mit-kerberos and keyutils in main
This commit is contained in:
Ertuğrul Erata
@@ -0,0 +1,3 @@
|
||||
<PISI>
|
||||
<Name>server.auth</Name>
|
||||
</PISI>
|
||||
@@ -0,0 +1,87 @@
|
||||
#!/usr/bin/python
|
||||
# -*- coding: utf-8 -*-
|
||||
#
|
||||
# Licensed under the GNU General Public License, version 3.
|
||||
# See the file http://www.gnu.org/licenses/gpl.txt
|
||||
|
||||
from pisi.actionsapi import get
|
||||
from pisi.actionsapi import autotools
|
||||
from pisi.actionsapi import pisitools
|
||||
from pisi.actionsapi import shelltools
|
||||
|
||||
pisitools.flags.add("-fPIC -fno-strict-aliasing -fno-strict-overflow -fstack-protector-all")
|
||||
pisitools.cxxflags.add("-I/usr/include/et")
|
||||
|
||||
def rename_man_pages():
|
||||
manpages = ["appl/bsd/klogind.M",
|
||||
"appl/bsd/kshd.M",
|
||||
"appl/sample/sserver/sserver.M",
|
||||
"appl/telnet/telnetd/telnetd.8",
|
||||
"appl/gssftp/ftpd/ftpd.M",
|
||||
"config-files/kdc.conf.M",
|
||||
"config-files/krb5.conf.M",
|
||||
"kadmin/cli/kadmin.M",
|
||||
"slave/kpropd.M",
|
||||
"slave/kprop.M"]
|
||||
for manpage in manpages:
|
||||
shelltools.move(manpage, "%s.in" % manpage)
|
||||
|
||||
def setup():
|
||||
shelltools.cd("src")
|
||||
shelltools.system("sed -i -e 's/^YYSTYPE yylval/&={0}/' lib/krb5/krb/deltat.c")
|
||||
pisitools.dosed("util/ac_check_krb5.m4", "(KRB5ROOT=\/usr)\/local", r"\1")
|
||||
|
||||
autotools.autoreconf("-fi")
|
||||
|
||||
# Fix pthread linking
|
||||
#pisitools.dosed("configure", "-lthread", "-lpthread")
|
||||
#pisitools.dosed("configure", "-pthread", "-lpthread")
|
||||
|
||||
autotools.configure("--localstatedir=/var/lib \
|
||||
--without-tcl \
|
||||
--without-hesiod \
|
||||
--enable-shared \
|
||||
--enable-kdc-lookaside-cache \
|
||||
--without-system-verto \
|
||||
--disable-rpath \
|
||||
--with-system-et \
|
||||
--with-system-ss \
|
||||
--enable-dns-for-realm")
|
||||
|
||||
# Fix krb5-config script to remove rpaths and CFLAGS
|
||||
#pisitools.dosed("krb5-config", "^CC_LINK=.*", "CC_LINK='$(CC) $(PROG_LIBPATH)'")
|
||||
# Fix unused dependency
|
||||
pisitools.dosed("config/shlib.conf"," -shared ", " -Wl,--as-needed -shared ")
|
||||
|
||||
def build():
|
||||
autotools.make("-C src/")
|
||||
|
||||
# def check():
|
||||
# check failed
|
||||
# autotools.make("-C src/ -j1 check")
|
||||
# import tempfile
|
||||
# import shutil
|
||||
# tmpdir = tempfile.mkdtemp(prefix='pisitest')
|
||||
# autotools.make("-C src/ check TMPDIR=%s -j1" % tmpdir)
|
