smeserver-coova-chilli/contribs7/smeserver-coova-chilli.spec

# $Id: smeserver-coova-chilli.spec,v 1.22 2009/03/08 18:19:59 vip-ire Exp $
# Authority: vip-ire
# Name: Daniel Berteaud

Summary: Coova-Chilli, a captive portal based on ChilliSpot configured for SME server
%define name smeserver-coova-chilli
Name: %{name}
%define version 0.2
%define release 8
Version: %{version}
Release: %{release}%{?dist}
License: GPL
Group: Networking/Remote access
Source: %{name}-%{version}.tar.gz
URL: http://sme.firewall-services.com
BuildRoot: /var/tmp/%{name}-%{version}-%{release}-buildroot
BuildArchitectures: noarch
BuildRequires: e-smith-devtools
Requires: e-smith-release >= 7.0 
Requires: openssl 
Requires: coova-chilli
Requires: e-smith-radiusd >= 1.0.0-18
Requires: perl(NetAddr::IP)

Patch1: smeserver-coova-chilli-0.2-guest_uplink_downlink.patch
Patch2: smeserver-coova-chilli-0.2-guest_access.patch
Patch3: smeserver-coova-chilli-0.2-chilli_ip.patch
Patch4: smeserver-coova-chilli-0.2-radius_timeout.patch
Patch5: smeserver-coova-chilli-0.2-guest_access2.patch
Patch6: smeserver-coova-chilli-0.2-template_syntax_error.patch
Patch7: smeserver-coova-chilli-0.2-httpd_warning.patch
Patch8: smeserver-coova-chilli-0.2-tundev.patch
Patch9: smeserver-coova-chilli-0.2-dhcp_range.patch

%description
This package allow you to configure a third interface
(eth2). Just plug a WiFi AP on it, and you'll have
a secured captive portal. Users will be redirected
on a logon page and they'll have to enter credentials
(sme accounts) before the server allows them. By default, 
they'll only have web access if they are members of the group "chilli"
This contrib will only work in server&gateway mode 

%changelog
* Sun Mar 07 2009 Daniel B. <daniel@firewall-services.com> 0.2-8
- Add dhcpstart and dhcpstop db parameters (thanks jpruder)

* Sun Mar 07 2009 Daniel B. <daniel@firewall-services.com> 0.2-7
- Fix tundev template [SME: 5054]

* Thu Sep 18 2008 Daniel B. <daniel@firewall-services.com> 0.2-6
- Remove warning in httpd.conf file (httpd -t)

* Mon Sep 15 2008 Daniel B. <daniel@firewall-services.com> 0.2-5
- Fix Syntax Error in /etc/chilli.conf template (25listen) [SME: 4559]

* Mon Sep 08 2008 Daniel B. <daniel@firewall-services.com> 0.2-4
- Requires perl(NetAddr::IP)

* Fri Sep 5 2008 Daniel B. <daniel@firewall-services.com> 0.2-3
- Chilli IP computed with NetAddr::IP
- Radius timeout set to 3 sec
- syntax error in radius users template fixed (for guest access)

* Thu Sep 3 2008 Daniel B. <daniel@firewall-services.com> 0.2-2
- Bug fix for guest access

* Tue Sep 2 2008 Daniel B. <daniel@firewall-services.com> 0.2-1
- uplink and downlink for guest account are configurable via db keys

* Tue Sep 2 2008 Daniel B. <daniel@firewall-services.com> 0.2-0
- Login page is a CGI, with a server-manager login page look
- Guest Access can be enabled with guestAccess key (enabled/disabled)
- merge patchs in main package

* Mon Sep 01 2008 Daniel B. <daniel@firewall-services.com> 0.1-8
- Fix uamallowed not working (since bypass_auth_with_squid_fix patch)
- Add WebRequests key (use of squid or direct connexions, default to direct)
- disable radconf in /etc/chilli/config
- possible to disable https (enabled by default in AllowedOutgoing)
- add tcp:static.sourceforge.net:80 in uamallowed so daloradius homepage is displayed correctly
- add radiustimeout directive so authentication errors display the standard message quickly

* Thu Aug 28 2008 Jonathan Martens <smeserver-contribs@snetram.nl> 0.1-7
- Reverted moving of default db entries to SPEC file since common practice is to store them in files

