1 files changed, 290 insertions, 0 deletions
diff --git a/ipa-server/ipa-server.spec.in b/ipa-server/ipa-server.spec.in
new file mode 100644
index 00000000..dfadac12
--- /dev/null
+++ b/ipa-server/ipa-server.spec.in
@@ -0,0 +1,290 @@
+Name:           ipa-server
+Version:        __VERSION__
+Release:        __RELEASE__%{?dist}
+Summary:        IPA authentication server
+
+Group:          System Environment/Base
+License:        GPLv2
+URL:            http://www.freeipa.org
+Source0:        %{name}-%{version}.tgz
+BuildRoot:      %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
+
+BuildRequires: fedora-ds-base-devel >= 1.1
+BuildRequires: mozldap-devel
+BuildRequires: openssl-devel
+BuildRequires: openldap-devel
+BuildRequires: krb5-devel
+BuildRequires: nss-devel
+BuildRequires: libcap-devel
+
+Requires(post): ipa-server-selinux
+Requires: ipa-python
+Requires: ipa-admintools
+Requires: ipa-client
+Requires: fedora-ds-base >= 1.1
+Requires: openldap-clients
+Requires: nss
+Requires: nss-tools
+Requires: krb5-server
+Requires: krb5-server-ldap
+Requires: cyrus-sasl-gssapi
+Requires: ntp
+Requires: httpd
+Requires: mod_python
+Requires: mod_auth_kerb
+Requires: mod_nss >= 1.0.7-2
+Requires: python-ldap
+Requires: python
+Requires: python-krbV
+Requires: TurboGears
+Requires: python-tgexpandingformwidget
+Requires: acl
+Requires: python-pyasn1
+Requires: libcap
+Requires: slapi-nis
+
+Conflicts: mod_ssl
+
+%define httpd_conf /etc/httpd/conf.d
+%define plugin_dir %{_libdir}/dirsrv/plugins
+
+%{!?python_sitelib: %define python_sitelib %(%{__python} -c "from distutils.sysconfig import get_python_lib; print get_python_lib()")}
+
+%description
+IPA is a server for identity, policy, and audit.
+
+%prep
+%setup -q
+./configure --prefix=%{buildroot}/usr --libdir=%{buildroot}/%{_libdir} --sysconfdir=%{buildroot}/etc --localstatedir=%{buildroot}/var --mandir=%{buildroot}/usr/share/man
+
+%build
+
+make
+
+%install
+rm -rf %{buildroot}
+
+make install
+
+# Remove .la files from libtool - we don't want to package
+# these files
+rm %{buildroot}/%{plugin_dir}/libipa_pwd_extop.la
+rm %{buildroot}/%{plugin_dir}/libipa-memberof-plugin.la
+rm %{buildroot}/%{plugin_dir}/libipa-dna-plugin.la
+rm %{buildroot}/%{plugin_dir}/libipa_winsync.la
+
+# Some user-modifiable HTML files are provided. Move these to /etc
+# and link back.
+mkdir -p %{buildroot}/%{_sysconfdir}/ipa/html
+mv %{buildroot}/%{_usr}/share/ipa/html/ssbrowser.html %{buildroot}/%{_sysconfdir}/ipa/html
+mv %{buildroot}/%{_usr}/share/ipa/html/unauthorized.html %{buildroot}/%{_sysconfdir}/ipa/html
+ln -s ../../../..%{_sysconfdir}/ipa/html/ssbrowser.html \
+    %{buildroot}%{_usr}/share/ipa/html/ssbrowser.html
+ln -s ../../../..%{_sysconfdir}/ipa/html/unauthorized.html \
+    %{buildroot}%{_usr}/share/ipa/html/unauthorized.html
+
+%clean
+rm -rf %{buildroot}
+
+%post
+if [ $1 = 1 ]; then
+    /sbin/chkconfig --add ipa_kpasswd
+    /sbin/chkconfig --add ipa_webgui
+fi
+if [ -e /usr/share/ipa/serial ]; then
+    mv /usr/share/ipa/serial /var/lib/ipa/ca_serialno
+fi
+/bin/touch /var/log/ipa_error.log
+/bin/chown apache /var/log/ipa_error.log
+/bin/chmod 600 /var/log/ipa_error.log
+restorecon /var/log/ipa_error.log
+/usr/sbin/ipa-upgradeconfig || :
+
+%preun
+if [ $1 = 0 ]; then
+    /sbin/chkconfig --del ipa_kpasswd
+    /sbin/chkconfig --del ipa_webgui
+    /sbin/service ipa_kpasswd stop >/dev/null 2>&1 || :
+    /sbin/service ipa_webgui stop >/dev/null 2>&1 || :
+fi
+
+%postun
+if [ "$1" -ge "1" ]; then
+    /sbin/service ipa_kpasswd condrestart >/dev/null 2>&1 || :
+    /sbin/service ipa_webgui condrestart >/dev/null 2>&1 || :
