ed9c0225a11fb99eTimo SirainenAlso provides several other administrative tools:
7b15788793354ca0fd4fdb4dda8e426ca1e9e9d7Timo Sirainen    * sss_debuglevel to change the debug level on the fly
b9f564d00b7a115f465ffd6840341c7b8f9bfc8aTimo Sirainen    * sss_seed which pre-creates a user entry for use in kickstarts
7b15788793354ca0fd4fdb4dda8e426ca1e9e9d7Timo Sirainen    * sss_obfuscate for generating an obfuscated LDAP password
50bf6cfe2aa6111fb38af37970f9551b2286638cTimo Sirainen    * sssctl -- an sssd status and control utility
50bf6cfe2aa6111fb38af37970f9551b2286638cTimo Sirainen
607a8bc27298b711270381364f2a9a999a810a87Timo Sirainen%package -n python2-sssdconfig
607a8bc27298b711270381364f2a9a999a810a87Timo SirainenSummary: SSSD and IPA configuration file manipulation classes and functions
607a8bc27298b711270381364f2a9a999a810a87Timo SirainenGroup: Applications/System
7b15788793354ca0fd4fdb4dda8e426ca1e9e9d7Timo SirainenLicense: GPLv3+
b9f564d00b7a115f465ffd6840341c7b8f9bfc8aTimo SirainenBuildArch: noarch
b9f564d00b7a115f465ffd6840341c7b8f9bfc8aTimo Sirainen%{?python_provide:%python_provide python2-sssdconfig}
7baab0b0b60df7ce9093d0881cd322dff1e79491Timo Sirainen
7baab0b0b60df7ce9093d0881cd322dff1e79491Timo Sirainen%description -n python2-sssdconfig
7baab0b0b60df7ce9093d0881cd322dff1e79491Timo SirainenProvides python2 files for manipulation SSSD and IPA configuration files.
7baab0b0b60df7ce9093d0881cd322dff1e79491Timo Sirainen
7baab0b0b60df7ce9093d0881cd322dff1e79491Timo Sirainen%if (0%{?with_python3} == 1)
b9f564d00b7a115f465ffd6840341c7b8f9bfc8aTimo Sirainen%package -n python3-sssdconfig
9865d9e7c5713e41db939222ed9c0225a11fb99eTimo SirainenSummary: SSSD and IPA configuration file manipulation classes and functions
607a8bc27298b711270381364f2a9a999a810a87Timo SirainenGroup: Applications/System
607a8bc27298b711270381364f2a9a999a810a87Timo SirainenLicense: GPLv3+
9865d9e7c5713e41db939222ed9c0225a11fb99eTimo SirainenBuildArch: noarch
efe78d3ba24fc866af1c79b9223dc0809ba26cadStephan Bosch%{?python_provide:%python_provide python3-sssdconfig}
e22ac7474fb36e3e3dcfeb70ea5f54ea812aa2d0Timo Sirainen
b9f564d00b7a115f465ffd6840341c7b8f9bfc8aTimo Sirainen%description -n python3-sssdconfig
de62ce819d59a529530da4b57be1b8d6dad13d6bTimo SirainenProvides python3 files for manipulation SSSD and IPA configuration files.
b9f564d00b7a115f465ffd6840341c7b8f9bfc8aTimo Sirainen%endif
7baab0b0b60df7ce9093d0881cd322dff1e79491Timo Sirainen
9865d9e7c5713e41db939222ed9c0225a11fb99eTimo Sirainen%package -n python2-sss
b9f564d00b7a115f465ffd6840341c7b8f9bfc8aTimo SirainenSummary: Python2 bindings for sssd
b9f564d00b7a115f465ffd6840341c7b8f9bfc8aTimo SirainenGroup: Development/Libraries
b9f564d00b7a115f465ffd6840341c7b8f9bfc8aTimo SirainenLicense: LGPLv3+
b9f564d00b7a115f465ffd6840341c7b8f9bfc8aTimo SirainenRequires: sssd-common = %{version}-%{release}
b9f564d00b7a115f465ffd6840341c7b8f9bfc8aTimo Sirainen%{?python_provide:%python_provide python2-sss}
b9f564d00b7a115f465ffd6840341c7b8f9bfc8aTimo Sirainen
b9f564d00b7a115f465ffd6840341c7b8f9bfc8aTimo Sirainen%description -n python2-sss
e5fb952c6d49d3b6bff1746551566202e92947daTimo SirainenProvides python2 module for manipulating users, groups, and nested groups in
e5fb952c6d49d3b6bff1746551566202e92947daTimo SirainenSSSD when using id_provider = local in /etc/sssd/sssd.conf.
e5fb952c6d49d3b6bff1746551566202e92947daTimo Sirainen
e5fb952c6d49d3b6bff1746551566202e92947daTimo SirainenAlso provides several other useful python2 bindings:
e5fb952c6d49d3b6bff1746551566202e92947daTimo Sirainen    * function for retrieving list of groups user belongs to.
e5fb952c6d49d3b6bff1746551566202e92947daTimo Sirainen    * class for obfuscation of passwords
e5fb952c6d49d3b6bff1746551566202e92947daTimo Sirainen
e5fb952c6d49d3b6bff1746551566202e92947daTimo Sirainen%if (0%{?with_python3} == 1)
e5fb952c6d49d3b6bff1746551566202e92947daTimo Sirainen%package -n python3-sss
c72fbbe6328ceb0919b5146ecd43817dc294c314Timo SirainenSummary: Python3 bindings for sssd
c72fbbe6328ceb0919b5146ecd43817dc294c314Timo SirainenGroup: Development/Libraries
c72fbbe6328ceb0919b5146ecd43817dc294c314Timo SirainenLicense: LGPLv3+
c72fbbe6328ceb0919b5146ecd43817dc294c314Timo SirainenRequires: sssd-common = %{version}-%{release}
c72fbbe6328ceb0919b5146ecd43817dc294c314Timo Sirainen%{?python_provide:%python_provide python3-sss}
c72fbbe6328ceb0919b5146ecd43817dc294c314Timo Sirainen
c72fbbe6328ceb0919b5146ecd43817dc294c314Timo Sirainen%description -n python3-sss
c72fbbe6328ceb0919b5146ecd43817dc294c314Timo SirainenProvides python3 module for manipulating users, groups, and nested groups in
c72fbbe6328ceb0919b5146ecd43817dc294c314Timo SirainenSSSD when using id_provider = local in /etc/sssd/sssd.conf.
c72fbbe6328ceb0919b5146ecd43817dc294c314Timo Sirainen
c72fbbe6328ceb0919b5146ecd43817dc294c314Timo SirainenAlso provides several other useful python3 bindings:
c72fbbe6328ceb0919b5146ecd43817dc294c314Timo Sirainen    * function for retrieving list of groups user belongs to.
c72fbbe6328ceb0919b5146ecd43817dc294c314Timo Sirainen    * class for obfuscation of passwords
c72fbbe6328ceb0919b5146ecd43817dc294c314Timo Sirainen%endif
c72fbbe6328ceb0919b5146ecd43817dc294c314Timo Sirainen
c72fbbe6328ceb0919b5146ecd43817dc294c314Timo Sirainen%package -n python2-sss-murmur
c72fbbe6328ceb0919b5146ecd43817dc294c314Timo SirainenSummary: Python2 bindings for murmur hash function
c72fbbe6328ceb0919b5146ecd43817dc294c314Timo SirainenGroup: Development/Libraries
c72fbbe6328ceb0919b5146ecd43817dc294c314Timo SirainenLicense: LGPLv3+
c72fbbe6328ceb0919b5146ecd43817dc294c314Timo Sirainen%{?python_provide:%python_provide python2-sss-murmur}
c72fbbe6328ceb0919b5146ecd43817dc294c314Timo Sirainen
