shibboleth.spec.in

   1 Name:           shibboleth
   2 Summary:        Open source system to enable inter-institutional resource sharing
   3 Version:        @-VERSION-@
   4 Release:        9
   5 #Copyright:     Internet2
   6 Group:          System Environment/Libraries
   7 License:        Apache style
   8 URL:            http://shibboleth.internet2.edu/
   9 Source0:        http://shibboleth.internet2.edu/downloads/%{name}-%{version}.tar.gz
  10 Source1:        http://shibboleth.internet2.edu/downloads/%{name}-%{version}.tar.gz.asc
  11 BuildRoot:      %{_tmppath}/%{name}-%{version}-root
  12
  13 BuildRequires:  openssl-devel, curl-devel >= 7.10.6, xerces-c-devel >= 2.6.1
  14 BuildRequires:  xml-security-c-devel >= 1.1.0, log4cpp-devel >= 0.3.5
  15 BuildRequires:  zlib-devel, opensaml-devel >= 1.1
  16 %if "%{_vendor}" == "redhat"
  17 BuildRequires:  httpd-devel
  18 %endif
  19 %if "%{_vendor}" == "suse"
  20 BuildRequires:  apache2-devel
  21 %endif
  22
  23
  24 %description
  25 Shibboleth, a project of Internet2/MACE, is developing architectures,
  26 policy structures, practical technologies, and an open source
  27 implementation to support inter-institutional sharing of web resources
  28 subject to access controls. In addition, Shibboleth will develop a
  29 policy framework that will allow inter-operation within the higher
  30 education community.
  31
  32 This package contains the shibboleth runtime library and apache module.
  33
  34 %package devel
  35 Summary: Shibboleth development Headers
  36 Group: Development/Libraries
  37 Requires: %{name} = %{version}
  38
  39 %description devel
  40 Shibboleth, a project of Internet2/MACE, is developing architectures,
  41 policy structures, practical technologies, and an open source
  42 implementation to support inter-institutional sharing of web resources
  43 subject to access controls. In addition, Shibboleth will develop a
  44 policy framework that will allow inter-operation within the higher
  45 education community.
  46
  47 This package contains the headers and other necessary files to build
  48 applications that use the shibboleth library.
  49
  50 %package selinux-policy-targeted
  51 Summary: SELinux policy targeted configuration for Shibboleth SP
  52 Group: System Environment/Base
  53 Requires: selinux-policy-targeted-sources
  54
  55 %description selinux-policy-targeted
  56 Shibboleth, a project of Internet2/MACE, is developing architectures,
  57 policy structures, practical technologies, and an open source
  58 implementation to support inter-institutional sharing of web resources
  59 subject to access controls. In addition, Shibboleth will develop a
  60 policy framework that will allow inter-operation within the higher
  61 education community.
  62
  63 This package contains the SELinux Policy (source) Configuration to
  64 enable the Shibboleth SP to integrate into Apache HTTPD in Red Hat /
  65 Fedora's Policy Targeted SELinux implementation.  It requires
  66 rebuilding your policy, so you must have the policy-targeted-source
  67 installed.
  68
  69 %prep
  70 %setup -q
  71
  72 %build
  73 # Default value is --enable-apache-20
  74 # If no Apache macro exists, then add the default definition
  75 %{!?_with_apache13: %{!?_with_apache20: %{!?_with_apache22: %define _with_apache20 1}}}
  76 %configure %{?shib_options} %{?_with_apache13: --enable-apache-13} %{?_with_apache20: --enable-apache-20} %{?_with_apache22: --enable-apache-22}
  77 make
  78 make -C selinux
  79
  80 %install
  81 [ "$RPM_BUILD_ROOT" != "/" ] && rm -rf $RPM_BUILD_ROOT
  82 rm -rf _docs
  83
  84 make install DESTDIR=$RPM_BUILD_ROOT
  85 make -C selinux install DESTDIR=$RPM_BUILD_ROOT
  86 mv $RPM_BUILD_ROOT/usr/doc/shibboleth _docs
  87
  88 find $RPM_BUILD_ROOT/%{_libexecdir} -type f -or -type l | grep \.so |
  89   sed -e "s|$RPM_BUILD_ROOT||" | sort > rpm.filelist
  90
  91 %check || :
  92 make check
  93
  94 %clean
  95 [ "$RPM_BUILD_ROOT" != "/" ] && rm -rf $RPM_BUILD_ROOT
  96
  97 %post
  98 /sbin/ldconfig
  99
 100 # Plug the SP into Apache on a recognized system.
