shibboleth.spec.in

   1 Name:           shibboleth
   2 Version:        @PACKAGE_VERSION@
   3 Release:        1
   4 Summary:        Open source system for attribute-based Web SSO
   5 Group:          Productivity/Networking/Security
   6 Vendor:         Shibboleth Consortium
   7 License:        Apache 2.0
   8 URL:            http://shibboleth.net/
   9 Source:         %{name}-sp-%{version}.tar.bz2
  10 BuildRoot:      %{_tmppath}/%{name}-sp-%{version}-root
  11 Obsoletes:      shibboleth-sp = 2.5.0
  12 Requires:       openssl
  13 %if 0%{?rhel} >= 6 || 0%{?centos_version} >= 600 || 0%{?amzn} >= 1
  14 PreReq:         xmltooling-schemas%{?_isa} >= 1.5.5, opensaml-schemas%{?_isa} >= 2.5.5
  15 %else
  16 PreReq:         xmltooling-schemas >= 1.5.5, opensaml-schemas >= 2.5.5
  17 %endif
  18 %if 0%{?suse_version} > 1030 && 0%{?suse_version} < 1130
  19 PreReq:         %{insserv_prereq} %{fillup_prereq}
  20 BuildRequires:  libxerces-c-devel >= 3.1
  21 %else
  22 %if 0%{?rhel} >= 7 || 0%{?centos_version} >= 700
  23 BuildRequires:  systemd-devel, pkgconfig
  24 BuildRequires:  xerces-c-devel >= 3.1
  25 %else
  26 BuildRequires:  libxerces-c-devel >= 3.1
  27 %endif
  28 %endif
  29 BuildRequires:  libxml-security-c-devel >= 1.7.3
  30 BuildRequires:  libxmltooling-devel >= 1.5.5
  31 BuildRequires:  libsaml-devel >= 2.5.5
  32 %{?_with_log4cpp:BuildRequires: liblog4cpp-devel >= 1.0}
  33 %{!?_with_log4cpp:BuildRequires: liblog4shib-devel >= 1.0.4}
  34 %if 0%{?rhel} >= 6 || 0%{?centos_version} >= 600 || 0%{?amzn} >= 1
  35 Requires:       libcurl-openssl%{?_isa} >= 7.21.7
  36 BuildRequires:  chrpath
  37 %endif
  38 %if 0%{?suse_version} > 1300
  39 BuildRequires:  libtool
  40 %endif
  41 BuildRequires:  gcc-c++, zlib-devel, boost-devel >= 1.32.0
  42 %{!?_without_gssapi:BuildRequires: krb5-devel}
  43 %{!?_without_doxygen:BuildRequires: doxygen}
  44 %{!?_without_odbc:BuildRequires:unixODBC-devel}
  45 %{?_with_fastcgi:BuildRequires: fcgi-devel}
  46 %if 0%{?centos_version} >= 600
  47 BuildRequires:  libmemcached-devel
  48 %endif
  49 %{?_with_memcached:BuildRequires: libmemcached-devel}
  50 %if "%{_vendor}" == "redhat" || "%{_vendor}" == "amazon"
  51 %if 0%{?rhel} >= 6 || 0%{?centos_version} >= 600 || 0%{?amzn} >= 1
  52 %{!?_without_builtinapache:BuildRequires: httpd-devel%{?_isa}}
  53 %else
  54 %{!?_without_builtinapache:BuildRequires: httpd-devel}
  55 %endif
  56 BuildRequires: redhat-rpm-config
  57 Requires(pre): shadow-utils
  58 Requires(post): chkconfig
  59 Requires(preun): chkconfig, initscripts
  60 %endif
  61 %if "%{_vendor}" == "suse"
  62 Requires(pre): pwdutils
  63 %{!?_without_builtinapache:BuildRequires: apache2-devel}
  64 %{?systemd_requires}
  65 %if 0%{?suse_version} >= 1210
  66 BuildRequires: systemd-rpm-macros, systemd-devel, pkgconfig
  67 %endif
  68 %endif
  69
  70 %define runuser shibd
  71 %if "%{_vendor}" == "suse"
  72 %define pkgdocdir %{_docdir}/shibboleth
  73 %else
  74 %define pkgdocdir %{_docdir}/shibboleth-%{version}
  75 %endif
  76
  77 %description
  78 Shibboleth is a Web Single Sign-On implementations based on OpenSAML
  79 that supports multiple protocols, federated identity, and the extensible
  80 exchange of rich attributes subject to privacy controls.