c72fbbe6328ceb0919b5146ecd43817dc294c314Timo Sirainen%description -n python2-sss-murmur
c72fbbe6328ceb0919b5146ecd43817dc294c314Timo SirainenProvides python2 module for calculating the murmur hash version 3
c72fbbe6328ceb0919b5146ecd43817dc294c314Timo Sirainen
c72fbbe6328ceb0919b5146ecd43817dc294c314Timo Sirainen%if (0%{?with_python3} == 1)
c72fbbe6328ceb0919b5146ecd43817dc294c314Timo Sirainen%package -n python3-sss-murmur
fbd918f47f591f8084fd52b207ef29515ddd11b9Timo SirainenSummary: Python3 bindings for murmur hash function
51327f2489a4e0e615eb9f7d921473cf8512bb79Timo SirainenGroup: Development/Libraries
51327f2489a4e0e615eb9f7d921473cf8512bb79Timo SirainenLicense: LGPLv3+
51327f2489a4e0e615eb9f7d921473cf8512bb79Timo Sirainen%{?python_provide:%python_provide python3-sss-murmur}
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo Sirainen
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo Sirainen%description -n python3-sss-murmur
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo SirainenProvides python3 module for calculating the murmur hash version 3
206ed2f6fa3a6fb291498627b2da626581c07a18Timo Sirainen%endif
206ed2f6fa3a6fb291498627b2da626581c07a18Timo Sirainen
51327f2489a4e0e615eb9f7d921473cf8512bb79Timo Sirainen%package ldap
51327f2489a4e0e615eb9f7d921473cf8512bb79Timo SirainenSummary: The LDAP back end of the SSSD
de62ce819d59a529530da4b57be1b8d6dad13d6bTimo SirainenGroup: Applications/System
51327f2489a4e0e615eb9f7d921473cf8512bb79Timo SirainenLicense: GPLv3+
206ed2f6fa3a6fb291498627b2da626581c07a18Timo SirainenConflicts: sssd < %{version}-%{release}
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo SirainenRequires: sssd-common = %{version}-%{release}
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo SirainenRequires: sssd-krb5-common = %{version}-%{release}
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo Sirainen
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo Sirainen%description ldap
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo SirainenProvides the LDAP back end that the SSSD can utilize to fetch identity data
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo Sirainenfrom and authenticate against an LDAP server.
84e49ad7d7a840d600a961daeca60802e3d69cd0Timo Sirainen
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo Sirainen%package krb5-common
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo SirainenSummary: SSSD helpers needed for Kerberos and GSSAPI authentication
f46885a5b78b15a8d2419f6e5d13b643bd85e41fTimo SirainenGroup: Applications/System
f46885a5b78b15a8d2419f6e5d13b643bd85e41fTimo SirainenLicense: GPLv3+
f46885a5b78b15a8d2419f6e5d13b643bd85e41fTimo SirainenConflicts: sssd < %{version}-%{release}
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo SirainenRequires: cyrus-sasl-gssapi
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo SirainenRequires: sssd-common = %{version}-%{release}
2b9e49e4e65e3e2dca38f56971029a3051ccdb99Timo Sirainen
7bafda1813454621e03615e83d55bccfa7cc56bdTimo Sirainen%description krb5-common
8b31f966d9688e07672ef1958dcbdb7686523c04Timo SirainenProvides helper processes that the LDAP and Kerberos back ends can use for
9847ec56efa15fa063eea9988eee2d4ed9ec7d58Timo SirainenKerberos user or host authentication.
d46a1e3f999dda802dc5137e883adcd7a6629cd3Timo Sirainen
08e9fd42eb8007e1f9db62c088eef74f906114a5Josef 'Jeff' Sipek%package krb5
08e9fd42eb8007e1f9db62c088eef74f906114a5Josef 'Jeff' SipekSummary: The Kerberos authentication back end for the SSSD
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo SirainenGroup: Applications/System
7bafda1813454621e03615e83d55bccfa7cc56bdTimo SirainenLicense: GPLv3+
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo SirainenConflicts: sssd < %{version}-%{release}
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo SirainenRequires: sssd-common = %{version}-%{release}
c6227d7ecc972b6c58602d78602210f75190ae3fTimo SirainenRequires: sssd-krb5-common = %{version}-%{release}
b9f564d00b7a115f465ffd6840341c7b8f9bfc8aTimo Sirainen
dca6d617a23e3f93af3b8df59acb46478179fe55Timo Sirainen%description krb5
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo SirainenProvides the Kerberos back end that the SSSD can utilize authenticate
eadbca0f2b78fcc36332678fee9ee08003df63deTimo Sirainenagainst a Kerberos server.
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo Sirainen
857c471c13ca215f4be9dd4b336b742b8d434e31Timo Sirainen%package common-pac
857c471c13ca215f4be9dd4b336b742b8d434e31Timo SirainenSummary: Common files needed for supporting PAC processing
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo SirainenGroup: Applications/System
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo SirainenLicense: GPLv3+
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo SirainenRequires: sssd-common = %{version}-%{release}
2b9e49e4e65e3e2dca38f56971029a3051ccdb99Timo Sirainen
2b9e49e4e65e3e2dca38f56971029a3051ccdb99Timo Sirainen%description common-pac
e15b305e90c9834734ccf35ed78f0ad29d570ee9Timo SirainenProvides common files needed by SSSD providers such as IPA and Active Directory
2b9e49e4e65e3e2dca38f56971029a3051ccdb99Timo Sirainenfor handling Kerberos PACs.
2b9e49e4e65e3e2dca38f56971029a3051ccdb99Timo Sirainen
eadbca0f2b78fcc36332678fee9ee08003df63deTimo Sirainen%package ipa
2b9e49e4e65e3e2dca38f56971029a3051ccdb99Timo SirainenSummary: The IPA back end of the SSSD
c6227d7ecc972b6c58602d78602210f75190ae3fTimo SirainenGroup: Applications/System
b9f564d00b7a115f465ffd6840341c7b8f9bfc8aTimo SirainenLicense: GPLv3+
2b9e49e4e65e3e2dca38f56971029a3051ccdb99Timo SirainenConflicts: sssd < %{version}-%{release}
2b9e49e4e65e3e2dca38f56971029a3051ccdb99Timo SirainenRequires: sssd-common = %{version}-%{release}
