rpms/sssd/F-11 .cvsignore, 1.13, 1.14 sources, 1.13, 1.14 sssd.spec, 1.25, 1.26

[Stephen Gallagher]

Author: sgallagh

Update of /cvs/pkgs/rpms/sssd/F-11
In directory cvs1.fedora.phx.redhat.com:/tmp/cvs-serv24066

Modified Files:
	.cvsignore sources sssd.spec 
Log Message:
Bouska (1):
      Add French translation to sss_client

David O'Brien (1):
      Copy-edit sssd-ipa man page

Dmitri Pal (5):
      COMMON Improvements to the trace macro
      COLLECTION Create reference to the top level collection
      COLLECTION: Cleaning FIXME comments
      INI: Cleaning FIXME comments.
      INI Correcting build warnings.

Fabian Affolter (1):
      Add German translation

Göran Uddeborg (2):
      Add Swedish translation for sss_client
      Add Swedish translation for SSSD server

Jakub Hrozek (30):
      Fix migration script for pre-0.5 local domains
      Do not migrate Data Provider
      Free the PCRE regexp with destructor
      Do not delete users, groups outside domain range
      Add missing include
      IPA time rules parsing routines
      Fix regression in error message when deleting groups
      Assorted manpage fixes
      Make the password field configurable in NSS
      Add Simo's ipachangeconf
      SSSDChangeConf - a wrapper around ipachangeconf
      Change the upgrade script to use ipachangeconf
      Convert SSSDConfig API to ipachangeconf
      SSSDConfigAPI fixes
      upgrade_config fixes for SSSD 0.6 and later
      Split helpers for child processes
      Get TGT in a child process.
      Warn visibly about permission problems with the config file
      Better error message when there is no local domain configured
      Setup ldap child logging from IPA backend
      Check the services started against a list of known services
      Handle spaces in config parser
      Fail on nonexistent input file
      Do not start with provider=files
      Reduce code duplication between LDAP child and Kerberos child
      Change ares usage to be c-ares 1.7.0 compatible
      Import ares 1.7.0 helpers
      Don't build the SRV and TXT parsing code except for tests
      Document the failover feature in manpages
      Consolidate code for splitting strings by separator

Martin Nagy (8):
      Add missing include file to files-tests.c
      Fix a bad free in async_resolv.c
      Add DLIST_FOR_EACH() macro
      Add simple reference counting wrappers for talloc
      Add fail over utility functions
      Fix egg-info file generation in the spec file
      Add some debugging statements to fail_over and resolver
      Correctly restart server status after the timeout

Piotr Drąg (1):
      Updating polish translation for 0.7.0

Simo Sorce (65):
      Copy option overrides.
      Read the right buffer, avoids potential segfaults
      Add IPA conf template
      Zero pointers on free
      Use standard coding practice to set last login
      Fix segfault
      Add proper support for IPA/AD schemas
      Move responsibility for entry expiration timeout
      Kill the ldap connection when we go offline
      Tidy up ipa options
      Add support to get rootDSE from the LDAP server.
      Fix segfault when SASL is not used at all
      Rename sdap_id_map to sdap_attr_map
      Make available method to quickly retrive string
      Make useful function more broadly available.
      Store the original memberof attributes if any
      Unify parse routines, use maps in generic searches
      Fix and enhance initgroups call
      Unify code to use the generic search interface
      Reorganize ldap id provider files
      Split async helpers in multiple files
      Always set last update and expire time
      Fix build
      Fix ldap driver
      Check return, zero free hostent, adhere to style
      Fix enumerations
      Fix tevent_req error checking.
      Refactor delete functions and add a few
      Add cleanup task
      Try to fix offline logins
      Fix double free case.
      Fix check_cache bug in dealing with the callback
      Change var name to make its use more clear.
      Fix crash due to uninitialized timeout variable
      Change initgroups code to use and check the cache
      Change the pam code to perform an initgroups call
      Store initgr expire time on initgr call
      Failover fixes and additions
      Better behavior on cleanup
      Correctly escape DN value.
      Add reference to sssd-krb5 man page.
      Optimize sysdb_enumgrent
      Filter by id range before actually storing entries.
      Raise some timeouts
      Add initial failover support for ldap and ipa
      Fix ticket #289
      Fix internal options numbers test
      In IPA, the realm is always the domain uppercased.
      Fix tabs
      Fix memberof plugin
      Compute and save memberuid in cache as well
      Use memberuid and not member in group enumerations
      Use the custom password field in groups too.
      Resolve nested groups also when rfc2307bis is used
      Make strdn build functions more available
      Fix nested group memberships
      Allow nesting to fix #310
      Fix bug #311, properly set callback attribute
      Change dhash API to be talloc-friendly
      dhash: Add private pointer for delete callback
      Add comments to document latest changes
      Add rebuild task to memberof plugin
      Handle the special 02 upgrade case for 04->05
      Fix for #316
      Fix for #322, update from old database versions.