* Thu Aug 28 2008 Daniel B. <daniel@firewall-services.com> 0.1-6
- split uamallowed (one per line)
- Add dnsparanoia directive
- correct cmdsock directive
- initialise default configuration db in the spec file

* Thu Aug 28 2008 Jonathan Martens <smeserver-contribs@snetram.nl> 0.1-5
- Remove the reset of $OUT from the template

* Thu Aug 28 2008 Daniel B. <daniel@firewall-services.com> 0.1-4
- Add template to enable auth module unix (replace the template-custom)
- Copy images to /opt/chilli/template before removing .rpmnew directory
- Correct dependency (e-smith-radiusd not esmith-radiusd)

* Wed Aug 27 2008 Jonathan Martens <smeserver-contribs@snetram.nl> 0.1-3
- Split requirements to one per line
- Removed .rpmnew directory from package
- Removed the need for templates-custom as package now requires e-smith-radiusd >= 1.0.0-18

* Tue Aug 26 2008 Daniel B. <daniel@firewall-services.com>
- [0.1-2]
- Most firewall customizations (for incomming and forwarded traffic from
  chilli network only) can be set through db commands (Patch3)
- Outgoing DNS is allowed only for the two DNS servers configured
- Clean spec file, and put php files in /opt/chilli (Patch4)

* Tue Apr 15 2008 Daniel Berteaud <daniel@firewall-services.com>
- [0.1-1]
- security fixe: auth bypass with squid (patch1)
- masq template not expanded (patch2)

* Fri Apr 04 2008 Daniel Berteaud <daniel@firewall-services.com>
- [0.1]
- initiale release

%prep
%setup
%patch1 -p1
%patch2 -p1
%patch3 -p1
%patch4 -p1
%patch5 -p1
%patch6 -p1
%patch7 -p1
%patch8 -p1
%patch9 -p1

%build
/usr/bin/perl createlinks

%install
/bin/rm -rf $RPM_BUILD_ROOT
(cd root   ; /usr/bin/find . -depth -print | /bin/cpio -dump $RPM_BUILD_ROOT)
/bin/rm -f %{name}-%{version}-filelist
/sbin/e-smith/genfilelist $RPM_BUILD_ROOT \
        --file /etc/chilli/conup.sh 'attr(0750,root,root)' \
        --file /etc/chilli/condown.sh 'attr(0750,root,root)' \
        --file /opt/chilli/cgi-bin/hotspotlogin.cgi 'attr(0750,root,www) %config(noreplace)' \
        --file /opt/chilli/lang/hotspotlogin.fr.pl 'config(noreplace)' \
        --file /opt/chilli/lang/hotspotlogin.en.pl 'config(noreplace)' \
        --file /opt/chilli/css/sme.css 'config(noreplace)' \
        > %{name}-%{version}-filelist

%files -f %{name}-%{version}-filelist
%defattr(-,root,root)

%clean 
rm -rf $RPM_BUILD_ROOT

%preun

if [ $1 == 0 ]; then
        /sbin/e-smith/db configuration setprop chilli status disabled
        /etc/rc.d/init.d/chilli stop >& /dev/null || :
fi

