2 Summary: Open source system for attribute-based Web SSO
6 Group: System Environment/Libraries
8 URL: http://shibboleth.internet2.edu/
9 Source0: http://shibboleth.internet2.edu/downloads/%{name}-%{version}.tar.gz
10 BuildRoot: %{_tmppath}/%{name}-%{version}-root
11 BuildRequires: openssl-devel
12 %if 0%{?suse_version} > 1030
13 BuildRequires: libXerces-c-devel >= 2.8.0
15 BuildRequires: xerces%{?xercesver}-c-devel >= 2.8.0
17 BuildRequires: xml-security-c-devel >= 1.4.0
18 BuildRequires: zlib-devel, opensaml-devel >= 2.2
19 %{?_with_log4cpp:BuildRequires: log4cpp-devel >= 1.0}
20 %{!?_with_log4cpp:BuildRequires: log4shib-devel}
21 %{?_with_fastcgi:BuildRequires: fcgi-devel}
22 %if "%{_vendor}" == "redhat"
23 %{!?_without_builtinapache:BuildRequires: httpd-devel}
25 %if "%{_vendor}" == "suse"
26 %{!?_without_builtinapache:BuildRequires: apache2-devel}
31 Shibboleth, a project of Internet2/MACE, is developing architectures,
32 policy structures, practical technologies, and an open source
33 implementation to support inter-institutional sharing of web resources
34 subject to access controls. In addition, Shibboleth will develop a
35 policy framework that will allow inter-operation within the higher
38 This package contains the shibboleth runtime library and apache module.
41 Summary: Shibboleth development Headers
42 Group: Development/Libraries
43 Requires: %{name} = %{version}
44 Requires: opensaml-devel >= 2.2
47 Shibboleth, a project of Internet2/MACE, is developing architectures,
48 policy structures, practical technologies, and an open source
49 implementation to support inter-institutional sharing of web resources
50 subject to access controls. In addition, Shibboleth will develop a
51 policy framework that will allow inter-operation within the higher
54 This package contains the headers and other necessary files to build
55 applications that use the shibboleth library.
58 Summary: Shibboleth API Documentation
59 Group: Development/Libraries
60 Requires: %{name} = %{version}
63 Shibboleth Library API documentation generated by doxygen.
69 %configure %{?_without_odbc:--disable-odbc} %{?_without_adfs:--disable-adfs} %{?_with_fastcgi} %{?_with_memcached} %{?shib_options}
73 [ "$RPM_BUILD_ROOT" != "/" ] && %{__rm} -rf $RPM_BUILD_ROOT
74 %{__make} install NOKEYGEN=1 DESTDIR=$RPM_BUILD_ROOT
76 %if "%{_vendor}" == "suse"
77 %{__sed} -i "s/\/var\/log\/httpd/\/var\/log\/apache2/g" \
78 $RPM_BUILD_ROOT/%{_sysconfdir}/%{name}/native.logger
81 # Plug the SP into Apache on a recognized system.
84 if [ -f $RPM_BUILD_ROOT/%{_libdir}/%{name}/mod_shib_13.so ] ; then
85 APACHE_CONFIG="apache.config"
87 if [ -f $RPM_BUILD_ROOT/%{_libdir}/%{name}/mod_shib_20.so ] ; then
88 APACHE_CONFIG="apache2.config"
90 if [ -f $RPM_BUILD_ROOT/%{_libdir}/%{name}/mod_shib_22.so ] ; then
91 APACHE_CONFIG="apache22.config"
93 %{?_without_builtinapache:APACHE_CONFIG="no"}
94 if [ "$APACHE_CONFIG" != "no" ] ; then
96 if [ -d %{_sysconfdir}/httpd/conf.d ] ; then
97 APACHE_CONFD="%{_sysconfdir}/httpd/conf.d"
99 if [ -d %{_sysconfdir}/apache2/conf.d ] ; then
