1 |
commit: 193c6fc3382f200c33f4ab840768c6578b4e94b3 |
2 |
Author: Mikle Kolyada <zlogene <AT> gentoo <DOT> org> |
3 |
AuthorDate: Sat Oct 10 11:41:13 2020 +0000 |
4 |
Commit: Mikle Kolyada <zlogene <AT> gentoo <DOT> org> |
5 |
CommitDate: Sat Oct 10 11:41:13 2020 +0000 |
6 |
URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=193c6fc3 |
7 |
|
8 |
sys-auth/sssd: Drop old (Security cleanup) |
9 |
|
10 |
Package-Manager: Portage-3.0.4, Repoman-3.0.1 |
11 |
Signed-off-by: Mikle Kolyada <zlogene <AT> gentoo.org> |
12 |
|
13 |
sys-auth/sssd/Manifest | 2 - |
14 |
sys-auth/sssd/files/sssd-curl-macros.patch | 34 ---- |
15 |
sys-auth/sssd/files/sssd-fix-CVE-2019-3811.patch | 96 ---------- |
16 |
sys-auth/sssd/sssd-1.16.3-r3.ebuild | 233 ----------------------- |
17 |
sys-auth/sssd/sssd-2.1.0-r1.ebuild | 230 ---------------------- |
18 |
5 files changed, 595 deletions(-) |
19 |
|
20 |
diff --git a/sys-auth/sssd/Manifest b/sys-auth/sssd/Manifest |
21 |
index 8a957aee6b0..89f18011990 100644 |
22 |
--- a/sys-auth/sssd/Manifest |
23 |
+++ b/sys-auth/sssd/Manifest |
24 |
@@ -1,5 +1,3 @@ |
25 |
-DIST sssd-1.16.3.tar.gz 6217114 BLAKE2B eefaf8de466d0d76e9a4b60aefef6eb63c17a55b9a1f2e07e973a61d71cbe5432e92357656a1eb353d45bbc2fa92290cef45898d0b315d4a4c4074652ff25a23 SHA512 6165923f652f624bbe3ddc625ae682c4867eb7a20652d0cf74bbb8dda2307c917d3189ede26fd21a4fb5fd5926149271a65fa09f3affe928029ed99e6422b728 |
26 |
-DIST sssd-2.1.0.tar.gz 6463331 BLAKE2B 9226370dc384c58841d944bdf9b067d953bf138ee7a289f01a4b8bb5d09beee3b9f21609989123d8f4f9fc13237670d61e32dcb194555ddc6785c598ce78d08c SHA512 12a7e5b89d462350af3c43e15b24a437dd985ac4a2e419d5e52cc0d05c6eacb9319d39b23681595ef860120cd1ae6e5fb265054afeddcb05d3d5f5de5d6ffa63 |
27 |
DIST sssd-2.2.0.tar.gz 6642715 BLAKE2B e6c16ca69effe59769fc166c02203faee445ebe2bf551c6a1460bdee2474ccbce1a38b3aa59b1ae4a79bb170696a784b800a9299025bf6a58bc9aeb94b946338 SHA512 9ebd8784e1f0c72cb808bbc153c0b0aa9bf507938f78336a260073a89b49350dc2c6172653509738ea7a50bb9da596725e1d6c92f99c7a03308aa42f6378dbbb |
28 |
DIST sssd-2.2.2.tar.gz 6767578 BLAKE2B e0eedaf1da1de953903730c96479af0709ee14dd83eca82a11316dc96c29573b5f3de5965f386d5c12a69e7d98b6168c9d197bbd46ac51f0122feababe52dfe1 SHA512 4cce8fdbcc05d1469dad5ba987cb0f9bc33702b37f85e8e248975461bb50b0740fec92ff213bdb640b506405be7ead936ff253ab02d4a27205ddf20cc0e54801 |
29 |
DIST sssd-2.2.3.tar.gz 6894302 BLAKE2B b72443ebd4f50581a0d9d2b7cf691fdda0dfe3cfb2ed82c383595aeca8d6198c7f44f1c49e56bdfeac23f9151897ac2df70d1afbbeceb2231daee71492884420 SHA512 b61d52a53e26e8efa9cb799fc6efc2314bf9d174d3cacfe591a4ca77530637591eacc0dc70c0555252e04a9617e8b134b1ab2d9b0f7351b4228e7b61499e6a10 |
30 |
|
31 |
diff --git a/sys-auth/sssd/files/sssd-curl-macros.patch b/sys-auth/sssd/files/sssd-curl-macros.patch |
32 |
deleted file mode 100644 |
33 |
index 91e71e83787..00000000000 |
34 |
--- a/sys-auth/sssd/files/sssd-curl-macros.patch |
35 |
+++ /dev/null |
36 |
@@ -1,34 +0,0 @@ |
37 |
-From d3cdf9cbfbace4874c6e5c96f1e5ef5b342c813e Mon Sep 17 00:00:00 2001 |
38 |
-From: Mikle Kolyada <zlogene@g.o> |
39 |
-Date: Sun, 16 Dec 2018 20:42:39 +0300 |
40 |
-Subject: [PATCH] tev_curl.c: remove case duplication |
