2 Summary: Open source system for attribute-based Web SSO
6 Group: System Environment/Libraries
8 URL: http://shibboleth.internet2.edu/
9 Source0: http://shibboleth.internet2.edu/downloads/%{name}-%{version}.tar.gz
10 BuildRoot: %{_tmppath}/%{name}-%{version}-root
11 BuildRequires: openssl-devel
12 %if 0%{?suse_version} > 1030
13 BuildRequires: libXerces-c-devel >= 2.8.0
15 BuildRequires: xerces%{?xercesver}-c-devel >= 2.8.0
17 BuildRequires: xml-security-c-devel >= 1.4.0
18 BuildRequires: zlib-devel, opensaml-devel >= 2.2
19 %{?_with_log4cpp:BuildRequires: log4cpp-devel >= 1.0}
20 %{!?_with_log4cpp:BuildRequires: log4shib-devel}
21 %{?_with_fastcgi:BuildRequires: fcgi-devel}
22 %if "%{_vendor}" == "redhat"
23 %{!?_without_builtinapache:BuildRequires: httpd-devel}
25 %if "%{_vendor}" == "suse"
26 %{!?_without_builtinapache:BuildRequires: apache2-devel}
31 Shibboleth, a project of Internet2/MACE, is developing architectures,
32 policy structures, practical technologies, and an open source
33 implementation to support inter-institutional sharing of web resources
34 subject to access controls. In addition, Shibboleth will develop a
35 policy framework that will allow inter-operation within the higher
38 This package contains the shibboleth runtime library and apache module.
41 Summary: Shibboleth development Headers
42 Group: Development/Libraries
43 Requires: %{name} = %{version}
44 Requires: opensaml-devel >= 2.2
47 Shibboleth, a project of Internet2/MACE, is developing architectures,
48 policy structures, practical technologies, and an open source
49 implementation to support inter-institutional sharing of web resources
50 subject to access controls. In addition, Shibboleth will develop a
51 policy framework that will allow inter-operation within the higher
54 This package contains the headers and other necessary files to build
55 applications that use the shibboleth library.
58 Summary: Shibboleth API Documentation
59 Group: Development/Libraries
60 Requires: %{name} = %{version}
63 Shibboleth Library API documentation generated by doxygen.
69 %configure %{?_without_odbc:--disable-odbc} %{?_without_adfs:--disable-adfs} %{?_with_fastcgi} %{?_with_memcached} %{?shib_options}
73 [ "$RPM_BUILD_ROOT" != "/" ] && %{__rm} -rf $RPM_BUILD_ROOT
74 %{__make} install NOKEYGEN=1 DESTDIR=$RPM_BUILD_ROOT
76 %if "%{_vendor}" == "suse"
77 %{__sed} -i "s/\/var\/log\/httpd/\/var\/log\/apache2/g" \
78 $RPM_BUILD_ROOT/%{_sysconfdir}/%{name}/native.logger
81 # Plug the SP into Apache on a recognized system.
84 if [ -f $RPM_BUILD_ROOT/%{_libdir}/%{name}/mod_shib_13.so ] ; then
85 APACHE_CONFIG="apache.config"
87 if [ -f $RPM_BUILD_ROOT/%{_libdir}/%{name}/mod_shib_20.so ] ; then
88 APACHE_CONFIG="apache2.config"
90 if [ -f $RPM_BUILD_ROOT/%{_libdir}/%{name}/mod_shib_22.so ] ; then
91 APACHE_CONFIG="apache22.config"
93 %{?_without_builtinapache:APACHE_CONFIG="no"}
94 if [ "$APACHE_CONFIG" != "no" ] ; then
96 if [ -d %{_sysconfdir}/httpd/conf.d ] ; then