+    /sbin/service httpd condrestart >/dev/null 2>&1 || :
+    /sbin/service dirsrv condrestart >/dev/null 2>&1 || :
+fi
+
+%files
+%defattr(-,root,root,-)
+%{_sbindir}/ipa-server-install
+%{_sbindir}/ipa-replica-install
+%{_sbindir}/ipa-replica-prepare
+%{_sbindir}/ipa-replica-manage
+%{_sbindir}/ipa-server-certinstall
+%{_sbindir}/ipactl
+%{_sbindir}/ipa_kpasswd
+%{_sbindir}/ipa_webgui
+%{_sbindir}/ipa-upgradeconfig
+%{_sbindir}/ipa-fix-CVE-2008-3274
+%{_sbindir}/ipa-ldap-updater
+%{_sbindir}/ipa-compat-manage
+%attr(755,root,root) %{_initrddir}/ipa_kpasswd
+%attr(755,root,root) %{_initrddir}/ipa_webgui
+
+%dir %{_usr}/share/ipa
+%{_usr}/share/ipa/*.ldif
+%{_usr}/share/ipa/*.uldif
+%{_usr}/share/ipa/*.template
+%dir %{_usr}/share/ipa/html
+%{_usr}/share/ipa/html/ssbrowser.html
+%{_usr}/share/ipa/html/unauthorized.html
+%dir %{_sysconfdir}/ipa
+%dir %{_sysconfdir}/ipa/html
+%config(noreplace) %{_sysconfdir}/ipa/html/ssbrowser.html
+%config(noreplace) %{_sysconfdir}/ipa/html/unauthorized.html
+%{_usr}/share/ipa/ipa_webgui.cfg
+%{_usr}/share/ipa/ipa.conf
+%{_usr}/share/ipa/ipa-rewrite.conf
+%dir %{_usr}/share/ipa/ipagui
+%{_usr}/share/ipa/ipagui/*
+%dir %{_usr}/share/ipa/ipa_gui.egg-info
+%{_usr}/share/ipa/ipa_gui.egg-info/*
+%dir %{_usr}/share/ipa/ipaserver
+%{_usr}/share/ipa/ipaserver/*
+%dir %{_usr}/share/ipa/locales/
+%{_usr}/share/ipa/locales/*
+%dir %{_usr}/share/ipa/updates/
+%{_usr}/share/ipa/updates/*
+
+%dir %{python_sitelib}/ipaserver
+%{python_sitelib}/ipaserver/*.py*
+
+%attr(755,root,root) %{plugin_dir}/libipa_pwd_extop.so
+%attr(755,root,root) %{plugin_dir}/libipa-memberof-plugin.so
+%attr(755,root,root) %{plugin_dir}/libipa-dna-plugin.so
+%attr(755,root,root) %{plugin_dir}/libipa_winsync.so
+
+%dir %{_localstatedir}/lib/ipa
+%attr(700,root,root) %dir %{_localstatedir}/lib/ipa/sysrestore
+%dir %{_localstatedir}/cache/ipa
+%attr(700,root,root) %dir %{_localstatedir}/cache/ipa/kpasswd
+%attr(700,apache,apache) %dir %{_localstatedir}/cache/ipa/sessions
+
+%{_mandir}/man8/ipactl.8.gz
+%{_mandir}/man8/ipa_kpasswd.8.gz
+%{_mandir}/man8/ipa_webgui.8.gz
+%{_mandir}/man1/ipa-replica-install.1.gz
+%{_mandir}/man1/ipa-replica-manage.1.gz
+%{_mandir}/man1/ipa-replica-prepare.1.gz
+%{_mandir}/man1/ipa-server-certinstall.1.gz
+%{_mandir}/man1/ipa-server-install.1.gz
+%{_mandir}/man1/ipa-ldap-updater.1.gz
+%{_mandir}/man1/ipa-compat-manage.1.gz
+
+%changelog
+* Wed Sep 17 2008 Rob Crittenden <rcritten@redhat.com> - 1.2.0-0
+- Add ipa-upgradeconfig command and run it at post
+- Move location of the self-signed CA serial number
+- Add ipa-ldap-updater
+- Add updates directory
+- Restart httpd and dirsrv services after upgrade
+- Added WinSync Support - winsync plugin, ipa-replica-manage
+
+* Thu Apr  3 2008 Rob Crittenden <rcritten@redhat.com> - 1.0.0-1
+- Version bump for release
+
+* Fri Mar 14 2008 Rob Crittenden <rcritten@redhat.com> - 0.99.0-5
+- Run restorecon on /var/log/ipa_error.log to ensure correct selinux context
+- Add (post) to ipa-server-selinux Requires
+
+* Fri Mar 14 2008 Rob Crittenden <rcritten@redhat.com> - 0.99.0-4
+- Add missing man pages
+- Add Conflicts for mod_ssl
+
+* Thu Feb 26 2008 Rob Crittenden <rcritten@redhat.com> - 0.99.0-3
+- Add ipactl command
+
+* Thu Feb 21 2008 Rob Crittenden <rcritten@redhat.com> - 0.99.0-2
+- package new file ipa-rewrite.conf
+
+* Thu Feb 21 2008 Rob Crittenden <rcritten@redhat.com> - 0.99.0-1
+- Version bump for release
+
+* Thu Feb  7 2008 Masato Taruishi <taruishi@redhat.com> = 0.6.0-9
+- Internationalize the kid templates and include a Japanese translation.
