shibboleth.spec.in

   1 Name:           shibboleth
   2 Version:        @PACKAGE_VERSION@
   3 Release:        1
   4 Summary:        Open source system for attribute-based Web SSO
   5 Group:          Productivity/Networking/Security
   6 Vendor:         Shibboleth Consortium
   7 License:        Apache 2.0
   8 URL:            http://shibboleth.net/
   9 Source:         %{name}-sp-%{version}.tar.bz2
  10 BuildRoot:      %{_tmppath}/%{name}-sp-%{version}-root
  11 Obsoletes:      shibboleth-sp = 2.5.0
  12 Requires:       openssl
  13 %if 0%{?rhel} >= 6 || 0%{?centos_version} >= 600 || 0%{?amzn} >= 1
  14 PreReq:         xmltooling-schemas%{?_isa} >= 1.5.0, opensaml-schemas%{?_isa} >= 2.5.0
  15 %else
  16 PreReq:         xmltooling-schemas >= 1.5.0, opensaml-schemas >= 2.5.0
  17 %endif
  18 %if 0%{?suse_version} > 1030 && 0%{?suse_version} < 1130
  19 PreReq:         %{insserv_prereq} %{fillup_prereq}
  20 BuildRequires:  libxerces-c-devel >= 3.1
  21 %else
  22 %if 0%{?rhel} >= 7 || 0%{?centos_version} >= 700
  23 BuildRequires:  systemd
  24 BuildRequires:  xerces-c-devel >= 3.1
  25 %else
  26 BuildRequires:  libxerces-c-devel >= 3.1
  27 %endif
  28 %endif
  29 BuildRequires:  libxml-security-c-devel >= 1.4.0
  30 BuildRequires:  libxmltooling-devel >= 1.5.0
  31 BuildRequires:  libsaml-devel >= 2.5.0
  32 %{?_with_log4cpp:BuildRequires: liblog4cpp-devel >= 1.0}
  33 %{!?_with_log4cpp:BuildRequires: liblog4shib-devel >= 1.0.4}
  34 %if 0%{?rhel} >= 6 || 0%{?centos_version} >= 600 || 0%{?amzn} >= 1
  35 Requires:       libcurl-openssl%{?_isa} >= 7.21.7
  36 BuildRequires:  chrpath
  37 %endif
  38 %if 0%{?suse_version} > 1300
  39 BuildRequires:  libtool
  40 %endif
  41 BuildRequires:  gcc-c++, zlib-devel, boost-devel >= 1.32.0
  42 %{!?_without_gssapi:BuildRequires: krb5-devel}
  43 %{!?_without_doxygen:BuildRequires: doxygen}
  44 %{!?_without_odbc:BuildRequires:unixODBC-devel}
  45 %{?_with_fastcgi:BuildRequires: fcgi-devel}
  46 %if 0%{?centos_version} >= 600
  47 BuildRequires:  libmemcached-devel
  48 %endif
  49 %{?_with_memcached:BuildRequires: libmemcached-devel}
  50 %if "%{_vendor}" == "redhat" || "%{_vendor}" == "amazon"
  51 %if 0%{?rhel} >= 6 || 0%{?centos_version} >= 600 || 0%{?amzn} >= 1
  52 %{!?_without_builtinapache:BuildRequires: httpd-devel%{?_isa}}
  53 %else
  54 %{!?_without_builtinapache:BuildRequires: httpd-devel}
  55 %endif
  56 BuildRequires: redhat-rpm-config
  57 Requires(pre): shadow-utils
  58 Requires(post): chkconfig
  59 Requires(preun): chkconfig, initscripts
  60 %endif
  61 %if "%{_vendor}" == "suse"
  62 Requires(pre): pwdutils
  63 %{!?_without_builtinapache:BuildRequires: apache2-devel}
  64 %if 0%{?suse_version} >= 1210
  65 Requires: %{?systemd_requires}
  66 BuildRequires: systemd-rpm-macros
  67 %endif
  68 %endif
  69
  70 %define runuser shibd
  71 %if "%{_vendor}" == "suse"
  72 %define pkgdocdir %{_docdir}/shibboleth
  73 %else
  74 %define pkgdocdir %{_docdir}/shibboleth-%{version}
  75 %endif
  76
  77 %description
  78 Shibboleth is a Web Single Sign-On implementations based on OpenSAML
  79 that supports multiple protocols, federated identity, and the extensible
  80 exchange of rich attributes subject to privacy controls.
