1 |
# $Id: e-smith-ldap.spec,v 1.2 2016/03/17 16:36:57 unnilennium Exp $ |
# $Id: e-smith-ldap.spec,v 1.23 2023/02/06 06:14:12 jpp Exp $ |
2 |
|
|
3 |
Summary: e-smith server and gateway - LDAP module |
Summary: e-smith server and gateway - LDAP module |
4 |
%define name e-smith-ldap |
%define name e-smith-ldap |
5 |
Name: %{name} |
Name: %{name} |
6 |
%define version 5.6.0 |
%define version 5.6.0 |
7 |
%define release 3 |
%define release 17 |
8 |
Version: %{version} |
Version: %{version} |
9 |
Release: %{release}%{?dist} |
Release: %{release}%{?dist} |
10 |
License: GPL |
License: GPL |
11 |
Group: Networking/Daemons |
Group: Networking/Daemons |
12 |
Source: %{name}-%{version}.tar.xz |
Source: %{name}-%{version}.tar.xz |
13 |
|
Patch0: e-smith-ldap-5.6.0-missing_shebang_ldap_init.patch |
14 |
|
Patch1: e-smith-ldap-5.6.0.bz9688.skipredirect.patch |
15 |
|
Patch2: e-smith-ldap-5.6.0-strong_encryption.patch |
16 |
|
Patch3: e-smith-ldap-5.6.0-bz10936-TLS-and-ciphers.patch |
17 |
|
Patch4: e-smith-ldap-5.6.0-bz11140-bz11099-bz11096-systemd-update.patch |
18 |
|
Patch5: e-smith-ldap-5.6.0-bz11480-timeoutstart.patch |
19 |
|
Patch6: e-smith-ldap-5.6.0-bz11595-ssl-template.patch |
20 |
|
Patch7: e-smith-ldap-5.6.0-bz11598.patch |
21 |
|
Patch8: e-smith-ldap-5.6.0-bz11745-log.patch |
22 |
|
Patch9: e-smith-ldap-5.6.0-bz11753-ldif-fix.patch |
23 |
|
Patch10: e-smith-ldap-5.6.0-bz12221-slapd-dropin.patch |
24 |
|
Patch11: e-smith-ldap-5.6.0-bz12314-alias.patch |
25 |
|
|
26 |
BuildRoot: /var/tmp/%{name}-%{version}-%{release}-buildroot |
BuildRoot: /var/tmp/%{name}-%{version}-%{release}-buildroot |
27 |
BuildArchitectures: noarch |
BuildArchitectures: noarch |
28 |
Requires: e-smith-base |
Requires: e-smith-base |
40 |
e-smith server and gateway software - LDAP module. |
e-smith server and gateway software - LDAP module. |
41 |
|
|
42 |
%changelog |
%changelog |
43 |
|
* Mon Feb 06 2023 Jean-Philippe Pialasse <tests@pialasse.com> 5.6.0-17.sme |
44 |
|
- remove alias for slapd [SME: 12314] |
45 |
|
|
46 |
|
* Tue Nov 22 2022 Jean-Philippe Pialasse <tests@pialasse.com> 5.6.0-16.sme |
47 |
|
- fix slapd dropin missing section [SME: 12221] |
48 |
|
|
49 |
|
* Sun Apr 17 2022 Jean-Philippe Pialasse <tests@pialasse.com> 5.6.0-15.sme |
50 |
|
- add support or rsshusers system group [SME: 11753] |
51 |
|
|
52 |
|
* Fri Feb 18 2022 Jean-Philippe Pialasse <tests@pialasse.com> 5.6.0-14.sme |
53 |
|
- redirect syslog for ldapt to /var/log/ldap/ldap.log [SME: 11745] |
54 |
|
|
55 |
|
* Wed Jun 09 2021 Jean-Philippe Pialasse <tests@pialasse.com> 5.6.0-13.sme |
56 |
|
- fix ssl-update reload instead of restart ldap [SME: 11598] |
57 |
|
|
58 |
|
* Thu Jun 03 2021 Jean-Philippe Pialasse <tests@pialasse.com> 5.6.0-12.sme |
59 |
|
- fix wrong path for templates.metadata [SME: 11595] |
60 |
|
|
61 |
|
* Sun May 30 2021 Jean-Philippe Pialasse <tests@pialasse.com> 5.6.0-11.sme |
62 |
|
- use template for ssl pem [SME: 11595] |
63 |
|
|
64 |
|
* Sun Mar 21 2021 Jean-Philippe Pialasse <tests@pialasse.com> 5.6.0-10.sme |
65 |
|
- fix ldap failing to start on initial boot [SME: 11480] |
66 |
|
|
67 |
|
* Sat Jan 02 2021 Jean-Philipe Pialasse <tests@pialasse.com> 5.6.0-9.sme |
68 |
|