||||
# shutil.rmtree("rm -rf %s" % tmpdir)
|
||||
|
||||
def install():
|
||||
pisitools.dodoc("NOTICE", "README")
|
||||
shelltools.cd("src")
|
||||
autotools.rawInstall("DESTDIR=%s" % get.installDIR())
|
||||
|
||||
# Install additional headers
|
||||
for d in ("kadm5", "krb5"):
|
||||
pisitools.insinto("/usr/include/%s" % d, "include/%s/*.h" % d)
|
||||
|
||||
# Add "k" prefix to some apps and manpages to resolve conflicts
|
||||
#for app in ["telnetd", "ftpd"]:
|
||||
# pisitools.rename("/usr/share/man/man8/%s.8" % app, "k%s.8" % app)
|
||||
# pisitools.rename("/usr/sbin/%s" % app, "k%s" % app)
|
||||
|
||||
#for app in ["rcp", "rsh", "telnet", "ftp", "rlogin"]:
|
||||
# pisitools.rename("/usr/share/man/man1/%s.1" % app, "k%s.1" % app)
|
||||
# pisitools.rename("/usr/bin/%s" % app, "k%s" % app)
|
||||
|
||||
# Remove examples
|
||||
pisitools.removeDir("/usr/share/examples")
|
||||
@@ -0,0 +1,15 @@
|
||||
--- configure.in.orig 2014-01-16 02:44:15.000000000 +0200
|
||||
+++ src/configure.in 2014-05-17 17:05:05.317924895 +0300
|
||||
@@ -1206,9 +1206,9 @@
|
||||
# default, so it's not a big deal that it isn't very good. We should
|
||||
# use python-config instead.
|
||||
PYTHON_LIB=
|
||||
-AC_CHECK_HEADERS(Python.h python2.3/Python.h python2.5/Python.h)
|
||||
-AC_CHECK_LIB(python2.3,main,[PYTHON_LIB=-lpython2.3],
|
||||
- AC_CHECK_LIB(python2.5,main,[PYTHON_LIB=-lpython2.5]))
|
||||
+AC_CHECK_HEADERS(Python.h python2.5/Python.h python2.7/Python.h)
|
||||
+AC_CHECK_LIB(python2.5,main,[PYTHON_LIB=-lpython2.5],
|
||||
+ AC_CHECK_LIB(python2.7,main,[PYTHON_LIB=-lpython2.7]))
|
||||
AC_SUBST(PYTHON_LIB)
|
||||
|
||||
|
||||
@@ -0,0 +1,16 @@
|
||||
[kdcdefaults]
|
||||
kdc_ports = 88,750
|
||||
|
||||
[realms]
|
||||
EXAMPLE.COM = {
|
||||
database_name = /etc/krb5kdc/principal
|
||||
admin_keytab = /etc/krb5kdc/kadm5.keytab
|
||||
acl_file = /etc/krb5kdc/kadm5.acl
|
||||
dict_file = /etc/krb5kdc/kadm5.dict
|
||||
key_stash_file = /etc/krb5kdc/.k5.EXAMPLE.COM
|
||||
kadmind_port = 749
|
||||
max_life = 10h 0m 0s
|
||||
max_renewable_life = 7d 0h 0m 0s
|
||||
master_key_type = des3-hmac-sha1
|
||||
supported_enctypes = des3-hmac-sha1:normal des-cbc-crc:normal
|
||||
}
|
||||
@@ -0,0 +1,11 @@
|
||||
--- src/build-tools/krb5-config.in.orig 2014-01-16 02:44:15.000000000 +0200
|
||||
+++ src/build-tools/krb5-config.in 2014-05-17 17:00:42.624580187 +0300
|
||||
@@ -221,7 +221,7 @@
|
||||
-e 's#\$(PROG_RPATH)#'$libdir'#' \
|
||||
-e 's#\$(PROG_LIBPATH)#'$libdirarg'#' \