1	vip-ire	1.23	# $Id: smeserver-coova-chilli.spec,v 1.22 2009/03/08 18:19:59 vip-ire Exp $
2	slords	1.7	# Authority: vip-ire
3			# Name: Daniel Berteaud
4
5	slords	1.1	Summary: Coova-Chilli, a captive portal based on ChilliSpot configured for SME server
6			%define name smeserver-coova-chilli
7			Name: %{name}
8	slords	1.15	%define version 0.2
9	vip-ire	1.23	%define release 8
10	slords	1.1	Version: %{version}
11	vip-ire	1.5	Release: %{release}%{?dist}
12	vip-ire	1.4	License: GPL
13	slords	1.1	Group: Networking/Remote access
14			Source: %{name}-%{version}.tar.gz
15			URL: http://sme.firewall-services.com
16			BuildRoot: /var/tmp/%{name}-%{version}-%{release}-buildroot
17			BuildArchitectures: noarch
18	vip-ire	1.6	BuildRequires: e-smith-devtools
19	snetram	1.8	Requires: e-smith-release >= 7.0
20			Requires: openssl
21			Requires: coova-chilli
22	vip-ire	1.10	Requires: e-smith-radiusd >= 1.0.0-18
23	vip-ire	1.18	Requires: perl(NetAddr::IP)
24	vip-ire	1.3
25	slords	1.15	Patch1: smeserver-coova-chilli-0.2-guest_uplink_downlink.patch
26			Patch2: smeserver-coova-chilli-0.2-guest_access.patch
27	vip-ire	1.17	Patch3: smeserver-coova-chilli-0.2-chilli_ip.patch
28			Patch4: smeserver-coova-chilli-0.2-radius_timeout.patch
29			Patch5: smeserver-coova-chilli-0.2-guest_access2.patch
30	vip-ire	1.18	Patch6: smeserver-coova-chilli-0.2-template_syntax_error.patch
31	vip-ire	1.19	Patch7: smeserver-coova-chilli-0.2-httpd_warning.patch
32	vip-ire	1.22	Patch8: smeserver-coova-chilli-0.2-tundev.patch
33	vip-ire	1.23	Patch9: smeserver-coova-chilli-0.2-dhcp_range.patch
34	slords	1.1
35			%description
36			This package allow you to configure a third interface
37			(eth2). Just plug a WiFi AP on it, and you'll have
38			a secured captive portal. Users will be redirected
39			on a logon page and they'll have to enter credentials
40			(sme accounts) before the server allows them. By default,
41	vip-ire	1.5	they'll only have web access if they are members of the group "chilli"
42			This contrib will only work in server&gateway mode
43	slords	1.1
44			%changelog
45	vip-ire	1.23	* Sun Mar 07 2009 Daniel B. <daniel@firewall-services.com> 0.2-8
46			- Add dhcpstart and dhcpstop db parameters (thanks jpruder)
47
48	vip-ire	1.22	* Sun Mar 07 2009 Daniel B. <daniel@firewall-services.com> 0.2-7
49			- Fix tundev template [SME: 5054]
50
51	vip-ire	1.19	* Thu Sep 18 2008 Daniel B. <daniel@firewall-services.com> 0.2-6
52			- Remove warning in httpd.conf file (httpd -t)
53
54	vip-ire	1.18	* Mon Sep 15 2008 Daniel B. <daniel@firewall-services.com> 0.2-5
55	vip-ire	1.22	- Fix Syntax Error in /etc/chilli.conf template (25listen) [SME: 4559]
56	vip-ire	1.18
57			* Mon Sep 08 2008 Daniel B. <daniel@firewall-services.com> 0.2-4
58			- Requires perl(NetAddr::IP)
59
60	vip-ire	1.17	* Fri Sep 5 2008 Daniel B. <daniel@firewall-services.com> 0.2-3
61			- Chilli IP computed with NetAddr::IP
62			- Radius timeout set to 3 sec
63			- syntax error in radius users template fixed (for guest access)
64
65	slords	1.15	* Thu Sep 3 2008 Daniel B. <daniel@firewall-services.com> 0.2-2
66	vip-ire	1.17	- Bug fix for guest access
67	slords	1.15
68			* Tue Sep 2 2008 Daniel B. <daniel@firewall-services.com> 0.2-1
69			- uplink and downlink for guest account are configurable via db keys
70
71			* Tue Sep 2 2008 Daniel B. <daniel@firewall-services.com> 0.2-0
72			- Login page is a CGI, with a server-manager login page look
73	vip-ire	1.22	- Guest Access can be enabled with guestAccess key (enabled/disabled)
74	slords	1.15	- merge patchs in main package
75
76	vip-ire	1.14	* Mon Sep 01 2008 Daniel B. <daniel@firewall-services.com> 0.1-8
77			- Fix uamallowed not working (since bypass_auth_with_squid_fix patch)