eadbca0f2b78fcc36332678fee9ee08003df63deTimo SirainenRequires: sssd-krb5-common = %{version}-%{release}
2b9e49e4e65e3e2dca38f56971029a3051ccdb99Timo SirainenRequires: libipa_hbac = %{version}-%{release}
857c471c13ca215f4be9dd4b336b742b8d434e31Timo SirainenRequires: bind-utils
857c471c13ca215f4be9dd4b336b742b8d434e31Timo SirainenRequires: sssd-common-pac = %{version}-%{release}
2b9e49e4e65e3e2dca38f56971029a3051ccdb99Timo Sirainen
2b9e49e4e65e3e2dca38f56971029a3051ccdb99Timo Sirainen%description ipa
2b9e49e4e65e3e2dca38f56971029a3051ccdb99Timo SirainenProvides the IPA back end that the SSSD can utilize to fetch identity data
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo Sirainenfrom and authenticate against an IPA server.
7bafda1813454621e03615e83d55bccfa7cc56bdTimo Sirainen
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo Sirainen%package ad
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo SirainenSummary: The AD back end of the SSSD
306cfd77100131c08b243de10f6d40500f4c27c6Timo SirainenGroup: Applications/System
b9f564d00b7a115f465ffd6840341c7b8f9bfc8aTimo SirainenLicense: GPLv3+
e5fb952c6d49d3b6bff1746551566202e92947daTimo SirainenConflicts: sssd < %{version}-%{release}
438f12d7a776da695019114884b48188d94613efTimo SirainenRequires: sssd-common = %{version}-%{release}
c72fbbe6328ceb0919b5146ecd43817dc294c314Timo SirainenRequires: sssd-krb5-common = %{version}-%{release}
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo SirainenRequires: bind-utils
af9edddbb704a640055898846add4e386e83fe43Timo SirainenRequires: sssd-common-pac = %{version}-%{release}
2649b237dd4690575e75a30b2bf3b39ebd37b835Timo Sirainen
fbd918f47f591f8084fd52b207ef29515ddd11b9Timo Sirainen%description ad
51327f2489a4e0e615eb9f7d921473cf8512bb79Timo SirainenProvides the Active Directory back end that the SSSD can utilize to fetch
6469cf211a57433335641725dc236ebb2b9fdd3bTimo Sirainenidentity data from and authenticate against an Active Directory server.
62041dfb7d6ac6e9c633a557075999cdfcff7bd5Timo Sirainen
62041dfb7d6ac6e9c633a557075999cdfcff7bd5Timo Sirainen%package proxy
62041dfb7d6ac6e9c633a557075999cdfcff7bd5Timo SirainenSummary: The proxy back end of the SSSD
62041dfb7d6ac6e9c633a557075999cdfcff7bd5Timo SirainenGroup: Applications/System
62041dfb7d6ac6e9c633a557075999cdfcff7bd5Timo SirainenLicense: GPLv3+
c0d069950af1dbc6a4e5c3de3bf2e437796e3ae0Timo SirainenConflicts: sssd < %{version}-%{release}
c0d069950af1dbc6a4e5c3de3bf2e437796e3ae0Timo SirainenRequires: sssd-common = %{version}-%{release}
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo Sirainen
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo Sirainen%description proxy
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo SirainenProvides the proxy back end which can be used to wrap an existing NSS and/or
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo SirainenPAM modules to leverage SSSD caching.
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo Sirainen
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo Sirainen%package -n libsss_idmap
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo SirainenSummary: FreeIPA Idmap library
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo SirainenGroup: Development/Libraries
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo SirainenLicense: LGPLv3+
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo SirainenRequires(post): /sbin/ldconfig
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo SirainenRequires(postun): /sbin/ldconfig
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo Sirainen
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo Sirainen%description -n libsss_idmap
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo SirainenUtility library to convert SIDs to UNIX UIDs and GIDs
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo Sirainen
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo Sirainen%package -n libsss_idmap-devel
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo SirainenSummary: FreeIPA Idmap library
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo SirainenGroup: Development/Libraries
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo SirainenLicense: LGPLv3+
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo SirainenRequires: libsss_idmap = %{version}-%{release}
1460ef7a18c53216ddb4a94bb62fba96076aae8eTimo Sirainen
1460ef7a18c53216ddb4a94bb62fba96076aae8eTimo Sirainen%description -n libsss_idmap-devel
1460ef7a18c53216ddb4a94bb62fba96076aae8eTimo SirainenUtility library to SIDs to UNIX UIDs and GIDs
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo Sirainen
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo Sirainen%package -n libipa_hbac
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo SirainenSummary: FreeIPA HBAC Evaluator library
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo SirainenGroup: Development/Libraries
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo SirainenLicense: LGPLv3+
b9f564d00b7a115f465ffd6840341c7b8f9bfc8aTimo SirainenRequires(post): /sbin/ldconfig
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo SirainenRequires(postun): /sbin/ldconfig
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo Sirainen
5b62dea2f88165f3f4d87bba9011343f3ff415ffTimo Sirainen%description -n libipa_hbac
b9f564d00b7a115f465ffd6840341c7b8f9bfc8aTimo SirainenUtility library to validate FreeIPA HBAC rules for authorization requests
57bf90f66f393c2807b2fc543655013f61d1d9e4Timo Sirainen
5b62dea2f88165f3f4d87bba9011343f3ff415ffTimo Sirainen%package -n libipa_hbac-devel
1ac7c8e9040e0d0b7e9f849e45b94bfe919595a9Timo SirainenSummary: FreeIPA HBAC Evaluator library
Group: Development/Libraries
License: LGPLv3+
Requires: libipa_hbac = %{version}-%{release}

