2 Version: @PACKAGE_VERSION@
4 Summary: Open source system for attribute-based Web SSO
5 Group: System Environment/Libraries
8 URL: http://shibboleth.internet2.edu/
9 Source: %{name}-sp-%{version}.tar.gz
10 BuildRoot: %{_tmppath}/%{name}-%{version}-root
12 %if 0%{?suse_version} > 1030
13 PreReq: %{insserv_prereq}
14 BuildRequires: libXerces-c-devel >= 2.8.0
15 BuildRequires: libxml-security-c-devel >= 1.4.0
16 BuildRequires: libxmltooling-devel >= 1.3
17 BuildRequires: libsaml-devel >= 2.3
18 %{?_with_log4cpp:BuildRequires: liblog4cpp-devel >= 1.0}
19 %{!?_with_log4cpp:BuildRequires: liblog4shib-devel}
21 BuildRequires: xerces%{?xercesver}-c-devel >= 2.8.0
22 BuildRequires: xml-security-c-devel >= 1.4.0
23 BuildRequires: xmltooling-devel >= 1.3
24 BuildRequires: opensaml-devel >= 2.3
25 %{?_with_log4cpp:BuildRequires: log4cpp-devel >= 1.0}
26 %{!?_with_log4cpp:BuildRequires: log4shib-devel}
28 BuildRequires: gcc-c++
29 %{!?_without_doxygen:BuildRequires: doxygen}
30 %{!?_without_odbc:BuildRequires:unixODBC-devel}
31 BuildRequires: zlib-devel
32 %{?_with_fastcgi:BuildRequires: fcgi-devel}
33 %if "%{_vendor}" == "redhat"
34 %{!?_without_builtinapache:BuildRequires: httpd-devel}
35 BuildRequires: redhat-rpm-config
37 %if "%{_vendor}" == "suse"
38 %{!?_without_builtinapache:BuildRequires: apache2-devel}
41 %if "%{_vendor}" == "suse"
42 %define pkgdocdir %{_docdir}/%{name}
44 %define pkgdocdir %{_docdir}/%{name}-%{version}
48 Shibboleth is a Web Single Sign-On implementations based on OpenSAML
49 that supports multiple protocols, federated identity, and the extensible
50 exchange of rich attributes subject to privacy controls.
52 This package contains the Shibboleth Service Provider runtime libraries
56 Summary: Shibboleth development Headers
57 Group: Development/Libraries
58 Requires: %{name} = %{version}
59 %if 0%{?suse_version} > 1030
60 Requires: libXerces-c-devel >= 2.8.0
61 Requires: libxml-security-c-devel >= 1.4.0
62 Requires: libxmltooling-devel >= 1.3
63 Requires: libsaml-devel >= 2.3
64 %{?_with_log4cpp:Requires: liblog4cpp-devel >= 1.0}
65 %{!?_with_log4cpp:Requires: liblog4shib-devel}
67 Requires: xerces%{?xercesver}-c-devel >= 2.8.0
68 Requires: xml-security-c-devel >= 1.4.0
69 Requires: xmltooling-devel >= 1.3
70 Requires: opensaml-devel >= 2.3
71 %{?_with_log4cpp:Requires: log4cpp-devel >= 1.0}
72 %{!?_with_log4cpp:Requires: log4shib-devel}
76 Shibboleth is a Web Single Sign-On implementations based on OpenSAML
77 that supports multiple protocols, federated identity, and the extensible
78 exchange of rich attributes subject to privacy controls.
80 This package includes files needed for development with Shibboleth.
87 %configure %{?_without_odbc:--disable-odbc} %{?_without_adfs:--disable-adfs} %{?_with_fastcgi} %{?_with_memcached} %{?shib_options}
88 %{__make} pkgdocdir=%{pkgdocdir}
91 %{__make} install NOKEYGEN=1 DESTDIR=$RPM_BUILD_ROOT pkgdocdir=%{pkgdocdir}
93 %if "%{_vendor}" == "suse"
94 %{__sed} -i "s/\/var\/log\/httpd/\/var\/log\/apache2/g" \
95 $RPM_BUILD_ROOT%{_sysconfdir}/%{name}/native.logger
98 # Plug the SP into the built-in Apache on a recognized system.
