shibboleth.spec.in

   1 Name:           shibboleth
   2 Version:        @PACKAGE_VERSION@
   3 Release:        1
   4 Summary:        Open source system for attribute-based Web SSO
   5 Group:          Productivity/Networking/Security
   6 Vendor:         Shibboleth Consortium
   7 License:        Apache 2.0
   8 URL:            http://shibboleth.net/
   9 Source:         %{name}-sp-%{version}.tar.gz
  10 BuildRoot:      %{_tmppath}/%{name}-sp-%{version}-root
  11 Obsoletes:      shibboleth-sp = 2.5.0
  12 Requires:       openssl
  13 %if 0%{?rhel} >= 6 || 0%{?centos_version} >= 600 || 0%{?amzn} >= 1
  14 PreReq:         xmltooling-schemas%{?_isa} >= 1.5.0, opensaml-schemas%{?_isa} >= 2.5.0
  15 %else
  16 PreReq:         xmltooling-schemas >= 1.5.0, opensaml-schemas >= 2.5.0
  17 %endif
  18 %if 0%{?suse_version} > 1030 && 0%{?suse_version} < 1130
  19 PreReq:         %{insserv_prereq} %{fillup_prereq}
  20 BuildRequires:  libxerces-c-devel >= 3.1
  21 %else
  22 %if 0%{?rhel} >= 7 || 0%{?centos_version} >= 700
  23 BuildRequires:  xerces-c-devel >= 3.1
  24 %else
  25 BuildRequires:  libxerces-c-devel >= 3.1
  26 %endif
  27 %endif
  28 BuildRequires:  libxml-security-c-devel >= 1.4.0
  29 BuildRequires:  libxmltooling-devel >= 1.5.0
  30 BuildRequires:  libsaml-devel >= 2.5.0
  31 %{?_with_log4cpp:BuildRequires: liblog4cpp-devel >= 1.0}
  32 %{!?_with_log4cpp:BuildRequires: liblog4shib-devel >= 1.0.4}
  33 %if 0%{?rhel} >= 6 || 0%{?centos_version} >= 600 || 0%{?amzn} >= 1
  34 Requires:       libcurl-openssl%{?_isa} >= 7.21.7
  35 BuildRequires:  chrpath
  36 %endif
  37 %if 0%{?suse_version} > 1300
  38 BuildRequires:  libtool
  39 %endif
  40 BuildRequires:  gcc-c++, zlib-devel, boost-devel >= 1.32.0
  41 %{!?_without_gssapi:BuildRequires: krb5-devel}
  42 %{!?_without_doxygen:BuildRequires: doxygen}
  43 %{!?_without_odbc:BuildRequires:unixODBC-devel}
  44 %{?_with_fastcgi:BuildRequires: fcgi-devel}
  45 %if 0%{?centos_version} >= 600
  46 BuildRequires:  libmemcached-devel
  47 %endif
  48 %{?_with_memcached:BuildRequires: libmemcached-devel}
  49 %if "%{_vendor}" == "redhat" || "%{_vendor}" == "amazon"
  50 %if 0%{?rhel} >= 6 || 0%{?centos_version} >= 600 || 0%{?amzn} >= 1
  51 %{!?_without_builtinapache:BuildRequires: httpd-devel%{?_isa}}
  52 %else
  53 %{!?_without_builtinapache:BuildRequires: httpd-devel}
  54 %endif
  55 BuildRequires: redhat-rpm-config
  56 Requires(pre): shadow-utils
  57 Requires(post): chkconfig
  58 Requires(preun): chkconfig, initscripts
  59 %endif
  60 %if "%{_vendor}" == "suse"
  61 Requires(pre): pwdutils
  62 %{!?_without_builtinapache:BuildRequires: apache2-devel}
  63 %endif
  64
  65 %define runuser shibd
  66 %if "%{_vendor}" == "suse"
  67 %define pkgdocdir %{_docdir}/shibboleth
  68 %else
  69 %define pkgdocdir %{_docdir}/shibboleth-%{version}
  70 %endif
  71
  72 %description
  73 Shibboleth is a Web Single Sign-On implementations based on OpenSAML
  74 that supports multiple protocols, federated identity, and the extensible
  75 exchange of rich attributes subject to privacy controls.