|
||||
-e 's#\$(RPATH_FLAG)#'"$RPATH_FLAG"'#' \
|
||||
- -e 's#\$(LDFLAGS)#'"$LDFLAGS"'#' \
|
||||
+ -e 's#\$(LDFLAGS)##' \
|
||||
-e 's#\$(PTHREAD_CFLAGS)#'"$PTHREAD_CFLAGS"'#' \
|
||||
-e 's#\$(CFLAGS)##'`
|
||||
|
||||
@@ -0,0 +1,25 @@
|
||||
[libdefaults]
|
||||
ticket_lifetime = 600
|
||||
default_realm = EXAMPLE.COM
|
||||
default_tkt_enctypes = des3-hmac-sha1 des-cbc-crc
|
||||
default_tgs_enctypes = des3-hmac-sha1 des-cbc-crc
|
||||
|
||||
[realms]
|
||||
EXAMPLE.COM = {
|
||||
kdc = kerberos.example.com:88
|
||||
kdc = kerberos2.example.com:88
|
||||
admin_server = kerberos.example.com:749
|
||||
}
|
||||
|
||||
[domain_realm]
|
||||
.example.com = EXAMPLE.COM
|
||||
example.com = EXAMPLE.COM
|
||||
|
||||
[kdc]
|
||||
profile = /etc/krb5kdc/kdc.conf
|
||||
|
||||
[logging]
|
||||
kdc = FILE:/var/log/krb5kdc.log
|
||||
admin_server = FILE:/var/log/kadmin.log
|
||||
default = FILE:/var/log/krb5lib.log
|
||||
|
||||
@@ -0,0 +1,55 @@
|
||||
--- a/src/slave/kprop.c
|
||||
+++ b/src/slave/kprop.c
|
||||
@@ -91,7 +91,7 @@ main(argc, argv)
|
||||
int argc;
|
||||
char **argv;
|
||||
{
|
||||
- int fd, database_fd, database_size;
|
||||
+ int fd = -1, database_fd, database_size;
|
||||
krb5_error_code retval;
|
||||
krb5_context context;
|
||||
krb5_creds *my_creds;
|
||||
--- a/src/kadmin/ktutil/ktutil_funcs.c
|
||||
+++ b/src/kadmin/ktutil/ktutil_funcs.c
|
||||
@@ -64,7 +64,7 @@
|
||||
krb5_kt_list *list;
|
||||
int idx;
|
||||
{
|
||||
- krb5_kt_list lp, prev;
|
||||
+ krb5_kt_list lp, prev = NULL;
|
||||
int i;
|
||||
|
||||
for (lp = *list, i = 1; lp; prev = lp, lp = lp->next, i++) {
|
||||
--- a/src/lib/kadm5/alt_prof.c
|
||||
+++ b/src/lib/kadm5/alt_prof.c
|
||||
@@ -164,7 +164,7 @@
|
||||
char **values;
|
||||
char *valp;
|
||||
int idx;
|
||||
- krb5_boolean val;
|
||||
+ krb5_boolean val = 0;
|
||||
|
||||
kret = krb5_aprof_getvals (acontext, hierarchy, &values);
|
||||
if (kret)
|
||||
|
||||
--- a/src/util/profile/prof_init.c
|
||||
+++ b/src/util/profile/prof_init.c
|
||||
@@ -255,7 +255,7 @@ copy_vtable_profile(profile_t profile, profile_t *ret_new_profile)
|
||||
{
|
||||
errcode_t err;
|
||||
void *cbdata;
|
||||
- profile_t new_profile;
|
||||
+ profile_t new_profile = NULL;
|
||||
|
||||
*ret_new_profile = NULL;
|
||||
|
||||
--- a/src/tests/asn.1/trval.c 2013-04-12 12:51:36.000000000 -0500
|
||||
+++ b/src/tests/asn.1/trval.c 2013-05-24 04:31:14.077036380 -0500
|
||||
@@ -404,7 +404,7 @@
|
||||
{
|
||||
int n;
|
||||
int r = 0;