- fix wrong alias to ldap.init [SME: 11301] |
69 |
|
|
70 |
|
* Fri Dec 11 2020 Jean-Philipe Pialasse <tests@pialasse.com> 5.6.0-8.sme |
71 |
|
- add -update event [SME: 11140] |
72 |
|
- move ldap to systemd [SME: 11099] |
73 |
|
- move ldap.init to systemd [SME: 11096] |
74 |
|
|
75 |
|
* Sat May 02 2020 Jean-Philipe Pialasse <tests@pialasse.com> 5.6.0-7.sme |
76 |
|
- New protocol default as TLSv1.2 [SME: 10936] |
77 |
|
New property TLSProtocolMin |
78 |
|
Ciphers are now ordered with stronger first |
79 |
|
|
80 |
|
* Thu Feb 23 2017 Daniel Berteaud <daniel@firewall-services.com> 5.6.0-6.sme |
81 |
|
- Disable SSLv3, but keep the possibility to enable it again [SME: 10108] |
82 |
|
- Better default cipher suite, and honor global suite [SME: 10108] |
83 |
|
|
84 |
|
* Sun Jul 24 2016 Jean-Philipe Pialasse <tests@pialasse.com> 5.6.0-5.sme |
85 |
|
- systemd skip redirect [SME: 9688] |
86 |
|
- Eliminated rpmbuild "bogus date" warnings due to inconsistent weekday, |
87 |
|
by assuming the date is correct and changing the weekday. |
88 |
|
Fri Jun 01 2000 --> Fri May 26 2000 or Thu Jun 01 2000 or Fri Jun 02 2000 or .... |
89 |
|
Thu Aug 07 2001 --> Thu Aug 02 2001 or Tue Aug 07 2001 or Thu Aug 09 2001 or .... |
90 |
|
Tue Jun 10 2010 --> Tue Jun 08 2010 or Thu Jun 10 2010 or Tue Jun 15 2010 or .... |
91 |
|
|
92 |
|
* Thu May 12 2016 Daniel Berteaud <daniel@firewall-services.com> 5.6.0-4.sme |
93 |
|
- Add missing shebang in ldap.init script [SME: 9432] |
94 |
|
|
95 |
* Thu May 12 2016 Daniel Berteaud <daniel@firewall-services.com> 5.6.0-3.sme |
* Thu May 12 2016 Daniel Berteaud <daniel@firewall-services.com> 5.6.0-3.sme |
96 |
- Rebuild for [SME: 9393] |
- Rebuild for [SME: 9393] |
97 |
|
|
338 |
* Wed Sep 22 2010 Daniel Berteaud <daniel@firewall-services.com> 5.2.0-24.sme |
* Wed Sep 22 2010 Daniel Berteaud <daniel@firewall-services.com> 5.2.0-24.sme |
339 |
- Restrict access to the ldif file [SME: 6217] |
- Restrict access to the ldif file [SME: 6217] |
340 |
|
|
341 |
* Tue Jun 10 2010 Jonathan Martens <smeserver-contribs@snetram.nl> 5.2.0-23.sme |
* Thu Jun 10 2010 Jonathan Martens <smeserver-contribs@snetram.nl> 5.2.0-23.sme |
342 |
|
Tue Jun 10 2010 --> Tue Jun 08 2010 or Thu Jun 10 2010 or Tue Jun 15 2010 or .... |
343 |
- Fix ldap-create errors when adding empty groups [SME: 5920] |
- Fix ldap-create errors when adding empty groups [SME: 5920] |
344 |
|
|
345 |
* Mon Jun 7 2010 Federico Simoncelli <federico.simoncelli@gmail.com> 5.2.0-22.sme |
* Mon Jun 7 2010 Federico Simoncelli <federico.simoncelli@gmail.com> 5.2.0-22.sme |
879 |
- [4.3.1-01] |
- [4.3.1-01] |
880 |
- Rolled version number to 4.3.1-01. Includes patches upto 4.3.0-07. |
- Rolled version number to 4.3.1-01. Includes patches upto 4.3.0-07. |
881 |
|
|
882 |
* Thu Aug 07 2001 Charlie Brady <charlieb@e-smith.com> |
* Tue Aug 07 2001 Charlie Brady <charlieb@e-smith.com> |
883 |
- [4.3.0-07] |
- [4.3.0-07] |
884 |
- Break slapd.conf template into fragments, and include in-line |
- Break slapd.conf template into fragments, and include in-line |
885 |
at.conf and co.conf fragements, rather than use include feature. |
at.conf and co.conf fragements, rather than use include feature. |
1053 |