  76
  77 This package contains the Shibboleth Service Provider runtime libraries,
  78 daemon, default plugins, and Apache module(s).
  79
  80 %package devel
  81 Summary:        Shibboleth Development Headers
  82 Group:          Development/Libraries/C and C++
  83 Requires:       %{name} = %{version}-%{release}
  84 Obsoletes:      shibboleth-sp-devel = 2.5.0
  85 %if 0%{?rhel} >= 7 || 0%{?centos_version} >= 700
  86 Requires:       xerces-c-devel >= 3.1
  87 %else
  88 Requires:       libxerces-c-devel >= 3.1
  89 %endif
  90 Requires:       libxml-security-c-devel >= 1.4.0
  91 Requires:       libxmltooling-devel >= 1.5.0
  92 Requires:       libsaml-devel >= 2.5.0
  93 %{?_with_log4cpp:Requires: liblog4cpp-devel >= 1.0}
  94 %{!?_with_log4cpp:Requires: liblog4shib-devel >= 1.0.4}
  95
  96 %description devel
  97 Shibboleth is a Web Single Sign-On implementations based on OpenSAML
  98 that supports multiple protocols, federated identity, and the extensible
  99 exchange of rich attributes subject to privacy controls.
 100
 101 This package includes files needed for development with Shibboleth.
 102
 103 %prep
 104 %setup -n %{name}-sp-%{version}
 105
 106 %build
 107 %if 0%{?centos_version} >= 600
 108         %configure %{?_without_odbc:--disable-odbc} %{?_without_adfs:--disable-adfs} %{?_with_fastcgi} %{!?_without_gssapi:--with-gssapi} %{!?_without_memcached:--with-memcached} %{?shib_options}
 109 %else
 110         %configure %{?_without_odbc:--disable-odbc} %{?_without_adfs:--disable-adfs} %{?_with_fastcgi} %{!?_without_gssapi:--with-gssapi} %{?_with_memcached} %{?shib_options}
 111 %endif
 112 %{__make} pkgdocdir=%{pkgdocdir}
 113
 114 %install
 115 %{__make} install NOKEYGEN=1 DESTDIR=$RPM_BUILD_ROOT pkgdocdir=%{pkgdocdir}
 116
 117 %if "%{_vendor}" == "suse"
 118         %{__sed} -i "s/\/var\/log\/httpd/\/var\/log\/apache2/g" \
 119                 $RPM_BUILD_ROOT%{_sysconfdir}/shibboleth/native.logger
 120 %endif
 121
 122 # Plug the SP into the built-in Apache on a recognized system.
 123 touch rpm.filelist
 124 APACHE_CONFIG="no"
 125 if [ -f $RPM_BUILD_ROOT%{_libdir}/shibboleth/mod_shib_13.so ] ; then
 126         APACHE_CONFIG="apache.config"
 127 fi
 128 if [ -f $RPM_BUILD_ROOT%{_libdir}/shibboleth/mod_shib_20.so ] ; then
 129         APACHE_CONFIG="apache2.config"
 130 fi
 131 if [ -f $RPM_BUILD_ROOT%{_libdir}/shibboleth/mod_shib_22.so ] ; then
 132         APACHE_CONFIG="apache22.config"
 133 fi
 134 if [ -f $RPM_BUILD_ROOT%{_libdir}/shibboleth/mod_shib_24.so ] ; then
 135         APACHE_CONFIG="apache24.config"
 136 fi
 137 %{?_without_builtinapache:APACHE_CONFIG="no"}
 138 if [ "$APACHE_CONFIG" != "no" ] ; then
 139         APACHE_CONFD="no"
 140         if [ -d %{_sysconfdir}/httpd/conf.d ] ; then
 141                 APACHE_CONFD="%{_sysconfdir}/httpd/conf.d"
 142         fi
 143         if [ -d %{_sysconfdir}/apache2/conf.d ] ; then
 144                 APACHE_CONFD="%{_sysconfdir}/apache2/conf.d"
 145         fi
 146         if [ "$APACHE_CONFD" != "no" ] ; then
 147                 %{__mkdir} -p $RPM_BUILD_ROOT$APACHE_CONFD
 148                 %{__cp} -p $RPM_BUILD_ROOT%{_sysconfdir}/shibboleth/$APACHE_CONFIG $RPM_BUILD_ROOT$APACHE_CONFD/shib.conf
 149                 echo "%config(noreplace) $APACHE_CONFD/shib.conf" >> rpm.filelist
 150         fi
 151 fi
 152
 153 # Establish location of sysconfig file, if any.
