6 |
# ctdb is enabled by default, you can disable it with: --without clustering |
# ctdb is enabled by default, you can disable it with: --without clustering |
7 |
%bcond_without clustering |
%bcond_without clustering |
8 |
|
|
9 |
%define main_release 12 |
%define main_release 14.6 |
10 |
|
|
11 |
%define samba_version 4.4.4 |
%define samba_version 4.4.4 |
12 |
%define talloc_version 2.1.6 |
%define talloc_version 2.1.6 |
32 |
%global with_internal_talloc 0 |
%global with_internal_talloc 0 |
33 |
%global with_internal_tevent 0 |
%global with_internal_tevent 0 |
34 |
%global with_internal_tdb 0 |
%global with_internal_tdb 0 |
35 |
%global with_internal_ldb 0 |
%global with_internal_ldb 1 |
36 |
|
|
37 |
%global with_profiling 1 |
%global with_profiling 1 |
38 |
|
|
56 |
%global libwbc_alternatives_suffix -64 |
%global libwbc_alternatives_suffix -64 |
57 |
%endif |
%endif |
58 |
|
|
59 |
%global with_mitkrb5 1 |
%global with_mitkrb5 0 |
60 |
%global with_dc 0 |
%global with_dc 1 |
61 |
|
|
62 |
%if %{with testsuite} |
%if %{with testsuite} |
63 |
# The testsuite only works with a full build right now. |
# The testsuite only works with a full build right now. |
120 |
Patch10: samba-4.4.6-fix_nss_wins.patch |
Patch10: samba-4.4.6-fix_nss_wins.patch |
121 |
Patch11: samba-4.4.7-fix_group_substituion_with_ad.patch |
Patch11: samba-4.4.7-fix_group_substituion_with_ad.patch |
122 |
Patch12: samba-4.4.6-fix_smbclient_against_apple_and_azure.patch |
Patch12: samba-4.4.6-fix_smbclient_against_apple_and_azure.patch |
123 |
|
Patch13: samba-4.4.x-fix_libads_krb5_memcache.patch |
124 |
|
Patch14: CVE-2016-2125-v4-4.patch |
125 |
|
Patch15: CVE-2016-2126-v4-4.patch |
126 |
|
Patch16: CVE-2017-2619-v4-4.patch |
127 |
|
Patch17: CVE-2017-7494.patch |
128 |
|
|
129 |
BuildRoot: %(mktemp -ud %{_tmppath}/%{name}-%{version}-%{release}-XXXXXX) |
BuildRoot: %(mktemp -ud %{_tmppath}/%{name}-%{version}-%{release}-XXXXXX) |
130 |
|
|
199 |
%if %{with_vfs_cephfs} |
%if %{with_vfs_cephfs} |
200 |
BuildRequires: libcephfs1-devel |
BuildRequires: libcephfs1-devel |
201 |
%endif |
%endif |
202 |
|
BuildRequires: gnutls-devel |
203 |
# Allow build with testsuite which uses heimdal |
# Allow build with testsuite which uses heimdal |
204 |
#%if %{with_dc} |
#%if %{with_dc} |
205 |
#BuildRequires: gnutls-devel >= 3.4.7 |
#BuildRequires: gnutls-devel >= 3.4.7 |
400 |
%package vfs-glusterfs |
%package vfs-glusterfs |
401 |
Summary: Samba VFS module for GlusterFS |
Summary: Samba VFS module for GlusterFS |
402 |
Group: Applications/System |
Group: Applications/System |
403 |
|
Requires: libldb |
404 |
Requires: glusterfs-api >= 3.4.0.16 |
Requires: glusterfs-api >= 3.4.0.16 |
405 |
Requires: glusterfs >= 3.4.0.16 |
Requires: glusterfs >= 3.4.0.16 |
406 |
Requires: %{name} = %{samba_depver} |
Requires: %{name} = %{samba_depver} |
500 |
Requires: %{name}-libs = %{samba_depver} |
Requires: %{name}-libs = %{samba_depver} |
501 |
Requires: python-tevent |
Requires: python-tevent |
502 |
Requires: python-tdb |
Requires: python-tdb |
503 |
Requires: pyldb |
#Requires: pyldb |
504 |
Requires: pytalloc |
Requires: pytalloc |
505 |
|
|
506 |
Provides: samba4-python = %{samba_depver} |
Provides: samba4-python = %{samba_depver} |
723 |
%patch10 -p1 -b .samba-4.4.6-fix_nss_wins.patch |
%patch10 -p1 -b .samba-4.4.6-fix_nss_wins.patch |
724 |
%patch11 -p1 -b .samba-4.4.7-fix_group_substituion_with_ad.patch |