41 |
- |
42 |
-CURLE_SSL_CACERT and CURLE_PEER_FAILED_VERIFICATION macros are provided |
43 |
-by net-misc/curl-7.62.0 and older |
44 |
---- |
45 |
- tev_curl.c | 3 --- |
46 |
- 1 file changed, 3 deletions(-) |
47 |
- |
48 |
-diff --git a/tev_curl.c b/tev_curl.c |
49 |
-index 6a7a580..ce6fdba 100644 |
50 |
---- a/src/util/tev_curl.c |
51 |
-+++ b/src/util/tev_curl.c |
52 |
-@@ -97,7 +97,6 @@ static errno_t curl_code2errno(CURLcode crv) |
53 |
- return ETIMEDOUT; |
54 |
- case CURLE_SSL_ISSUER_ERROR: |
55 |
- case CURLE_SSL_CACERT_BADFILE: |
56 |
-- case CURLE_SSL_CACERT: |
57 |
- case CURLE_SSL_CERTPROBLEM: |
58 |
- return ERR_INVALID_CERT; |
59 |
- |
60 |
-@@ -110,8 +109,6 @@ static errno_t curl_code2errno(CURLcode crv) |
61 |
- case CURLE_SSL_ENGINE_NOTFOUND: |
62 |
- case CURLE_SSL_CONNECT_ERROR: |
63 |
- return ERR_SSL_FAILURE; |
64 |
-- case CURLE_PEER_FAILED_VERIFICATION: |
65 |
-- return ERR_UNABLE_TO_VERIFY_PEER; |
66 |
- case CURLE_COULDNT_RESOLVE_HOST: |
67 |
- return ERR_UNABLE_TO_RESOLVE_HOST; |
68 |
- default: |
69 |
--- |
70 |
-2.19.2 |
71 |
\ No newline at end of file |
72 |
|
73 |
diff --git a/sys-auth/sssd/files/sssd-fix-CVE-2019-3811.patch b/sys-auth/sssd/files/sssd-fix-CVE-2019-3811.patch |
74 |
deleted file mode 100644 |
75 |
index 87db45fd24b..00000000000 |
76 |
--- a/sys-auth/sssd/files/sssd-fix-CVE-2019-3811.patch |
77 |
+++ /dev/null |
78 |
@@ -1,96 +0,0 @@ |
79 |
-From 28792523a01a7d21bcc8931794164f253e691a68 Mon Sep 17 00:00:00 2001 |
80 |
-From: Tomas Halman <thalman@××××××.com> |
81 |
-Date: Mon, 3 Dec 2018 14:11:31 +0100 |
82 |
-Subject: [PATCH] nss: sssd returns '/' for emtpy home directories |
83 |
- |
84 |
-For empty home directory in passwd file sssd returns "/". Sssd |
85 |
-should respect system behaviour and return the same as nsswitch |
86 |
-"files" module - return empty string. |
87 |
- |
88 |
-Resolves: |
89 |
-https://pagure.io/SSSD/sssd/issue/3901 |
90 |
- |
91 |
-Reviewed-by: Simo Sorce <simo@××××××.com> |
92 |
-Reviewed-by: Jakub Hrozek <jhrozek@××××××.com> |
93 |
-(cherry picked from commit 90f32399b4100ce39cf665649fde82d215e5eb49) |
94 |
---- |
95 |
- src/confdb/confdb.c | 9 +++++++++ |
96 |
- src/man/include/ad_modified_defaults.xml | 19 +++++++++++++++++++ |
97 |
- src/responder/nss/nss_protocol_pwent.c | 2 +- |
98 |
- src/tests/intg/test_files_provider.py | 2 +- |
99 |
- 4 files changed, 30 insertions(+), 2 deletions(-) |
100 |
- |
101 |
-diff --git a/src/confdb/confdb.c b/src/confdb/confdb.c |
102 |
-index a3eb9c66d9..17bb4f8274 100644 |
103 |
---- a/src/confdb/confdb.c |
104 |
-+++ b/src/confdb/confdb.c |
105 |
-@@ -1301,6 +1301,15 @@ static int confdb_get_domain_internal(struct confdb_ctx *cdb, |
106 |
- ret = ENOMEM; |
107 |
- goto done; |
108 |
- } |
109 |
-+ } else { |
110 |
-+ if (strcasecmp(domain->provider, "ad") == 0) { |
111 |
-+ /* ad provider default */ |
112 |
-+ domain->fallback_homedir = talloc_strdup(domain, "/home/%d/%u"); |
113 |
-+ if (!domain->fallback_homedir) { |
114 |
-+ ret = ENOMEM; |
115 |
-+ goto done; |
116 |
-+ } |
117 |
-+ } |
118 |
- } |
119 |
- |
120 |
- tmp = ldb_msg_find_attr_as_string(res->msgs[0], |