* Mon Jun 12 2000 Charlie Brady <charlieb@e-smith.net> |
* Mon Jun 12 2000 Charlie Brady <charlieb@e-smith.net> |
1054 |
- Use new multi-arg form of backgroundCommand. |
- Use new multi-arg form of backgroundCommand. |
1055 |
|
|
1056 |
* Fri Jun 1 2000 Charlie Brady <charlieb@e-smith.net> |
* Thu Jun 01 2000 Charlie Brady <charlieb@e-smith.net> |
1057 |
|
Fri Jun 01 2000 --> Fri May 26 2000 or Thu Jun 01 2000 or Fri Jun 02 2000 or .... |
1058 |
- First created - broken out of e-smith-base 4.0.11. |
- First created - broken out of e-smith-base 4.0.11. |
1059 |
|
|
1060 |
%prep |
%prep |
1061 |
%setup |
%setup |
1062 |
|
%patch0 -p1 |
1063 |
|
%patch1 -p1 |
1064 |
|
%patch2 -p1 |
1065 |
|
%patch3 -p1 |
1066 |
|
%patch4 -p1 |
1067 |
|
%patch5 -p1 |
1068 |
|
mkdir -p root/etc/openldap/ssl |
1069 |
|
rm -rf root/service root/var/service root/etc/rc.d/init.d/supervise |
1070 |
|
%patch6 -p1 |
1071 |
|
%patch7 -p1 |
1072 |
|
%patch8 -p1 |
1073 |
|
%patch9 -p1 |
1074 |
|
%patch10 -p1 |
1075 |
|
%patch11 -p1 |
1076 |
|
|
1077 |
%build |
%build |
1078 |
perl createlinks |
perl createlinks |
1082 |
(cd root ; find . -depth -print | cpio -dump $RPM_BUILD_ROOT) |
(cd root ; find . -depth -print | cpio -dump $RPM_BUILD_ROOT) |
1083 |
rm -f %{name}-%{version}-%{release}-filelist |
rm -f %{name}-%{version}-%{release}-filelist |
1084 |
/sbin/e-smith/genfilelist $RPM_BUILD_ROOT \ |
/sbin/e-smith/genfilelist $RPM_BUILD_ROOT \ |
1085 |
--file /var/service/ldap/run 'attr(0750,root,root)' \ |
--file /sbin/e-smith/systemd/ldap-certificate 'attr(0554,root,root)' \ |
1086 |
--file /var/service/ldap/log/run 'attr(0750,root,root)' \ |
--file /sbin/e-smith/systemd/ldap-prepare 'attr(0554,root,root)' \ |
1087 |
|
--file /sbin/e-smith/systemd/ldap-finish 'attr(0554,root,root)' \ |
1088 |
--file /var/service/ldap/ldif-fix 'attr(0750,root,root)' \ |
--file /var/service/ldap/ldif-fix 'attr(0750,root,root)' \ |
1089 |
--file /var/service/ldap/finish 'attr(0750,root,root)' \ |
--file /var/service/ldap/finish 'attr(0750,root,root)' \ |
|
--file /var/service/ldap/control/1 'attr(0750,root,root)' \ |
|
1090 |
--dir /var/log/bdb 'attr(0700,ldap,ldap)' \ |
--dir /var/log/bdb 'attr(0700,ldap,ldap)' \ |
1091 |
--dir /home/e-smith/db/ldap 'attr(0750,root,ldap)' \ |
--dir /home/e-smith/db/ldap 'attr(0750,root,ldap)' \ |
1092 |
--dir /var/log/ldap 'attr(0750,smelog,smelog)' \ |
--dir /var/log/ldap 'attr(0750,root,root)' \ |
1093 |
|
--dir /etc/openldap/ssl 'attr(0750,root,ldap)' \ |
1094 |
> %{name}-%{version}-%{release}-filelist |
> %{name}-%{version}-%{release}-filelist |
1095 |
echo "%doc COPYING" >> %{name}-%{version}-%{release}-filelist |
echo "%doc COPYING" >> %{name}-%{version}-%{release}-filelist |
1096 |
|
|
1100 |
%files -f %{name}-%{version}-%{release}-filelist |
%files -f %{name}-%{version}-%{release}-filelist |
1101 |
%defattr(-,root,root) |
%defattr(-,root,root) |
1102 |
|
|
1103 |
|
%pre |
1104 |
|
if [ -L /etc/systemd/system/slapd.service ] ; then |
1105 |
|
/usr/bin/unlink /etc/systemd/system/slapd.service |
1106 |
|
fi |
1107 |
|
if [ $1 -gt 1 ] ; then |
1108 |
|
if [ -e /var/service/ldap/run ] ; then |
1109 |
|
/usr/bin/sv d ldap |
1110 |
|
/usr/bin/sv d ldap/log |
1111 |
|
fi |
1112 |
|
fi |