100 APACHE_CONFD="%{_sysconfdir}/apache2/conf.d"
102 if [ "$APACHE_CONFD" != "no" ] ; then
103 %{__mkdir} -p $RPM_BUILD_ROOT$APACHE_CONFD
104 %if "%{_vendor}" == "suse"
105 %{__sed} "s/\/usr\/doc\/%{name}/\/usr\/share\/doc\/packages\/%{name}/g" \
106 $RPM_BUILD_ROOT%{_sysconfdir}/%{name}/$APACHE_CONFIG \
107 > $RPM_BUILD_ROOT$APACHE_CONFD/shib.conf
109 %{__sed} "s/\/usr\/doc\/%{name}/\/usr\/share\/doc\/%{name}-@-VERSION-@/g" \
110 $RPM_BUILD_ROOT%{_sysconfdir}/%{name}/$APACHE_CONFIG \
111 > $RPM_BUILD_ROOT$APACHE_CONFD/shib.conf
113 echo "%config $APACHE_CONFD/shib.conf" > rpm.filelist
117 %if "%{_vendor}" == "redhat"
118 # %{_initddir} not yet in RHEL5, use deprecated %{_initrddir}
119 mkdir -p $RPM_BUILD_ROOT%{_initrddir}
120 %{__cp} -p $RPM_BUILD_ROOT%{_sysconfdir}/%{name}/shibd-%{_vendor} $RPM_BUILD_ROOT%{_initrddir}/shibd
121 %{__chmod} 755 $RPM_BUILD_ROOT%{_initrddir}/shibd
128 [ "$RPM_BUILD_ROOT" != "/" ] && %{__rm} -rf $RPM_BUILD_ROOT
131 %ifnos solaris2.8 solaris2.9 solaris2.10
136 cd %{_sysconfdir}/%{name}
139 %if "%{_vendor}" == "redhat"
140 # This adds the proper /etc/rc*.d links for the script
141 /sbin/chkconfig --add shibd
142 # On upgrade, restart components if they're already running.
143 if [ "$1" -gt "1" ] ; then
144 /etc/init.d/shibd status 1>/dev/null && /etc/init.d/shibd restart 1>/dev/null
145 %{!?_without_builtinapache:/etc/init.d/httpd status 1>/dev/null && /etc/init.d/httpd restart 1>/dev/null}
150 %if "%{_vendor}" == "redhat"
151 if [ "$1" = 0 ] ; then
152 /sbin/service shibd stop >/dev/null 2>&1
153 /sbin/chkconfig --del shibd
158 %ifnos solaris2.8 solaris2.9 solaris2.10
163 # ugly hack if init script got removed during %postun by upgraded (buggy/2.1) package
164 %if "%{_vendor}" == "redhat"
165 if [ ! -f %{_initrddir}/shibd ] ; then
166 if [ -f %{_sysconfdir}/%{name}/shibd-%{_vendor} ] ; then
167 %{__cp} -p %{_sysconfdir}/%{name}/shibd-%{_vendor} %{_initrddir}/shibd
168 %{__chmod} 755 %{_initrddir}/shibd
169 /sbin/chkconfig --add shibd
174 %files -f rpm.filelist
175 %defattr(-,root,root,-)
178 %{_bindir}/resolvertest
179 %{_libdir}/libshibsp.so.*
180 %{_libdir}/libshibsp-lite.so.*
181 %dir %{_libdir}/%{name}
183 %exclude %{_libdir}/%{name}/*.la
184 %dir %{_localstatedir}/log/%{name}
185 %dir %{_localstatedir}/run/%{name}
186 %dir %{_datadir}/xml/%{name}
187 %{_datadir}/xml/%{name}/*
188 %dir %{_sysconfdir}/%{name}
189 %config(noreplace) %{_sysconfdir}/%{name}/*.xml
190 %config(noreplace) %{_sysconfdir}/%{name}/*.html
191 %config(noreplace) %{_sysconfdir}/%{name}/*.logger
192 %if "%{_vendor}" == "redhat"
193 %attr(755, root, root) %{_initrddir}/shibd
195 %{_sysconfdir}/%{name}/*.dist
196 %{_sysconfdir}/%{name}/apache*.config
197 %{_sysconfdir}/%{name}/shibd-redhat
198 %{_sysconfdir}/%{name}/shibd-debian
199 %{_sysconfdir}/%{name}/shibd-osx.plist
200 %attr(755, root, root) %{_sysconfdir}/%{name}/keygen.sh
201 %attr(755, root, root) %{_sysconfdir}/%{name}/metagen.sh
202 %{_sysconfdir}/%{name}/*.xsl
203 %docdir %{_datadir}/doc/%{name}
204 %{_datadir}/doc/%{name}/CREDITS.txt
