2 Version: @PACKAGE_VERSION@
4 Summary: Open source system for attribute-based Web SSO
5 Group: Productivity/Networking/Security
8 URL: http://shibboleth.internet2.edu/
9 Source: %{name}-sp-%{version}.tar.gz
10 BuildRoot: %{_tmppath}/%{name}-%{version}-root
12 PreReq: xmltooling-schemas, opensaml-schemas
13 %if 0%{?suse_version} > 1030 && 0%{?suse_version} < 1130
14 PreReq: %{insserv_prereq}
15 BuildRequires: libXerces-c-devel >= 2.8.0
17 BuildRequires: libxerces-c-devel >= 2.8.0
19 BuildRequires: libxml-security-c-devel >= 1.4.0
20 BuildRequires: libxmltooling-devel >= 1.4
21 BuildRequires: libsaml-devel >= 2.4
22 %{?_with_log4cpp:BuildRequires: liblog4cpp-devel >= 1.0}
23 %{!?_with_log4cpp:BuildRequires: liblog4shib-devel}
24 %if 0%{?rhel} >= 6 || 0%{?centos_version} >= 600
25 Requires: libcurl-openssl >= 7.21.7
26 BuildRequires: chrpath
28 BuildRequires: gcc-c++, zlib-devel
29 %{!?_without_doxygen:BuildRequires: doxygen}
30 %{!?_without_odbc:BuildRequires:unixODBC-devel}
31 %{?_with_fastcgi:BuildRequires: fcgi-devel}
32 %if "%{_vendor}" == "redhat"
33 %{!?_without_builtinapache:BuildRequires: httpd-devel}
34 BuildRequires: redhat-rpm-config
36 %if "%{_vendor}" == "suse"
37 %{!?_without_builtinapache:BuildRequires: apache2-devel}
40 %if "%{_vendor}" == "suse"
41 %define pkgdocdir %{_docdir}/%{name}
43 %define pkgdocdir %{_docdir}/%{name}-%{version}
47 Shibboleth is a Web Single Sign-On implementations based on OpenSAML
48 that supports multiple protocols, federated identity, and the extensible
49 exchange of rich attributes subject to privacy controls.
51 This package contains the Shibboleth Service Provider runtime libraries
55 Summary: Shibboleth development Headers
56 Group: Development/Libraries/C and C++
57 Requires: %{name} = %{version}-%{release}
58 %if 0%{?suse_version} > 1030 && 0%{?suse_version} < 1130
59 Requires: libXerces-c-devel >= 2.8.0
61 Requires: libxerces-c-devel >= 2.8.0
63 Requires: libxml-security-c-devel >= 1.4.0
64 Requires: libxmltooling-devel >= 1.4
65 Requires: libsaml-devel >= 2.4
66 %{?_with_log4cpp:Requires: liblog4cpp-devel >= 1.0}
67 %{!?_with_log4cpp:Requires: liblog4shib-devel}
70 Shibboleth is a Web Single Sign-On implementations based on OpenSAML
71 that supports multiple protocols, federated identity, and the extensible
72 exchange of rich attributes subject to privacy controls.
74 This package includes files needed for development with Shibboleth.
80 %configure %{?_without_odbc:--disable-odbc} %{?_without_adfs:--disable-adfs} %{?_with_fastcgi} %{?_with_memcached} %{?shib_options}
81 %{__make} pkgdocdir=%{pkgdocdir}
84 %{__make} install NOKEYGEN=1 DESTDIR=$RPM_BUILD_ROOT pkgdocdir=%{pkgdocdir}
86 %if "%{_vendor}" == "suse"
87 %{__sed} -i "s/\/var\/log\/httpd/\/var\/log\/apache2/g" \
88 $RPM_BUILD_ROOT%{_sysconfdir}/%{name}/native.logger
90 %if 0%{?rhel} >= 6 || 0%{?centos_version} >= 600
91 %{__sed} -i "s/#_RHEL6_//g" \
92 $RPM_BUILD_ROOT%{_sysconfdir}/%{name}/shibd-redhat
93 %{__sed} -i "s/\/opt\/shibboleth\/lib/\/opt\/shibboleth\/%{_lib}/g" \
94 $RPM_BUILD_ROOT%{_sysconfdir}/%{name}/shibd-redhat
95 chrpath -d $RPM_BUILD_ROOT%{_sbindir}/shibd
96 chrpath -d $RPM_BUILD_ROOT%{_bindir}/mdquery
97 chrpath -d $RPM_BUILD_ROOT%{_bindir}/resolvertest
100 # Plug the SP into the built-in Apache on a recognized system.