  81
  82 This package contains the Shibboleth Service Provider runtime libraries,
  83 daemon, default plugins, and Apache module(s).
  84
  85 %package devel
  86 Summary:        Shibboleth Development Headers
  87 Group:          Development/Libraries/C and C++
  88 Requires:       %{name} = %{version}-%{release}
  89 Obsoletes:      shibboleth-sp-devel = 2.5.0
  90 %if 0%{?rhel} >= 7 || 0%{?centos_version} >= 700
  91 Requires:       xerces-c-devel >= 3.1
  92 %else
  93 Requires:       libxerces-c-devel >= 3.1
  94 %endif
  95 Requires:       libxml-security-c-devel >= 1.4.0
  96 Requires:       libxmltooling-devel >= 1.5.0
  97 Requires:       libsaml-devel >= 2.5.0
  98 %{?_with_log4cpp:Requires: liblog4cpp-devel >= 1.0}
  99 %{!?_with_log4cpp:Requires: liblog4shib-devel >= 1.0.4}
 100
 101 %description devel
 102 Shibboleth is a Web Single Sign-On implementations based on OpenSAML
 103 that supports multiple protocols, federated identity, and the extensible
 104 exchange of rich attributes subject to privacy controls.
 105
 106 This package includes files needed for development with Shibboleth.
 107
 108 %prep
 109 %setup -n %{name}-sp-%{version}
 110
 111 %build
 112 %if 0%{?suse_version} >= 1210
 113         %configure %{?_without_odbc:--disable-odbc} %{?_without_adfs:--disable-adfs} %{?_with_fastcgi} %{!?_without_gssapi:--with-gssapi} %{!?_without_systemd:--enable-systemd} %{?shib_options}
 114 %else
 115 %if 0%{?rhel} >= 7 || 0%{?centos_version} >= 700
 116         %configure %{?_without_odbc:--disable-odbc} %{?_without_adfs:--disable-adfs} %{?_with_fastcgi} %{!?_without_gssapi:--with-gssapi} %{!?_without_memcached:--with-memcached} %{!?_without_systemd:--enable-systemd} %{?shib_options}
 117 %else
 118 %if 0%{?centos_version} >= 600
 119         %configure %{?_without_odbc:--disable-odbc} %{?_without_adfs:--disable-adfs} %{?_with_fastcgi} %{!?_without_gssapi:--with-gssapi} %{!?_without_memcached:--with-memcached} %{?shib_options}
 120 %else
 121         %configure %{?_without_odbc:--disable-odbc} %{?_without_adfs:--disable-adfs} %{?_with_fastcgi} %{!?_without_gssapi:--with-gssapi} %{?_with_memcached} %{?shib_options}
 122 %endif
 123 %endif
 124 %endif
 125 %{__make} pkgdocdir=%{pkgdocdir}
 126
 127 %install
 128 %{__make} install NOKEYGEN=1 DESTDIR=$RPM_BUILD_ROOT pkgdocdir=%{pkgdocdir}
 129
 130 %if "%{_vendor}" == "suse"
 131         %{__sed} -i "s/\/var\/log\/httpd/\/var\/log\/apache2/g" \
 132                 $RPM_BUILD_ROOT%{_sysconfdir}/shibboleth/native.logger
 133 %endif
 134
 135 # Plug the SP into the built-in Apache on a recognized system.