121 |
-diff --git a/src/man/include/ad_modified_defaults.xml b/src/man/include/ad_modified_defaults.xml |
122 |
-index 818a2bf787..425b7e8ee0 100644 |
123 |
---- a/src/man/include/ad_modified_defaults.xml |
124 |
-+++ b/src/man/include/ad_modified_defaults.xml |
125 |
-@@ -76,4 +76,23 @@ |
126 |
- </listitem> |
127 |
- </itemizedlist> |
128 |
- </refsect2> |
129 |
-+ <refsect2 id='nss_modifications'> |
130 |
-+ <title>NSS configuration</title> |
131 |
-+ <itemizedlist> |
132 |
-+ <listitem> |
133 |
-+ <para> |
134 |
-+ fallback_homedir = /home/%d/%u |
135 |
-+ </para> |
136 |
-+ <para> |
137 |
-+ The AD provider automatically sets |
138 |
-+ "fallback_homedir = /home/%d/%u" to provide personal |
139 |
-+ home directories for users without the homeDirectory |
140 |
-+ attribute. If your AD Domain is properly |
141 |
-+ populated with Posix attributes, and you want to avoid |
142 |
-+ this fallback behavior, you can explicitly |
143 |
-+ set "fallback_homedir = %o". |
144 |
-+ </para> |
145 |
-+ </listitem> |
146 |
-+ </itemizedlist> |
147 |
-+ </refsect2> |
148 |
- </refsect1> |
149 |
-diff --git a/src/responder/nss/nss_protocol_pwent.c b/src/responder/nss/nss_protocol_pwent.c |
150 |
-index af9e74fc86..86fa4ec465 100644 |
151 |
---- a/src/responder/nss/nss_protocol_pwent.c |
152 |
-+++ b/src/responder/nss/nss_protocol_pwent.c |
153 |
-@@ -118,7 +118,7 @@ nss_get_homedir(TALLOC_CTX *mem_ctx, |
154 |
- |
155 |
- homedir = nss_get_homedir_override(mem_ctx, msg, nss_ctx, domain, &hd_ctx); |
156 |
- if (homedir == NULL) { |
157 |
-- return "/"; |
158 |
-+ return ""; |
159 |
- } |
160 |
- |
161 |
- return homedir; |
162 |
-diff --git a/src/tests/intg/test_files_provider.py b/src/tests/intg/test_files_provider.py |
163 |
-index ead1cc4c34..4761f1bd15 100644 |
164 |
---- a/src/tests/intg/test_files_provider.py |
165 |
-+++ b/src/tests/intg/test_files_provider.py |
166 |
-@@ -678,7 +678,7 @@ def test_user_no_dir(setup_pw_with_canary, files_domain_only): |
167 |
- Test that resolving a user without a homedir defined works and returns |
168 |
- a fallback value |
169 |
- """ |
170 |
-- check_user(incomplete_user_setup(setup_pw_with_canary, 'dir', '/')) |
171 |
-+ check_user(incomplete_user_setup(setup_pw_with_canary, 'dir', '')) |
172 |
- |
173 |
- |
174 |
- def test_user_no_gecos(setup_pw_with_canary, files_domain_only): |
175 |
|
176 |
diff --git a/sys-auth/sssd/sssd-1.16.3-r3.ebuild b/sys-auth/sssd/sssd-1.16.3-r3.ebuild |
177 |
deleted file mode 100644 |
178 |
index a887a0cb720..00000000000 |
179 |
--- a/sys-auth/sssd/sssd-1.16.3-r3.ebuild |
180 |
+++ /dev/null |
181 |
@@ -1,233 +0,0 @@ |
182 |
-# Copyright 1999-2020 Gentoo Authors |
183 |
-# Distributed under the terms of the GNU General Public License v2 |
184 |
- |
185 |
-EAPI=7 |
186 |
- |
187 |
-inherit autotools flag-o-matic linux-info multilib-minimal pam systemd toolchain-funcs |
188 |
- |
189 |
-DESCRIPTION="System Security Services Daemon provides access to identity and authentication" |
190 |
-HOMEPAGE="https://pagure.io/SSSD/sssd" |
191 |
-SRC_URI="http://releases.pagure.org/SSSD/${PN}/${P}.tar.gz" |
192 |