97 APACHE_CONFD="%{_sysconfdir}/httpd/conf.d"
99 if [ -d %{_sysconfdir}/apache2/conf.d ] ; then
100 APACHE_CONFD="%{_sysconfdir}/apache2/conf.d"
102 if [ "$APACHE_CONFD" != "no" ] ; then
103 %{__mkdir} -p $RPM_BUILD_ROOT$APACHE_CONFD
104 %if "%{_vendor}" == "suse"
105 %{__sed} "s/\/usr\/doc\/%{name}/\/usr\/share\/doc\/packages\/%{name}/g" \
106 $RPM_BUILD_ROOT%{_sysconfdir}/%{name}/$APACHE_CONFIG \
107 > $RPM_BUILD_ROOT$APACHE_CONFD/shib.conf
109 %{__sed} "s/\/usr\/doc\/%{name}/\/usr\/share\/doc\/%{name}-@-VERSION-@/g" \
110 $RPM_BUILD_ROOT%{_sysconfdir}/%{name}/$APACHE_CONFIG \
111 > $RPM_BUILD_ROOT$APACHE_CONFD/shib.conf
113 echo "%config $APACHE_CONFD/shib.conf" > rpm.filelist
117 %if "%{_vendor}" == "redhat"
118 # %{_initddir} not yet in RHEL5, use deprecated %{_initrddir}
119 mkdir -p $RPM_BUILD_ROOT%{_initrddir}
120 %{__cp} -p $RPM_BUILD_ROOT%{_sysconfdir}/%{name}/shibd-%{_vendor} $RPM_BUILD_ROOT%{_initrddir}/shibd
121 %{__chmod} 755 $RPM_BUILD_ROOT%{_initrddir}/shibd
128 [ "$RPM_BUILD_ROOT" != "/" ] && %{__rm} -rf $RPM_BUILD_ROOT
131 %ifnos solaris2.8 solaris2.9 solaris2.10
135 %if "%{_vendor}" == "redhat"
136 # This adds the proper /etc/rc*.d links for the script
137 /sbin/chkconfig --add shibd
141 cd %{_sysconfdir}/%{name}
145 %if "%{_vendor}" == "redhat"
146 if [ "$1" = 0 ] ; then
147 /sbin/service shibd stop >/dev/null 2>&1
148 /sbin/chkconfig --del shibd
153 %ifnos solaris2.8 solaris2.9 solaris2.10
157 %if "%{_vendor}" == "redhat"
158 if [ "$1" -ge "1" ] ; then
159 #/sbin/service shibd condrestart >/dev/null 2>&1 || :
160 /etc/init.d/shibd status 1>/dev/null && /etc/init.d/shibd start 1>/dev/null
165 # ugly hack if init script got removed during %postun by upgraded (buggy/2.1) package
166 %if "%{_vendor}" == "redhat"
167 if [ ! -f %{_initrddir}/shibd ] ; then
168 if [ -f %{_sysconfdir}/%{name}/shibd-%{_vendor} ] ; then
169 %{__cp} -p %{_sysconfdir}/%{name}/shibd-%{_vendor} %{_initrddir}/shibd
170 %{__chmod} 755 %{_initrddir}/shibd
171 /sbin/chkconfig --add shibd
176 %files -f rpm.filelist
177 %defattr(-,root,root,-)
180 %{_bindir}/resolvertest
181 %{_libdir}/libshibsp.so.*
182 %{_libdir}/libshibsp-lite.so.*
183 %dir %{_libdir}/%{name}
185 %exclude %{_libdir}/%{name}/*.la
186 %dir %{_localstatedir}/log/%{name}
187 %dir %{_localstatedir}/run/%{name}
188 %dir %{_datadir}/xml/%{name}
189 %{_datadir}/xml/%{name}/*
190 %dir %{_sysconfdir}/%{name}
191 %config(noreplace) %{_sysconfdir}/%{name}/*.xml
192 %config(noreplace) %{_sysconfdir}/%{name}/*.html
193 %config(noreplace) %{_sysconfdir}/%{name}/*.logger
194 %if "%{_vendor}" == "redhat"
195 %attr(755, root, root) %{_initrddir}/shibd
197 %{_sysconfdir}/%{name}/*.dist
198 %{_sysconfdir}/%{name}/apache*.config
199 %{_sysconfdir}/%{name}/shibd-redhat
200 %{_sysconfdir}/%{name}/shibd-debian
201 %{_sysconfdir}/%{name}/shibd-osx.plist
202 %attr(755, root, root) %{_sysconfdir}/%{name}/keygen.sh
203 %attr(755, root, root) %{_sysconfdir}/%{name}/metagen.sh
204 %{_sysconfdir}/%{name}/*.xsl
205 %docdir %{_datadir}/doc/%{name}