 136 touch rpm.filelist
 137 APACHE_CONFIG="no"
 138 if [ -f $RPM_BUILD_ROOT%{_libdir}/shibboleth/mod_shib_13.so ] ; then
 139         APACHE_CONFIG="apache.config"
 140 fi
 141 if [ -f $RPM_BUILD_ROOT%{_libdir}/shibboleth/mod_shib_20.so ] ; then
 142         APACHE_CONFIG="apache2.config"
 143 fi
 144 if [ -f $RPM_BUILD_ROOT%{_libdir}/shibboleth/mod_shib_22.so ] ; then
 145         APACHE_CONFIG="apache22.config"
 146 fi
 147 if [ -f $RPM_BUILD_ROOT%{_libdir}/shibboleth/mod_shib_24.so ] ; then
 148         APACHE_CONFIG="apache24.config"
 149 fi
 150 %{?_without_builtinapache:APACHE_CONFIG="no"}
 151 if [ "$APACHE_CONFIG" != "no" ] ; then
 152         APACHE_CONFD="no"
 153         if [ -d %{_sysconfdir}/httpd/conf.d ] ; then
 154                 APACHE_CONFD="%{_sysconfdir}/httpd/conf.d"
 155         fi
 156         if [ -d %{_sysconfdir}/apache2/conf.d ] ; then
 157                 APACHE_CONFD="%{_sysconfdir}/apache2/conf.d"
 158         fi
 159         if [ "$APACHE_CONFD" != "no" ] ; then
 160                 %{__mkdir} -p $RPM_BUILD_ROOT$APACHE_CONFD
 161                 %{__cp} -p $RPM_BUILD_ROOT%{_sysconfdir}/shibboleth/$APACHE_CONFIG $RPM_BUILD_ROOT$APACHE_CONFD/shib.conf
 162                 echo "%config(noreplace) $APACHE_CONFD/shib.conf" >> rpm.filelist
 163         fi
 164 fi
 165
 166 # Establish location of systemd file, if any.
 167 SYSTEMD_SHIBD="no"
 168 %if 0%{?suse_version} >= 1210 || 0%{?rhel} >= 7 || 0%{?centos_version} >= 700
 169         %{__mkdir} -p $RPM_BUILD_ROOT%{_unitdir}
 170         echo "%attr(0444,-,-) %{_unitdir}/shibd.service >> rpm.filelist
 171         SYSTEMD_SHIBD="$RPM_BUILD_ROOT%{_unitdir}/shibd.service"
 172 %endif
 173
 174 # Otherwise, establish location of sysconfig file, if any.
 175 SYSCONFIG_SHIBD="no"
 176 if [ "$SYSTEMD_SHIBD" == "no" ] ; then
 177 %if "%{_vendor}" == "redhat" || "%{_vendor}" == "amazon"
 178         %{__mkdir} -p $RPM_BUILD_ROOT%{_sysconfdir}/sysconfig
 179         echo "%config(noreplace) %{_sysconfdir}/sysconfig/shibd" >> rpm.filelist
 180         SYSCONFIG_SHIBD="$RPM_BUILD_ROOT%{_sysconfdir}/sysconfig/shibd"
 181 %endif
 182 %if "%{_vendor}" == "suse"
 183         %{__mkdir} -p $RPM_BUILD_ROOT%{_localstatedir}/adm/fillup-templates
 184         echo "%{_localstatedir}/adm/fillup-templates/sysconfig.shibd" >> rpm.filelist
 185         SYSCONFIG_SHIBD="$RPM_BUILD_ROOT%{_localstatedir}/adm/fillup-templates/sysconfig.shibd"
 186 %endif
 187 fi
 188
 189 if [ "$SYSTEMD_SHIBD" != "no" ] ; then
 190         # Populate the systemd file
 191         cat > $SYSTEMD_SHIBD <<EOF
 192 [Unit]
 193 Description=Shibboleth Service Provider Daemon
 194 After=network.target
 195 Before=httpd.service
 196
 197 [Service]
 198 Type=notify
 199 NotifyAccess=main
 200 User=%{runuser}
 201 %if 0%{?rhel} >= 6 || 0%{?centos_version} >= 600 || 0%{?amzn} >= 1
 202 Environment=LD_LIBRARY_PATH=/opt/shibboleth/%{_lib}
 203 %endif
 204 ExecStart=%{_sbindir}/shibd -f -F
 205 StandardInput=null
 206 StandardOutput=null
 207 StandardError=journal
 208 TimeoutStopSec=5s
 209 TimeoutStartSec=90s
 210 Restart=on-failure
 211 RestartSec=30s
 212
 213 [Install]
 214 WantedBy=multi-user.target
 215 EOF
 216 elif [ "$SYSCONFIG_SHIBD" != "no" ] ; then
 217         # Populate the sysconfig file.