-KEYWORDS="amd64 ~arm ~arm64 ~hppa ~ia64 ~m68k ~mips ~ppc ~ppc64 ~s390 ~sparc x86" |
193 |
- |
194 |
-LICENSE="GPL-3" |
195 |
-SLOT="0" |
196 |
-IUSE="acl autofs +locator +netlink nfsv4 nls +manpages samba selinux sudo ssh test" |
197 |
-RESTRICT="!test? ( test )" |
198 |
- |
199 |
-COMMON_DEP=" |
200 |
- >=sys-libs/pam-0-r1[${MULTILIB_USEDEP}] |
201 |
- >=dev-libs/popt-1.16 |
202 |
- dev-libs/glib:2 |
203 |
- >=dev-libs/ding-libs-0.2 |
204 |
- >=sys-libs/talloc-2.0.7 |
205 |
- >=sys-libs/tdb-1.2.9 |
206 |
- >=sys-libs/tevent-0.9.16 |
207 |
- >=sys-libs/ldb-1.1.17-r1:= |
208 |
- >=net-nds/openldap-2.4.30[sasl] |
209 |
- net-libs/http-parser |
210 |
- >=dev-libs/libpcre-8.30 |
211 |
- >=app-crypt/mit-krb5-1.10.3 |
212 |
- dev-libs/jansson |
213 |
- net-misc/curl |
214 |
- locator? ( |
215 |
- >=app-crypt/mit-krb5-1.12.2[${MULTILIB_USEDEP}] |
216 |
- >=net-dns/c-ares-1.10.0-r1[${MULTILIB_USEDEP}] |
217 |
- ) |
218 |
- >=sys-apps/keyutils-1.5:= |
219 |
- >=net-dns/c-ares-1.7.4 |
220 |
- >=dev-libs/nss-3.12.9 |
221 |
- selinux? ( |
222 |
- >=sys-libs/libselinux-2.1.9 |
223 |
- >=sys-libs/libsemanage-2.1 |
224 |
- ) |
225 |
- >=net-dns/bind-tools-9.9[gssapi] |
226 |
- >=dev-libs/cyrus-sasl-2.1.25-r3[kerberos] |
227 |
- >=sys-apps/dbus-1.6 |
228 |
- acl? ( net-fs/cifs-utils[acl] ) |
229 |
- nfsv4? ( || ( >=net-fs/nfs-utils-2.3.1-r2 net-libs/libnfsidmap ) ) |
230 |
- nls? ( >=sys-devel/gettext-0.18 ) |
231 |
- virtual/libintl |
232 |
- netlink? ( dev-libs/libnl:3 ) |
233 |
- samba? ( >=net-fs/samba-4.5 ) |
234 |
- " |
235 |
- |
236 |
-RDEPEND="${COMMON_DEP} |
237 |
- >=sys-libs/glibc-2.17[nscd] |
238 |
- selinux? ( >=sec-policy/selinux-sssd-2.20120725-r9 ) |
239 |
- " |
240 |
-DEPEND="${COMMON_DEP} |
241 |
- test? ( dev-libs/check ) |
242 |
- manpages? ( |
243 |
- >=dev-libs/libxslt-1.1.26 |
244 |
- app-text/docbook-xml-dtd:4.4 |
245 |
- )" |
246 |
- |
247 |
-CONFIG_CHECK="~KEYS" |
248 |
- |
249 |
-MULTILIB_WRAPPED_HEADERS=( |
250 |
- /usr/include/ipa_hbac.h |
251 |
- /usr/include/sss_idmap.h |
252 |
- /usr/include/sss_nss_idmap.h |
253 |
- /usr/include/wbclient_sssd.h |
254 |
- # --with-ifp |
255 |
- /usr/include/sss_sifp.h |
256 |
- /usr/include/sss_sifp_dbus.h |
257 |
- # from 1.15.3 |
258 |
- /usr/include/sss_certmap.h |
259 |
-) |
260 |
- |
261 |
-pkg_setup() { |
262 |
- linux-info_pkg_setup |
263 |
-} |
264 |
- |
265 |
-src_prepare() { |
266 |
- sed -i 's:#!/sbin/runscript:#!/sbin/openrc-run:' \ |
267 |
- "${S}"/src/sysv/gentoo/sssd.in || die "sed sssd.in" |
268 |
- |
269 |
- eapply "${FILESDIR}"/${PN}-curl-macros.patch |
270 |
- eapply "${FILESDIR}"/${PN}-fix-CVE-2019-3811.patch |
271 |
- |
272 |
- default |
273 |
- eautoreconf |
274 |
- multilib_copy_sources |
275 |
-} |
276 |
- |
277 |
-src_configure() { |
278 |
- local native_dbus_cflags=$($(tc-getPKG_CONFIG) --cflags dbus-1) |
279 |
- |
280 |
- multilib-minimal_src_configure |
281 |
-} |
282 |
- |
283 |
-multilib_src_configure() { |
284 |
- # set initscript to sysv because the systemd option needs systemd to |
285 |
- # be installed. We provide our own systemd file anyway. |
286 |
- local myconf=() |
287 |
- #Work around linker dependency problem. |
288 |