  81
  82 This package contains the Shibboleth Service Provider runtime libraries,
  83 daemon, default plugins, and Apache module(s).
  84
  85 %package devel
  86 Summary:        Shibboleth Development Headers
  87 Group:          Development/Libraries/C and C++
  88 Requires:       %{name} = %{version}-%{release}
  89 Obsoletes:      shibboleth-sp-devel = 2.5.0
  90 %if 0%{?rhel} >= 7 || 0%{?centos_version} >= 700
  91 Requires:       xerces-c-devel >= 3.1
  92 %else
  93 Requires:       libxerces-c-devel >= 3.1
  94 %endif
  95 Requires:       libxml-security-c-devel >= 1.7.3
  96 Requires:       libxmltooling-devel >= 1.5.5
  97 Requires:       libsaml-devel >= 2.5.5
  98 %{?_with_log4cpp:Requires: liblog4cpp-devel >= 1.0}
  99 %{!?_with_log4cpp:Requires: liblog4shib-devel >= 1.0.4}
 100
 101 %description devel
 102 Shibboleth is a Web Single Sign-On implementations based on OpenSAML
 103 that supports multiple protocols, federated identity, and the extensible
 104 exchange of rich attributes subject to privacy controls.
 105
 106 This package includes files needed for development with Shibboleth.
 107
 108 %prep
 109 %setup -n %{name}-sp-%{version}
 110
 111 %build
 112 %if 0%{?suse_version} >= 1210
 113         %configure %{?_without_odbc:--disable-odbc} %{?_without_adfs:--disable-adfs} %{?_with_fastcgi} %{!?_without_gssapi:--with-gssapi} %{!?_without_systemd:--enable-systemd} %{?shib_options}
 114 %else
 115 %if 0%{?rhel} >= 7 || 0%{?centos_version} >= 700
 116         %configure %{?_without_odbc:--disable-odbc} %{?_without_adfs:--disable-adfs} %{?_with_fastcgi} %{!?_without_gssapi:--with-gssapi} %{!?_without_memcached:--with-memcached} %{!?_without_systemd:--enable-systemd} %{?shib_options}
 117 %else
 118 %if 0%{?centos_version} >= 600
 119         %configure %{?_without_odbc:--disable-odbc} %{?_without_adfs:--disable-adfs} %{?_with_fastcgi} %{!?_without_gssapi:--with-gssapi} %{!?_without_memcached:--with-memcached} %{?shib_options}
 120 %else
 121         %configure %{?_without_odbc:--disable-odbc} %{?_without_adfs:--disable-adfs} %{?_with_fastcgi} %{!?_without_gssapi:--with-gssapi} %{?_with_memcached} %{?shib_options}
 122 %endif
 123 %endif
 124 %endif
 125 %{__make} pkgdocdir=%{pkgdocdir}
 126
 127 %install
 128 %{__make} install NOKEYGEN=1 DESTDIR=$RPM_BUILD_ROOT pkgdocdir=%{pkgdocdir}
 129
 130 %if "%{_vendor}" == "suse"
 131         %{__sed} -i "s/\/var\/log\/httpd/\/var\/log\/apache2/g" \
 132                 $RPM_BUILD_ROOT%{_sysconfdir}/shibboleth/native.logger
 133 %endif
 134
 135 # Plug the SP into the built-in Apache on a recognized system.