 101 %{?_with_apache13: %define apache_config apache.config}
 102 %{?_with_apache20: %define apache_config apache2.config}
 103 %{?_with_apache22: %define apache_config apache22.config}
 104 %if %{?apache_config:1}
 105         APACHE_CONFD="no"
 106         if [ -d %{_sysconfdir}/httpd/conf.d ] ; then
 107                 APACHE_CONFD="%{_sysconfdir}/httpd/conf.d"
 108         fi
 109         if [ -d %{_sysconfdir}/apache2/conf.d ] ; then
 110                 APACHE_CONFD="%{_sysconfdir}/apache2/conf.d"
 111         fi
 112         if [ "$APACHE_CONFD" != "no" ] ; then
 113                 if [ ! -f $APACHE_CONFD/shib.conf ] ; then
 114                         sed "s/\/usr\/doc\/shibboleth/\/usr\/share\/doc\/shibboleth-@-VERSION-@/g" \
 115                                 %{_sysconfdir}/shibboleth/%{?apache_config} \
 116                                 > $APACHE_CONFD/shib.conf
 117                 fi
 118         fi
 119 %endif
 120
 121 # Install the shibd init.d scripts and service
 122 if [ -d %{_sysconfdir}/init.d ] ; then
 123         if [ ! -f %{_sysconfdir}/init.d/shibd ] ; then
 124                 cp -p %{_sysconfdir}/shibboleth/shibd %{_sysconfdir}/init.d/shibd
 125                 chmod 755 %{_sysconfdir}/init.d/shibd
 126                 chkconfig --add shibd
 127         fi
 128 fi
 129
 130 %postun
 131 /sbin/ldconfig
 132
 133 # delete the Apache configuration if we're being removed
 134 [ "$1" = 0 ] || exit 0
 135 [ -f %{_sysconfdir}/httpd/conf.d/shib.conf ] && \
 136     rm -f %{_sysconfdir}/httpd/conf.d/shib.conf
 137 [ -f %{_sysconfdir}/apache2/conf.d/shib.conf ] && \
 138     rm -f %{_sysconfdir}/apache2/conf.d/shib.conf
 139
 140 # clear init.d state
 141 chkconfig --del shibd
 142 [ -f %{_sysconfdir}/init.d/shibd ] && \
 143     rm -f %{_sysconfdir}/init.d/shibd
 144
 145 %triggerin selinux-policy-targeted -- %{name}
 146 restorecon %{_sbindir}/shibd
 147
 148 %triggerin selinux-policy-targeted -- selinux-policy-targeted-sources
 149 cd %{_sysconfdir}/selinux/targeted/src/policy || exit 1
 150 make -W install
 151 make load
 152 restorecon %{_sbindir}/shibd
 153
 154 %files -f rpm.filelist
 155 %defattr(-,root,root,-)
 156 %doc _docs/CREDITS.txt _docs/NOTICE.txt _docs/NEWS.txt _docs/logo.jpg
 157 %doc _docs/main.css _docs/README.txt _docs/LICENSE.txt _docs/mysql-4.0.12.diff
 158 %{_sbindir}/shibd
 159 %{_sbindir}/siterefresh
 160 %{_bindir}/shibtest
 161 %{_libdir}/libshib.so.*
 162 %{_libdir}/libshib-target.so.*
 163 %dir /var/log/shibboleth
 164 %dir %{_datadir}/xml/shibboleth
 165 %{_datadir}/xml/shibboleth/*.xsd
 166 %{_datadir}/xml/shibboleth/*.xsl
 167 %dir %{_sysconfdir}/shibboleth
 168 %config(noreplace) %{_sysconfdir}/shibboleth/*.xml
 169 %config(noreplace) %{_sysconfdir}/shibboleth/*.html
 170 %config(noreplace) %{_sysconfdir}/shibboleth/*.logger
 171 %config %{_sysconfdir}/shibboleth/inqueue.pem
 172 %config %{_sysconfdir}/shibboleth/sp-example.crt
 173 %config %{_sysconfdir}/shibboleth/sp-example.key
 174 %{_sysconfdir}/shibboleth/*.dist
 175 %{_sysconfdir}/shibboleth/apache*.config
 176 %{_sysconfdir}/shibboleth/shibd
 177
 178 %exclude %{_bindir}/posttest
 179 %exclude %{_bindir}/test-client
 180 %exclude %{_libexecdir}/*.la
 181
 182 %files devel
 183 %defattr(-,root,root,-)
 184 %{_includedir}
 185 %{_libdir}/libshib.so
 186 %{_libdir}/libshib-target.so
 187
 188 %files selinux-policy-targeted
 189 %defattr(-,root,root,-)
 190 %{_sysconfdir}/selinux/targeted/src/policy/file_contexts/program/*.fc
 191 %{_sysconfdir}/selinux/targeted/src/policy/domains/program/*.te
 192
 193 %changelog
 194 * Fri Apr 15 2006 Scott Cantor  <cantor.2@osu.edu>  - 1.3-9
 195 - Misc. patches, SuSE, Apache 2.2, gcc 4.1, and 64-bit support
 196
 197 * Mon Jan 9 2006 Scott Cantor  <cantor.2@osu.edu>  - 1.3-8
 198 - Applied new fix for secadv 20060109
 199
 200 * Tue Nov 8 2005 Scott Cantor  <cantor.2@osu.edu>  - 1.3-7
 201 - Applied new fix for secadv 20050901 plus rollup
 202
 203 * Fri Sep 23 2005 Scott Cantor  <cantor.2@osu.edu>  - 1.3-6
 204 - Minor patches and default config changes
 205 - pidfile patch
 206 - Fix shib.conf creation
 207 - Integrated init.d script
 208 - Prevent replacement of config files
 209
 210 * Thu Sep 1 2005  Scott Cantor  <cantor.2@osu.edu>  - 1.3-5
 211 - Applied fix for secadv 20050901 plus rollup of NSAPI fixes
 212
 213 * Sun Apr 24 2005  Scott Cantor  <cantor.2@osu.edu>  - 1.3-1
 214 - Updated test programs and location of schemas.
 215 - move siterefresh to to sbindir
 216
 217 * Fri Apr  1 2005  Derek Atkins  <derek@ihtfp.com>  - 1.3-1
 218 - Add selinux-targeted-policy package
 219 - move shar to sbindir
 220
 221 * Tue Oct 19 2004  Derek Atkins  <derek@ihtfp.com>  - 1.2-1
 222 - Create SPEC file based on various versions in existence.