1 |
# $Id: e-smith-ldap.spec,v 1.4 2016/05/12 23:10:22 vip-ire Exp $ |
# $Id: e-smith-ldap.spec,v 1.17 2021/06/09 15:59:48 jpp Exp $ |
2 |
|
|
3 |
Summary: e-smith server and gateway - LDAP module |
Summary: e-smith server and gateway - LDAP module |
4 |
%define name e-smith-ldap |
%define name e-smith-ldap |
5 |
Name: %{name} |
Name: %{name} |
6 |
%define version 5.6.0 |
%define version 5.6.0 |
7 |
%define release 5 |
%define release 14 |
8 |
Version: %{version} |
Version: %{version} |
9 |
Release: %{release}%{?dist} |
Release: %{release}%{?dist} |
10 |
License: GPL |
License: GPL |
12 |
Source: %{name}-%{version}.tar.xz |
Source: %{name}-%{version}.tar.xz |
13 |
Patch0: e-smith-ldap-5.6.0-missing_shebang_ldap_init.patch |
Patch0: e-smith-ldap-5.6.0-missing_shebang_ldap_init.patch |
14 |
Patch1: e-smith-ldap-5.6.0.bz9688.skipredirect.patch |
Patch1: e-smith-ldap-5.6.0.bz9688.skipredirect.patch |
15 |
|
Patch2: e-smith-ldap-5.6.0-strong_encryption.patch |
16 |
|
Patch3: e-smith-ldap-5.6.0-bz10936-TLS-and-ciphers.patch |
17 |
|
Patch4: e-smith-ldap-5.6.0-bz11140-bz11099-bz11096-systemd-update.patch |
18 |
|
Patch5: e-smith-ldap-5.6.0-bz11480-timeoutstart.patch |
19 |
|
Patch6: e-smith-ldap-5.6.0-bz11595-ssl-template.patch |
20 |
|
Patch7: e-smith-ldap-5.6.0-bz11598.patch |
21 |
|
Patch8: e-smith-ldap-5.6.0-bz11745-log.patch |
22 |
|
|
23 |
BuildRoot: /var/tmp/%{name}-%{version}-%{release}-buildroot |
BuildRoot: /var/tmp/%{name}-%{version}-%{release}-buildroot |
24 |
BuildArchitectures: noarch |
BuildArchitectures: noarch |
25 |
Requires: e-smith-base |
Requires: e-smith-base |
37 |
e-smith server and gateway software - LDAP module. |
e-smith server and gateway software - LDAP module. |
38 |
|
|
39 |
%changelog |
%changelog |
40 |
|
* Fri Feb 18 2022 Jean-Philippe Pialasse <tests@pialasse.com> 5.6.0-14.sme |
41 |
|
- redirect syslog for ldapt to /var/log/ldap/ldap.log [SME: 11745] |
42 |
|
|
43 |
|
* Wed Jun 09 2021 Jean-Philippe Pialasse <tests@pialasse.com> 5.6.0-13.sme |
44 |
|
- fix ssl-update reload instead of restart ldap [SME: 11598] |
45 |
|
|
46 |
|
* Thu Jun 03 2021 Jean-Philippe Pialasse <tests@pialasse.com> 5.6.0-12.sme |
47 |
|
- fix wrong path for templates.metadata [SME: 11595] |
48 |
|
|
49 |
|
* Sun May 30 2021 Jean-Philippe Pialasse <tests@pialasse.com> 5.6.0-11.sme |
50 |
|
- use template for ssl pem [SME: 11595] |
51 |
|
|
52 |
|
* Sun Mar 21 2021 Jean-Philippe Pialasse <tests@pialasse.com> 5.6.0-10.sme |
53 |
|
- fix ldap failing to start on initial boot [SME: 11480] |
54 |
|
|
55 |
|
* Sat Jan 02 2021 Jean-Philipe Pialasse <tests@pialasse.com> 5.6.0-9.sme |
56 |
|
- fix wrong alias to ldap.init [SME: 11301] |
57 |
|
|
58 |
|
* Fri Dec 11 2020 Jean-Philipe Pialasse <tests@pialasse.com> 5.6.0-8.sme |
59 |
|
- add -update event [SME: 11140] |
60 |
|
- move ldap to systemd [SME: 11099] |
61 |
|
- move ldap.init to systemd [SME: 11096] |
62 |
|
|
63 |
|
* Sat May 02 2020 Jean-Philipe Pialasse <tests@pialasse.com> 5.6.0-7.sme |
