1 |
# $Id: e-smith-ldap.spec,v 1.6 2016/07/24 15:36:18 unnilennium Exp $ |
# $Id: e-smith-ldap.spec,v 1.16 2021/06/03 14:36:13 jpp Exp $ |
2 |
|
|
3 |
Summary: e-smith server and gateway - LDAP module |
Summary: e-smith server and gateway - LDAP module |
4 |
%define name e-smith-ldap |
%define name e-smith-ldap |
5 |
Name: %{name} |
Name: %{name} |
6 |
%define version 5.6.0 |
%define version 5.6.0 |
7 |
%define release 5 |
%define release 13 |
8 |
Version: %{version} |
Version: %{version} |
9 |
Release: %{release}%{?dist} |
Release: %{release}%{?dist} |
10 |
License: GPL |
License: GPL |
12 |
Source: %{name}-%{version}.tar.xz |
Source: %{name}-%{version}.tar.xz |
13 |
Patch0: e-smith-ldap-5.6.0-missing_shebang_ldap_init.patch |
Patch0: e-smith-ldap-5.6.0-missing_shebang_ldap_init.patch |
14 |
Patch1: e-smith-ldap-5.6.0.bz9688.skipredirect.patch |
Patch1: e-smith-ldap-5.6.0.bz9688.skipredirect.patch |
15 |
|
Patch2: e-smith-ldap-5.6.0-strong_encryption.patch |
16 |
|
Patch3: e-smith-ldap-5.6.0-bz10936-TLS-and-ciphers.patch |
17 |
|
Patch4: e-smith-ldap-5.6.0-bz11140-bz11099-bz11096-systemd-update.patch |
18 |
|
Patch5: e-smith-ldap-5.6.0-bz11480-timeoutstart.patch |
19 |
|
Patch6: e-smith-ldap-5.6.0-bz11595-ssl-template.patch |
20 |
|
Patch7: e-smith-ldap-5.6.0-bz11598.patch |
21 |
|
|
22 |
BuildRoot: /var/tmp/%{name}-%{version}-%{release}-buildroot |
BuildRoot: /var/tmp/%{name}-%{version}-%{release}-buildroot |
23 |
BuildArchitectures: noarch |
BuildArchitectures: noarch |
24 |
Requires: e-smith-base |
Requires: e-smith-base |
36 |
e-smith server and gateway software - LDAP module. |
e-smith server and gateway software - LDAP module. |
37 |
|
|
38 |
%changelog |
%changelog |
39 |
|
* Wed Jun 09 2021 Jean-Philippe Pialasse <tests@pialasse.com> 5.6.0-13.sme |
40 |
|
- fix ssl-update reload instead of restart ldap [SME: 11598] |
41 |
|
|
42 |
|
* Thu Jun 03 2021 Jean-Philippe Pialasse <tests@pialasse.com> 5.6.0-12.sme |
43 |
|
- fix wrong path for templates.metadata [SME: 11595] |
44 |
|
|
45 |
|
* Sun May 30 2021 Jean-Philippe Pialasse <tests@pialasse.com> 5.6.0-11.sme |
46 |
|
- use template for ssl pem [SME: 11595] |
47 |
|
|
48 |
|
* Sun Mar 21 2021 Jean-Philippe Pialasse <tests@pialasse.com> 5.6.0-10.sme |
49 |
|
- fix ldap failing to start on initial boot [SME: 11480] |
50 |
|
|
51 |
|
* Sat Jan 02 2021 Jean-Philipe Pialasse <tests@pialasse.com> 5.6.0-9.sme |
52 |
|
- fix wrong alias to ldap.init [SME: 11301] |
53 |
|
|
54 |
|
* Fri Dec 11 2020 Jean-Philipe Pialasse <tests@pialasse.com> 5.6.0-8.sme |
55 |
|
- add -update event [SME: 11140] |
56 |
|
- move ldap to systemd [SME: 11099] |
57 |
|
- move ldap.init to systemd [SME: 11096] |
58 |
|
|
59 |
|
* Sat May 02 2020 Jean-Philipe Pialasse <tests@pialasse.com> 5.6.0-7.sme |
60 |
|
- New protocol default as TLSv1.2 [SME: 10936] |
61 |
|
New property TLSProtocolMin |
62 |
|
Ciphers are now ordered with stronger first |
63 |
|
|
64 |
|
* Thu Feb 23 2017 Daniel Berteaud <daniel@firewall-services.com> 5.6.0-6.sme |