+
+* Thu Feb  6 2008 Karl MacMillan <kmacmill@redhat.com> = 0.6.0-8
+- Add requirement on ipa-server-selinux
+
+* Thu Jan 31 2008 Rob Crittenden <rcritten@redhat.com> = 0.6.0-7
+- Marked with wrong license. IPA is GPLv2.
+
+* Thu Jan 31 2008 Rob Crittenden <rcritten@redhat.com> = 0.6.0-6
+- Ensure that the ipa_webgui error log exists and has correct permissions.
+
+* Tue Jan 29 2008 Rob Crittenden <rcritten@redhat.com> = 0.6.0-5
+- Put user-modifiable files into /etc/ipa so they can be marked as
+  config(noreplace).
+
+* Thu Jan 24 2008 Rob Crittenden <rcritten@redhat.com> = 0.6.0-4
+- Use new name of pyasn1, python-pyasn1, in Requires
+
+* Tue Jan 22 2008 Rob Crittenden <rcritten@redhat.com> = 0.6.0-3
+- add session cache directory
+
+* Thu Jan 17 2008 Rob Crittenden <rcritten@redhat.com> = 0.6.0-2
+- Fixed License in specfile
+- Include files from /usr/lib/python*/site-packages/ipaserver
+
+* Fri Dec 21 2007 Karl MacMillan <kmacmill@redhat.com> - 0.6.0-1
+- Version bump for release
+
+* Wed Nov 21 2007 Karl MacMillan <kmacmill@mentalrootkit.com> - 0.5.0-1
+- Preverse mode on ipa-keytab-util
+- Version bump for relase and rpm name change
+
+* Thu Nov 15 2007 Rob Crittenden <rcritten@redhat.com> - 0.4.1-2
+- Broke invididual Requires and BuildRequires onto separate lines and
+  reordered them
+- Added python-tgexpandingformwidget as a dependency
+- Require at least fedora-ds-base 1.1
+
+* Thu Nov  1 2007 Karl MacMillan <kmacmill@redhat.com> - 0.4.1-1
+- Version bump for release
+
+* Wed Oct 31 2007 Karl MacMillan <kmacmill@redhat.com> - 0.4.0-6
+- Add dep for freeipa-admintools and acl
+
+* Wed Oct 24 2007 Rob Crittenden <rcritten@redhat.com> - 0.4.0-5
+- Add dependency for python-krbV
+
+* Fri Oct 19 2007 Rob Crittenden <rcritten@redhat.com> - 0.4.0-4
+- Require mod_nss-1.0.7-2 for mod_proxy fixes
+
+* Thu Oct 18 2007 Karl MacMillan <kmacmill@redhat.com> - 0.4.0-3
+- Convert to autotools-based build
+
+* Tue Sep 25 2007 Karl MacMillan <kmacmill@redhat.com> - 0.4.0-2
+- Package ipa-webgui
+
+* Fri Sep 7 2007 Karl MacMillan <kmacmill@redhat.com> - 0.3.0-1
+- Added support for libipa-dna-plugin
+
+* Fri Aug 10 2007 Karl MacMillan <kmacmill@redhat.com> - 0.2.0-1
+- Added support for ipa_kpasswd and ipa_pwd_extop
+
+* Mon Aug  5 2007 Rob Crittenden <rcritten@redhat.com> - 0.1.0-3
+- Abstracted client class to work directly or over RPC
+
+* Wed Aug  1 2007 Rob Crittenden <rcritten@redhat.com> - 0.1.0-2
+- Add mod_auth_kerb and cyrus-sasl-gssapi to Requires
+- Remove references to admin server in ipa-server-setupssl
+- Generate a client certificate for the XML-RPC server to connect to LDAP with
+- Create a keytab for Apache
+- Create an ldif with a test user
+- Provide a certmap.conf for doing SSL client authentication
+
+* Fri Jul 27 2007 Karl MacMillan <kmacmill@redhat.com> - 0.1.0-1
+- Initial rpm version