 218         cat > $SYSCONFIG_SHIBD <<EOF
 219 # Shibboleth SP init script customization
 220
 221 # User account for shibd
 222 SHIBD_USER=%{runuser}
 223
 224 # Umask for shibd
 225 # SHIBD_UMASK=022
 226
 227 # Wait period (secs) for configuration (and metadata) to load
 228 SHIBD_WAIT=30
 229 EOF
 230         %if 0%{?rhel} >= 6 || 0%{?centos_version} >= 600 || 0%{?amzn} >= 1
 231                 cat >> $SYSCONFIG_SHIBD <<EOF
 232
 233 # Override OS-supplied libcurl
 234 export LD_LIBRARY_PATH=/opt/shibboleth/%{_lib}
 235 EOF
 236         %endif
 237 fi
 238
 239 %if 0%{?rhel} >= 6 || 0%{?centos_version} >= 600 || 0%{?amzn} >= 1
 240         # Strip existing rpath to libcurl.
 241         chrpath -d $RPM_BUILD_ROOT%{_sbindir}/shibd
 242         chrpath -d $RPM_BUILD_ROOT%{_bindir}/mdquery
 243         chrpath -d $RPM_BUILD_ROOT%{_bindir}/resolvertest
 244 %endif
 245
 246 %if "%{_vendor}" == "redhat" || "%{_vendor}" == "amazon" || "%{_vendor}" == "suse"
 247 if [ "$SYSTEMD_SHIBD" == "no" ] ; then
 248         # %{_initddir} not yet in RHEL5, use deprecated %{_initrddir}
 249         install -d -m 0755 $RPM_BUILD_ROOT%{_initrddir}
 250         install -m 0755 $RPM_BUILD_ROOT%{_sysconfdir}/shibboleth/shibd-%{_vendor} $RPM_BUILD_ROOT%{_initrddir}/shibd
 251 %if "%{_vendor}" == "suse"
 252         install -d -m 0755 $RPM_BUILD_ROOT/%{_sbindir}
 253         %{__ln_s} -f %{_initrddir}/shibd $RPM_BUILD_ROOT%{_sbindir}/rcshibd
 254 %endif
 255 fi
 256 %endif
 257
 258 %check
 259 %{__make} check
 260
 261 %clean
 262 [ "$RPM_BUILD_ROOT" != "/" ] && %{__rm} -rf $RPM_BUILD_ROOT
 263
 264 %pre
 265 getent group %{runuser} >/dev/null || groupadd -r %{runuser}
 266 getent passwd %{runuser} >/dev/null || useradd -r -g %{runuser} \
 267         -d  %{_localstatedir}/run/shibboleth -s /sbin/nologin -c "Shibboleth SP daemon" %{runuser}
 268 %if 0%{?suse_version} >= 1210
 269         %service_add_pre shibd.service
 270 %endif
 271 exit 0
 272
 273 %post
 274 %ifnos solaris2.8 solaris2.9 solaris2.10 solaris2.11
 275 /sbin/ldconfig
 276 %endif
 277
 278 # Key generation or ownership fix
 279 cd %{_sysconfdir}/shibboleth
 280 if [ -f sp-key.pem ] ; then
 281         %{__chown} %{runuser}:%{runuser} sp-key.pem sp-cert.pem 2>/dev/null || :
 282 else
 283         /bin/sh ./keygen.sh -b -u %{runuser} -g %{runuser}
 284 fi
 285
 286 # Fix ownership of log files (even on new installs, if they're left from an older one).