%patch11 -p1 -b .samba-4.4.7-fix_group_substituion_with_ad.patch |
725 |
%patch12 -p1 -b .samba-4.4.6-fix_smbclient_against_apple_and_azure.patch |
%patch12 -p1 -b .samba-4.4.6-fix_smbclient_against_apple_and_azure.patch |
726 |
|
%patch13 -p1 -b .samba-4.4.x-fix_libads_krb5_memcache.patch |
727 |
|
%patch14 -p1 -b .CVE-2016-2125-v4-4.patch |
728 |
|
%patch15 -p1 -b .CVE-2016-2126-v4-4.patch |
729 |
|
%patch16 -p1 -b .CVE-2017-2619-v4-4.patch |
730 |
|
%patch17 -p1 -b .CVE-2017-7494.patch |
731 |
|
|
732 |
%build |
%build |
733 |
%global _talloc_lib ,talloc,pytalloc,pytalloc-util |
%global _talloc_lib ,talloc,pytalloc,pytalloc-util |
890 |
%endif |
%endif |
891 |
|
|
892 |
install -d -m 0755 %{buildroot}%{_unitdir} |
install -d -m 0755 %{buildroot}%{_unitdir} |
893 |
for i in nmb smb winbind ; do |
for i in nmb smb winbind samba; do |
894 |
cat packaging/systemd/$i.service | sed -e 's@\[Service\]@[Service]\nEnvironment=KRB5CCNAME=FILE:/run/samba/krb5cc_samba@g' >tmp$i.service |
cat packaging/systemd/$i.service | sed -e 's@\[Service\]@[Service]\nEnvironment=KRB5CCNAME=/run/samba/krb5cc_samba@g' >tmp$i.service |
895 |
install -m 0644 tmp$i.service %{buildroot}%{_unitdir}/$i.service |
install -m 0644 tmp$i.service %{buildroot}%{_unitdir}/$i.service |
896 |
done |
done |
897 |
%if %with_clustering_support |
%if %with_clustering_support |
1505 |
%{_libdir}/samba/ldb/repl_meta_data.so |
%{_libdir}/samba/ldb/repl_meta_data.so |
1506 |
%{_libdir}/samba/ldb/resolve_oids.so |
%{_libdir}/samba/ldb/resolve_oids.so |
1507 |
%{_libdir}/samba/ldb/rootdse.so |
%{_libdir}/samba/ldb/rootdse.so |
1508 |
|
%{_unitdir}/samba.service |
1509 |
%{_libdir}/samba/ldb/samba3sam.so |
%{_libdir}/samba/ldb/samba3sam.so |
1510 |
%{_libdir}/samba/ldb/samba3sid.so |
%{_libdir}/samba/ldb/samba3sid.so |
1511 |
%{_libdir}/samba/ldb/samba_dsdb.so |
%{_libdir}/samba/ldb/samba_dsdb.so |
2037 |
%endif # with_clustering_support |
%endif # with_clustering_support |
2038 |
|
|
2039 |
%changelog |
%changelog |
2040 |
* Tue Nov 15 2016 Andreas Schneider <asn@redhat.com> - 4.4.4-11 |
* Fri May 26 2017 Jean-Philipe Pialasse <tests@pialasse.com> 4.4.4-14.6.sme |
2041 |
|
- import to SME the two last upstream releases [SME: 10326] |
2042 |
|
- resolves: #1450784 - Security fix for CVE-2017-7494 |
2043 |
|
- resolves: #1437816 - Fix krb5 memory cache in libads sasl code |
2044 |
|
- resolves: #1437741 - Fix CVE-2016-2125, CVE-2016-2126 and CVE-2017-2619 |
2045 |
|
|
2046 |
|
* Thu May 18 2017 Guenther Deschner <gdeschner@redhat.com> - 4.4.4-14 |
2047 |
|
- resolves: #1450784 - Security fix for CVE-2017-7494 |
2048 |
|
|
2049 |
|
* Wed Apr 05 2017 Andreas Schneider <asn@redhat.com> - 4.4.4-13 |
2050 |
|
- resolves: #1437816 - Fix krb5 memory cache in libads sasl code |
2051 |
|
- resolves: #1437741 - Fix CVE-2016-2125, CVE-2016-2126 and CVE-2017-2619 |
2052 |
|
|
2053 |
|
* Thu Mar 02 2017 Jean-Philipe Pialasse <tests@pialasse.com> 4.4.4-12.6.sme |
2054 |
|
- added DC support thanks to Greg Zartman work [SME: 9817] |
2055 |
|
- added Buildrequires gnutls-devel |
2056 |
|
|
2057 |
|
* Tue Nov 15 2016 Andreas Schneider <asn@redhat.com> - 4.4.4-12 |
2058 |
- related: #1393051 - Fix return code if ip not defined in gethostbyname |
- related: #1393051 - Fix return code if ip not defined in gethostbyname |
2059 |
|
|
2060 |
* Wed Nov 09 2016 Andreas Schneider <asn@redhat.com> - 4.4.4-11 |
* Wed Nov 09 2016 Andreas Schneider <asn@redhat.com> - 4.4.4-11 |