 136 touch rpm.filelist
 137 APACHE_CONFIG="no"
 138 if [ -f $RPM_BUILD_ROOT%{_libdir}/shibboleth/mod_shib_13.so ] ; then
 139         APACHE_CONFIG="apache.config"
 140 fi
 141 if [ -f $RPM_BUILD_ROOT%{_libdir}/shibboleth/mod_shib_20.so ] ; then
 142         APACHE_CONFIG="apache2.config"
 143 fi
 144 if [ -f $RPM_BUILD_ROOT%{_libdir}/shibboleth/mod_shib_22.so ] ; then
 145         APACHE_CONFIG="apache22.config"
 146 fi
 147 if [ -f $RPM_BUILD_ROOT%{_libdir}/shibboleth/mod_shib_24.so ] ; then
 148         APACHE_CONFIG="apache24.config"
 149 fi
 150 %{?_without_builtinapache:APACHE_CONFIG="no"}
 151 if [ "$APACHE_CONFIG" != "no" ] ; then
 152         APACHE_CONFD="no"
 153         if [ -d %{_sysconfdir}/httpd/conf.d ] ; then
 154                 APACHE_CONFD="%{_sysconfdir}/httpd/conf.d"
 155         fi
 156         if [ -d %{_sysconfdir}/apache2/conf.d ] ; then
 157                 APACHE_CONFD="%{_sysconfdir}/apache2/conf.d"
 158         fi
 159         if [ "$APACHE_CONFD" != "no" ] ; then
 160                 %{__mkdir} -p $RPM_BUILD_ROOT$APACHE_CONFD
 161                 %{__cp} -p $RPM_BUILD_ROOT%{_sysconfdir}/shibboleth/$APACHE_CONFIG $RPM_BUILD_ROOT$APACHE_CONFD/shib.conf
 162                 echo "%config(noreplace) $APACHE_CONFD/shib.conf" >> rpm.filelist
 163         fi
 164 fi
 165
 166 # Establish location of systemd file, if any.
 167 SYSTEMD_SHIBD="no"
 168 %if 0%{?suse_version} >= 1210 || 0%{?rhel} >= 7 || 0%{?centos_version} >= 700
 169         %{__mkdir} -p $RPM_BUILD_ROOT%{_unitdir}
 170         echo "%attr(0444,-,-) %{_unitdir}/shibd.service" >> rpm.filelist
 171         SYSTEMD_SHIBD="$RPM_BUILD_ROOT%{_unitdir}/shibd.service"
 172 %endif
 173
 174 # Otherwise, establish location of sysconfig file, if any.
 175 SYSCONFIG_SHIBD="no"
 176 if [ "$SYSTEMD_SHIBD" == "no" ] ; then
 177 %if "%{_vendor}" == "redhat" || "%{_vendor}" == "amazon"
 178         %{__mkdir} -p $RPM_BUILD_ROOT%{_sysconfdir}/sysconfig
 179         echo "%config(noreplace) %{_sysconfdir}/sysconfig/shibd" >> rpm.filelist
 180         SYSCONFIG_SHIBD="$RPM_BUILD_ROOT%{_sysconfdir}/sysconfig/shibd"
 181 %endif
 182 %if "%{_vendor}" == "suse"
 183         %{__mkdir} -p $RPM_BUILD_ROOT%{_localstatedir}/adm/fillup-templates
 184         echo "%{_localstatedir}/adm/fillup-templates/sysconfig.shibd" >> rpm.filelist
 185         SYSCONFIG_SHIBD="$RPM_BUILD_ROOT%{_localstatedir}/adm/fillup-templates/sysconfig.shibd"
 186 %endif
 187 fi
 188
 189 if [ "$SYSTEMD_SHIBD" != "no" ] ; then
 190         # Populate the systemd file
 191         cat > $SYSTEMD_SHIBD <<EOF
 192 [Unit]
 193 Description=Shibboleth Service Provider Daemon
 194 After=network.target
 195 Before=httpd.service
 196
 197 [Service]
 198 Type=notify
 199 NotifyAccess=main
 200 User=%{runuser}
 201 %if 0%{?rhel} >= 6 || 0%{?centos_version} >= 600 || 0%{?amzn} >= 1
 202 Environment=LD_LIBRARY_PATH=/opt/shibboleth/%{_lib}
 203 %endif
 204 ExecStart=%{_sbindir}/shibd -f -F
 205 StandardInput=null
 206 StandardOutput=null
 207 StandardError=journal
 208 TimeoutStopSec=5s
 209 TimeoutStartSec=90s
 210 Restart=on-failure
 211 RestartSec=30s
 212
 213 [Install]
 214 WantedBy=multi-user.target
 215 EOF
 216 elif [ "$SYSCONFIG_SHIBD" != "no" ] ; then
 217         # Populate the sysconfig file.