64 |
|
- New protocol default as TLSv1.2 [SME: 10936] |
65 |
|
New property TLSProtocolMin |
66 |
|
Ciphers are now ordered with stronger first |
67 |
|
|
68 |
|
* Thu Feb 23 2017 Daniel Berteaud <daniel@firewall-services.com> 5.6.0-6.sme |
69 |
|
- Disable SSLv3, but keep the possibility to enable it again [SME: 10108] |
70 |
|
- Better default cipher suite, and honor global suite [SME: 10108] |
71 |
|
|
72 |
* Sun Jul 24 2016 Jean-Philipe Pialasse <tests@pialasse.com> 5.6.0-5.sme |
* Sun Jul 24 2016 Jean-Philipe Pialasse <tests@pialasse.com> 5.6.0-5.sme |
73 |
- systemd skip redirect [SME: 9688] |
- systemd skip redirect [SME: 9688] |
74 |
|
- Eliminated rpmbuild "bogus date" warnings due to inconsistent weekday, |
75 |
|
by assuming the date is correct and changing the weekday. |
76 |
|
Fri Jun 01 2000 --> Fri May 26 2000 or Thu Jun 01 2000 or Fri Jun 02 2000 or .... |
77 |
|
Thu Aug 07 2001 --> Thu Aug 02 2001 or Tue Aug 07 2001 or Thu Aug 09 2001 or .... |
78 |
|
Tue Jun 10 2010 --> Tue Jun 08 2010 or Thu Jun 10 2010 or Tue Jun 15 2010 or .... |
79 |
|
|
80 |
* Thu May 12 2016 Daniel Berteaud <daniel@firewall-services.com> 5.6.0-4.sme |
* Thu May 12 2016 Daniel Berteaud <daniel@firewall-services.com> 5.6.0-4.sme |
81 |
- Add missing shebang in ldap.init script [SME: 9432] |
- Add missing shebang in ldap.init script [SME: 9432] |
326 |
* Wed Sep 22 2010 Daniel Berteaud <daniel@firewall-services.com> 5.2.0-24.sme |
* Wed Sep 22 2010 Daniel Berteaud <daniel@firewall-services.com> 5.2.0-24.sme |
327 |
- Restrict access to the ldif file [SME: 6217] |
- Restrict access to the ldif file [SME: 6217] |
328 |
|
|
329 |
* Tue Jun 10 2010 Jonathan Martens <smeserver-contribs@snetram.nl> 5.2.0-23.sme |
* Thu Jun 10 2010 Jonathan Martens <smeserver-contribs@snetram.nl> 5.2.0-23.sme |
330 |
|
Tue Jun 10 2010 --> Tue Jun 08 2010 or Thu Jun 10 2010 or Tue Jun 15 2010 or .... |
331 |
- Fix ldap-create errors when adding empty groups [SME: 5920] |
- Fix ldap-create errors when adding empty groups [SME: 5920] |
332 |
|
|
333 |
* Mon Jun 7 2010 Federico Simoncelli <federico.simoncelli@gmail.com> 5.2.0-22.sme |
* Mon Jun 7 2010 Federico Simoncelli <federico.simoncelli@gmail.com> 5.2.0-22.sme |
867 |
- [4.3.1-01] |
- [4.3.1-01] |
868 |
- Rolled version number to 4.3.1-01. Includes patches upto 4.3.0-07. |
- Rolled version number to 4.3.1-01. Includes patches upto 4.3.0-07. |
869 |
|
|
870 |
* Thu Aug 07 2001 Charlie Brady <charlieb@e-smith.com> |
* Tue Aug 07 2001 Charlie Brady <charlieb@e-smith.com> |
871 |
- [4.3.0-07] |
- [4.3.0-07] |
872 |
- Break slapd.conf template into fragments, and include in-line |
- Break slapd.conf template into fragments, and include in-line |
873 |
at.conf and co.conf fragements, rather than use include feature. |
at.conf and co.conf fragements, rather than use include feature. |
1041 |
* Mon Jun 12 2000 Charlie Brady <charlieb@e-smith.net> |