101 if [ -f $RPM_BUILD_ROOT%{_libdir}/%{name}/mod_shib_13.so ] ; then
102 APACHE_CONFIG="apache.config"
104 if [ -f $RPM_BUILD_ROOT%{_libdir}/%{name}/mod_shib_20.so ] ; then
105 APACHE_CONFIG="apache2.config"
107 if [ -f $RPM_BUILD_ROOT%{_libdir}/%{name}/mod_shib_22.so ] ; then
108 APACHE_CONFIG="apache22.config"
110 %{?_without_builtinapache:APACHE_CONFIG="no"}
111 if [ "$APACHE_CONFIG" != "no" ] ; then
113 if [ -d %{_sysconfdir}/httpd/conf.d ] ; then
114 APACHE_CONFD="%{_sysconfdir}/httpd/conf.d"
116 if [ -d %{_sysconfdir}/apache2/conf.d ] ; then
117 APACHE_CONFD="%{_sysconfdir}/apache2/conf.d"
119 if [ "$APACHE_CONFD" != "no" ] ; then
120 %{__mkdir} -p $RPM_BUILD_ROOT$APACHE_CONFD
121 %{__cp} -p $RPM_BUILD_ROOT%{_sysconfdir}/%{name}/$APACHE_CONFIG $RPM_BUILD_ROOT$APACHE_CONFD/shib.conf
122 echo "%config $APACHE_CONFD/shib.conf" > rpm.filelist
126 %if "%{_vendor}" == "redhat" || "%{_vendor}" == "suse"
127 # %{_initddir} not yet in RHEL5, use deprecated %{_initrddir}
128 install -d -m 0755 $RPM_BUILD_ROOT%{_initrddir}
129 install -m 0755 $RPM_BUILD_ROOT%{_sysconfdir}/%{name}/shibd-%{_vendor} $RPM_BUILD_ROOT%{_initrddir}/shibd
130 %if "%{_vendor}" == "suse"
131 install -d -m 0755 $RPM_BUILD_ROOT/%{_sbindir}
132 %{__ln_s} -f %{_initrddir}/shibd $RPM_BUILD_ROOT%{_sbindir}/rcshibd
140 [ "$RPM_BUILD_ROOT" != "/" ] && %{__rm} -rf $RPM_BUILD_ROOT
143 %ifnos solaris2.8 solaris2.9 solaris2.10
148 cd %{_sysconfdir}/%{name}
151 %if "%{_vendor}" == "redhat"
152 # This adds the proper /etc/rc*.d links for the script
153 /sbin/chkconfig --add shibd
154 # On upgrade, restart components if they're already running.
155 if [ "$1" -gt "1" ] ; then
156 /etc/init.d/shibd status 1>/dev/null && /etc/init.d/shibd restart 1>/dev/null
157 %{!?_without_builtinapache:/etc/init.d/httpd status 1>/dev/null && /etc/init.d/httpd restart 1>/dev/null}
161 %if "%{_vendor}" == "suse"
162 # This adds the proper /etc/rc*.d links for the script
164 %insserv_force_if_yast shibd
168 %if "%{_vendor}" == "redhat"
169 if [ "$1" = 0 ] ; then
170 /sbin/service shibd stop >/dev/null 2>&1
171 /sbin/chkconfig --del shibd
172 %{!?_without_builtinapache:/etc/init.d/httpd status 1>/dev/null && /etc/init.d/httpd restart 1>/dev/null}
175 %if "%{_vendor}" == "suse"
176 %stop_on_removal shibd
177 if [ "$1" = 0 ] ; then
178 %{!?_without_builtinapache:/etc/init.d/apache2 status 1>/dev/null && /etc/init.d/apache2 restart 1>/dev/null}
184 %ifnos solaris2.8 solaris2.9 solaris2.10
187 %if "%{_vendor}" == "suse"
189 %restart_on_update shibd
190 %{!?_without_builtinapache:%restart_on_update apache2}
195 # ugly hack if init script got removed during %postun by upgraded (buggy/2.1) package
196 %if "%{_vendor}" == "redhat"
197 if [ ! -f %{_initrddir}/shibd ] ; then
198 if [ -f %{_sysconfdir}/%{name}/shibd-%{_vendor} ] ; then
199 %{__cp} -p %{_sysconfdir}/%{name}/shibd-%{_vendor} %{_initrddir}/shibd
200 %{__chmod} 755 %{_initrddir}/shibd
201 /sbin/chkconfig --add shibd
206 %files -f rpm.filelist
207 %defattr(-,root,root,-)
210 %{_bindir}/resolvertest
211 %{_libdir}/libshibsp.so.*
212 %{_libdir}/libshibsp-lite.so.*
213 %dir %{_libdir}/%{name}
215 %exclude %{_libdir}/%{name}/*.la
216 %dir %{_localstatedir}/log/%{name}
217 %dir %{_localstatedir}/run/%{name}
218 %dir %{_datadir}/xml/%{name}
219 %{_datadir}/xml/%{name}/*
220 %dir %{_sysconfdir}/%{name}
221 %config(noreplace) %{_sysconfdir}/%{name}/*.xml
222 %config(noreplace) %{_sysconfdir}/%{name}/*.html