103 if [ -f $RPM_BUILD_ROOT%{_libdir}/%{name}/mod_shib_13.so ] ; then
104 APACHE_CONFIG="apache.config"
106 if [ -f $RPM_BUILD_ROOT%{_libdir}/%{name}/mod_shib_20.so ] ; then
107 APACHE_CONFIG="apache2.config"
109 if [ -f $RPM_BUILD_ROOT%{_libdir}/%{name}/mod_shib_22.so ] ; then
110 APACHE_CONFIG="apache22.config"
112 %{?_without_builtinapache:APACHE_CONFIG="no"}
113 if [ "$APACHE_CONFIG" != "no" ] ; then
115 if [ -d %{_sysconfdir}/httpd/conf.d ] ; then
116 APACHE_CONFD="%{_sysconfdir}/httpd/conf.d"
118 if [ -d %{_sysconfdir}/apache2/conf.d ] ; then
119 APACHE_CONFD="%{_sysconfdir}/apache2/conf.d"
121 if [ "$APACHE_CONFD" != "no" ] ; then
122 %{__mkdir} -p $RPM_BUILD_ROOT$APACHE_CONFD
123 %{__cp} -p $RPM_BUILD_ROOT%{_sysconfdir}/%{name}/$APACHE_CONFIG $RPM_BUILD_ROOT$APACHE_CONFD/shib.conf
124 echo "%config(noreplace) $APACHE_CONFD/shib.conf" > rpm.filelist
128 %if "%{_vendor}" == "redhat" || "%{_vendor}" == "suse"
129 # %{_initddir} not yet in RHEL5, use deprecated %{_initrddir}
130 install -d -m 0755 $RPM_BUILD_ROOT%{_initrddir}
131 install -m 0755 $RPM_BUILD_ROOT%{_sysconfdir}/%{name}/shibd-%{_vendor} $RPM_BUILD_ROOT%{_initrddir}/shibd
132 %if "%{_vendor}" == "suse"
133 install -d -m 0755 $RPM_BUILD_ROOT/%{_sbindir}
134 %{__ln_s} -f %{_initrddir}/shibd $RPM_BUILD_ROOT%{_sbindir}/rcshibd
142 [ "$RPM_BUILD_ROOT" != "/" ] && %{__rm} -rf $RPM_BUILD_ROOT
145 %ifnos solaris2.8 solaris2.9 solaris2.10
150 cd %{_sysconfdir}/%{name}
153 %if "%{_vendor}" == "redhat"
154 # This adds the proper /etc/rc*.d links for the script
155 /sbin/chkconfig --add shibd
156 # On upgrade, restart components if they're already running.