Stephen Gallagher (60):
      Remove DP from example configuration
      Remove [dp] section from example config
      Fix sssd.api.conf with correct entry_cache_timeout
      Clean up warnings in dhash tests
      Make config_file_version a hidden setting in SSSDConfig API
      Remove magic_private_groups from SSSDConfig API schema
      Add support for option descriptions to SSSDConfig API
      Localize SSSDConfig strings
      Add complete pydoc for SSSDConfig API
      Add Requires: cyrus-sasl-gssapi
      Simplify debug_fn()
      Add configure check for sasl.h
      Update midpoint refresh logic to be relative to cache timeout
      Increase the sbus dispatch DEBUG level to 9
      Build files.c only for tools
      Clean up unused dependencies
      Update sssd.spec to use only the required KRB5_LIBS and NSS_LIBS
      Fix segfault on unknown user/domain
      Fix Requires: sssd-client line in specfile
      Make the sysdb user and group names case-sensitive
      Upgrade cache and local databases to case-sensitive names
      Update translatable strings
      Fix sysdb upgrade bug
      Add empty NL translation
      Only display errors in unit tests
      Update PL translation
      Update NL translation
      Make backend request type a bitfield
      Speed up user requests while offline
      Update translation strings for string freeze
      Fix bug with bad ldb pkg-config files
      Update version to 0.99.0
      Remove ELAPI from build and tarball
      Stop configuring ELAPI
      Make debug log timestamps human-readable
      Raise debug log level for LDB_DEBUG_WARNING
      Add allocation error check
      Avoid returning uninitialized result.
      Fix potential uninitialized value errors in nsssrv_cmd.c
      Fix potential uninitialized value error in responder_dp.c
      SSSDDomain.remove_provider() requires only the provider type
      Make SSSDDomain.remove_provider() remove configured options
      Run dhash tests
      Add SSSDDomain.set_name() function to SSSDConfig API
      Reduce the verbosity of the SSSDConfigTest
      Fix broken SSSDChangeConf.set() function
      Fix SSSDConfig API bugs around [de-]activation of domains
      Fix RPM spec for RHEL6
      SSSDConfig API: fix deactivate_domain()
      SSSDConfig.get_domain() should properly detect active state
      Ensure that list_active_domains returns the real value
      Properly deny id_provider=files
      Add missing options to sssd-ipa configuraion
      Add missing SSSDConfig file for IPA for make install
      Fix processing of Boolean values in SSSDConfig
      Add 'permit' and 'deny' access providers to SSSDConfig API
      Remove default for ldap_use_start_tls in IPA providers
      Run SSSDConfig tests during 'make check'
      Fix stupid copy-paste error
      Updating to version 0.99.1

Sumit Bose (45):
      store original DN with cached group objects if available
      added a ASQ search API for sysdb
      Allow sysdb_search_entry request to return more than one result
      Add AM_CFLAGS to unit tests
      Fix compiler warnings in krb5_utils-tests.
      remove old sysdb file before starting tests
      set ipa_hostname if not given in config file
      Make debug message less irritating.
      add sysdb_delete_recursive request to sysdb API
      Add sysdb_attrs_replace_name to sysdb API.
      Fix for a seg fault during recursive delete
      add replacements for missing Kerberos calls
      Check is ccache structure is initialized before calling krb5_cc_destroy
      added access module of IPA provider
      Simplify krb5 child handler
      Add check for access-time rules to ipa_access.
      Add support for host, source host and user category
      Fix inconsistent use of krb5_ccname_template
      Fixes for proxy provider
      Make 'permit' the default for the access target
      Fix option name krb5_changepw_principal
      Validate Kerberos credentials with local keytab
      Improve handling of ccache files
      Add ipa_auth
      Enhance check for remote hosts
      Add ldap_pwd_policy option
      Read KDC info from file instead from environment
      Really check return value from pam_set_item
      Use ldb modules from build root for tests
      Make ldb lib dir configurable
      Fix an internal error when cache_credentials=FALSE
      Remove unneeded debugging code
      Do not include libsss_ipa.la in rpm package
      Immediately return a krb5 change password request when offline
      Check LDAP structure before calling ldap_unbind_ext()
      Add sysdb_search_custom request
      Do not treat missing proc files as errors.
      Add basic OS detection
      Make packaging of *.egg-info files more flexible
      Try to renew Kerberos credentials
      Add checks to test the memberuid handling
      Add offline support for ipa_access
      Add dummy credentials to an empty ccache file
      Always update sysdb to the latest version
      Fix DEBUG message for sysdb_init