 218         cat > $SYSCONFIG_SHIBD <<EOF
 219 # Shibboleth SP init script customization
 220
 221 # User account for shibd
 222 SHIBD_USER=%{runuser}
 223
 224 # Umask for shibd
 225 # SHIBD_UMASK=022
 226
 227 # Wait period (secs) for configuration (and metadata) to load
 228 SHIBD_WAIT=30
 229 EOF
 230         %if 0%{?rhel} >= 6 || 0%{?centos_version} >= 600 || 0%{?amzn} >= 1
 231                 cat >> $SYSCONFIG_SHIBD <<EOF
 232
 233 # Override OS-supplied libcurl
 234 export LD_LIBRARY_PATH=/opt/shibboleth/%{_lib}
 235 EOF
 236         %endif
 237 fi
 238
 239 %if 0%{?rhel} >= 6 || 0%{?centos_version} >= 600 || 0%{?amzn} >= 1
 240         # Strip existing rpath to libcurl.
 241         chrpath -d $RPM_BUILD_ROOT%{_sbindir}/shibd
 242         chrpath -d $RPM_BUILD_ROOT%{_bindir}/mdquery
 243         chrpath -d $RPM_BUILD_ROOT%{_bindir}/resolvertest
 244 %endif
 245
 246 %if "%{_vendor}" == "redhat" || "%{_vendor}" == "amazon" || "%{_vendor}" == "suse"
 247 if [ "$SYSTEMD_SHIBD" == "no" ] ; then
 248         # %{_initddir} not yet in RHEL5, use deprecated %{_initrddir}
 249         install -d -m 0755 $RPM_BUILD_ROOT%{_initrddir}
 250         install -m 0755 $RPM_BUILD_ROOT%{_sysconfdir}/shibboleth/shibd-%{_vendor} $RPM_BUILD_ROOT%{_initrddir}/shibd
 251 %if "%{_vendor}" == "suse"
 252         install -d -m 0755 $RPM_BUILD_ROOT/%{_sbindir}
 253         %{__ln_s} -f %{_initrddir}/shibd $RPM_BUILD_ROOT%{_sbindir}/rcshibd
 254 %endif
 255 fi
 256 %endif
 257
 258 %check
 259 %{__make} check
 260
 261 %clean
 262 [ "$RPM_BUILD_ROOT" != "/" ] && %{__rm} -rf $RPM_BUILD_ROOT
 263
 264 %pre
 265 getent group %{runuser} >/dev/null || groupadd -r %{runuser}
 266 getent passwd %{runuser} >/dev/null || useradd -r -g %{runuser} \
 267         -d  %{_localstatedir}/run/shibboleth -s /sbin/nologin -c "Shibboleth SP daemon" %{runuser}
 268 %if 0%{?suse_version} >= 1210
 269         %service_add_pre shibd.service
 270 %endif
 271 exit 0
 272
 273 %post
 274 %ifnos solaris2.8 solaris2.9 solaris2.10 solaris2.11
 275 /sbin/ldconfig
 276 %endif
 277
 278 # Key generation or ownership fix
 279 cd %{_sysconfdir}/shibboleth
 280 if [ -f sp-key.pem ] ; then
 281         %{__chown} %{runuser}:%{runuser} sp-key.pem sp-cert.pem 2>/dev/null || :
 282 else
 283         /bin/sh ./keygen.sh -b -u %{runuser} -g %{runuser}
 284 fi
 285
 286 # Fix ownership of log files (even on new installs, if they're left from an older one).