157 if [ "$1" -gt "1" ] ; then
158 /etc/init.d/shibd status 1>/dev/null && /etc/init.d/shibd restart 1>/dev/null
159 %{!?_without_builtinapache:/etc/init.d/httpd status 1>/dev/null && /etc/init.d/httpd restart 1>/dev/null}
163 %if "%{_vendor}" == "suse"
164 # This adds the proper /etc/rc*.d links for the script
166 %insserv_force_if_yast shibd
170 %if "%{_vendor}" == "redhat"
171 if [ "$1" = 0 ] ; then
172 /sbin/service shibd stop >/dev/null 2>&1
173 /sbin/chkconfig --del shibd
174 %{!?_without_builtinapache:/etc/init.d/httpd status 1>/dev/null && /etc/init.d/httpd restart 1>/dev/null}
177 %if "%{_vendor}" == "suse"
178 %stop_on_removal shibd
179 if [ "$1" = 0 ] ; then
180 %{!?_without_builtinapache:/etc/init.d/apache2 status 1>/dev/null && /etc/init.d/apache2 restart 1>/dev/null}
186 %ifnos solaris2.8 solaris2.9 solaris2.10
189 %if "%{_vendor}" == "suse"
191 %restart_on_update shibd
192 %{!?_without_builtinapache:%restart_on_update apache2}
197 # ugly hack if init script got removed during %postun by upgraded (buggy/2.1) package
198 %if "%{_vendor}" == "redhat"
199 if [ ! -f %{_initrddir}/shibd ] ; then
200 if [ -f %{_sysconfdir}/%{name}/shibd-%{_vendor} ] ; then
201 %{__cp} -p %{_sysconfdir}/%{name}/shibd-%{_vendor} %{_initrddir}/shibd
202 %{__chmod} 755 %{_initrddir}/shibd
203 /sbin/chkconfig --add shibd
208 %files -f rpm.filelist
209 %defattr(-,root,root,-)
212 %{_bindir}/resolvertest
213 %{_libdir}/libshibsp.so.*
214 %{_libdir}/libshibsp-lite.so.*
215 %dir %{_libdir}/%{name}
217 %exclude %{_libdir}/%{name}/*.la
218 %attr(0750,root,root) %dir %{_localstatedir}/log/%{name}
219 %dir %{_localstatedir}/run/%{name}
220 %dir %{_datadir}/xml/%{name}
221 %{_datadir}/xml/%{name}/*
222 %dir %{_datadir}/%{name}
223 %{_datadir}/%{name}/*
224 %dir %{_sysconfdir}/%{name}
225 %config(noreplace) %{_sysconfdir}/%{name}/*.xml
226 %config(noreplace) %{_sysconfdir}/%{name}/*.html
227 %config(noreplace) %{_sysconfdir}/%{name}/*.logger
228 %if "%{_vendor}" == "redhat" || "%{_vendor}" == "suse"
229 %config %{_initrddir}/shibd
231 %if "%{_vendor}" == "suse"
234 %{_sysconfdir}/%{name}/*.dist
235 %{_sysconfdir}/%{name}/apache*.config
236 %{_sysconfdir}/%{name}/shibd-*
237 %attr(0755,root,root) %{_sysconfdir}/%{name}/keygen.sh
238 %attr(0755,root,root) %{_sysconfdir}/%{name}/metagen.sh
239 %{_sysconfdir}/%{name}/*.xsl
241 %exclude %{pkgdocdir}/api
244 %defattr(-,root,root,-)
246 %{_libdir}/libshibsp.so
247 %{_libdir}/libshibsp-lite.so
248 %doc %{pkgdocdir}/api
251 * Sun Jun 26 2011 Scott Cantor <cantor.2@osu.edu> - 2.4.3-1
252 - Log files shouldn't be world readable.
253 - Explicit requirement for libcurl-openssl on RHEL6
254 - Uncomment LD_LIBRARY_PATH in init script for RHEL6
255 - Remove rpath from binaries for RHEL6
257 * Fri Dec 25 2009 Scott Cantor <cantor.2@osu.edu> - 2.4-1
258 - Update dependencies.