- append-ldflags "-Wl,--allow-shlib-undefined" |
289 |
- |
290 |
- myconf+=( |
291 |
- --localstatedir="${EPREFIX}"/var |
292 |
- --enable-nsslibdir="${EPREFIX}"/$(get_libdir) |
293 |
- --with-plugin-path="${EPREFIX}"/usr/$(get_libdir)/sssd |
294 |
- --enable-pammoddir="${EPREFIX}"/$(getpam_mod_dir) |
295 |
- --with-ldb-lib-dir="${EPREFIX}"/usr/$(get_libdir)/samba/ldb |
296 |
- --with-os=gentoo |
297 |
- --with-nscd |
298 |
- --with-unicode-lib="glib2" |
299 |
- --disable-rpath |
300 |
- --sbindir=/usr/sbin |
301 |
- --without-kcm |
302 |
- $(use_with samba libwbclient) |
303 |
- --with-secrets |
304 |
- $(multilib_native_use_with samba) |
305 |
- $(multilib_native_use_enable acl cifs-idmap-plugin) |
306 |
- $(multilib_native_use_with selinux) |
307 |
- $(multilib_native_use_with selinux semanage) |
308 |
- $(use_enable locator krb5-locator-plugin) |
309 |
- $(multilib_native_use_with nfsv4 nfsv4-idmapd-plugin) |
310 |
- $(use_enable nls ) |
311 |
- $(multilib_native_use_with netlink libnl) |
312 |
- $(multilib_native_use_with manpages) |
313 |
- $(multilib_native_use_with sudo) |
314 |
- $(multilib_native_use_with autofs) |
315 |
- $(multilib_native_use_with ssh) |
316 |
- --with-crypto="nss" |
317 |
- --with-initscript="sysv" |
318 |
- --without-python2-bindings |
319 |
- --without-python3-bindings |
320 |
- |
321 |
- KRB5_CONFIG=/usr/bin/${CHOST}-krb5-config |
322 |
- ) |
323 |
- |
324 |
- if ! multilib_is_native_abi; then |
325 |
- # work-around all the libraries that are used for CLI and server |
326 |
- myconf+=( |
327 |
- {POPT,TALLOC,TDB,TEVENT,LDB}_{CFLAGS,LIBS}=' ' |
328 |
- # ldb headers are fine since native needs it |
329 |
- # ldb lib fails... but it does not seem to bother |
330 |
- {DHASH,COLLECTION,INI_CONFIG_V{0,1,1_1}}_{CFLAGS,LIBS}=' ' |
331 |
- {PCRE,CARES,SYSTEMD_LOGIN,SASL,GLIB2,DBUS,CRYPTO}_{CFLAGS,LIBS}=' ' |
332 |
- |
333 |
- # use native include path for dbus (needed for build) |
334 |
- DBUS_CFLAGS="${native_dbus_cflags}" |
335 |
- |
336 |
- # non-pkgconfig checks |
337 |
- ac_cv_lib_ldap_ldap_search=yes |
338 |
- --without-secrets |
339 |
- --without-libwbclient |
340 |
- --without-kcm |
341 |
- --with-crypto="" |
342 |
- ) |
343 |
- |
344 |
- use locator || myconf+=( |
345 |
- KRB5_CONFIG=/bin/true |
346 |
- ) |
347 |
- fi |
348 |
- |
349 |
- econf "${myconf[@]}" |
350 |
-} |
351 |
- |
352 |
-multilib_src_compile() { |
353 |
- if multilib_is_native_abi; then |
354 |
- default |
355 |
- else |
356 |
- emake libnss_sss.la pam_sss.la |
357 |
- use locator && emake sssd_krb5_locator_plugin.la |
358 |
- fi |
359 |
-} |
360 |
- |
361 |
-multilib_src_install() { |
362 |
- if multilib_is_native_abi; then |
363 |
- emake -j1 DESTDIR="${D}" "${_at_args[@]}" install |
364 |
- else |
365 |
- # easier than playing with automake... |
366 |
- dopammod .libs/pam_sss.so |
367 |
- |
368 |
- into / |
369 |
- dolib.so .libs/libnss_sss.so* |
370 |
- |
371 |
- if use locator; then |
372 |
- exeinto /usr/$(get_libdir)/krb5/plugins/libkrb5 |
373 |
- doexe .libs/sssd_krb5_locator_plugin.so |
374 |
- fi |
375 |
- fi |
376 |
-} |
377 |
- |
378 |
-multilib_src_install_all() { |
379 |
- einstalldocs |
380 |