%description -n libipa_hbac-devel
Utility library to validate FreeIPA HBAC rules for authorization requests

%package -n python2-libipa_hbac
Summary: Python2 bindings for the FreeIPA HBAC Evaluator library
Group: Development/Libraries
License: LGPLv3+
Requires: libipa_hbac = %{version}-%{release}
Provides: libipa_hbac-python = %{version}-%{release}
Obsoletes: libipa_hbac-python < 1.12.90
%{?python_provide:%python_provide python2-libipa_hbac}

%description -n python2-libipa_hbac
The python2-libipa_hbac contains the bindings so that libipa_hbac can be
used by Python applications.

%if (0%{?with_python3} == 1)
%package -n python3-libipa_hbac
Summary: Python3 bindings for the FreeIPA HBAC Evaluator library
Group: Development/Libraries
License: LGPLv3+
Requires: libipa_hbac = %{version}-%{release}
%{?python_provide:%python_provide python3-libipa_hbac}

%description -n python3-libipa_hbac
The python3-libipa_hbac contains the bindings so that libipa_hbac can be
used by Python applications.
%endif

%package -n libsss_nss_idmap
Summary: Library for SID and certificate based lookups
Group: Development/Libraries
License: LGPLv3+
Requires(post): /sbin/ldconfig
Requires(postun): /sbin/ldconfig

%description -n libsss_nss_idmap
Utility library for SID and certificate based lookups

%package -n libsss_nss_idmap-devel
Summary: Library for SID and certificate based lookups
Group: Development/Libraries
License: LGPLv3+
Requires: libsss_nss_idmap = %{version}-%{release}

%description -n libsss_nss_idmap-devel
Utility library for SID and certificate based lookups

%package -n python2-libsss_nss_idmap
Summary: Python2 bindings for libsss_nss_idmap
Group: Development/Libraries
License: LGPLv3+
Requires: libsss_nss_idmap = %{version}-%{release}
Provides: libsss_nss_idmap-python = %{version}-%{release}
Obsoletes: libsss_nss_idmap-python < 1.12.90
%{?python_provide:%python_provide python2-libsss_nss_idmap}

%description -n python2-libsss_nss_idmap
The python2-libsss_nss_idmap contains the bindings so that libsss_nss_idmap can
be used by Python applications.

%if (0%{?with_python3} == 1)
%package -n python3-libsss_nss_idmap
Summary: Python3 bindings for libsss_nss_idmap
Group: Development/Libraries
License: LGPLv3+
Requires: libsss_nss_idmap = %{version}-%{release}
%{?python_provide:%python_provide python3-libsss_nss_idmap}

%description -n python3-libsss_nss_idmap
The python3-libsss_nss_idmap contains the bindings so that libsss_nss_idmap can
be used by Python applications.
%endif

%package dbus
Summary: The D-Bus responder of the SSSD
Group: Applications/System
License: GPLv3+
Requires: sssd-common = %{version}-%{release}

%description dbus
Provides the D-Bus responder of the SSSD, called the InfoPipe, that allows
the information from the SSSD to be transmitted over the system bus.

%if (0%{?install_pcscd_polkit_rule} == 1)
%package polkit-rules
Summary: Rules for polkit integration for SSSD
Group: Applications/System
License: GPLv3+
Requires: polkit >= 0.106
Requires: sssd-common = %{version}-%{release}

%description polkit-rules
Provides rules for polkit integration with SSSD. This is required
for smartcard support.
%endif

%package -n libsss_simpleifp
Summary: The SSSD D-Bus responder helper library
Group: Development/Libraries
License: GPLv3+
Requires: sssd-dbus = %{version}-%{release}
Requires(post): /sbin/ldconfig
Requires(postun): /sbin/ldconfig

%description -n libsss_simpleifp
Provides library that simplifies D-Bus API for the SSSD InfoPipe responder.

%package -n libsss_simpleifp-devel
Summary: The SSSD D-Bus responder helper library
Group: Development/Libraries
License: GPLv3+
Requires: dbus-devel
Requires: libsss_simpleifp = %{version}-%{release}

%description -n libsss_simpleifp-devel
Provides library that simplifies D-Bus API for the SSSD InfoPipe responder.

%package libwbclient
Summary: The SSSD libwbclient implementation
Group: Applications/System
License: GPLv3+ and LGPLv3+

%description libwbclient
The SSSD libwbclient implementation.

%package libwbclient-devel
Summary: Development libraries for the SSSD libwbclient implementation
Group:  Development/Libraries
License: GPLv3+ and LGPLv3+

%description libwbclient-devel
Development libraries for the SSSD libwbclient implementation.

%package winbind-idmap
Summary: SSSD's idmap_sss Backend for Winbind
Group:  Applications/System
License: GPLv3+ and LGPLv3+

%description winbind-idmap
The idmap_sss module provides a way for Winbind to call SSSD to map UIDs/GIDs
and SIDs.

%package nfs-idmap
Summary: SSSD plug-in for NFSv4 rpc.idmapd
Group:  Applications/System
License: GPLv3+

%description nfs-idmap
The libnfsidmap sssd module provides a way for rpc.idmapd to call SSSD to map
UIDs/GIDs to names and vice versa. It can be also used for mapping principal
(user) name to IDs(UID or GID) or to obtain groups which user are member of.

%package -n libsss_certmap
Summary: SSSD Certficate Mapping Library
Group: Development/Libraries
License: LGPLv3+
Requires(post): /sbin/ldconfig
Requires(postun): /sbin/ldconfig

%description -n libsss_certmap
Library to map certificates to users based on rules

%package -n libsss_certmap-devel
Summary: SSSD Certficate Mapping Library
Group: Development/Libraries
License: LGPLv3+
Requires: libsss_certmap = %{version}-%{release}

%description -n libsss_certmap-devel
Library to map certificates to users based on rules

%if (0%{?with_kcm} == 1)
%package kcm
Summary: An implementation of a Kerberos KCM server
Group:  Applications/System
License: GPLv3+
Requires: sssd-common = %{version}-%{release}

%description kcm
An implementation of a Kerberos KCM server. Use this package if you want to
use the KCM: Kerberos credentials cache.
%endif