|
||||
- int rlen2;
|
||||
+ int rlen2 = 0;
|
||||
int rlent;
|
||||
int save_appl;
|
||||
@@ -0,0 +1,12 @@
|
||||
--- /dev/null 2009-10-20 19:31:44.183325514 +0300
|
||||
+++ src/rebuild-configure-scripts.sh 2009-10-22 10:37:14.583117034 +0300
|
||||
@@ -0,0 +1,9 @@
|
||||
+#!/bin/bash
|
||||
+
|
||||
+top=`pwd`
|
||||
+for configurein in `find -name configure.in -type f` ; do
|
||||
+ pushd `dirname $configurein`
|
||||
+ grep -q A._CONFIG_HEADER configure.in && autoheader -I "$top"
|
||||
+ autoconf -I "$top"
|
||||
+ popd
|
||||
+done
|
||||
@@ -0,0 +1,106 @@
|
||||
<?xml version="1.0" ?>
|
||||
<!DOCTYPE PISI SYSTEM "http://www.pisilinux.org/projeler/pisi/pisi-spec.dtd">
|
||||
<PISI>
|
||||
<Source>
|
||||
<Name>mit-kerberos</Name>
|
||||
<Homepage>http://web.mit.edu/kerberos/www/</Homepage>
|
||||
<Packager>
|
||||
<Name>PisiLinux Community</Name>
|
||||
<Email>admins@pisilinux.org</Email>
|
||||
</Packager>
|
||||
<License>as-is</License>
|
||||
<IsA>library</IsA>
|
||||
<IsA>app:console</IsA>
|
||||
<Summary>MIT Kerberos Library</Summary>
|
||||
<Description>Kerberos is a network authentication protocol. It is designed to provide strong authentication for client/server applications by using secret-key cryptography.</Description>
|
||||
<Archive sha1sum="6342e29980210c32dee3563dfb0728b4b9592381" type="targz">http://source.pisilinux.org/1.0/krb5-1.13.1.tar.gz</Archive>
|
||||
|
||||
<BuildDependencies>
|
||||
<Dependency>keyutils</Dependency>
|
||||
<Dependency>openssl-devel</Dependency>
|
||||
<Dependency>e2fsprogs-devel</Dependency>
|
||||
<!-- FIXME: openldap-client requires mit-kerberos too -->
|
||||
<!-- disable for now for the circular dep
|
||||
<Dependency>openldap-client</Dependency>
|
||||
-->
|
||||
</BuildDependencies>
|
||||
<Patches>
|
||||
<Patch level="0">krb5-config_LDFLAGS.patch</Patch>
|
||||
<!-- <Patch level="1">mit-krb5-1.12_uninitialized.patch</Patch> -->
|
||||
<Patch level="0">rebuild-configure-scripts.patch</Patch>
|
||||
<Patch level="0">fix-python-detection.patch</Patch>
|
||||
</Patches>
|
||||
</Source>
|
||||
|
||||
<Package>
|
||||
<Name>mit-kerberos</Name>
|
||||
<RuntimeDependencies>
|
||||
<Dependency>keyutils</Dependency>
|
||||
<Dependency>openssl</Dependency>
|
||||
<Dependency>e2fsprogs</Dependency>
|
||||
<!-- FIXME: This introduces a circular dep
|
||||
<Dependency>openldap-client</Dependency>
|
||||
-->
|
||||
</RuntimeDependencies>
|
||||
<Files>
|
||||
<Path fileType="config">/etc</Path>
|
||||