223 %config(noreplace) %{_sysconfdir}/%{name}/*.logger
224 %if "%{_vendor}" == "redhat" || "%{_vendor}" == "suse"
225 %config %{_initrddir}/shibd
227 %if "%{_vendor}" == "suse"
230 %{_sysconfdir}/%{name}/*.dist
231 %{_sysconfdir}/%{name}/apache*.config
232 %{_sysconfdir}/%{name}/shibd-*
233 %attr(755, root, root) %{_sysconfdir}/%{name}/keygen.sh
234 %attr(755, root, root) %{_sysconfdir}/%{name}/metagen.sh
235 %{_sysconfdir}/%{name}/*.xsl
237 %exclude %{pkgdocdir}/api
240 %defattr(-,root,root,-)
242 %{_libdir}/libshibsp.so
243 %{_libdir}/libshibsp-lite.so
244 %doc %{pkgdocdir}/api
247 * Wed Aug 19 2009 Scott Cantor <cantor.2@osu.edu> - 2.2.1-2
248 - SuSE init script changes
249 - Restart Apache on removal, not just upgrade
250 - Fix scriptlet exit values when Apache is stopped
252 * Mon Aug 10 2009 Scott Cantor <cantor.2@osu.edu> - 2.2.1-1
253 - Doc handling changes
256 * Tue Aug 4 2009 Scott Cantor <cantor.2@osu.edu> - 2.2.1-1
257 - Initial version for 2.2.1, with shibd/httpd restart on upgrade
259 * Thu Jun 25 2009 Scott Cantor <cantor.2@osu.edu> - 2.2-3
260 - Add additional cleanup to posttrans fix
262 * Tue Jun 23 2009 Scott Cantor <cantor.2@osu.edu> - 2.2-2
263 - Reverse without_builtinapache macro test
264 - Fix init script handling on Red Hat to handle upgrades
266 * Wed Dec 3 2008 Scott Cantor <cantor.2@osu.edu> - 2.2-1
267 - Bump minor version.
268 - Make keygen.sh executable.
269 - Fixing SUSE Xerces dependency name.
270 - Optionally package shib.conf.
272 * Tue Jun 10 2008 Scott Cantor <cantor.2@osu.edu> - 2.1-1
273 - Change shib.conf handling to treat as config file.
275 * Mon Mar 17 2008 Scott Cantor <cantor.2@osu.edu> - 2.0-6
278 * Fri Jan 18 2008 Scott Cantor <cantor.2@osu.edu> - 2.0-5
279 - Release candidate 1.
281 * Sun Oct 21 2007 Scott Cantor <cantor.2@osu.edu> - 2.0-4
282 - libexec -> lib/shibboleth changes
283 - Added doc subpackage
285 * Thu Aug 16 2007 Scott Cantor <cantor.2@osu.edu> - 2.0-3
288 * Fri Jul 13 2007 Scott Cantor <cantor.2@osu.edu> - 2.0-2
289 - Second alpha release.
291 * Sun Jun 10 2007 Scott Cantor <cantor.2@osu.edu> - 2.0-1
292 - First alpha release.
294 * Mon Oct 2 2006 Scott Cantor <cantor.2@osu.edu> - 1.3-11
295 - Applied fix for secadv 20061002
296 - Fix for metadata loader loop
298 * Wed Jun 15 2006 Scott Cantor <cantor.2@osu.edu> - 1.3-10
299 - Applied fix for sec 20060615
301 * Fri Apr 15 2006 Scott Cantor <cantor.2@osu.edu> - 1.3-9
302 - Misc. patches, SuSE, Apache 2.2, gcc 4.1, and 64-bit support
304 * Mon Jan 9 2006 Scott Cantor <cantor.2@osu.edu> - 1.3-8
305 - Applied new fix for secadv 20060109
307 * Tue Nov 8 2005 Scott Cantor <cantor.2@osu.edu> - 1.3-7
308 - Applied new fix for secadv 20050901 plus rollup
310 * Fri Sep 23 2005 Scott Cantor <cantor.2@osu.edu> - 1.3-6
311 - Minor patches and default config changes
313 - Fix shib.conf creation
314 - Integrated init.d script
315 - Prevent replacement of config files
317 * Thu Sep 1 2005 Scott Cantor <cantor.2@osu.edu> - 1.3-5
318 - Applied fix for secadv 20050901 plus rollup of NSAPI fixes
320 * Sun Apr 24 2005 Scott Cantor <cantor.2@osu.edu> - 1.3-1
321 - Updated test programs and location of schemas.
322 - move siterefresh to to sbindir
324 * Fri Apr 1 2005 Derek Atkins <derek@ihtfp.com> - 1.3-1
325 - Add selinux-targeted-policy package
326 - move shar to sbindir
328 * Tue Oct 19 2004 Derek Atkins <derek@ihtfp.com> - 1.2-1
329 - Create SPEC file based on various versions in existence.