%prep
%setup -q -n %{name}-%{version}

%build
autoreconf -ivf

%configure \
    --with-test-dir=/dev/shm \
    --with-db-path=%{dbpath} \
    --with-mcache-path=%{mcpath} \
    --with-pipe-path=%{pipepath} \
    --with-pubconf-path=%{pubconfpath} \
    --with-gpo-cache-path=%{gpocachepath} \
    --with-init-dir=%{_initrddir} \
    --with-krb5-rcache-dir=%{_localstatedir}/cache/krb5rcache \
    --enable-nsslibdir=/%{_lib} \
    --enable-pammoddir=/%{_lib}/security \
    --enable-nfsidmaplibdir=%{_libdir}/libnfsidmap \
    --disable-static \
    --disable-rpath \
%if %{with sssd_user}
    --with-sssd-user=sssd \
%endif
    %{with_initscript} \
    %{?with_syslog} \
    %{?with_cifs_utils_plugin_option} \
    %{?with_python3_option} \
    %{?enable_polkit_rules_option} \
    %{?enable_systemtap_opt} \
    %{?with_secret_responder} \
    %{?with_kcm_option} \
    %{?experimental}

make %{?_smp_mflags} all

make %{?_smp_mflags} docs

%check
export CK_TIMEOUT_MULTIPLIER=10
make %{?_smp_mflags} check VERBOSE=yes
unset CK_TIMEOUT_MULTIPLIER

%install

%if (0%{?with_python3} == 1)
sed -i -e 's:/usr/bin/python:/usr/bin/python3:' src/tools/sss_obfuscate
%endif

make install DESTDIR=$RPM_BUILD_ROOT

# Prepare language files
/usr/lib/rpm/find-lang.sh $RPM_BUILD_ROOT sssd

# Copy default logrotate file
mkdir -p $RPM_BUILD_ROOT/%{_sysconfdir}/logrotate.d
install -m644 src/examples/logrotate $RPM_BUILD_ROOT%{_sysconfdir}/logrotate.d/sssd

# Make sure SSSD is able to run on read-only root
mkdir -p $RPM_BUILD_ROOT/%{_sysconfdir}/rwtab.d
install -m644 src/examples/rwtab $RPM_BUILD_ROOT%{_sysconfdir}/rwtab.d/sssd

%if (0%{?with_cifs_utils_plugin} == 1)
# Create directory for cifs-idmap alternative
# Otherwise this directory could not be owned by sssd-client
mkdir -p $RPM_BUILD_ROOT/%{_sysconfdir}/cifs-utils
%endif

# Remove .la files created by libtool
find $RPM_BUILD_ROOT -name "*.la" -exec rm -f {} \;

# Suppress developer-only documentation
rm -Rf ${RPM_BUILD_ROOT}/%{_docdir}/%{name}

# Older versions of rpmbuild can only handle one -f option
# So we need to append to the sssd*.lang file
for file in `ls $RPM_BUILD_ROOT/%{python2_sitelib}/*.egg-info 2> /dev/null`
do
    echo %{python2_sitelib}/`basename $file` >> python2_sssdconfig.lang
done

%if (0%{?with_python3} == 1)
for file in `ls $RPM_BUILD_ROOT/%{python3_sitelib}/*.egg-info 2> /dev/null`
do
    echo %{python3_sitelib}/`basename $file` >> python3_sssdconfig.lang
done
%endif

touch sssd.lang
for subpackage in sssd_ldap sssd_krb5 sssd_ipa sssd_ad sssd_proxy sssd_tools \
                  sssd_client sssd_dbus sssd_nfs_idmap sssd_winbind_idmap \
                  libsss_certmap sssd_kcm
do
    touch $subpackage.lang
done

for man in `find $RPM_BUILD_ROOT/%{_mandir}/??/man?/ -type f | sed -e "s#$RPM_BUILD_ROOT/%{_mandir}/##"`
do
    lang=`echo $man | cut -c 1-2`
    case `basename $man` in
        sss_cache*)
            echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd.lang
            ;;
        sss_ssh*)
            echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd.lang
            ;;
        sss_rpcidmapd*)
            echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd_nfs_idmap.lang
            ;;
        sss_*)
            echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd_tools.lang
            ;;
        sssctl*)
            echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd_tools.lang
            ;;
        sssd_krb5_*)
            echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd_client.lang
            ;;
        pam_sss*)
            echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd_client.lang
            ;;
        sssd-ldap*)
            echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd_ldap.lang
            ;;
        sssd-krb5*)
            echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd_krb5.lang
            ;;
        sssd-ipa*)
            echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd_ipa.lang
            ;;
        sssd-ad*)
            echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd_ad.lang
            ;;
        sssd-proxy*)
            echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd_proxy.lang
            ;;
        sssd-ifp*)
            echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd_dbus.lang
            ;;
        sssd-kcm*)
            echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd_kcm.lang
            ;;
        idmap_sss*)
            echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd_winbind_idmap.lang
            ;;
        sss-certmap*)
            echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> libsss_certmap.lang
            ;;
        *)
            echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd.lang
            ;;
    esac
done

# Print these to the rpmbuild log
echo "sssd.lang:"
cat sssd.lang

echo "python2_sssdconfig.lang:"
cat python2_sssdconfig.lang

%if (0%{?with_python3} == 1)
echo "python3_sssdconfig.lang:"
cat python3_sssdconfig.lang
%endif

for subpackage in sssd_ldap sssd_krb5 sssd_ipa sssd_ad sssd_proxy sssd_tools \
                  sssd_client sssd_dbus sssd_nfs_idmap sssd_winbind_idmap \
                  libsss_certmap sssd_kcm
do
    echo "$subpackage.lang:"
    cat $subpackage.lang
done

# must be defined after last occurrence of package otherwise
# RPM will overwrite %%license as soon as it parses a License: tag
%if 0%{?rhel} <= 6
%define license %doc
%endif

%files
%defattr(-,root,root,-)
%license COPYING

%files common -f sssd.lang
%defattr(-,root,root,-)
%license COPYING
%doc src/examples/sssd-example.conf
%{_sbindir}/sssd
%if (0%{?use_systemd} == 1)
%{_unitdir}/sssd.service
%{_unitdir}/sssd-autofs.socket
%{_unitdir}/sssd-autofs.service
%{_unitdir}/sssd-nss.socket
%{_unitdir}/sssd-nss.service
%{_unitdir}/sssd-pac.socket
%{_unitdir}/sssd-pac.service
%{_unitdir}/sssd-pam.socket
%{_unitdir}/sssd-pam-priv.socket
%{_unitdir}/sssd-pam.service
%{_unitdir}/sssd-ssh.socket
%{_unitdir}/sssd-ssh.service
%{_unitdir}/sssd-sudo.socket
%{_unitdir}/sssd-sudo.service
%{_unitdir}/sssd-secrets.socket
%{_unitdir}/sssd-secrets.service
%else
%{_initrddir}/%{name}
%endif