 287 %{__chown} %{runuser}:%{runuser} %{_localstatedir}/log/shibboleth/* 2>/dev/null || :
 288
 289 %if "%{_vendor}" == "redhat" || "%{_vendor}" == "amazon"
 290         if [ $1 -gt 1 ] ; then
 291                 # On Red Hat with shib.conf installed, clean up old Alias commands
 292                 # by pointing them at new version-independent /usr/share/share tree.
 293                 # Any Aliases we didn't create we assume are custom files.
 294                 # This is to accomodate making shib.conf a noreplace config file.
 295                 # We can't do this for SUSE, because they disallow changes to
 296                 # packaged files in scriplets.
 297                 APACHE_CONF="no"
 298                 if [ -f %{_sysconfdir}/httpd/conf.d/shib.conf ] ; then
 299                         APACHE_CONF="%{_sysconfdir}/httpd/conf.d/shib.conf"
 300                 fi
 301                 if [ "$APACHE_CONF" != "no" ] ; then
 302                         %{__sed} -i "s/\/usr\/share\/doc\/shibboleth\(\-\(.\)\{1,\}\)\{0,1\}\/main\.css/\/usr\/share\/shibboleth\/main.css/g" \
 303                                 $APACHE_CONF
 304                         %{__sed} -i "s/\/usr\/share\/doc\/shibboleth\(\-\(.\)\{1,\}\)\{0,1\}\/logo\.jpg/\/usr\/share\/shibboleth\/logo.jpg/g" \
 305                                 $APACHE_CONF
 306                 fi
 307         fi
 308
 309 %if 0%{?rhel} >= 7 || 0%{?centos_version} >= 700
 310         # Initial prep for systemd
 311         %systemd_post shibd.service
 312 %else
 313         # Add the proper /etc/rc*.d links for the script
 314         /sbin/chkconfig --add shibd
 315 %endif
 316 %endif
 317 %if "%{_vendor}" == "suse"
 318 %if 0%{?suse_version} >= 1210
 319         %service_add_post shibd.service
 320 %else
 321         # This adds the proper /etc/rc*.d links for the script
 322         # and populates the sysconfig/shibd file.
 323         cd /
 324         %{fillup_only -n shibd}
 325         %insserv_force_if_yast shibd
 326 %endif
 327 %endif
 328
 329 %preun
 330 # On final removal, stop shibd and remove service, restart Apache if running.
 331 %if "%{_vendor}" == "redhat" || "%{_vendor}" == "amazon"
 332 %if 0%{?rhel} >= 7 || 0%{?centos_version} >= 700
 333         %systemd_preun shibd.service
 334 %else
 335         if [ $1 -eq 0 ] ; then
 336                 /sbin/service shibd stop >/dev/null 2>&1
 337                 /sbin/chkconfig --del shibd
 338         fi
 339 %endif
 340         if [ $1 -eq 0 ] ; then
 341                 %{!?_without_builtinapache:/sbin/service httpd status 1>/dev/null && /sbin/service httpd restart 1>/dev/null}
 342         fi
 343 %endif
 344 %if "%{_vendor}" == "suse"
 345 %if 0%{?suse_version} >= 1210
 346         %service_del_preun shibd.service
 347 %else
 348         %stop_on_removal shibd
 349 %endif
 350         if [ $1 -eq 0 ] ; then
 351                 %{!?_without_builtinapache:/sbin/service apache2 status 1>/dev/null && /sbin/service apache2 restart 1>/dev/null}
 352         fi
 353 %endif
 354 exit 0
 355
 356 %postun
 357 %ifnos solaris2.8 solaris2.9 solaris2.10 solaris2.11
 358 /sbin/ldconfig
 359 %endif
 360 %if "%{_vendor}" == "redhat" || "%{_vendor}" == "amazon"
 361         # On upgrade, restart components if they're already running.