78			- Add WebRequests key (use of squid or direct connexions, default to direct)
79			- disable radconf in /etc/chilli/config
80			- possible to disable https (enabled by default in AllowedOutgoing)
81			- add tcp:static.sourceforge.net:80 in uamallowed so daloradius homepage is displayed correctly
82			- add radiustimeout directive so authentication errors display the standard message quickly
83
84	snetram	1.13	* Thu Aug 28 2008 Jonathan Martens <smeserver-contribs@snetram.nl> 0.1-7
85			- Reverted moving of default db entries to SPEC file since common practice is to store them in files
86
87			* Thu Aug 28 2008 Daniel B. <daniel@firewall-services.com> 0.1-6
88	vip-ire	1.12	- split uamallowed (one per line)
89			- Add dnsparanoia directive
90			- correct cmdsock directive
91			- initialise default configuration db in the spec file
92
93	snetram	1.11	* Thu Aug 28 2008 Jonathan Martens <smeserver-contribs@snetram.nl> 0.1-5
94			- Remove the reset of $OUT from the template
95
96	vip-ire	1.9	* Thu Aug 28 2008 Daniel B. <daniel@firewall-services.com> 0.1-4
97			- Add template to enable auth module unix (replace the template-custom)
98			- Copy images to /opt/chilli/template before removing .rpmnew directory
99	vip-ire	1.10	- Correct dependency (e-smith-radiusd not esmith-radiusd)
100	vip-ire	1.9
101	snetram	1.8	* Wed Aug 27 2008 Jonathan Martens <smeserver-contribs@snetram.nl> 0.1-3
102			- Split requirements to one per line
103			- Removed .rpmnew directory from package
104	vip-ire	1.9	- Removed the need for templates-custom as package now requires e-smith-radiusd >= 1.0.0-18
105	snetram	1.8
106	vip-ire	1.3	* Tue Aug 26 2008 Daniel B. <daniel@firewall-services.com>
107			- [0.1-2]
108	vip-ire	1.5	- Most firewall customizations (for incomming and forwarded traffic from
109	vip-ire	1.3	chilli network only) can be set through db commands (Patch3)
110			- Outgoing DNS is allowed only for the two DNS servers configured
111	vip-ire	1.5	- Clean spec file, and put php files in /opt/chilli (Patch4)
112	vip-ire	1.3
113	slords	1.1	* Tue Apr 15 2008 Daniel Berteaud <daniel@firewall-services.com>
114			- [0.1-1]
115			- security fixe: auth bypass with squid (patch1)
116			- masq template not expanded (patch2)
117
118			* Fri Apr 04 2008 Daniel Berteaud <daniel@firewall-services.com>
119			- [0.1]
120			- initiale release
121
122			%prep
123			%setup
124			%patch1 -p1
125			%patch2 -p1
126	vip-ire	1.17	%patch3 -p1
127			%patch4 -p1
128			%patch5 -p1
129	vip-ire	1.18	%patch6 -p1
130	vip-ire	1.19	%patch7 -p1
131	vip-ire	1.22	%patch8 -p1
132	vip-ire	1.23	%patch9 -p1
133	slords	1.15
134	slords	1.1	%build
135			/usr/bin/perl createlinks
136
137			%install
138			/bin/rm -rf $RPM_BUILD_ROOT
139			(cd root ; /usr/bin/find . -depth -print \| /bin/cpio -dump $RPM_BUILD_ROOT)
140			/bin/rm -f %{name}-%{version}-filelist
141			/sbin/e-smith/genfilelist $RPM_BUILD_ROOT \
142			--file /etc/chilli/conup.sh 'attr(0750,root,root)' \
143			--file /etc/chilli/condown.sh 'attr(0750,root,root)' \
144	slords	1.15	--file /opt/chilli/cgi-bin/hotspotlogin.cgi 'attr(0750,root,www) %config(noreplace)' \
145			--file /opt/chilli/lang/hotspotlogin.fr.pl 'config(noreplace)' \
146			--file /opt/chilli/lang/hotspotlogin.en.pl 'config(noreplace)' \
147			--file /opt/chilli/css/sme.css 'config(noreplace)' \
148	slords	1.1	> %{name}-%{version}-filelist
149
150			%files -f %{name}-%{version}-filelist
151			%defattr(-,root,root)
152
153			%clean
154			rm -rf $RPM_BUILD_ROOT
155
156			%preun
157	vip-ire	1.3
158	slords	1.1	if [ $1 == 0 ]; then
159			/sbin/e-smith/db configuration setprop chilli status disabled
160	slords	1.7	/etc/rc.d/init.d/chilli stop >& /dev/null \|\| :
161	slords	1.1	fi
162