rpms/sssd/EL-5 .cvsignore, 1.23, 1.24 sources, 1.24, 1.25 sssd.spec, 1.39, 1.40

[Stephen Gallagher]

Author: sgallagh

Update of /cvs/pkgs/rpms/sssd/EL-5
In directory cvs01.phx2.fedoraproject.org:/tmp/cvs-serv28536

Modified Files:
	.cvsignore sources sssd.spec 
Log Message:
* Mon May 24 2010 Stephen Gallagher <sgallagh at redhat.com> - 1.2.0-12
- New stable upstream version 1.2.0
- Support ServiceGroups for FreeIPA v2 HBAC rules
- Fix long-standing issue with auth_provider = proxy
- Better logging for TLS issues in LDAP
- New LDAP access provider allows for filtering user access by LDAP attribute
- Reduced default timeout for detecting offline status with LDAP
- GSSAPI ticket lifetime made configurable
- Better offline->online transition support in Kerberos
- Enhancements when using SSSD with FreeIPA v2
- Support for deferred kinit
- Support for DNS SRV records for failover



Index: .cvsignore
===================================================================
RCS file: /cvs/pkgs/rpms/sssd/EL-5/.cvsignore,v
retrieving revision 1.23
retrieving revision 1.24
diff -u -p -r1.23 -r1.24
--- .cvsignore	7 Apr 2010 11:36:47 -0000	1.23
+++ .cvsignore	6 Jun 2010 17:52:06 -0000	1.24
@@ -1 +1 @@
-sssd-1.1.1.tar.gz
+sssd-1.2.0.tar.gz


Index: sources
===================================================================
RCS file: /cvs/pkgs/rpms/sssd/EL-5/sources,v
retrieving revision 1.24
retrieving revision 1.25
diff -u -p -r1.24 -r1.25
--- sources	7 Apr 2010 11:36:47 -0000	1.24
+++ sources	6 Jun 2010 17:52:06 -0000	1.25
@@ -1 +1 @@
-7bba82062d272baaff9b7c394f47151d  sssd-1.1.1.tar.gz
+5b14a5ed5d57085303b4732ef1ff41e5  sssd-1.2.0.tar.gz


Index: sssd.spec
===================================================================
RCS file: /cvs/pkgs/rpms/sssd/EL-5/sssd.spec,v
retrieving revision 1.39
retrieving revision 1.40
diff -u -p -r1.39 -r1.40
--- sssd.spec	7 Apr 2010 11:36:47 -0000	1.39
+++ sssd.spec	6 Jun 2010 17:52:06 -0000	1.40
@@ -4,10 +4,10 @@
 %endif
 
 Name: sssd
-Version: 1.1.1
-#Never reset the release, always increment it
+Version: 1.2.0
+#Never reset the Release, always increment it
 #Otherwise we can have issues if library versions do not change
-Release: 5%{?dist}
+Release: 12%{?dist}
 Group: Applications/System
 Summary: System Security Services Daemon
 License: GPLv3+
@@ -18,10 +18,11 @@ BuildRoot: %(mktemp -ud %{_tmppath}/%{na
 %define dhash_version 0.4.0
 %define path_utils_version 0.2.0
 %define collection_version 0.4.0
-%define ini_config_version 0.4.0
+%define ini_config_version 0.5.0
 %define refarray_version 0.1.0
 
 ### Patches ###
+Patch0001: 0001-Fix-broken-build-against-older-versions-of-OpenLDAP.patch
 
 ### Dependencies ###
 
@@ -32,6 +33,7 @@ Requires: libdhash = %{dhash_version}-%{
 Requires: libcollection = %{collection_version}-%{release}
 Requires: libini_config = %{ini_config_version}-%{release}
 Requires: cyrus-sasl-gssapi
+Requires: keyutils-libs
 Requires(post): python
 Requires(preun):  initscripts chkconfig
 Requires(postun): /sbin/service
@@ -74,6 +76,10 @@ BuildRequires: c-ares-devel
 BuildRequires: python-devel
 BuildRequires: check-devel
 BuildRequires: doxygen
+BuildRequires: libselinux-devel
+BuildRequires: libsemanage-devel
+BuildRequires: keyutils-libs-devel
+BuildRequires: bind-utils
 
 %description
 Provides a set of daemons to manage access to remote directories and
@@ -195,10 +201,9 @@ A dynamically-growing, reference-counted
 
 %prep
 %setup -q
+%patch0001 -p1
 
 %build
-NSS_LIBS=-lnss3 \
-KRB5_LIBS=-lkrb5 \
 %configure \
     --with-db-path=%{dbpath} \
     --with-pipe-path=%{pipepath} \
@@ -243,6 +248,10 @@ install -m400 src/config/etc/sssd.api.d/
 mkdir -p $RPM_BUILD_ROOT/%{_sysconfdir}/logrotate.d
 install -m644 src/examples/logrotate $RPM_BUILD_ROOT%{_sysconfdir}/logrotate.d/sssd
 
+# Make sure SSSD is able to run on read-only root
+mkdir -p $RPM_BUILD_ROOT/%{_sysconfdir}/rwtab.d
+install -m644 src/examples/rwtab $RPM_BUILD_ROOT%{_sysconfdir}/rwtab.d/sssd
+
 # Remove .la files created by libtool
 rm -f \
     $RPM_BUILD_ROOT/%{_lib}/libnss_sss.la \
@@ -299,6 +308,7 @@ rm -rf $RPM_BUILD_ROOT
 %attr(700,root,root) %dir %{_sysconfdir}/sssd
 %config(noreplace) %{_sysconfdir}/sssd/sssd.conf
 %config(noreplace) %{_sysconfdir}/logrotate.d/sssd
+%config(noreplace) %{_sysconfdir}/rwtab.d/sssd
 %config %{_sysconfdir}/sssd/sssd.api.conf
 %attr(700,root,root) %dir %{_sysconfdir}/sssd/sssd.api.d
 %config %{_sysconfdir}/sssd/sssd.api.d/
@@ -355,6 +365,7 @@ rm -rf $RPM_BUILD_ROOT
 %{_libdir}/libpath_utils.so
 %{_libdir}/pkgconfig/path_utils.pc
 %doc common/path_utils/README
+%doc common/path_utils/doc/html/
 
 %files -n libcollection
 %defattr(-,root,root,-)
@@ -400,6 +411,7 @@ rm -rf $RPM_BUILD_ROOT
 %{_libdir}/libref_array.so
 %{_libdir}/pkgconfig/ref_array.pc
 %doc common/refarray/README
+%doc common/refarray/doc/html/
 
 
 %post
@@ -443,6 +455,19 @@ fi
 %postun -n libref_array -p /sbin/ldconfig
 
 %changelog
+* Mon May 24 2010 Stephen Gallagher <sgallagh at redhat.com> - 1.2.0-12
+- New stable upstream version 1.2.0
+- Support ServiceGroups for FreeIPA v2 HBAC rules
+- Fix long-standing issue with auth_provider = proxy
+- Better logging for TLS issues in LDAP
+- New LDAP access provider allows for filtering user access by LDAP attribute
+- Reduced default timeout for detecting offline status with LDAP
+- GSSAPI ticket lifetime made configurable
+- Better offline->online transition support in Kerberos
+- Enhancements when using SSSD with FreeIPA v2
+- Support for deferred kinit
+- Support for DNS SRV records for failover
+
 * Wed Apr 07 2010 Stephen Gallagher <sgallagh at redhat.com> - 1.1.1-5
 - New upstream release 1.1.1
 - Fixed the IPA provider (which was segfaulting at start)