 362 %if 0%{?rhel} >= 7 || 0%{?centos_version} >= 700
 363         %systemd_postun_with_restart shibd.service
 364 %else
 365         if [ $1 -ge 1 ] ; then
 366                 /sbin/service shibd status 1>/dev/null && /sbin/service shibd restart 1>/dev/null
 367         fi
 368 %endif
 369         if [ $1 -ge 1 ] ; then
 370                 %{!?_without_builtinapache:/sbin/service httpd status 1>/dev/null && /sbin/service httpd restart 1>/dev/null}
 371                 exit 0
 372         fi
 373 %endif
 374 %if "%{_vendor}" == "suse"
 375 %if 0%{?suse_version} >= 1210
 376         %service_del_postun shibd.service
 377 %else
 378         cd /
 379         %restart_on_update shibd
 380         %{insserv_cleanup}
 381 %endif
 382         %{!?_without_builtinapache:%restart_on_update apache2}
 383 %endif
 384
 385 %posttrans
 386 # ugly hack if init script got removed during %postun by upgraded (buggy/2.1) package
 387 %if "%{_vendor}" == "redhat" || "%{_vendor}" == "amazon"
 388 if [ -f %{_sysconfdir}/sysconfig/shibd ] ; then
 389         if [ ! -f %{_initrddir}/shibd ] ; then
 390                 if [ -f %{_sysconfdir}/shibboleth/shibd-%{_vendor} ] ; then
 391                         %{__cp} -p %{_sysconfdir}/shibboleth/shibd-%{_vendor} %{_initrddir}/shibd
 392                         %{__chmod} 755 %{_initrddir}/shibd
 393                         /sbin/chkconfig --add shibd
 394         fi
 395 fi
 396 %endif
 397
 398 %files -f rpm.filelist
 399 %defattr(-,root,root,-)
 400 %{_sbindir}/shibd
 401 %{_bindir}/mdquery
 402 %{_bindir}/resolvertest
 403 %{_libdir}/libshibsp.so.*
 404 %{_libdir}/libshibsp-lite.so.*
 405 %dir %{_libdir}/shibboleth
 406 %{_libdir}/shibboleth/*
 407 %attr(0750,%{runuser},%{runuser}) %dir %{_localstatedir}/log/shibboleth
 408 %if "%{_vendor}" == "redhat" || "%{_vendor}" == "amazon" || "%{_vendor}" == "suse"
 409 %if "%{_vendor}" == "redhat" || "%{_vendor}" == "amazon"
 410 %attr(0750,apache,apache) %dir %{_localstatedir}/log/shibboleth-www
 411 %endif
 412 %if "%{_vendor}" == "suse"
 413 %attr(0750,wwwrun,www) %dir %{_localstatedir}/log/shibboleth-www
 414 %endif
 415 %else
 416 %attr(0750,-,-) %dir %{_localstatedir}/log/shibboleth-www
 417 %endif
 418 %if 0%{?suse_version} < 1300
 419 %attr(0755,%{runuser},%{runuser}) %dir %{_localstatedir}/run/shibboleth
 420 %endif
 421 %attr(0755,%{runuser},%{runuser}) %dir %{_localstatedir}/cache/shibboleth
 422 %dir %{_datadir}/xml/shibboleth
 423 %{_datadir}/xml/shibboleth/*
 424 %dir %{_datadir}/shibboleth
 425 %{_datadir}/shibboleth/*
 426 %dir %{_sysconfdir}/shibboleth
 427 %config(noreplace) %{_sysconfdir}/shibboleth/*.xml
 428 %config(noreplace) %{_sysconfdir}/shibboleth/*.html
 429 %config(noreplace) %{_sysconfdir}/shibboleth/*.logger
 430 %if "%{_vendor}" == "redhat"
 431 %if 0%{?rhel} >= 7 || 0%{?centos_version} >= 700
 432 %else
