[mod_auth_kerb] hide stderr if finding httpd_mmn

jorton jorton at fedoraproject.org
Tue Nov 13 17:05:16 UTC 2012


commit 8e47aee210da36a44bd2254a27bb4ec9ccddc4c0
Author: Joe Orton <jorton at redhat.com>
Date:   Tue Nov 13 17:05:13 2012 +0000

    hide stderr if finding httpd_mmn
    
    - package LICENSE
    - filter DSO auto provides

 mod_auth_kerb-5.4-fixes.patch     |    3 +++
 mod_auth_kerb-5.4-s4u2proxy.patch |   22 +++++++++++++++++++++-
 mod_auth_kerb.spec                |   15 ++++++++++++---
 3 files changed, 36 insertions(+), 4 deletions(-)
---
diff --git a/mod_auth_kerb-5.4-fixes.patch b/mod_auth_kerb-5.4-fixes.patch
index d9a08f6..b86be69 100644
--- a/mod_auth_kerb-5.4-fixes.patch
+++ b/mod_auth_kerb-5.4-fixes.patch
@@ -1,3 +1,6 @@
+
+Compiler warning fixes.
+
 --- mod_auth_kerb-5.4/src/mod_auth_kerb.c.fixes
 +++ mod_auth_kerb-5.4/src/mod_auth_kerb.c
 @@ -677,7 +677,8 @@ end:
diff --git a/mod_auth_kerb-5.4-s4u2proxy.patch b/mod_auth_kerb-5.4-s4u2proxy.patch
index 23185f3..031f87e 100644
--- a/mod_auth_kerb-5.4-s4u2proxy.patch
+++ b/mod_auth_kerb-5.4-s4u2proxy.patch
@@ -1,4 +1,24 @@
-diff -up --recursive mod_auth_kerb-5.4.orig/README mod_auth_kerb-5.4/README
+
+Add S4U2Proxy feature:
+
+http://sourceforge.net/mailarchive/forum.php?thread_name=4EE665D1.3000308%40redhat.com&forum_name=modauthkerb-help
+
+The attached patches add support for using s4u2proxy 
+(http://k5wiki.kerberos.org/wiki/Projects/Services4User) to allow the 
+web service to obtain credentials on behalf of the authenticated user.
+
+The first patch adds basic support for s4u2proxy. This requires the web 
+administrator to manually create and manage the credentails cache for 
+the apache user (via a cron job, for example).
+
+The second patch builds on this and makes mod_auth_kerb manage the 
+ccache instead.
+
+These are patches against the current CVS HEAD (mod_auth_krb 5.4).
+
+I've added a new module option to enable this support, 
+KrbConstrainedDelegation. The default is off.
+
 --- mod_auth_kerb-5.4.orig/README	2008-11-26 11:51:05.000000000 -0500
 +++ mod_auth_kerb-5.4/README	2012-01-04 11:17:22.000000000 -0500
 @@ -122,4 +122,16 @@ KrbSaveCredentials, the tickets will be 
diff --git a/mod_auth_kerb.spec b/mod_auth_kerb.spec
index 0790ad4..6dd1e4c 100644
--- a/mod_auth_kerb.spec
+++ b/mod_auth_kerb.spec
@@ -1,5 +1,5 @@
 %{!?_httpd_apxs:       %{expand: %%global _httpd_apxs       %%{_sbindir}/apxs}}
-%{!?_httpd_mmn:        %{expand: %%global _httpd_mmn        %%(cat %{_includedir}/httpd/.mmn || echo missing-httpd-devel)}}
+%{!?_httpd_mmn:        %{expand: %%global _httpd_mmn        %%(cat %{_includedir}/httpd/.mmn || echo missing-httpd-devel 2>/dev/null}}
 %{!?_httpd_confdir:    %{expand: %%global _httpd_confdir    %%{_sysconfdir}/httpd/conf.d}}
 # /etc/httpd/conf.d with httpd < 2.4 and defined as /etc/httpd/conf.modules.d with httpd >= 2.4
 %{!?_httpd_modconfdir: %{expand: %%global _httpd_modconfdir %%{_sysconfdir}/httpd/conf.d}}
@@ -8,7 +8,7 @@
 Summary: Kerberos authentication module for HTTP
 Name: mod_auth_kerb
 Version: 5.4
-Release: 19%{?dist}
+Release: 20%{?dist}
 License: BSD and MIT and ASL 2.0
 Group: System Environment/Daemons
 URL: http://modauthkerb.sourceforge.net/
@@ -26,6 +26,10 @@ BuildRequires: httpd-devel, krb5-devel
 Requires: httpd-mmn = %{_httpd_mmn}
 Requires(pre): httpd
 
+# Suppres auto-provides for module DSO
+%{?filter_provides_in: %filter_provides_in %{_libdir}/httpd/modules/.*\.so$}
+%{?filter_setup}
+
 %description
 mod_auth_kerb is module for the Apache HTTP Server designed to
 provide Kerberos authentication over HTTP.  The module supports the
@@ -75,7 +79,7 @@ rm -rf $RPM_BUILD_ROOT
 
 %files
 %defattr(-,root,root,-)
-%doc README LICENSE.ASL
+%doc README LICENSE LICENSE.ASL
 %config(noreplace) %{_httpd_modconfdir}/*.conf
 %if "%{_httpd_modconfdir}" != "%{_httpd_confdir}"
 %doc example.conf
@@ -85,6 +89,11 @@ rm -rf $RPM_BUILD_ROOT
 %attr(0700,apache,apache) %dir /run/httpd/krbcache
 
 %changelog
+* Tue Nov 13 2012 Joe Orton <jorton at redhat.com> - 5.4-20
+- hide stderr if finding httpd_mmn 
+- package LICENSE
+- filter DSO auto provides
+
 * Wed Aug  8 2012 Joe Orton <jorton at redhat.com> - 5.4-19
 - add Requires(pre) for httpd to ensure apache uid exists at install time
 


More information about the scm-commits mailing list