 287 %{__chown} %{runuser}:%{runuser} %{_localstatedir}/log/shibboleth/* 2>/dev/null || :
 288
 289 %if "%{_vendor}" == "redhat" || "%{_vendor}" == "amazon"
 290         if [ $1 -gt 1 ] ; then
 291                 # On Red Hat with shib.conf installed, clean up old Alias commands
 292                 # by pointing them at new version-independent /usr/share/share tree.
 293                 # Any Aliases we didn't create we assume are custom files.
 294                 # This is to accomodate making shib.conf a noreplace config file.
 295                 # We can't do this for SUSE, because they disallow changes to
 296                 # packaged files in scriplets.
 297                 APACHE_CONF="no"
 298                 if [ -f %{_sysconfdir}/httpd/conf.d/shib.conf ] ; then
 299                         APACHE_CONF="%{_sysconfdir}/httpd/conf.d/shib.conf"
 300                 fi
 301                 if [ "$APACHE_CONF" != "no" ] ; then
 302                         %{__sed} -i "s/\/usr\/share\/doc\/shibboleth\(\-\(.\)\{1,\}\)\{0,1\}\/main\.css/\/usr\/share\/shibboleth\/main.css/g" \
 303                                 $APACHE_CONF
 304                         %{__sed} -i "s/\/usr\/share\/doc\/shibboleth\(\-\(.\)\{1,\}\)\{0,1\}\/logo\.jpg/\/usr\/share\/shibboleth\/logo.jpg/g" \
 305                                 $APACHE_CONF
 306                 fi
 307         fi
 308
 309 %if 0%{?rhel} >= 7 || 0%{?centos_version} >= 700
 310         # Initial prep for systemd
 311         %systemd_post shibd.service
 312         if [ $1 -gt 1 ] ; then
 313                 systemctl daemon-reload
 314         fi
 315 %else
 316         # Add the proper /etc/rc*.d links for the script
 317         /sbin/chkconfig --add shibd
 318 %endif
 319 %endif
 320 %if "%{_vendor}" == "suse"
 321 %if 0%{?suse_version} >= 1210
 322         %service_add_post shibd.service
 323 %else
 324         # This adds the proper /etc/rc*.d links for the script
 325         # and populates the sysconfig/shibd file.
 326         cd /
 327         %{fillup_only -n shibd}
 328         %insserv_force_if_yast shibd
 329 %endif
 330 %endif
 331
 332 %preun
 333 # On final removal, stop shibd and remove service, restart Apache if running.
 334 %if "%{_vendor}" == "redhat" || "%{_vendor}" == "amazon"
 335 %if 0%{?rhel} >= 7 || 0%{?centos_version} >= 700
 336         %systemd_preun shibd.service
 337 %else
 338         if [ $1 -eq 0 ] ; then
 339                 /sbin/service shibd stop >/dev/null 2>&1
 340                 /sbin/chkconfig --del shibd
 341         fi
 342 %endif
 343         if [ $1 -eq 0 ] ; then
 344                 %{!?_without_builtinapache:/sbin/service httpd status 1>/dev/null && /sbin/service httpd restart 1>/dev/null}
 345         fi
 346 %endif
 347 %if "%{_vendor}" == "suse"
 348 %if 0%{?suse_version} >= 1210
 349         %service_del_preun shibd.service
 350 %else
 351         %stop_on_removal shibd
 352 %endif
 353         if [ $1 -eq 0 ] ; then
 354                 %{!?_without_builtinapache:/sbin/service apache2 status 1>/dev/null && /sbin/service apache2 restart 1>/dev/null}
 355         fi
 356 %endif
 357 exit 0
 358
 359 %postun
 360 %ifnos solaris2.8 solaris2.9 solaris2.10 solaris2.11
 361 /sbin/ldconfig
 362 %endif
 363 %if "%{_vendor}" == "redhat" || "%{_vendor}" == "amazon"
 364         # On upgrade, restart components if they're already running.