%dir %{_libexecdir}/%{servicename}
%{_libexecdir}/%{servicename}/sssd_be
%{_libexecdir}/%{servicename}/sssd_nss
%{_libexecdir}/%{servicename}/sssd_pam
%{_libexecdir}/%{servicename}/sssd_autofs
%if (0%{?with_secrets} == 1)
%{_libexecdir}/%{servicename}/sssd_secrets
%endif
%{_libexecdir}/%{servicename}/sssd_ssh
%{_libexecdir}/%{servicename}/sssd_sudo
%{_libexecdir}/%{servicename}/p11_child
%if (0%{?use_systemd} == 1)
%{_libexecdir}/%{servicename}/sssd_check_socket_activated_responders
%endif

%dir %{_libdir}/%{name}
# The files provider is intentionally packaged in -common
%{_libdir}/%{name}/libsss_files.so
%{_libdir}/%{name}/libsss_simple.so

#Internal shared libraries
%{_libdir}/%{name}/libsss_child.so
%{_libdir}/%{name}/libsss_crypt.so
%{_libdir}/%{name}/libsss_cert.so
%{_libdir}/%{name}/libsss_debug.so
%{_libdir}/%{name}/libsss_krb5_common.so
%{_libdir}/%{name}/libsss_ldap_common.so
%{_libdir}/%{name}/libsss_util.so
%{_libdir}/%{name}/libsss_semanage.so

%{ldb_modulesdir}/memberof.so
%{_bindir}/sss_ssh_authorizedkeys
%{_bindir}/sss_ssh_knownhostsproxy
%{_sbindir}/sss_cache
%{_libexecdir}/%{servicename}/sss_signal

%dir %{sssdstatedir}
%dir %{_localstatedir}/cache/krb5rcache
%attr(700,sssd,sssd) %dir %{dbpath}
%attr(755,sssd,sssd) %dir %{mcpath}
%if (0%{?with_secrets} == 1)
%attr(700,root,root) %dir %{secdbpath}
%endif
%attr(755,sssd,sssd) %dir %{deskprofilepath}
%ghost %attr(0644,sssd,sssd) %verify(not md5 size mtime) %{mcpath}/passwd
%ghost %attr(0644,sssd,sssd) %verify(not md5 size mtime) %{mcpath}/group
%ghost %attr(0644,sssd,sssd) %verify(not md5 size mtime) %{mcpath}/initgroups
%attr(755,sssd,sssd) %dir %{pipepath}
%attr(750,sssd,root) %dir %{pipepath}/private
%attr(755,sssd,sssd) %dir %{pubconfpath}
%attr(755,sssd,sssd) %dir %{gpocachepath}
%attr(750,sssd,sssd) %dir %{_var}/log/%{name}
%attr(711,sssd,sssd) %dir %{_sysconfdir}/sssd
%attr(711,sssd,sssd) %dir %{_sysconfdir}/sssd/conf.d
%ghost %attr(0600,sssd,sssd) %config(noreplace) %{_sysconfdir}/sssd/sssd.conf
%dir %{_sysconfdir}/logrotate.d
%config(noreplace) %{_sysconfdir}/logrotate.d/sssd
%dir %{_sysconfdir}/rwtab.d
%config(noreplace) %{_sysconfdir}/rwtab.d/sssd
%dir %{_datadir}/sssd
%{_sysconfdir}/pam.d/sssd-shadowutils
%dir %{_libdir}/%{name}/conf
%{_libdir}/%{name}/conf/sssd.conf

%{_datadir}/sssd/cfg_rules.ini
%{_datadir}/sssd/sssd.api.conf
%{_datadir}/sssd/sssd.api.d
%{_mandir}/man1/sss_ssh_authorizedkeys.1*
%{_mandir}/man1/sss_ssh_knownhostsproxy.1*
%{_mandir}/man5/sssd.conf.5*
%{_mandir}/man5/sssd-files.5*
%{_mandir}/man5/sssd-simple.5*
%{_mandir}/man5/sssd-sudo.5*
%{_mandir}/man5/sssd-session-recording.5*
%if (0%{?with_secrets} == 1)
%{_mandir}/man5/sssd-secrets.5*
%endif
%{_mandir}/man8/sssd.8*
%{_mandir}/man8/sss_cache.8*
%if (0%{?enable_systemtap} == 1)
%dir %{_datadir}/sssd/systemtap
%{_datadir}/sssd/systemtap/id_perf.stp
%{_datadir}/sssd/systemtap/nested_group_perf.stp
%{_datadir}/sssd/systemtap/dp_request.stp
%dir %{_datadir}/systemtap
%dir %{_datadir}/systemtap/tapset
%{_datadir}/systemtap/tapset/sssd.stp
%{_datadir}/systemtap/tapset/sssd_functions.stp
%{_mandir}/man5/sssd-systemtap.5*
%endif

%if (0%{?install_pcscd_polkit_rule} == 1)
%files polkit-rules
%{_datadir}/polkit-1/rules.d/*
%endif

%files ldap -f sssd_ldap.lang
%defattr(-,root,root,-)
%license COPYING
%{_libdir}/%{name}/libsss_ldap.so
%{_mandir}/man5/sssd-ldap.5*

%files krb5-common
%defattr(-,root,root,-)
%license COPYING
%attr(755,sssd,sssd) %dir %{pubconfpath}/krb5.include.d
%attr(4750,root,sssd) %{_libexecdir}/%{servicename}/ldap_child
%attr(4750,root,sssd) %{_libexecdir}/%{servicename}/krb5_child

%files krb5 -f sssd_krb5.lang
%defattr(-,root,root,-)
%license COPYING
%{_libdir}/%{name}/libsss_krb5.so
%{_mandir}/man5/sssd-krb5.5*

%files common-pac
%defattr(-,root,root,-)
%license COPYING
%{_libexecdir}/%{servicename}/sssd_pac

%files ipa -f sssd_ipa.lang
%defattr(-,root,root,-)
%license COPYING
%attr(700,sssd,sssd) %dir %{keytabdir}
%{_libdir}/%{name}/libsss_ipa.so
%attr(4750,root,sssd) %{_libexecdir}/%{servicename}/selinux_child
%{_mandir}/man5/sssd-ipa.5*

%files ad -f sssd_ad.lang
%defattr(-,root,root,-)
%license COPYING
%{_libdir}/%{name}/libsss_ad.so
%{_libexecdir}/%{servicename}/gpo_child
%{_mandir}/man5/sssd-ad.5*