 154 SYSCONFIG_SHIBD="no"
 155 %if "%{_vendor}" == "redhat" || "%{_vendor}" == "amazon"
 156         %{__mkdir} -p $RPM_BUILD_ROOT%{_sysconfdir}/sysconfig
 157         echo "%config(noreplace) %{_sysconfdir}/sysconfig/shibd" >> rpm.filelist
 158         SYSCONFIG_SHIBD="$RPM_BUILD_ROOT%{_sysconfdir}/sysconfig/shibd"
 159 %endif
 160 %if "%{_vendor}" == "suse"
 161         %{__mkdir} -p $RPM_BUILD_ROOT%{_localstatedir}/adm/fillup-templates
 162         echo "%{_localstatedir}/adm/fillup-templates/sysconfig.shibd" >> rpm.filelist
 163         SYSCONFIG_SHIBD="$RPM_BUILD_ROOT%{_localstatedir}/adm/fillup-templates/sysconfig.shibd"
 164 %endif
 165 if [ "$SYSCONFIG_SHIBD" != "no" ] ; then
 166         # Populate the sysconfig file.
 167         cat > $SYSCONFIG_SHIBD <<EOF
 168 # Shibboleth SP init script customization
 169
 170 # User account for shibd
 171 SHIBD_USER=%{runuser}
 172 EOF
 173         %if 0%{?rhel} >= 6 || 0%{?centos_version} >= 600 || 0%{?amzn} >= 1
 174                 cat >> $SYSCONFIG_SHIBD <<EOF
 175
 176 # Override OS-supplied libcurl
 177 export LD_LIBRARY_PATH=/opt/shibboleth/%{_lib}
 178 EOF
 179                 # Strip existing rpath to libcurl.
 180                 chrpath -d $RPM_BUILD_ROOT%{_sbindir}/shibd
 181                 chrpath -d $RPM_BUILD_ROOT%{_bindir}/mdquery
 182                 chrpath -d $RPM_BUILD_ROOT%{_bindir}/resolvertest
 183         %endif
 184 fi
 185
 186 %if "%{_vendor}" == "redhat" || "%{_vendor}" == "amazon" || "%{_vendor}" == "suse"
 187         # %{_initddir} not yet in RHEL5, use deprecated %{_initrddir}
 188         install -d -m 0755 $RPM_BUILD_ROOT%{_initrddir}
 189         install -m 0755 $RPM_BUILD_ROOT%{_sysconfdir}/shibboleth/shibd-%{_vendor} $RPM_BUILD_ROOT%{_initrddir}/shibd
 190 %if "%{_vendor}" == "suse"
 191         install -d -m 0755 $RPM_BUILD_ROOT/%{_sbindir}
 192         %{__ln_s} -f %{_initrddir}/shibd $RPM_BUILD_ROOT%{_sbindir}/rcshibd
 193 %endif
 194 %endif
 195
 196 %check
 197 %{__make} check
 198
 199 %clean
 200 [ "$RPM_BUILD_ROOT" != "/" ] && %{__rm} -rf $RPM_BUILD_ROOT
 201
 202 %pre
 203 getent group %{runuser} >/dev/null || groupadd -r %{runuser}
 204 getent passwd %{runuser} >/dev/null || useradd -r -g %{runuser} \
 205         -d  %{_localstatedir}/run/shibboleth -s /sbin/nologin -c "Shibboleth SP daemon" %{runuser}
 206 exit 0
 207
 208 %post
 209 %ifnos solaris2.8 solaris2.9 solaris2.10 solaris2.11
 210 /sbin/ldconfig
 211 %endif
 212
 213 # Key generation or ownership fix
 214 cd %{_sysconfdir}/shibboleth
 215 if [ -f sp-key.pem ] ; then
 216         %{__chown} %{runuser}:%{runuser} sp-key.pem sp-cert.pem 2>/dev/null || :
 217 else
 218         sh ./keygen.sh -b -u %{runuser} -g %{runuser}
 219 fi
 220
 221 # Fix ownership of log files (even on new installs, if they're left from an older one).