 365 %if 0%{?rhel} >= 7 || 0%{?centos_version} >= 700
 366         %systemd_postun_with_restart shibd.service
 367 %else
 368         if [ $1 -ge 1 ] ; then
 369                 /sbin/service shibd status 1>/dev/null && /sbin/service shibd restart 1>/dev/null
 370         fi
 371 %endif
 372         if [ $1 -ge 1 ] ; then
 373                 %{!?_without_builtinapache:/sbin/service httpd status 1>/dev/null && /sbin/service httpd restart 1>/dev/null}
 374                 exit 0
 375         fi
 376 %endif
 377 %if "%{_vendor}" == "suse"
 378 %if 0%{?suse_version} >= 1210
 379         %service_del_postun shibd.service
 380 %else
 381         cd /
 382         %restart_on_update shibd
 383         %{insserv_cleanup}
 384 %endif
 385         %{!?_without_builtinapache:%restart_on_update apache2}
 386 %endif
 387
 388 %posttrans
 389 # One-time extra restart of shibd and Apache to work around
 390 # SUSE bug that breaks old %restart_on_update macro.
 391 # If we remove, upgrades from pre-systemd to post-systemd
 392 # will stop doing the final restart.
 393 %if "%{_vendor}" == "suse" && 0%{?suse_version} >= 1210
 394         /usr/bin/systemctl try-restart shibd >/dev/null 2>&1 || :
 395         /usr/bin/systemctl try-restart apache2 >/dev/null 2>&1 || :
 396 %endif
 397 exit 0
 398
 399 %files -f rpm.filelist
 400 %defattr(-,root,root,-)
 401 %{_sbindir}/shibd
 402 %{_bindir}/mdquery
 403 %{_bindir}/resolvertest
 404 %{_libdir}/libshibsp.so.*
 405 %{_libdir}/libshibsp-lite.so.*
 406 %dir %{_libdir}/shibboleth
 407 %{_libdir}/shibboleth/*
 408 %attr(0750,%{runuser},%{runuser}) %dir %{_localstatedir}/log/shibboleth
 409 %if "%{_vendor}" == "redhat" || "%{_vendor}" == "amazon" || "%{_vendor}" == "suse"
 410 %if "%{_vendor}" == "redhat" || "%{_vendor}" == "amazon"
 411 %attr(0750,apache,apache) %dir %{_localstatedir}/log/shibboleth-www
 412 %endif
 413 %if "%{_vendor}" == "suse"
 414 %attr(0750,wwwrun,www) %dir %{_localstatedir}/log/shibboleth-www
 415 %endif
 416 %else
 417 %attr(0750,-,-) %dir %{_localstatedir}/log/shibboleth-www
 418 %endif
 419 %if 0%{?suse_version} < 1300
 420 %attr(0755,%{runuser},%{runuser}) %dir %{_localstatedir}/run/shibboleth
 421 %endif
 422 %attr(0755,%{runuser},%{runuser}) %dir %{_localstatedir}/cache/shibboleth
 423 %dir %{_datadir}/xml/shibboleth
 424 %{_datadir}/xml/shibboleth/*
 425 %dir %{_datadir}/shibboleth
 426 %{_datadir}/shibboleth/*
 427 %dir %{_sysconfdir}/shibboleth
 428 %config(noreplace) %{_sysconfdir}/shibboleth/*.xml
 429 %config(noreplace) %{_sysconfdir}/shibboleth/*.html
 430 %config(noreplace) %{_sysconfdir}/shibboleth/*.logger
 431 %if "%{_vendor}" == "redhat"
 432 %if 0%{?rhel} >= 7 || 0%{?centos_version} >= 700
 433 %else
 434 %config %{_initrddir}/shibd
 435 %endif
 436 %endif
 437 %if "%{_vendor}" == "amazon"