- find "${ED}" -type f -name '*.la' -delete || die |
381 |
- |
382 |
- insinto /etc/sssd |
383 |
- insopts -m600 |
384 |
- doins "${S}"/src/examples/sssd-example.conf |
385 |
- |
386 |
- insinto /etc/logrotate.d |
387 |
- insopts -m644 |
388 |
- newins "${S}"/src/examples/logrotate sssd |
389 |
- |
390 |
- newconfd "${FILESDIR}"/sssd.conf sssd |
391 |
- newinitd "${FILESDIR}"/sssd sssd |
392 |
- |
393 |
- keepdir /var/lib/sss/db |
394 |
- keepdir /var/lib/sss/deskprofile |
395 |
- keepdir /var/lib/sss/gpo_cache |
396 |
- keepdir /var/lib/sss/keytabs |
397 |
- keepdir /var/lib/sss/mc |
398 |
- keepdir /var/lib/sss/pipes/private |
399 |
- keepdir /var/lib/sss/pubconf/krb5.include.d |
400 |
- keepdir /var/lib/sss/secrets |
401 |
- keepdir /var/log/sssd |
402 |
- |
403 |
- systemd_dounit "${FILESDIR}/${PN}.service" |
404 |
-} |
405 |
- |
406 |
-multilib_src_test() { |
407 |
- default |
408 |
-} |
409 |
- |
410 |
-pkg_postinst() { |
411 |
- elog "You must set up sssd.conf (default installed into /etc/sssd)" |
412 |
- elog "and (optionally) configuration in /etc/pam.d in order to use SSSD" |
413 |
- elog "features. Please see howto in https://docs.pagure.org/SSSD.sssd/design_pages/index.html#implemented-in-1-16-x" |
414 |
-} |
415 |
|
416 |
diff --git a/sys-auth/sssd/sssd-2.1.0-r1.ebuild b/sys-auth/sssd/sssd-2.1.0-r1.ebuild |
417 |
deleted file mode 100644 |
418 |
index 98af8535a88..00000000000 |
419 |
--- a/sys-auth/sssd/sssd-2.1.0-r1.ebuild |
420 |
+++ /dev/null |
421 |
@@ -1,230 +0,0 @@ |
422 |
-# Copyright 1999-2020 Gentoo Authors |
423 |
-# Distributed under the terms of the GNU General Public License v2 |
424 |
- |
425 |
-EAPI=7 |
426 |
- |
427 |
-inherit autotools flag-o-matic linux-info multilib-minimal pam systemd toolchain-funcs |
428 |
- |
429 |
-DESCRIPTION="System Security Services Daemon provides access to identity and authentication" |
430 |
-HOMEPAGE="https://pagure.io/SSSD/sssd" |
431 |
-SRC_URI="http://releases.pagure.org/SSSD/${PN}/${P}.tar.gz" |
432 |
-KEYWORDS="~amd64 ~arm ~arm64 ~hppa ~ia64 ~m68k ~mips ~ppc ~ppc64 ~s390 ~sparc ~x86" |
433 |
- |
434 |
-LICENSE="GPL-3" |
435 |
-SLOT="0" |
436 |
-IUSE="acl autofs +locator +netlink nfsv4 nls +manpages samba selinux sudo ssh test" |
437 |
-RESTRICT="!test? ( test )" |
438 |
- |
439 |
-COMMON_DEP=" |
440 |
- >=sys-libs/pam-0-r1[${MULTILIB_USEDEP}] |
441 |
- >=dev-libs/popt-1.16 |
442 |
- dev-libs/glib:2 |
443 |
- >=dev-libs/ding-libs-0.2 |
444 |
- >=sys-libs/talloc-2.0.7 |
445 |
- >=sys-libs/tdb-1.2.9 |
446 |
- >=sys-libs/tevent-0.9.16 |
447 |
- >=sys-libs/ldb-1.1.17-r1:= |
448 |
- >=net-nds/openldap-2.4.30[sasl] |
449 |
- net-libs/http-parser |
450 |
- >=dev-libs/libpcre-8.30 |
451 |
- >=app-crypt/mit-krb5-1.10.3 |
452 |
- dev-libs/jansson |
453 |
- net-misc/curl |
454 |
- locator? ( |
455 |
- >=app-crypt/mit-krb5-1.12.2[${MULTILIB_USEDEP}] |
456 |
- >=net-dns/c-ares-1.10.0-r1[${MULTILIB_USEDEP}] |
457 |
- ) |
458 |
- >=sys-apps/keyutils-1.5:= |
459 |
- >=net-dns/c-ares-1.7.4 |
460 |
- >=dev-libs/nss-3.12.9 |
461 |
- selinux? ( |
462 |
- >=sys-libs/libselinux-2.1.9 |
463 |
- >=sys-libs/libsemanage-2.1 |
464 |
- ) |
465 |
- >=net-dns/bind-tools-9.9[gssapi] |