 222 %{__chown} %{runuser}:%{runuser} %{_localstatedir}/log/shibboleth/* 2>/dev/null || :
 223
 224 %if "%{_vendor}" == "redhat" || "%{_vendor}" == "amazon"
 225         if [ "$1" -gt "1" ] ; then
 226                 # On Red Hat with shib.conf installed, clean up old Alias commands
 227                 # by pointing them at new version-independent /usr/share/share tree.
 228                 # Any Aliases we didn't create we assume are custom files.
 229                 # This is to accomodate making shib.conf a noreplace config file.
 230                 # We can't do this for SUSE, because they disallow changes to
 231                 # packaged files in scriplets.
 232                 APACHE_CONF="no"
 233                 if [ -f %{_sysconfdir}/httpd/conf.d/shib.conf ] ; then
 234                         APACHE_CONF="%{_sysconfdir}/httpd/conf.d/shib.conf"
 235                 fi
 236                 if [ "$APACHE_CONF" != "no" ] ; then
 237                         %{__sed} -i "s/\/usr\/share\/doc\/shibboleth\(\-\(.\)\{1,\}\)\{0,1\}\/main\.css/\/usr\/share\/shibboleth\/main.css/g" \
 238                                 $APACHE_CONF
 239                         %{__sed} -i "s/\/usr\/share\/doc\/shibboleth\(\-\(.\)\{1,\}\)\{0,1\}\/logo\.jpg/\/usr\/share\/shibboleth\/logo.jpg/g" \
 240                                 $APACHE_CONF
 241                 fi
 242         fi
 243
 244         # This adds the proper /etc/rc*.d links for the script
 245         /sbin/chkconfig --add shibd
 246 %endif
 247 %if "%{_vendor}" == "suse"
 248         # This adds the proper /etc/rc*.d links for the script
 249         # and populates the sysconfig/shibd file.
 250         cd /
 251         %{fillup_only -n shibd}
 252         %insserv_force_if_yast shibd
 253 %endif
 254
 255 %preun
 256 # On final removal, stop shibd and remove service, restart Apache if running.
 257 %if "%{_vendor}" == "redhat" || "%{_vendor}" == "amazon"
 258         if [ "$1" -eq 0 ] ; then
 259                 /sbin/service shibd stop >/dev/null 2>&1
 260                 /sbin/chkconfig --del shibd
 261                 %{!?_without_builtinapache:/etc/init.d/httpd status 1>/dev/null && /etc/init.d/httpd restart 1>/dev/null}
 262         fi
 263 %endif
 264 %if "%{_vendor}" == "suse"
 265         %stop_on_removal shibd
 266         if [ "$1" -eq 0 ] ; then
 267                 %{!?_without_builtinapache:/etc/init.d/apache2 status 1>/dev/null && /etc/init.d/apache2 restart 1>/dev/null}
 268         fi
 269 %endif
 270 exit 0
 271
 272 %postun
 273 %ifnos solaris2.8 solaris2.9 solaris2.10 solaris2.11
 274 /sbin/ldconfig
 275 %endif
 276 %if "%{_vendor}" == "redhat" || "%{_vendor}" == "amazon"
 277         # On upgrade, restart components if they're already running.