%files proxy
%defattr(-,root,root,-)
%license COPYING
%attr(4750,root,sssd) %{_libexecdir}/%{servicename}/proxy_child
%{_libdir}/%{name}/libsss_proxy.so

%files dbus -f sssd_dbus.lang
%defattr(-,root,root,-)
%license COPYING
%{_libexecdir}/%{servicename}/sssd_ifp
%{_mandir}/man5/sssd-ifp.5*
%if (0%{?use_systemd} == 1)
%{_unitdir}/sssd-ifp.service
%endif
# InfoPipe DBus plumbing
%{_sysconfdir}/dbus-1/system.d/org.freedesktop.sssd.infopipe.conf
%{_datadir}/dbus-1/system-services/org.freedesktop.sssd.infopipe.service

%files -n libsss_simpleifp
%defattr(-,root,root,-)
%{_libdir}/libsss_simpleifp.so.*

%files -n libsss_simpleifp-devel
%defattr(-,root,root,-)
%doc sss_simpleifp_doc/html
%{_includedir}/sss_sifp.h
%{_includedir}/sss_sifp_dbus.h
%{_libdir}/libsss_simpleifp.so
%{_libdir}/pkgconfig/sss_simpleifp.pc

%files client -f sssd_client.lang
%defattr(-,root,root,-)
%license src/sss_client/COPYING src/sss_client/COPYING.LESSER
/%{_lib}/libnss_sss.so.2
/%{_lib}/security/pam_sss.so
%{_libdir}/krb5/plugins/libkrb5/sssd_krb5_locator_plugin.so
%{_libdir}/krb5/plugins/authdata/sssd_pac_plugin.so
%if (0%{?with_cifs_utils_plugin} == 1)
%dir %{_libdir}/cifs-utils
%{_libdir}/cifs-utils/cifs_idmap_sss.so
%dir %{_sysconfdir}/cifs-utils
%ghost %{_sysconfdir}/cifs-utils/idmap-plugin
%endif
%dir %{_libdir}/%{name}
%dir %{_libdir}/%{name}/modules
%{_libdir}/%{name}/modules/sssd_krb5_localauth_plugin.so
%{_mandir}/man8/pam_sss.8*
%{_mandir}/man8/sssd_krb5_locator_plugin.8*

%files -n libsss_sudo
%defattr(-,root,root,-)
%license src/sss_client/COPYING
%{_libdir}/libsss_sudo.so*

%files -n libsss_autofs
%defattr(-,root,root,-)
%license src/sss_client/COPYING src/sss_client/COPYING.LESSER
%dir %{_libdir}/%{name}/modules
%{_libdir}/%{name}/modules/libsss_autofs.so

%files tools -f sssd_tools.lang
%defattr(-,root,root,-)
%license COPYING
%{_sbindir}/sss_useradd
%{_sbindir}/sss_userdel
%{_sbindir}/sss_usermod
%{_sbindir}/sss_groupadd
%{_sbindir}/sss_groupdel
%{_sbindir}/sss_groupmod
%{_sbindir}/sss_groupshow
%{_sbindir}/sss_obfuscate
%{_sbindir}/sss_override
%{_sbindir}/sss_debuglevel
%{_sbindir}/sss_seed
%{_sbindir}/sssctl
%{_mandir}/man8/sss_groupadd.8*
%{_mandir}/man8/sss_groupdel.8*
%{_mandir}/man8/sss_groupmod.8*
%{_mandir}/man8/sss_groupshow.8*
%{_mandir}/man8/sss_useradd.8*
%{_mandir}/man8/sss_userdel.8*
%{_mandir}/man8/sss_usermod.8*
%{_mandir}/man8/sss_obfuscate.8*
%{_mandir}/man8/sss_override.8*
%{_mandir}/man8/sss_debuglevel.8*
%{_mandir}/man8/sss_seed.8*
%{_mandir}/man8/sssctl.8*

%files -n python2-sssdconfig -f python2_sssdconfig.lang
%defattr(-,root,root,-)
%dir %{python2_sitelib}/SSSDConfig
%{python2_sitelib}/SSSDConfig/*.py*

%if (0%{?with_python3} == 1)
%files -n python3-sssdconfig -f python3_sssdconfig.lang
%defattr(-,root,root,-)
%dir %{python3_sitelib}/SSSDConfig
%{python3_sitelib}/SSSDConfig/*.py*
%dir %{python3_sitelib}/SSSDConfig/__pycache__
%{python3_sitelib}/SSSDConfig/__pycache__/*.py*
%endif

%files -n python2-sss
%defattr(-,root,root,-)
%{python2_sitearch}/pysss.so

%if (0%{?with_python3} == 1)
%files -n python3-sss
%defattr(-,root,root,-)
%{python3_sitearch}/pysss.so
%endif

%files -n python2-sss-murmur
%defattr(-,root,root,-)
%{python2_sitearch}/pysss_murmur.so

%if (0%{?with_python3} == 1)
%files -n python3-sss-murmur
%defattr(-,root,root,-)
%{python3_sitearch}/pysss_murmur.so
%endif

%files -n libsss_idmap
%defattr(-,root,root,-)
%license src/sss_client/COPYING src/sss_client/COPYING.LESSER
%{_libdir}/libsss_idmap.so.*

%files -n libsss_idmap-devel
%defattr(-,root,root,-)
%doc idmap_doc/html
%{_includedir}/sss_idmap.h
%{_libdir}/libsss_idmap.so
%{_libdir}/pkgconfig/sss_idmap.pc

%files -n libipa_hbac
%defattr(-,root,root,-)
%license src/sss_client/COPYING src/sss_client/COPYING.LESSER
%{_libdir}/libipa_hbac.so.*

%files -n libipa_hbac-devel
%defattr(-,root,root,-)
%doc hbac_doc/html
%{_includedir}/ipa_hbac.h
%{_libdir}/libipa_hbac.so
%{_libdir}/pkgconfig/ipa_hbac.pc

%files -n libsss_nss_idmap
%defattr(-,root,root,-)
%license src/sss_client/COPYING src/sss_client/COPYING.LESSER
%{_libdir}/libsss_nss_idmap.so.*

%files -n libsss_nss_idmap-devel
%defattr(-,root,root,-)
%doc nss_idmap_doc/html
%{_includedir}/sss_nss_idmap.h
%{_libdir}/libsss_nss_idmap.so
%{_libdir}/pkgconfig/sss_nss_idmap.pc

%files -n python2-libsss_nss_idmap
%defattr(-,root,root,-)
%{python2_sitearch}/pysss_nss_idmap.so