466 |
- >=dev-libs/cyrus-sasl-2.1.25-r3[kerberos] |
467 |
- >=sys-apps/dbus-1.6 |
468 |
- acl? ( net-fs/cifs-utils[acl] ) |
469 |
- nfsv4? ( || ( >=net-fs/nfs-utils-2.3.1-r2 net-libs/libnfsidmap ) ) |
470 |
- nls? ( >=sys-devel/gettext-0.18 ) |
471 |
- virtual/libintl |
472 |
- netlink? ( dev-libs/libnl:3 ) |
473 |
- samba? ( >=net-fs/samba-4.10.2[winbind] ) |
474 |
- " |
475 |
- |
476 |
-RDEPEND="${COMMON_DEP} |
477 |
- >=sys-libs/glibc-2.17[nscd] |
478 |
- selinux? ( >=sec-policy/selinux-sssd-2.20120725-r9 ) |
479 |
- " |
480 |
-DEPEND="${COMMON_DEP} |
481 |
- test? ( dev-libs/check ) |
482 |
- manpages? ( |
483 |
- >=dev-libs/libxslt-1.1.26 |
484 |
- app-text/docbook-xml-dtd:4.4 |
485 |
- )" |
486 |
- |
487 |
-CONFIG_CHECK="~KEYS" |
488 |
- |
489 |
-MULTILIB_WRAPPED_HEADERS=( |
490 |
- /usr/include/ipa_hbac.h |
491 |
- /usr/include/sss_idmap.h |
492 |
- /usr/include/sss_nss_idmap.h |
493 |
- /usr/include/wbclient_sssd.h |
494 |
- # --with-ifp |
495 |
- /usr/include/sss_sifp.h |
496 |
- /usr/include/sss_sifp_dbus.h |
497 |
- # from 1.15.3 |
498 |
- /usr/include/sss_certmap.h |
499 |
-) |
500 |
- |
501 |
-pkg_setup() { |
502 |
- linux-info_pkg_setup |
503 |
-} |
504 |
- |
505 |
-src_prepare() { |
506 |
- sed -i 's:#!/sbin/runscript:#!/sbin/openrc-run:' \ |
507 |
- "${S}"/src/sysv/gentoo/sssd.in || die "sed sssd.in" |
508 |
- |
509 |
- default |
510 |
- eautoreconf |
511 |
- multilib_copy_sources |
512 |
-} |
513 |
- |
514 |
-src_configure() { |
515 |
- local native_dbus_cflags=$($(tc-getPKG_CONFIG) --cflags dbus-1) |
516 |
- |
517 |
- multilib-minimal_src_configure |
518 |
-} |
519 |
- |
520 |
-multilib_src_configure() { |
521 |
- # set initscript to sysv because the systemd option needs systemd to |
522 |
- # be installed. We provide our own systemd file anyway. |
523 |
- local myconf=() |
524 |
- #Work around linker dependency problem. |
525 |
- append-ldflags "-Wl,--allow-shlib-undefined" |
526 |
- |
527 |
- myconf+=( |
528 |
- --localstatedir="${EPREFIX}"/var |
529 |
- --enable-nsslibdir="${EPREFIX}"/$(get_libdir) |
530 |
- --with-plugin-path="${EPREFIX}"/usr/$(get_libdir)/sssd |
531 |
- --enable-pammoddir="${EPREFIX}"/$(getpam_mod_dir) |
532 |
- --with-ldb-lib-dir="${EPREFIX}"/usr/$(get_libdir)/samba/ldb |
533 |
- --with-os=gentoo |
534 |
- --with-nscd |
535 |
- --with-unicode-lib="glib2" |
536 |
- --disable-rpath |
537 |
- --sbindir=/usr/sbin |
538 |
- --without-kcm |
539 |
- $(use_with samba libwbclient) |
540 |
- --with-secrets |
541 |
- $(multilib_native_use_with samba) |
542 |
- $(multilib_native_use_enable acl cifs-idmap-plugin) |
543 |
- $(multilib_native_use_with selinux) |
544 |
- $(multilib_native_use_with selinux semanage) |
545 |
- $(use_enable locator krb5-locator-plugin) |
546 |
- $(multilib_native_use_with nfsv4 nfsv4-idmapd-plugin) |
547 |
- $(use_enable nls ) |
548 |
- $(multilib_native_use_with netlink libnl) |
549 |
- $(multilib_native_use_with manpages) |
550 |
- $(multilib_native_use_with sudo) |
551 |
- $(multilib_native_use_with autofs) |
552 |
- $(multilib_native_use_with ssh) |
553 |
- --with-crypto="nss" |
554 |
- --with-initscript="sysv" |
555 |