260 * Mon Nov 23 2009 Scott Cantor <cantor.2@osu.edu> - 2.3.1-1
261 - Reset revision for 2.3.1 release
263 * Wed Aug 19 2009 Scott Cantor <cantor.2@osu.edu> - 2.2.1-2
264 - SuSE init script changes
265 - Restart Apache on removal, not just upgrade
266 - Fix scriptlet exit values when Apache is stopped
268 * Mon Aug 10 2009 Scott Cantor <cantor.2@osu.edu> - 2.2.1-1
269 - Doc handling changes
272 * Tue Aug 4 2009 Scott Cantor <cantor.2@osu.edu> - 2.2.1-1
273 - Initial version for 2.2.1, with shibd/httpd restart on upgrade
275 * Thu Jun 25 2009 Scott Cantor <cantor.2@osu.edu> - 2.2-3
276 - Add additional cleanup to posttrans fix
278 * Tue Jun 23 2009 Scott Cantor <cantor.2@osu.edu> - 2.2-2
279 - Reverse without_builtinapache macro test
280 - Fix init script handling on Red Hat to handle upgrades
282 * Wed Dec 3 2008 Scott Cantor <cantor.2@osu.edu> - 2.2-1
283 - Bump minor version.
284 - Make keygen.sh executable.
285 - Fixing SUSE Xerces dependency name.
286 - Optionally package shib.conf.
288 * Tue Jun 10 2008 Scott Cantor <cantor.2@osu.edu> - 2.1-1
289 - Change shib.conf handling to treat as config file.
291 * Mon Mar 17 2008 Scott Cantor <cantor.2@osu.edu> - 2.0-6
294 * Fri Jan 18 2008 Scott Cantor <cantor.2@osu.edu> - 2.0-5
295 - Release candidate 1.
297 * Sun Oct 21 2007 Scott Cantor <cantor.2@osu.edu> - 2.0-4
298 - libexec -> lib/shibboleth changes
299 - Added doc subpackage
301 * Thu Aug 16 2007 Scott Cantor <cantor.2@osu.edu> - 2.0-3
304 * Fri Jul 13 2007 Scott Cantor <cantor.2@osu.edu> - 2.0-2
305 - Second alpha release.
307 * Sun Jun 10 2007 Scott Cantor <cantor.2@osu.edu> - 2.0-1
308 - First alpha release.
310 * Mon Oct 2 2006 Scott Cantor <cantor.2@osu.edu> - 1.3-11
311 - Applied fix for secadv 20061002
312 - Fix for metadata loader loop
314 * Wed Jun 15 2006 Scott Cantor <cantor.2@osu.edu> - 1.3-10
315 - Applied fix for sec 20060615
317 * Fri Apr 15 2006 Scott Cantor <cantor.2@osu.edu> - 1.3-9
318 - Misc. patches, SuSE, Apache 2.2, gcc 4.1, and 64-bit support
320 * Mon Jan 9 2006 Scott Cantor <cantor.2@osu.edu> - 1.3-8
321 - Applied new fix for secadv 20060109
323 * Tue Nov 8 2005 Scott Cantor <cantor.2@osu.edu> - 1.3-7
324 - Applied new fix for secadv 20050901 plus rollup
326 * Fri Sep 23 2005 Scott Cantor <cantor.2@osu.edu> - 1.3-6
327 - Minor patches and default config changes
329 - Fix shib.conf creation
330 - Integrated init.d script
331 - Prevent replacement of config files
333 * Thu Sep 1 2005 Scott Cantor <cantor.2@osu.edu> - 1.3-5
334 - Applied fix for secadv 20050901 plus rollup of NSAPI fixes
336 * Sun Apr 24 2005 Scott Cantor <cantor.2@osu.edu> - 1.3-1
337 - Updated test programs and location of schemas.
338 - move siterefresh to to sbindir
340 * Fri Apr 1 2005 Derek Atkins <derek@ihtfp.com> - 1.3-1
341 - Add selinux-targeted-policy package
342 - move shar to sbindir
344 * Tue Oct 19 2004 Derek Atkins <derek@ihtfp.com> - 1.2-1
345 - Create SPEC file based on various versions in existence.