%if (0%{?with_python3} == 1)
%files -n python3-libsss_nss_idmap
%defattr(-,root,root,-)
%{python3_sitearch}/pysss_nss_idmap.so
%endif

%files -n python2-libipa_hbac
%defattr(-,root,root,-)
%{python2_sitearch}/pyhbac.so

%if (0%{?with_python3} == 1)
%files -n python3-libipa_hbac
%defattr(-,root,root,-)
%{python3_sitearch}/pyhbac.so
%endif

%files libwbclient
%defattr(-,root,root,-)
%dir %{_libdir}/%{name}
%dir %{_libdir}/%{name}/modules
%{_libdir}/%{name}/modules/libwbclient.so.*

%files libwbclient-devel
%defattr(-,root,root,-)
%{_includedir}/wbclient_sssd.h
%{_libdir}/%{name}/modules/libwbclient.so
%{_libdir}/pkgconfig/wbclient_sssd.pc

%files winbind-idmap -f sssd_winbind_idmap.lang
%dir %{_libdir}/samba/idmap
%{_libdir}/samba/idmap/sss.so
%{_mandir}/man8/idmap_sss.8*

%files nfs-idmap -f sssd_nfs_idmap.lang
%{_mandir}/man5/sss_rpcidmapd.5*
%{_libdir}/libnfsidmap/sss.so

%files -n libsss_certmap -f libsss_certmap.lang
%defattr(-,root,root,-)
%license src/sss_client/COPYING src/sss_client/COPYING.LESSER
%{_libdir}/libsss_certmap.so.*
%{_mandir}/man5/sss-certmap.5*

%files -n libsss_certmap-devel
%defattr(-,root,root,-)
%doc certmap_doc/html
%{_includedir}/sss_certmap.h
%{_libdir}/libsss_certmap.so
%{_libdir}/pkgconfig/sss_certmap.pc

%if (0%{?with_kcm} == 1)
%files kcm -f sssd_kcm.lang
%{_libexecdir}/%{servicename}/sssd_kcm
%dir %{_datadir}/sssd-kcm
%{_datadir}/sssd-kcm/kcm_default_ccache
%{_unitdir}/sssd-kcm.socket
%{_unitdir}/sssd-kcm.service
%{_mandir}/man8/sssd-kcm.8*
%endif

%pre common
getent group sssd >/dev/null || groupadd -r sssd
getent passwd sssd >/dev/null || useradd -r -g sssd -d / -s /sbin/nologin -c "User for sssd" sssd

%if (0%{?use_systemd} == 1)
# systemd
%post common
%systemd_post sssd.service
%systemd_post sssd-autofs.socket
%systemd_post sssd-nss.socket
%systemd_post sssd-pac.socket
%systemd_post sssd-pam.socket
%systemd_post sssd-pam-priv.socket
%systemd_post sssd-secrets.socket
%systemd_post sssd-ssh.socket
%systemd_post sssd-sudo.socket

%preun common
%systemd_preun sssd.service
%systemd_preun sssd-autofs.socket
%systemd_preun sssd-nss.socket
%systemd_preun sssd-pac.socket
%systemd_preun sssd-pam.socket
%systemd_preun sssd-pam-priv.socket
%systemd_preun sssd-secrets.socket
%systemd_preun sssd-ssh.socket
%systemd_preun sssd-sudo.socket

%postun common
%systemd_postun_with_restart sssd.service
%systemd_postun_with_restart sssd-autofs.socket
%systemd_postun_with_restart sssd-autofs.service
%systemd_postun_with_restart sssd-nss.socket
%systemd_postun_with_restart sssd-nss.service
%systemd_postun_with_restart sssd-pac.socket
%systemd_postun_with_restart sssd-pac.service
%systemd_postun_with_restart sssd-pam.socket
%systemd_postun_with_restart sssd-pam-priv.socket
%systemd_postun_with_restart sssd-pam.service
%systemd_postun_with_restart sssd-secrets.socket
%systemd_postun_with_restart sssd-secrets.service
%systemd_postun_with_restart sssd-ssh.socket
%systemd_postun_with_restart sssd-ssh.service
%systemd_postun_with_restart sssd-sudo.socket
%systemd_postun_with_restart sssd-sudo.service

%post dbus
%systemd_post sssd-ifp.service

%preun dbus
%systemd_preun sssd-ifp.service

%postun dbus
%systemd_postun_with_restart sssd-ifp.service

%if (0%{?with_kcm} == 1)
%post kcm
%systemd_post sssd-kcm.socket

%preun kcm
%systemd_preun sssd-kcm.socket

%postun kcm
%systemd_postun_with_restart sssd-kcm.socket
%systemd_postun_with_restart sssd-kcm.service
%endif

%else
# sysv
%post common
/sbin/chkconfig --add %{servicename}

%posttrans
/sbin/service %{servicename} condrestart 2>&1 > /dev/null

%preun common
if [ $1 = 0 ] ; then
    /sbin/service %{servicename} stop 2>&1 > /dev/null
    /sbin/chkconfig --del %{servicename}
fi
%endif

%if (0%{?with_cifs_utils_plugin} == 1)
%post client
/sbin/ldconfig
/usr/sbin/alternatives --install /etc/cifs-utils/idmap-plugin cifs-idmap-plugin %{_libdir}/cifs-utils/cifs_idmap_sss.so 20

%preun client
if [ $1 -eq 0 ] ; then
        /usr/sbin/alternatives --remove cifs-idmap-plugin %{_libdir}/cifs-utils/cifs_idmap_sss.so
fi
%else
%post client -p /sbin/ldconfig
%endif

%postun client -p /sbin/ldconfig

%post -n libsss_sudo -p /sbin/ldconfig

%postun -n libsss_sudo -p /sbin/ldconfig

%post -n libipa_hbac -p /sbin/ldconfig

%postun -n libipa_hbac -p /sbin/ldconfig

%post -n libsss_idmap -p /sbin/ldconfig

%postun -n libsss_idmap -p /sbin/ldconfig

%post -n libsss_nss_idmap -p /sbin/ldconfig

%postun -n libsss_nss_idmap -p /sbin/ldconfig

%post -n libsss_simpleifp -p /sbin/ldconfig

%postun -n libsss_simpleifp -p /sbin/ldconfig

%post -n libsss_certmap -p /sbin/ldconfig

%postun -n libsss_certmap -p /sbin/ldconfig

%changelog
* Mon Mar 15 2010 Stephen Gallagher <sgallagh@redhat.com> - @PACKAGE_VERSION@-0@PRERELEASE_VERSION@
- Automated build of the SSSD