 438 %config %{_initrddir}/shibd
 439 %endif
 440 %if "%{_vendor}" == "suse" && 0%{?suse_version} < 1210
 441 %config %{_initrddir}/shibd
 442 %{_sbindir}/rcshibd
 443 %endif
 444 %{_sysconfdir}/shibboleth/*.dist
 445 %{_sysconfdir}/shibboleth/apache*.config
 446 %{_sysconfdir}/shibboleth/shibd-*
 447 %attr(0755,root,root) %{_sysconfdir}/shibboleth/keygen.sh
 448 %attr(0755,root,root) %{_sysconfdir}/shibboleth/metagen.sh
 449 %{_sysconfdir}/shibboleth/*.xsl
 450 %doc %{pkgdocdir}
 451 %exclude %{pkgdocdir}/api
 452
 453 %files devel
 454 %defattr(-,root,root,-)
 455 %{_includedir}/*
 456 %{_libdir}/libshibsp.so
 457 %{_libdir}/libshibsp-lite.so
 458 %doc %{pkgdocdir}/api
 459
 460 %changelog
 461 * Thu Jul 2 2015 Scott Cantor <cantor.2@osu.edu> - 2.5.5-1
 462 - Revamp with systemd support for RH/CentOS 7+ and SUSE 12.1+
 463
 464 * Mon Mar 9 2015 Scott Cantor <cantor.2@osu.edu> - 2.5.4-1
 465 - Add Amazon VM support
 466 - Add a separate native logging directory
 467 - Remove hard-coded init.d usage
 468 - Switch to bz2 sources to prevent future issues with SuSE
 469
 470 * Mon Nov 17 2014 Scott Cantor <cantor.2@osu.edu> - 2.5.3-2
 471 - Add libtool dep for OpenSUSE 13
 472 - Remove /var/run/shibboleth for OpenSUSE 13
 473
 474 * Tue May 13 2014 Ian Young <ian@iay.org.uk> - 2.5.3-1.2
 475 - Update package dependencies for RHEL/CentOS 7
 476 - Fix bogus dates in changelog
 477
 478 * Sat Jun 8 2013   Scott Cantor  <cantor.2@osu.edu>  - 2.5.2-1
 479 - Add --with-gssapi using MIT K5 by default
 480
 481 * Tue Sep 25 2012  Scott Cantor  <cantor.2@osu.edu>  - 2.5.1-1
 482 - Merge back various changes used in released packages
 483 - Prep for 2.5.1 by pulling extra restart out
 484
 485 * Tue Aug 7 2012  Scott Cantor  <cantor.2@osu.edu>  - 2.5.0-2
 486 - Changed package name back to shibboleth because of upgrade bugs
 487 - Put back extra restart for this release only.
 488
 489 * Thu Mar 1 2012  Scott Cantor  <cantor.2@osu.edu>  - 2.5.0-1
 490 - Move logo and stylesheet to version-independent tree
 491 - Make shib.conf noreplace
 492 - Post-fixup of Alias commands in older shib.conf
 493 - Changes to run shibd as non-root shibboleth user
 494 - Move init customizations to /etc/sysconfig/shibd
 495 - Copy shibd restart for Red Hat to postun
 496 - Add boost-devel dependency
 497 - Build memcache plugin on RH6
 498 - Add cachedir to install
 499 - Add Apache 2.4 to install
 500
 501 * Sun Jun 26 2011  Scott Cantor  <cantor.2@osu.edu>  - 2.4.3-1
 502 - Log files shouldn't be world readable.
 503 - Explicit requirement for libcurl-openssl on RHEL6
 504 - Uncomment LD_LIBRARY_PATH in init script for RHEL6
 505 - Remove rpath from binaries for RHEL6
 506
 507 * Fri Dec 25 2009  Scott Cantor  <cantor.2@osu.edu>  - 2.4-1
 508 - Update dependencies.