beckerde (1):
      Add Spanish translation

deneb (1):
      Add Italian translation for sss_client

noriko (1):
      Adding Japanese translation

raven (1):
      Update PL translation

ruigo (1):
      Add Portuguese translation





Index: .cvsignore
===================================================================
RCS file: /cvs/pkgs/rpms/sssd/F-11/.cvsignore,v
retrieving revision 1.13
retrieving revision 1.14
diff -u -p -r1.13 -r1.14
--- .cvsignore	27 Oct 2009 20:00:56 -0000	1.13
+++ .cvsignore	14 Dec 2009 19:49:49 -0000	1.14
@@ -1 +1 @@
-sssd-0.7.1.tar.gz
+sssd-0.99.1.tar.gz


Index: sources
===================================================================
RCS file: /cvs/pkgs/rpms/sssd/F-11/sources,v
retrieving revision 1.13
retrieving revision 1.14
diff -u -p -r1.13 -r1.14
--- sources	27 Oct 2009 20:00:57 -0000	1.13
+++ sources	14 Dec 2009 19:49:49 -0000	1.14
@@ -1 +1 @@
-827ef46d27c54ce790d329a6b1b82586  sssd-0.7.1.tar.gz
+00468f7fe1b75e53cc3c1027f2a92902  sssd-0.99.1.tar.gz


Index: sssd.spec
===================================================================
RCS file: /cvs/pkgs/rpms/sssd/F-11/sssd.spec,v
retrieving revision 1.25
retrieving revision 1.26
diff -u -p -r1.25 -r1.26
--- sssd.spec	27 Oct 2009 20:00:57 -0000	1.25
+++ sssd.spec	14 Dec 2009 19:49:49 -0000	1.26
@@ -2,7 +2,7 @@
 %{!?python_sitelib: %global python_sitelib %(%{__python} -c "from distutils.sysconfig import *; import sys; sys.stdout.write(get_python_lib())")}
 
 Name: sssd
-Version: 0.7.1
+Version: 0.99.1
 Release: 1%{?dist}
 Group: Applications/System
 Summary: System Security Services Daemon
@@ -18,7 +18,8 @@ BuildRoot: %(mktemp -ud %{_tmppath}/%{na
 
 Requires: libldb >= 0.9.3
 Requires: libtdb >= 1.1.3
-Requires: sssd-client = 0.7.1
+Requires: sssd-client = %{version}-%{release}
+Requires: cyrus-sasl-gssapi
 Requires(post): python
 Requires(preun):  initscripts chkconfig
 Requires(postun): /sbin/service
@@ -27,6 +28,7 @@ Requires(postun): /sbin/service
 %define sssdstatedir %{_localstatedir}/lib/sss
 %define dbpath %{sssdstatedir}/db
 %define pipepath %{sssdstatedir}/pipes
+%define pubconfpath %{sssdstatedir}/pubconf
 
 ### Build Dependencies ###
 
@@ -35,7 +37,12 @@ BuildRequires: automake
 BuildRequires: libtool
 BuildRequires: m4
 %{?fedora:BuildRequires: popt-devel}
-%{?rhel:BuildRequires: popt}
+%if 0%{?rhel} <= 5
+BuildRequires: popt
+%endif
+%if 0%{?rhel} >= 6
+BuildRequires: popt-devel
+%endif
 BuildRequires: libtalloc-devel
 BuildRequires: libtevent-devel
 BuildRequires: libtdb-devel
@@ -73,10 +80,13 @@ service.
 %setup -q
 