 433 %config %{_initrddir}/shibd
 434 %endif
 435 %endif
 436 %if "%{_vendor}" == "amazon"
 437 %config %{_initrddir}/shibd
 438 %endif
 439 %if "%{_vendor}" == "suse" && 0%{?suse_version} < 1210
 440 %config %{_initrddir}/shibd
 441 %{_sbindir}/rcshibd
 442 %endif
 443 %{_sysconfdir}/shibboleth/*.dist
 444 %{_sysconfdir}/shibboleth/apache*.config
 445 %{_sysconfdir}/shibboleth/shibd-*
 446 %attr(0755,root,root) %{_sysconfdir}/shibboleth/keygen.sh
 447 %attr(0755,root,root) %{_sysconfdir}/shibboleth/metagen.sh
 448 %{_sysconfdir}/shibboleth/*.xsl
 449 %doc %{pkgdocdir}
 450 %exclude %{pkgdocdir}/api
 451
 452 %files devel
 453 %defattr(-,root,root,-)
 454 %{_includedir}/*
 455 %{_libdir}/libshibsp.so
 456 %{_libdir}/libshibsp-lite.so
 457 %doc %{pkgdocdir}/api
 458
 459 %changelog
 460 * Thu Jul 2 2015 Scott Cantor <cantor.2@osu.edu> - 2.5.5-1
 461 - Revamp with systemd support for RH/CentOS 7+ and SUSE 12.1+
 462
 463 * Mon Mar 9 2015 Scott Cantor <cantor.2@osu.edu> - 2.5.4-1
 464 - Add Amazon VM support
 465 - Add a separate native logging directory
 466 - Remove hard-coded init.d usage
 467 - Switch to bz2 sources to prevent future issues with SuSE
 468
 469 * Mon Nov 17 2014 Scott Cantor <cantor.2@osu.edu> - 2.5.3-2
 470 - Add libtool dep for OpenSUSE 13
 471 - Remove /var/run/shibboleth for OpenSUSE 13
 472
 473 * Tue May 13 2014 Ian Young <ian@iay.org.uk> - 2.5.3-1.2
 474 - Update package dependencies for RHEL/CentOS 7
 475 - Fix bogus dates in changelog
 476
 477 * Sat Jun 8 2013   Scott Cantor  <cantor.2@osu.edu>  - 2.5.2-1
 478 - Add --with-gssapi using MIT K5 by default
 479
 480 * Tue Sep 25 2012  Scott Cantor  <cantor.2@osu.edu>  - 2.5.1-1
 481 - Merge back various changes used in released packages
 482 - Prep for 2.5.1 by pulling extra restart out
 483
 484 * Tue Aug 7 2012  Scott Cantor  <cantor.2@osu.edu>  - 2.5.0-2
 485 - Changed package name back to shibboleth because of upgrade bugs
 486 - Put back extra restart for this release only.
 487
 488 * Thu Mar 1 2012  Scott Cantor  <cantor.2@osu.edu>  - 2.5.0-1
 489 - Move logo and stylesheet to version-independent tree
 490 - Make shib.conf noreplace
 491 - Post-fixup of Alias commands in older shib.conf
 492 - Changes to run shibd as non-root shibboleth user
 493 - Move init customizations to /etc/sysconfig/shibd
 494 - Copy shibd restart for Red Hat to postun
 495 - Add boost-devel dependency
 496 - Build memcache plugin on RH6
 497 - Add cachedir to install
 498 - Add Apache 2.4 to install
 499
 500 * Sun Jun 26 2011  Scott Cantor  <cantor.2@osu.edu>  - 2.4.3-1
 501 - Log files shouldn't be world readable.
 502 - Explicit requirement for libcurl-openssl on RHEL6
 503 - Uncomment LD_LIBRARY_PATH in init script for RHEL6
 504 - Remove rpath from binaries for RHEL6
 505
 506 * Fri Dec 25 2009  Scott Cantor  <cantor.2@osu.edu>  - 2.4-1
 507 - Update dependencies.