 509
 510 * Mon Nov 23 2009 Scott Cantor  <cantor.2@osu.edu>  - 2.3.1-1
 511 - Reset revision for 2.3.1 release
 512
 513 * Wed Aug 19 2009 Scott Cantor  <cantor.2@osu.edu>  - 2.2.1-2
 514 - SuSE init script changes
 515 - Restart Apache on removal, not just upgrade
 516 - Fix scriptlet exit values when Apache is stopped
 517
 518 * Mon Aug 10 2009 Scott Cantor  <cantor.2@osu.edu>  - 2.2.1-1
 519 - Doc handling changes
 520 - SuSE init script
 521
 522 * Tue Aug 4 2009 Scott Cantor  <cantor.2@osu.edu>  - 2.2.1-1
 523 - Initial version for 2.2.1, with shibd/httpd restart on upgrade
 524
 525 * Thu Jun 25 2009 Scott Cantor  <cantor.2@osu.edu>  - 2.2-3
 526 - Add additional cleanup to posttrans fix
 527
 528 * Tue Jun 23 2009 Scott Cantor  <cantor.2@osu.edu>  - 2.2-2
 529 - Reverse without_builtinapache macro test
 530 - Fix init script handling on Red Hat to handle upgrades
 531
 532 * Wed Dec 3 2008  Scott Cantor  <cantor.2@osu.edu>  - 2.2-1
 533 - Bump minor version.
 534 - Make keygen.sh executable.
 535 - Fixing SUSE Xerces dependency name.
 536 - Optionally package shib.conf.
 537
 538 * Tue Jun 10 2008  Scott Cantor  <cantor.2@osu.edu>  - 2.1-1
 539 - Change shib.conf handling to treat as config file.
 540
 541 * Mon Mar 17 2008  Scott Cantor  <cantor.2@osu.edu>  - 2.0-6
 542 - Official release.
 543
 544 * Fri Jan 18 2008  Scott Cantor  <cantor.2@osu.edu>  - 2.0-5
 545 - Release candidate 1.
 546
 547 * Sun Oct 21 2007 Scott Cantor  <cantor.2@osu.edu>  - 2.0-4
 548 - libexec -> lib/shibboleth changes
 549 - Added doc subpackage
 550
 551 * Thu Aug 16 2007 Scott Cantor  <cantor.2@osu.edu>  - 2.0-3
 552 - First public beta.
 553
 554 * Fri Jul 13 2007 Scott Cantor  <cantor.2@osu.edu>  - 2.0-2
 555 - Second alpha release.
 556
 557 * Sun Jun 10 2007 Scott Cantor  <cantor.2@osu.edu>  - 2.0-1
 558 - First alpha release.
 559
 560 * Mon Oct 2 2006 Scott Cantor   <cantor.2@osu.edu>  - 1.3-11
 561 - Applied fix for secadv 20061002
 562 - Fix for metadata loader loop
 563
 564 * Thu Jun 15 2006 Scott Cantor  <cantor.2@osu.edu>  - 1.3-10
 565 - Applied fix for sec 20060615
 566
 567 * Sat Apr 15 2006 Scott Cantor  <cantor.2@osu.edu>  - 1.3-9
 568 - Misc. patches, SuSE, Apache 2.2, gcc 4.1, and 64-bit support
 569
 570 * Mon Jan 9 2006 Scott Cantor  <cantor.2@osu.edu>  - 1.3-8
 571 - Applied new fix for secadv 20060109
 572
 573 * Tue Nov 8 2005 Scott Cantor  <cantor.2@osu.edu>  - 1.3-7
 574 - Applied new fix for secadv 20050901 plus rollup
 575
 576 * Fri Sep 23 2005 Scott Cantor  <cantor.2@osu.edu>  - 1.3-6
 577 - Minor patches and default config changes
 578 - pidfile patch
 579 - Fix shib.conf creation
 580 - Integrated init.d script
 581 - Prevent replacement of config files
 582
 583 * Thu Sep 1 2005  Scott Cantor  <cantor.2@osu.edu>  - 1.3-5
 584 - Applied fix for secadv 20050901 plus rollup of NSAPI fixes
 585
 586 * Sun Apr 24 2005  Scott Cantor  <cantor.2@osu.edu>  - 1.3-1
 587 - Updated test programs and location of schemas.
 588 - move siterefresh to to sbindir
 589
 590 * Fri Apr  1 2005  Derek Atkins  <derek@ihtfp.com>  - 1.3-1
 591 - Add selinux-targeted-policy package
 592 - move shar to sbindir
 593
 594 * Tue Oct 19 2004  Derek Atkins  <derek@ihtfp.com>  - 1.2-1
 595 - Create SPEC file based on various versions in existence.