<Path fileType="header">/usr/include</Path>
|
||||
<Path fileType="executable">/usr/bin</Path>
|
||||
<Path fileType="executable">/usr/sbin</Path>
|
||||
<Path fileType="library">/usr/lib</Path>
|
||||
<Path fileType="data">/usr/share</Path>
|
||||
<Path fileType="data">/var/lib</Path>
|
||||
<Path fileType="info">/usr/share/info</Path>
|
||||
<Path fileType="man">/usr/share/man</Path>
|
||||
</Files>
|
||||
<AdditionalFiles>
|
||||
<AdditionalFile owner="root" permission="0644" target="/etc/krb5.conf">krb5.conf</AdditionalFile>
|
||||
<AdditionalFile owner="root" permission="0644" target="/etc/kdc.conf">kdc.conf</AdditionalFile>
|
||||
</AdditionalFiles>
|
||||
</Package>
|
||||
|
||||
<History>
|
||||
<Update release="6">
|
||||
<Date>2015-04-23</Date>
|
||||
<Version>1.13.1</Version>
|
||||
<Comment>Version bump,fix deps.</Comment>
|
||||
<Name>Ertuğrul Erata</Name>
|
||||
<Email>ertugrulerata@gmail.com</Email>
|
||||
</Update>
|
||||
<Update release="5">
|
||||
<Date>2014-12-13</Date>
|
||||
<Version>1.13</Version>
|
||||
<Comment>Version bump.</Comment>
|
||||
<Name>Yusuf Aydemir</Name>
|
||||
<Email>yusuf.aydemir@pisilinux.org</Email>
|
||||
</Update>
|
||||
<Update release="4">
|
||||
<Date>2014-05-17</Date>
|
||||
<Version>1.12.1</Version>
|
||||
<Comment>Version bump.</Comment>
|
||||
<Name>Alihan Öztürk</Name>
|
||||
<Email>alihan@pisilinux.org</Email>
|
||||
</Update>
|
||||
<Update release="3">
|
||||
<Date>2014-01-22</Date>
|
||||
<Version>1.11.4</Version>
|
||||
<Comment>Version bump.</Comment>
|
||||
<Name>Marcin Bojara</Name>
|
||||
<Email>marcin@pisilinux.org</Email>
|
||||
</Update>
|
||||
<Update release="2">
|
||||
<Date>2013-02-20</Date>
|
||||
<Version>1.11</Version>
|
||||
<Comment>Version bump.</Comment>
|
||||
<Name>Marcin Bojara</Name>
|
||||
<Email>marcin@pisilinux.org</Email>
|
||||
</Update>
|
||||
<Update release="1">
|
||||
<Date>2012-09-27</Date>
|
||||
<Version>1.10.3</Version>
|
||||
<Comment>First release</Comment>
|
||||
<Name>Yusuf Aydemir</Name>
|
||||
<Email>yusuf.aydemir@pisilinux.org</Email>
|
||||
</Update>
|
||||
</History>
|
||||
</PISI>
|
||||
@@ -0,0 +1,8 @@
|
||||
<?xml version="1.0" ?>
|
||||
<PISI>
|
||||
<Source>
|
||||
<Name>mit-kerberos</Name>
|
||||
<Summary xml:lang="tr">MIT Kerberos kütüphanesi</Summary>
|
||||
<Description xml:lang="tr">Kerberos bir ağ doğrulama protokolüdür. Sunucu/istemci uygulamalarında, gizli anahtar kriptoloji teknolojisini kullanarak, güçlü bir doğrulama sağlar.</Description>