- --without-python2-bindings |
556 |
- --without-python3-bindings |
557 |
- |
558 |
- KRB5_CONFIG=/usr/bin/${CHOST}-krb5-config |
559 |
- ) |
560 |
- |
561 |
- if ! multilib_is_native_abi; then |
562 |
- # work-around all the libraries that are used for CLI and server |
563 |
- myconf+=( |
564 |
- {POPT,TALLOC,TDB,TEVENT,LDB}_{CFLAGS,LIBS}=' ' |
565 |
- # ldb headers are fine since native needs it |
566 |
- # ldb lib fails... but it does not seem to bother |
567 |
- {DHASH,COLLECTION,INI_CONFIG_V{0,1,1_1}}_{CFLAGS,LIBS}=' ' |
568 |
- {PCRE,CARES,SYSTEMD_LOGIN,SASL,GLIB2,DBUS,CRYPTO}_{CFLAGS,LIBS}=' ' |
569 |
- |
570 |
- # use native include path for dbus (needed for build) |
571 |
- DBUS_CFLAGS="${native_dbus_cflags}" |
572 |
- |
573 |
- # non-pkgconfig checks |
574 |
- ac_cv_lib_ldap_ldap_search=yes |
575 |
- --without-secrets |
576 |
- --without-libwbclient |
577 |
- --without-kcm |
578 |
- --with-crypto="" |
579 |
- ) |
580 |
- |
581 |
- use locator || myconf+=( |
582 |
- KRB5_CONFIG=/bin/true |
583 |
- ) |
584 |
- fi |
585 |
- |
586 |
- econf "${myconf[@]}" |
587 |
-} |
588 |
- |
589 |
-multilib_src_compile() { |
590 |
- if multilib_is_native_abi; then |
591 |
- default |
592 |
- else |
593 |
- emake libnss_sss.la pam_sss.la |
594 |
- use locator && emake sssd_krb5_locator_plugin.la |
595 |
- fi |
596 |
-} |
597 |
- |
598 |
-multilib_src_install() { |
599 |
- if multilib_is_native_abi; then |
600 |
- emake -j1 DESTDIR="${D}" "${_at_args[@]}" install |
601 |
- else |
602 |
- # easier than playing with automake... |
603 |
- dopammod .libs/pam_sss.so |
604 |
- |
605 |
- into / |
606 |
- dolib.so .libs/libnss_sss.so* |
607 |
- |
608 |
- if use locator; then |
609 |
- exeinto /usr/$(get_libdir)/krb5/plugins/libkrb5 |
610 |
- doexe .libs/sssd_krb5_locator_plugin.so |
611 |
- fi |
612 |
- fi |
613 |
-} |
614 |
- |
615 |
-multilib_src_install_all() { |
616 |
- einstalldocs |
617 |
- find "${ED}" -type f -name '*.la' -delete || die |
618 |
- |
619 |
- insinto /etc/sssd |
620 |
- insopts -m600 |
621 |
- doins "${S}"/src/examples/sssd-example.conf |
622 |
- |
623 |
- insinto /etc/logrotate.d |
624 |
- insopts -m644 |
625 |
- newins "${S}"/src/examples/logrotate sssd |
626 |
- |
627 |
- newconfd "${FILESDIR}"/sssd.conf sssd |
628 |
- newinitd "${FILESDIR}"/sssd sssd |
629 |
- |
630 |
- keepdir /var/lib/sss/db |
631 |
- keepdir /var/lib/sss/deskprofile |
632 |
- keepdir /var/lib/sss/gpo_cache |
633 |
- keepdir /var/lib/sss/keytabs |
634 |
- keepdir /var/lib/sss/mc |
635 |
- keepdir /var/lib/sss/pipes/private |
636 |
- keepdir /var/lib/sss/pubconf/krb5.include.d |
637 |
- keepdir /var/lib/sss/secrets |
638 |
- keepdir /var/log/sssd |
639 |
- |
640 |
- systemd_dounit "${FILESDIR}/${PN}.service" |
641 |
-} |
642 |
- |
643 |
-multilib_src_test() { |
644 |
- default |
645 |
-} |
646 |
- |
647 |
-pkg_postinst() { |
648 |
- elog "You must set up sssd.conf (default installed into /etc/sssd)" |
649 |
- elog "and (optionally) configuration in /etc/pam.d in order to use SSSD" |
650 |
- elog "features. Please see howto in https://docs.pagure.org/SSSD.sssd/design_pages/smartcard_authentication_require.html" |
651 |
-} |