206 %{_datadir}/doc/%{name}/CREDITS.txt
207 %{_datadir}/doc/%{name}/FASTCGI.LICENSE
208 %{_datadir}/doc/%{name}/LICENSE.txt
209 %{_datadir}/doc/%{name}/LOG4CPP.LICENSE
210 %{_datadir}/doc/%{name}/logo.jpg
211 %{_datadir}/doc/%{name}/main.css
212 %{_datadir}/doc/%{name}/NOTICE.txt
213 %{_datadir}/doc/%{name}/OPENSSL.LICENSE
214 %{_datadir}/doc/%{name}/README.txt
215 %{_datadir}/doc/%{name}/RELEASE.txt
218 %defattr(-,root,root,-)
220 %{_libdir}/libshibsp.so
221 %{_libdir}/libshibsp-lite.so
224 %defattr(644,root,root,755)
225 %doc %{_datadir}/doc/%{name}/api
228 * Thu Jun 25 2009 Scott Cantor <cantor.2@osu.edu> - 2.2-3
229 - Add additional cleanup to posttrans fix
231 * Tue Jun 23 2009 Scott Cantor <cantor.2@osu.edu> - 2.2-2
232 - Reverse without_builtinapache macro test
233 - Fix init script handling on Red Hat to handle upgrades
235 * Wed Dec 3 2008 Scott Cantor <cantor.2@osu.edu> - 2.2-1
236 - Bump minor version.
237 - Make keygen.sh executable.
238 - Fixing SUSE Xerces dependency name.
239 - Optionally package shib.conf.
241 * Tue Jun 10 2008 Scott Cantor <cantor.2@osu.edu> - 2.1-1
242 - Change shib.conf handling to treat as config file.
244 * Mon Mar 17 2008 Scott Cantor <cantor.2@osu.edu> - 2.0-6
247 * Fri Jan 18 2008 Scott Cantor <cantor.2@osu.edu> - 2.0-5
248 - Release candidate 1.
250 * Sun Oct 21 2007 Scott Cantor <cantor.2@osu.edu> - 2.0-4
251 - libexec -> lib/shibboleth changes
252 - Added doc subpackage
254 * Thu Aug 16 2007 Scott Cantor <cantor.2@osu.edu> - 2.0-3
257 * Fri Jul 13 2007 Scott Cantor <cantor.2@osu.edu> - 2.0-2
258 - Second alpha release.
260 * Sun Jun 10 2007 Scott Cantor <cantor.2@osu.edu> - 2.0-1
261 - First alpha release.
263 * Mon Oct 2 2006 Scott Cantor <cantor.2@osu.edu> - 1.3-11
264 - Applied fix for secadv 20061002
265 - Fix for metadata loader loop
267 * Wed Jun 15 2006 Scott Cantor <cantor.2@osu.edu> - 1.3-10
268 - Applied fix for sec 20060615
270 * Fri Apr 15 2006 Scott Cantor <cantor.2@osu.edu> - 1.3-9
271 - Misc. patches, SuSE, Apache 2.2, gcc 4.1, and 64-bit support
273 * Mon Jan 9 2006 Scott Cantor <cantor.2@osu.edu> - 1.3-8
274 - Applied new fix for secadv 20060109
276 * Tue Nov 8 2005 Scott Cantor <cantor.2@osu.edu> - 1.3-7
277 - Applied new fix for secadv 20050901 plus rollup
279 * Fri Sep 23 2005 Scott Cantor <cantor.2@osu.edu> - 1.3-6
280 - Minor patches and default config changes
282 - Fix shib.conf creation
283 - Integrated init.d script
284 - Prevent replacement of config files
286 * Thu Sep 1 2005 Scott Cantor <cantor.2@osu.edu> - 1.3-5
287 - Applied fix for secadv 20050901 plus rollup of NSAPI fixes
289 * Sun Apr 24 2005 Scott Cantor <cantor.2@osu.edu> - 1.3-1
290 - Updated test programs and location of schemas.
291 - move siterefresh to to sbindir
293 * Fri Apr 1 2005 Derek Atkins <derek@ihtfp.com> - 1.3-1
294 - Add selinux-targeted-policy package
295 - move shar to sbindir
297 * Tue Oct 19 2004 Derek Atkins <derek@ihtfp.com> - 1.2-1
298 - Create SPEC file based on various versions in existence.