|
||||
</Source>
|
||||
</PISI>
|
||||
@@ -0,0 +1,17 @@
|
||||
#!/usr/bin/python
|
||||
# -*- coding: utf-8 -*-
|
||||
#
|
||||
# Licensed under the GNU General Public License, version 3.
|
||||
# See the file http://www.gnu.org/licenses/gpl.txt
|
||||
|
||||
from pisi.actionsapi import get
|
||||
from pisi.actionsapi import autotools
|
||||
from pisi.actionsapi import pisitools
|
||||
|
||||
def build():
|
||||
autotools.make("NO_ARLIB=1 LIBDIR=/lib USRLIBDIR=/usr/lib NO_GLIBC_KEYERR=1 CFLAGS=\"%s\"" % get.CFLAGS())
|
||||
|
||||
def install():
|
||||
autotools.install("NO_ARLIB=1 LIBDIR=/lib USRLIBDIR=/usr/lib DESTDIR=%s" % get.installDIR())
|
||||
|
||||
pisitools.dodoc("LICENCE.GPL", "LICENCE.LGPL", "README")
|
||||
@@ -0,0 +1,65 @@
|
||||
<?xml version="1.0" ?>
|
||||
<!DOCTYPE PISI SYSTEM "http://www.pisilinux.org/projeler/pisi/pisi-spec.dtd">
|
||||
<PISI>
|
||||
<Source>
|
||||
<Name>keyutils</Name>
|
||||
<Homepage>http://people.redhat.com/~dhowells/keyutils/</Homepage>
|
||||
<Packager>
|
||||
<Name>PisiLinux Community</Name>
|
||||
<Email>admins@pisilinux.org</Email>
|
||||
</Packager>
|
||||
<License>GPLv2+</License>
|
||||
<License>LGPLv2+</License>
|
||||
<IsA>library</IsA>
|
||||
<IsA>app:console</IsA>
|
||||
<Summary>Linux key management utilities</Summary>
|
||||
<Description>keyutils contains utilities to control the kernel key management facility and to provide a mechanism by which the kernel call back to userspace to get a key instantiated.</Description>
|
||||
<Archive sha1sum="cf040adebe25eb466760f34752f4100fd5acb5e7" type="tarbz2">http://people.redhat.com/~dhowells/keyutils/keyutils-1.5.9.tar.bz2</Archive>
|
||||
</Source>
|
||||
|
||||
<Package>
|
||||
<Name>keyutils</Name>
|
||||
<Files>
|
||||
<Path fileType="config">/etc</Path>
|
||||
<Path fileType="executable">/bin</Path>
|
||||
<Path fileType="executable">/sbin</Path>
|
||||
<Path fileType="header">/usr/include</Path>
|
||||
<Path fileType="library">/usr/lib</Path>
|
||||
<Path fileType="library">/lib</Path>
|
||||
<Path fileType="man">/usr/share/man</Path>
|
||||
<Path fileType="doc">/usr/share/doc</Path>
|
||||
<Path fileType="data">/usr/share/keyutils</Path>
|
||||
</Files>
|
||||
</Package>
|
||||
|
||||
<History>
|
||||
<Update release="4">
|
||||
<Date>2014-05-22</Date>
|
||||
<Version>1.5.9</Version>
|
||||
<Comment>Rebuild.</Comment>
|
||||
<Name>Kamil Atlı</Name>
|
||||
<Email>suvarice@gmail.com</Email>
|
||||
</Update>
|
||||
<Update release="3">
|
||||
<Date>2014-04-03</Date>
|
||||
<Version>1.5.9</Version>
|
||||
<Comment>Version bump.</Comment>
|
||||
<Name>Marcin Bojara</Name>
|
||||
<Email>marcin@pisilinux.org</Email>
|
||||
</Update>
|
||||
<Update release="2">
|
||||
<Date>2013-10-13</Date>
|
||||
<Version>1.5.8</Version>
|
||||
<Comment>Version bump.</Comment>
|
||||
<Name>Yusuf Aydemir</Name>
|
||||
<Email>yusuf.aydemir@pisilinux.org</Email>
|
||||
</Update>
|
||||
<Update release="1">
|
||||
<Date>2010-10-12</Date>
|
||||
<Version>1.5.5</Version>
|
||||
<Comment>First release</Comment>
|
||||
<Name>Yusuf Aydemir</Name>
|
||||
<Email>yusuf.aydemir@pisilinux.org</Email>
|
||||
</Update>
|
||||
</History>
|
||||
</PISI>
|
||||
@@ -0,0 +1,9 @@
|
||||
<?xml version="1.0" ?>
|
||||
<PISI>
|
||||
<Source>
|
||||
<Name>keyutils</Name>
|
||||
<Summary xml:lang="tr">Linux anahtar yönetim araçları</Summary>
|
||||
<Description xml:lang="tr">keyutils, Linux çekirdeğindeki anahtar yönetim kolaylıklarını denetlemek ve çekirdek ile kullanıcı uzayı arasında iletişim kurmak için gereken araçları içerir.</Description>
|
||||
</Source>
|
||||
</PISI>
|
||||
|
||||
Reference in New Issue
Block a user