 508
 509 * Mon Nov 23 2009 Scott Cantor  <cantor.2@osu.edu>  - 2.3.1-1
 510 - Reset revision for 2.3.1 release
 511
 512 * Wed Aug 19 2009 Scott Cantor  <cantor.2@osu.edu>  - 2.2.1-2
 513 - SuSE init script changes
 514 - Restart Apache on removal, not just upgrade
 515 - Fix scriptlet exit values when Apache is stopped
 516
 517 * Mon Aug 10 2009 Scott Cantor  <cantor.2@osu.edu>  - 2.2.1-1
 518 - Doc handling changes
 519 - SuSE init script
 520
 521 * Tue Aug 4 2009 Scott Cantor  <cantor.2@osu.edu>  - 2.2.1-1
 522 - Initial version for 2.2.1, with shibd/httpd restart on upgrade
 523
 524 * Thu Jun 25 2009 Scott Cantor  <cantor.2@osu.edu>  - 2.2-3
 525 - Add additional cleanup to posttrans fix
 526
 527 * Tue Jun 23 2009 Scott Cantor  <cantor.2@osu.edu>  - 2.2-2
 528 - Reverse without_builtinapache macro test
 529 - Fix init script handling on Red Hat to handle upgrades
 530
 531 * Wed Dec 3 2008  Scott Cantor  <cantor.2@osu.edu>  - 2.2-1
 532 - Bump minor version.
 533 - Make keygen.sh executable.
 534 - Fixing SUSE Xerces dependency name.
 535 - Optionally package shib.conf.
 536
 537 * Tue Jun 10 2008  Scott Cantor  <cantor.2@osu.edu>  - 2.1-1
 538 - Change shib.conf handling to treat as config file.
 539
 540 * Mon Mar 17 2008  Scott Cantor  <cantor.2@osu.edu>  - 2.0-6
 541 - Official release.
 542
 543 * Fri Jan 18 2008  Scott Cantor  <cantor.2@osu.edu>  - 2.0-5
 544 - Release candidate 1.
 545
 546 * Sun Oct 21 2007 Scott Cantor  <cantor.2@osu.edu>  - 2.0-4
 547 - libexec -> lib/shibboleth changes
 548 - Added doc subpackage
 549
 550 * Thu Aug 16 2007 Scott Cantor  <cantor.2@osu.edu>  - 2.0-3
 551 - First public beta.
 552
 553 * Fri Jul 13 2007 Scott Cantor  <cantor.2@osu.edu>  - 2.0-2
 554 - Second alpha release.
 555
 556 * Sun Jun 10 2007 Scott Cantor  <cantor.2@osu.edu>  - 2.0-1
 557 - First alpha release.
 558
 559 * Mon Oct 2 2006 Scott Cantor   <cantor.2@osu.edu>  - 1.3-11
 560 - Applied fix for secadv 20061002
 561 - Fix for metadata loader loop
 562
 563 * Thu Jun 15 2006 Scott Cantor  <cantor.2@osu.edu>  - 1.3-10
 564 - Applied fix for sec 20060615
 565
 566 * Sat Apr 15 2006 Scott Cantor  <cantor.2@osu.edu>  - 1.3-9
 567 - Misc. patches, SuSE, Apache 2.2, gcc 4.1, and 64-bit support
 568
 569 * Mon Jan 9 2006 Scott Cantor  <cantor.2@osu.edu>  - 1.3-8
 570 - Applied new fix for secadv 20060109
 571
 572 * Tue Nov 8 2005 Scott Cantor  <cantor.2@osu.edu>  - 1.3-7
 573 - Applied new fix for secadv 20050901 plus rollup
 574
 575 * Fri Sep 23 2005 Scott Cantor  <cantor.2@osu.edu>  - 1.3-6
 576 - Minor patches and default config changes
 577 - pidfile patch
 578 - Fix shib.conf creation
 579 - Integrated init.d script
 580 - Prevent replacement of config files
 581
 582 * Thu Sep 1 2005  Scott Cantor  <cantor.2@osu.edu>  - 1.3-5
 583 - Applied fix for secadv 20050901 plus rollup of NSAPI fixes
 584
 585 * Sun Apr 24 2005  Scott Cantor  <cantor.2@osu.edu>  - 1.3-1
 586 - Updated test programs and location of schemas.
 587 - move siterefresh to to sbindir
 588
 589 * Fri Apr  1 2005  Derek Atkins  <derek@ihtfp.com>  - 1.3-1
 590 - Add selinux-targeted-policy package
 591 - move shar to sbindir
 592
 593 * Tue Oct 19 2004  Derek Atkins  <derek@ihtfp.com>  - 1.2-1
 594 - Create SPEC file based on various versions in existence.