 278         if [ "$1" -ge "1" ] ; then
 279                 /etc/init.d/shibd status 1>/dev/null && /etc/init.d/shibd restart 1>/dev/null
 280                 %{!?_without_builtinapache:/etc/init.d/httpd status 1>/dev/null && /etc/init.d/httpd restart 1>/dev/null}
 281                 exit 0
 282         fi
 283 %endif
 284 %if "%{_vendor}" == "suse"
 285         cd /
 286         %restart_on_update shibd
 287         %{!?_without_builtinapache:%restart_on_update apache2}
 288         %{insserv_cleanup}
 289 %endif
 290
 291 %posttrans
 292 # ugly hack if init script got removed during %postun by upgraded (buggy/2.1) package
 293 %if "%{_vendor}" == "redhat" || "%{_vendor}" == "amazon"
 294         if [ ! -f %{_initrddir}/shibd ] ; then
 295                 if [ -f %{_sysconfdir}/shibboleth/shibd-%{_vendor} ] ; then
 296                         %{__cp} -p %{_sysconfdir}/shibboleth/shibd-%{_vendor} %{_initrddir}/shibd
 297                         %{__chmod} 755 %{_initrddir}/shibd
 298                         /sbin/chkconfig --add shibd
 299         fi
 300 fi
 301 %endif
 302
 303 %files -f rpm.filelist
 304 %defattr(-,root,root,-)
 305 %{_sbindir}/shibd
 306 %{_bindir}/mdquery
 307 %{_bindir}/resolvertest
 308 %{_libdir}/libshibsp.so.*
 309 %{_libdir}/libshibsp-lite.so.*
 310 %dir %{_libdir}/shibboleth
 311 %{_libdir}/shibboleth/*
 312 %attr(0750,%{runuser},%{runuser}) %dir %{_localstatedir}/log/shibboleth
 313 %if "%{_vendor}" == "redhat" || "%{_vendor}" == "amazon" || "%{_vendor}" == "suse"
 314 %if "%{_vendor}" == "redhat" || "%{_vendor}" == "amazon"
 315 %attr(0750,apache,apache) %dir %{_localstatedir}/log/shibboleth-www
 316 %endif
 317 %if "%{_vendor}" == "suse"
 318 %attr(0750,wwwrun,www) %dir %{_localstatedir}/log/shibboleth-www
 319 %endif
 320 %else
 321 %attr(0750,-,-) %dir %{_localstatedir}/log/shibboleth-www
 322 %endif
 323 %if 0%{?suse_version} < 1300
 324 %attr(0755,%{runuser},%{runuser}) %dir %{_localstatedir}/run/shibboleth
 325 %endif
 326 %attr(0755,%{runuser},%{runuser}) %dir %{_localstatedir}/cache/shibboleth
 327 %dir %{_datadir}/xml/shibboleth
 328 %{_datadir}/xml/shibboleth/*
 329 %dir %{_datadir}/shibboleth
 330 %{_datadir}/shibboleth/*
 331 %dir %{_sysconfdir}/shibboleth
 332 %config(noreplace) %{_sysconfdir}/shibboleth/*.xml
 333 %config(noreplace) %{_sysconfdir}/shibboleth/*.html
 334 %config(noreplace) %{_sysconfdir}/shibboleth/*.logger
 335 %if "%{_vendor}" == "redhat" || "%{_vendor}" == "amazon" || "%{_vendor}" == "suse"
 336 %config %{_initrddir}/shibd
 337 %endif
 338 %if "%{_vendor}" == "suse"
 339 %{_sbindir}/rcshibd
 340 %endif
 341 %{_sysconfdir}/shibboleth/*.dist
 342 %{_sysconfdir}/shibboleth/apache*.config
 343 %{_sysconfdir}/shibboleth/shibd-*
 344 %attr(0755,root,root) %{_sysconfdir}/shibboleth/keygen.sh
 345 %attr(0755,root,root) %{_sysconfdir}/shibboleth/metagen.sh
 346 %{_sysconfdir}/shibboleth/*.xsl
 347 %doc %{pkgdocdir}
 348 %exclude %{pkgdocdir}/api
 349
 350 %files devel