 %build
+NSS_LIBS=-lnss3 \
+KRB5_LIBS=-lkrb5 \
 %configure \
     --without-tests \
     --with-db-path=%{dbpath} \
     --with-pipe-path=%{pipepath} \
+    --with-pubconf-path=%{pubconfpath} \
     --with-init-dir=%{_initrddir} \
     --enable-nsslibdir=/%{_lib}
 
@@ -91,9 +101,9 @@ make install DESTDIR=$RPM_BUILD_ROOT
 /usr/lib/rpm/find-lang.sh $RPM_BUILD_ROOT sss_daemon
 /usr/lib/rpm/find-lang.sh $RPM_BUILD_ROOT sss_client
 
+# Copy default sssd.conf file
 mkdir -p $RPM_BUILD_ROOT/%{_sysconfdir}/sssd
 install -m600 server/examples/sssd.conf $RPM_BUILD_ROOT%{_sysconfdir}/sssd/sssd.conf
-
 install -m400 server/config/etc/sssd.api.conf $RPM_BUILD_ROOT%{_sysconfdir}/sssd/sssd.api.conf
 install -m400 server/config/etc/sssd.api.d/* $RPM_BUILD_ROOT%{_sysconfdir}/sssd/sssd.api.d/
 
@@ -105,6 +115,7 @@ rm -f \
     $RPM_BUILD_ROOT/%{_libdir}/sssd/libsss_ldap.la \
     $RPM_BUILD_ROOT/%{_libdir}/sssd/libsss_proxy.la \
     $RPM_BUILD_ROOT/%{_libdir}/sssd/libsss_krb5.la \
+    $RPM_BUILD_ROOT/%{_libdir}/sssd/libsss_ipa.la \
     $RPM_BUILD_ROOT/%{_libdir}/krb5/plugins/libkrb5/sssd_krb5_locator_plugin.la \
     $RPM_BUILD_ROOT/%{python_sitearch}/pysss.la
 
@@ -114,6 +125,10 @@ then
     # Older versions of rpmbuild can only handle one -f option
     echo %{_libdir}/krb5/plugins/libkrb5/sssd_krb5_locator_plugin.so >> sss_daemon.lang
 fi
+for file in `ls $RPM_BUILD_ROOT/%{python_sitelib}/*.egg-info 2> /dev/null`
+do
+    echo %{python_sitelib}/`basename $file` >> sss_daemon.lang
+done
 
 %clean
 rm -rf $RPM_BUILD_ROOT
@@ -121,7 +136,7 @@ rm -rf $RPM_BUILD_ROOT
 %files -f sss_daemon.lang
 %defattr(-,root,root,-)
 %doc COPYING
-%attr(755,root,root) %{_initrddir}/%{name}
+%{_initrddir}/%{name}
 %{_sbindir}/sssd
 %{_sbindir}/sss_useradd
 %{_sbindir}/sss_userdel
@@ -135,6 +150,7 @@ rm -rf $RPM_BUILD_ROOT
 %dir %{sssdstatedir}
 %attr(700,root,root) %dir %{dbpath}
 %attr(755,root,root) %dir %{pipepath}
+%attr(755,root,root) %dir %{pubconfpath}
 %attr(700,root,root) %dir %{pipepath}/private
 %attr(750,root,root) %dir %{_var}/log/%{name}
 %attr(700,root,root) %dir %{_sysconfdir}/sssd
@@ -156,7 +172,7 @@ rm -rf $RPM_BUILD_ROOT
 %{_mandir}/man8/sssd_krb5_locator_plugin.8*
 %{python_sitearch}/pysss.so
 %{python_sitelib}/*.py*
-%{?fedora:%{python_sitelib}/*.egg-info}
+
 
 %files client -f sss_client.lang
 %defattr(-,root,root,-)
@@ -189,6 +205,12 @@ fi
 %postun client -p /sbin/ldconfig
 
 %changelog
+* Fri Dec 11 2009 Stephen Gallagher <sgallagh at redhat.com> - 0.99.1-1
+- New upstream bugfix release 0.99.1
+
+* Mon Nov 30 2009 Stephen Gallagher <sgallagh at redhat.com> - 0.99.0-1
+- New upstream release 0.99.0
+
 * Tue Oct 27 2009 Stephen Gallagher <sgallagh at redhat.com> - 0.7.1-1
 - Fix segfault in sssd_pam when cache_credentials was enabled
 - Update the sample configuration