205 %{_datadir}/doc/%{name}/FASTCGI.LICENSE
206 %{_datadir}/doc/%{name}/LICENSE.txt
207 %{_datadir}/doc/%{name}/LOG4CPP.LICENSE
208 %{_datadir}/doc/%{name}/logo.jpg
209 %{_datadir}/doc/%{name}/main.css
210 %{_datadir}/doc/%{name}/NOTICE.txt
211 %{_datadir}/doc/%{name}/OPENSSL.LICENSE
212 %{_datadir}/doc/%{name}/README.txt
213 %{_datadir}/doc/%{name}/RELEASE.txt
216 %defattr(-,root,root,-)
218 %{_libdir}/libshibsp.so
219 %{_libdir}/libshibsp-lite.so
222 %defattr(644,root,root,755)
223 %doc %{_datadir}/doc/%{name}/api
226 * Tue Aug 4 2009 Scott Cantor <cantor.2@osu.edu> - 2.2.1-1
227 - Initial version for 2.2.1, with shibd/httpd restart on upgrade
229 * Thu Jun 25 2009 Scott Cantor <cantor.2@osu.edu> - 2.2-3
230 - Add additional cleanup to posttrans fix
232 * Tue Jun 23 2009 Scott Cantor <cantor.2@osu.edu> - 2.2-2
233 - Reverse without_builtinapache macro test
234 - Fix init script handling on Red Hat to handle upgrades
236 * Wed Dec 3 2008 Scott Cantor <cantor.2@osu.edu> - 2.2-1
237 - Bump minor version.
238 - Make keygen.sh executable.
239 - Fixing SUSE Xerces dependency name.
240 - Optionally package shib.conf.
242 * Tue Jun 10 2008 Scott Cantor <cantor.2@osu.edu> - 2.1-1
243 - Change shib.conf handling to treat as config file.
245 * Mon Mar 17 2008 Scott Cantor <cantor.2@osu.edu> - 2.0-6
248 * Fri Jan 18 2008 Scott Cantor <cantor.2@osu.edu> - 2.0-5
249 - Release candidate 1.
251 * Sun Oct 21 2007 Scott Cantor <cantor.2@osu.edu> - 2.0-4
252 - libexec -> lib/shibboleth changes
253 - Added doc subpackage
255 * Thu Aug 16 2007 Scott Cantor <cantor.2@osu.edu> - 2.0-3
258 * Fri Jul 13 2007 Scott Cantor <cantor.2@osu.edu> - 2.0-2
259 - Second alpha release.
261 * Sun Jun 10 2007 Scott Cantor <cantor.2@osu.edu> - 2.0-1
262 - First alpha release.
264 * Mon Oct 2 2006 Scott Cantor <cantor.2@osu.edu> - 1.3-11
265 - Applied fix for secadv 20061002
266 - Fix for metadata loader loop
268 * Wed Jun 15 2006 Scott Cantor <cantor.2@osu.edu> - 1.3-10
269 - Applied fix for sec 20060615
271 * Fri Apr 15 2006 Scott Cantor <cantor.2@osu.edu> - 1.3-9
272 - Misc. patches, SuSE, Apache 2.2, gcc 4.1, and 64-bit support
274 * Mon Jan 9 2006 Scott Cantor <cantor.2@osu.edu> - 1.3-8
275 - Applied new fix for secadv 20060109
277 * Tue Nov 8 2005 Scott Cantor <cantor.2@osu.edu> - 1.3-7
278 - Applied new fix for secadv 20050901 plus rollup
280 * Fri Sep 23 2005 Scott Cantor <cantor.2@osu.edu> - 1.3-6
281 - Minor patches and default config changes
283 - Fix shib.conf creation
284 - Integrated init.d script
285 - Prevent replacement of config files
287 * Thu Sep 1 2005 Scott Cantor <cantor.2@osu.edu> - 1.3-5
288 - Applied fix for secadv 20050901 plus rollup of NSAPI fixes
290 * Sun Apr 24 2005 Scott Cantor <cantor.2@osu.edu> - 1.3-1
291 - Updated test programs and location of schemas.
292 - move siterefresh to to sbindir
294 * Fri Apr 1 2005 Derek Atkins <derek@ihtfp.com> - 1.3-1
295 - Add selinux-targeted-policy package
296 - move shar to sbindir
298 * Tue Oct 19 2004 Derek Atkins <derek@ihtfp.com> - 1.2-1
299 - Create SPEC file based on various versions in existence.