 351 %defattr(-,root,root,-)
 352 %{_includedir}/*
 353 %{_libdir}/libshibsp.so
 354 %{_libdir}/libshibsp-lite.so
 355 %doc %{pkgdocdir}/api
 356
 357 %changelog
 358 * Wed Feb 25 2015 Scott Cantor <cantor.2@osu.edu> - 2.5.4-1
 359 - Add Amazon VM support
 360 - Add a separate native logging directory
 361
 362 * Mon Nov 17 2014 Scott Cantor <cantor.2@osu.edu> - 2.5.3-2
 363 - Add libtool dep for OpenSUSE 13
 364 - Remove /var/run/shibboleth for OpenSUSE 13
 365
 366 * Tue May 13 2014 Ian Young <ian@iay.org.uk> - 2.5.3-1.2
 367 - Update package dependencies for RHEL/CentOS 7
 368 - Fix bogus dates in changelog
 369
 370 * Sat Jun 8 2013   Scott Cantor  <cantor.2@osu.edu>  - 2.5.2-1
 371 - Add --with-gssapi using MIT K5 by default
 372
 373 * Tue Sep 25 2012  Scott Cantor  <cantor.2@osu.edu>  - 2.5.1-1
 374 - Merge back various changes used in released packages
 375 - Prep for 2.5.1 by pulling extra restart out
 376
 377 * Tue Aug 7 2012  Scott Cantor  <cantor.2@osu.edu>  - 2.5.0-2
 378 - Changed package name back to shibboleth because of upgrade bugs
 379 - Put back extra restart for this release only.
 380
 381 * Thu Mar 1 2012  Scott Cantor  <cantor.2@osu.edu>  - 2.5.0-1
 382 - Move logo and stylesheet to version-independent tree
 383 - Make shib.conf noreplace
 384 - Post-fixup of Alias commands in older shib.conf
 385 - Changes to run shibd as non-root shibboleth user
 386 - Move init customizations to /etc/sysconfig/shibd
 387 - Copy shibd restart for Red Hat to postun
 388 - Add boost-devel dependency
 389 - Build memcache plugin on RH6
 390 - Add cachedir to install
 391 - Add Apache 2.4 to install
 392
 393 * Sun Jun 26 2011  Scott Cantor  <cantor.2@osu.edu>  - 2.4.3-1
 394 - Log files shouldn't be world readable.
 395 - Explicit requirement for libcurl-openssl on RHEL6
 396 - Uncomment LD_LIBRARY_PATH in init script for RHEL6
 397 - Remove rpath from binaries for RHEL6
 398
 399 * Fri Dec 25 2009  Scott Cantor  <cantor.2@osu.edu>  - 2.4-1
 400 - Update dependencies.
 401
 402 * Mon Nov 23 2009 Scott Cantor  <cantor.2@osu.edu>  - 2.3.1-1
 403 - Reset revision for 2.3.1 release
 404
 405 * Wed Aug 19 2009 Scott Cantor  <cantor.2@osu.edu>  - 2.2.1-2
 406 - SuSE init script changes
 407 - Restart Apache on removal, not just upgrade
 408 - Fix scriptlet exit values when Apache is stopped
 409
 410 * Mon Aug 10 2009 Scott Cantor  <cantor.2@osu.edu>  - 2.2.1-1
 411 - Doc handling changes
 412 - SuSE init script
 413
 414 * Tue Aug 4 2009 Scott Cantor  <cantor.2@osu.edu>  - 2.2.1-1
 415 - Initial version for 2.2.1, with shibd/httpd restart on upgrade
 416
 417 * Thu Jun 25 2009 Scott Cantor  <cantor.2@osu.edu>  - 2.2-3
 418 - Add additional cleanup to posttrans fix
 419
 420 * Tue Jun 23 2009 Scott Cantor  <cantor.2@osu.edu>  - 2.2-2
 421 - Reverse without_builtinapache macro test
 422 - Fix init script handling on Red Hat to handle upgrades
 423
 424 * Wed Dec 3 2008  Scott Cantor  <cantor.2@osu.edu>  - 2.2-1
 425 - Bump minor version.