* Mon Jun 12 2000 Charlie Brady <charlieb@e-smith.net> |
1042 |
- Use new multi-arg form of backgroundCommand. |
- Use new multi-arg form of backgroundCommand. |
1043 |
|
|
1044 |
* Fri Jun 1 2000 Charlie Brady <charlieb@e-smith.net> |
* Thu Jun 01 2000 Charlie Brady <charlieb@e-smith.net> |
1045 |
|
Fri Jun 01 2000 --> Fri May 26 2000 or Thu Jun 01 2000 or Fri Jun 02 2000 or .... |
1046 |
- First created - broken out of e-smith-base 4.0.11. |
- First created - broken out of e-smith-base 4.0.11. |
1047 |
|
|
1048 |
%prep |
%prep |
1049 |
%setup |
%setup |
1050 |
%patch0 -p1 |
%patch0 -p1 |
1051 |
%patch1 -p1 |
%patch1 -p1 |
1052 |
|
%patch2 -p1 |
1053 |
|
%patch3 -p1 |
1054 |
|
%patch4 -p1 |
1055 |
|
%patch5 -p1 |
1056 |
|
mkdir -p root/etc/openldap/ssl |
1057 |
|
rm -rf root/service root/var/service root/etc/rc.d/init.d/supervise |
1058 |
|
%patch6 -p1 |
1059 |
|
%patch7 -p1 |
1060 |
|
%patch8 -p1 |
1061 |
|
|
1062 |
%build |
%build |
1063 |
perl createlinks |
perl createlinks |
1067 |
(cd root ; find . -depth -print | cpio -dump $RPM_BUILD_ROOT) |
(cd root ; find . -depth -print | cpio -dump $RPM_BUILD_ROOT) |
1068 |
rm -f %{name}-%{version}-%{release}-filelist |
rm -f %{name}-%{version}-%{release}-filelist |
1069 |
/sbin/e-smith/genfilelist $RPM_BUILD_ROOT \ |
/sbin/e-smith/genfilelist $RPM_BUILD_ROOT \ |
1070 |
--file /var/service/ldap/run 'attr(0750,root,root)' \ |
--file /sbin/e-smith/systemd/ldap-certificate 'attr(0554,root,root)' \ |
1071 |
--file /var/service/ldap/log/run 'attr(0750,root,root)' \ |
--file /sbin/e-smith/systemd/ldap-prepare 'attr(0554,root,root)' \ |
1072 |
|
--file /sbin/e-smith/systemd/ldap-finish 'attr(0554,root,root)' \ |
1073 |
--file /var/service/ldap/ldif-fix 'attr(0750,root,root)' \ |
--file /var/service/ldap/ldif-fix 'attr(0750,root,root)' \ |
1074 |
--file /var/service/ldap/finish 'attr(0750,root,root)' \ |
--file /var/service/ldap/finish 'attr(0750,root,root)' \ |
|
--file /var/service/ldap/control/1 'attr(0750,root,root)' \ |
|
1075 |
--dir /var/log/bdb 'attr(0700,ldap,ldap)' \ |
--dir /var/log/bdb 'attr(0700,ldap,ldap)' \ |
1076 |
--dir /home/e-smith/db/ldap 'attr(0750,root,ldap)' \ |
--dir /home/e-smith/db/ldap 'attr(0750,root,ldap)' \ |
1077 |
--dir /var/log/ldap 'attr(0750,smelog,smelog)' \ |
--dir /var/log/ldap 'attr(0750,smelog,smelog)' \ |
1078 |
|
--dir /etc/openldap/ssl 'attr(0750,root,ldap)' \ |
1079 |
> %{name}-%{version}-%{release}-filelist |
> %{name}-%{version}-%{release}-filelist |
1080 |
echo "%doc COPYING" >> %{name}-%{version}-%{release}-filelist |
echo "%doc COPYING" >> %{name}-%{version}-%{release}-filelist |
1081 |
|
|
1085 |
%files -f %{name}-%{version}-%{release}-filelist |
%files -f %{name}-%{version}-%{release}-filelist |
1086 |
%defattr(-,root,root) |
%defattr(-,root,root) |
1087 |
|
|
1088 |
|
%pre |
1089 |
|
if [ $1 -gt 1 ] ; then |
1090 |
|
if [ -e /var/service/ldap/run ] ; then |
1091 |
|
/usr/bin/sv d ldap |
1092 |
|
/usr/bin/sv d ldap/log |
1093 |
|
fi |
1094 |
|
fi |