65 |
|
- Disable SSLv3, but keep the possibility to enable it again [SME: 10108] |
66 |
|
- Better default cipher suite, and honor global suite [SME: 10108] |
67 |
|
|
68 |
* Sun Jul 24 2016 Jean-Philipe Pialasse <tests@pialasse.com> 5.6.0-5.sme |
* Sun Jul 24 2016 Jean-Philipe Pialasse <tests@pialasse.com> 5.6.0-5.sme |
69 |
- systemd skip redirect [SME: 9688] |
- systemd skip redirect [SME: 9688] |
70 |
- Eliminated rpmbuild "bogus date" warnings due to inconsistent weekday, |
- Eliminated rpmbuild "bogus date" warnings due to inconsistent weekday, |
1045 |
%setup |
%setup |
1046 |
%patch0 -p1 |
%patch0 -p1 |
1047 |
%patch1 -p1 |
%patch1 -p1 |
1048 |
|
%patch2 -p1 |
1049 |
|
%patch3 -p1 |
1050 |
|
%patch4 -p1 |
1051 |
|
%patch5 -p1 |
1052 |
|
mkdir -p root/etc/openldap/ssl |
1053 |
|
rm -rf root/service root/var/service root/etc/rc.d/init.d/supervise |
1054 |
|
%patch6 -p1 |
1055 |
|
%patch7 -p1 |
1056 |
|
|
1057 |
%build |
%build |
1058 |
perl createlinks |
perl createlinks |
1062 |
(cd root ; find . -depth -print | cpio -dump $RPM_BUILD_ROOT) |
(cd root ; find . -depth -print | cpio -dump $RPM_BUILD_ROOT) |
1063 |
rm -f %{name}-%{version}-%{release}-filelist |
rm -f %{name}-%{version}-%{release}-filelist |
1064 |
/sbin/e-smith/genfilelist $RPM_BUILD_ROOT \ |
/sbin/e-smith/genfilelist $RPM_BUILD_ROOT \ |
1065 |
--file /var/service/ldap/run 'attr(0750,root,root)' \ |
--file /sbin/e-smith/systemd/ldap-certificate 'attr(0554,root,root)' \ |
1066 |
--file /var/service/ldap/log/run 'attr(0750,root,root)' \ |
--file /sbin/e-smith/systemd/ldap-prepare 'attr(0554,root,root)' \ |
1067 |
|
--file /sbin/e-smith/systemd/ldap-finish 'attr(0554,root,root)' \ |
1068 |
--file /var/service/ldap/ldif-fix 'attr(0750,root,root)' \ |
--file /var/service/ldap/ldif-fix 'attr(0750,root,root)' \ |
1069 |
--file /var/service/ldap/finish 'attr(0750,root,root)' \ |
--file /var/service/ldap/finish 'attr(0750,root,root)' \ |
|
--file /var/service/ldap/control/1 'attr(0750,root,root)' \ |
|
1070 |
--dir /var/log/bdb 'attr(0700,ldap,ldap)' \ |
--dir /var/log/bdb 'attr(0700,ldap,ldap)' \ |
1071 |
--dir /home/e-smith/db/ldap 'attr(0750,root,ldap)' \ |
--dir /home/e-smith/db/ldap 'attr(0750,root,ldap)' \ |
1072 |
--dir /var/log/ldap 'attr(0750,smelog,smelog)' \ |
--dir /var/log/ldap 'attr(0750,smelog,smelog)' \ |
1073 |
|
--dir /etc/openldap/ssl 'attr(0750,root,ldap)' \ |
1074 |
> %{name}-%{version}-%{release}-filelist |
> %{name}-%{version}-%{release}-filelist |
1075 |
echo "%doc COPYING" >> %{name}-%{version}-%{release}-filelist |
echo "%doc COPYING" >> %{name}-%{version}-%{release}-filelist |
1076 |
|
|
1080 |
%files -f %{name}-%{version}-%{release}-filelist |
%files -f %{name}-%{version}-%{release}-filelist |
1081 |
%defattr(-,root,root) |
%defattr(-,root,root) |
1082 |
|
|
1083 |
|
%pre |
1084 |
|
if [ $1 -gt 1 ] ; then |
1085 |
|
if [ -e /var/service/ldap/run ] ; then |
1086 |
|
/usr/bin/sv d ldap |
1087 |
|
/usr/bin/sv d ldap/log |
1088 |
|
fi |
1089 |
|
fi |