 426 - Make keygen.sh executable.
 427 - Fixing SUSE Xerces dependency name.
 428 - Optionally package shib.conf.
 429
 430 * Tue Jun 10 2008  Scott Cantor  <cantor.2@osu.edu>  - 2.1-1
 431 - Change shib.conf handling to treat as config file.
 432
 433 * Mon Mar 17 2008  Scott Cantor  <cantor.2@osu.edu>  - 2.0-6
 434 - Official release.
 435
 436 * Fri Jan 18 2008  Scott Cantor  <cantor.2@osu.edu>  - 2.0-5
 437 - Release candidate 1.
 438
 439 * Sun Oct 21 2007 Scott Cantor  <cantor.2@osu.edu>  - 2.0-4
 440 - libexec -> lib/shibboleth changes
 441 - Added doc subpackage
 442
 443 * Thu Aug 16 2007 Scott Cantor  <cantor.2@osu.edu>  - 2.0-3
 444 - First public beta.
 445
 446 * Fri Jul 13 2007 Scott Cantor  <cantor.2@osu.edu>  - 2.0-2
 447 - Second alpha release.
 448
 449 * Sun Jun 10 2007 Scott Cantor  <cantor.2@osu.edu>  - 2.0-1
 450 - First alpha release.
 451
 452 * Mon Oct 2 2006 Scott Cantor   <cantor.2@osu.edu>  - 1.3-11
 453 - Applied fix for secadv 20061002
 454 - Fix for metadata loader loop
 455
 456 * Thu Jun 15 2006 Scott Cantor  <cantor.2@osu.edu>  - 1.3-10
 457 - Applied fix for sec 20060615
 458
 459 * Sat Apr 15 2006 Scott Cantor  <cantor.2@osu.edu>  - 1.3-9
 460 - Misc. patches, SuSE, Apache 2.2, gcc 4.1, and 64-bit support
 461
 462 * Mon Jan 9 2006 Scott Cantor  <cantor.2@osu.edu>  - 1.3-8
 463 - Applied new fix for secadv 20060109
 464
 465 * Tue Nov 8 2005 Scott Cantor  <cantor.2@osu.edu>  - 1.3-7
 466 - Applied new fix for secadv 20050901 plus rollup
 467
 468 * Fri Sep 23 2005 Scott Cantor  <cantor.2@osu.edu>  - 1.3-6
 469 - Minor patches and default config changes
 470 - pidfile patch
 471 - Fix shib.conf creation
 472 - Integrated init.d script
 473 - Prevent replacement of config files
 474
 475 * Thu Sep 1 2005  Scott Cantor  <cantor.2@osu.edu>  - 1.3-5
 476 - Applied fix for secadv 20050901 plus rollup of NSAPI fixes
 477
 478 * Sun Apr 24 2005  Scott Cantor  <cantor.2@osu.edu>  - 1.3-1
 479 - Updated test programs and location of schemas.
 480 - move siterefresh to to sbindir
 481
 482 * Fri Apr  1 2005  Derek Atkins  <derek@ihtfp.com>  - 1.3-1
 483 - Add selinux-targeted-policy package
 484 - move shar to sbindir
 485
 486 * Tue Oct 19 2004  Derek Atkins  <derek@ihtfp.com>  - 1.2-1
 487 - Create SPEC file based on various versions in existence.