[sys-auth/sssd] at this point this is just me being pedantic, remove
This commit is contained in:
@@ -1,2 +0,0 @@
|
|||||||
DIST sssd-2.12.0.tar.gz 9739617 BLAKE2B d5629a24ee6db3e0a7a205a387acb01d0cc102b6bfc1131a208ea03c609941dd5ccfefd790ca1dc10f6e57d698828ff38364be9c8f6a7f7aeaec4b8a07346494 SHA512 3bd90a88a43019b00d3f0a674ef4d2473bf6895e749a54bec8ac1661e7d289083e0cbd64846dacc8bdd4b2447f171dddb2d0ba108962dbd862bce86c2247b038
|
|
||||||
DIST sssd-2.12.0.tar.gz.asc 833 BLAKE2B ffb95b672fd5b63f6147b4c4e85ee04c260eb2fa01c90ed52e04bb5c8e1bba76fead5dca1343a1d8c53d69d36c1145378c18f01fe86896f52dd64a1ed7c1d973 SHA512 b4a7696969f2c0a034ef01eaa50282556e3c07c0be53088d9ce5cb3f24e2dc5428fe8ad2f2f6aca7903a16e2d39591f32b04ca76b16662d24ae64cea15658684
|
|
||||||
@@ -1,22 +0,0 @@
|
|||||||
diff --git a/src/conf_macros.m4 b/src/conf_macros.m4
|
|
||||||
index c0efc3ad1..07fef0c1a 100644
|
|
||||||
--- a/src/conf_macros.m4
|
|
||||||
+++ b/src/conf_macros.m4
|
|
||||||
@@ -227,14 +227,14 @@ AC_DEFUN([WITH_SYSTEMD_CONF_DIR],
|
|
||||||
if test x"$with_systemdconfdir" != x; then
|
|
||||||
systemdconfdir=$with_systemdconfdir
|
|
||||||
else
|
|
||||||
- pkgconfigdir=${prefix}$($PKG_CONFIG --variable=systemdsystemconfdir systemd)
|
|
||||||
+ pkgconfigdir=$($PKG_CONFIG --variable=systemdsystemconfdir systemd)
|
|
||||||
if test x"$pkgconfigdir" = x; then
|
|
||||||
AC_MSG_ERROR([Could not detect systemd config directory])
|
|
||||||
fi
|
|
||||||
- if test "${pkgconfigdir:0:${#prefix}}" = "${prefix}"; then
|
|
||||||
+ if test "${pkgconfigdir:0:${#sysconfdir}}" = "${sysconfdir}"; then
|
|
||||||
systemdconfdir=${pkgconfigdir}
|
|
||||||
else
|
|
||||||
- systemdconfdir=${prefix}${pkgconfigdir}
|
|
||||||
+ systemdconfdir=${sysconfdir}${pkgconfigdir}
|
|
||||||
fi
|
|
||||||
fi
|
|
||||||
AC_SUBST(systemdconfdir, [$systemdconfdir/sssd.service.d])
|
|
||||||
@@ -1,12 +0,0 @@
|
|||||||
diff --git a/src/providers/krb5/krb5_auth.c b/src/providers/krb5/krb5_auth.c
|
|
||||||
index a1c0b36..207c010 100644
|
|
||||||
--- a/src/providers/krb5/krb5_auth.c
|
|
||||||
+++ b/src/providers/krb5/krb5_auth.c
|
|
||||||
@@ -1037,6 +1037,7 @@ static void krb5_auth_done(struct tevent_req *subreq)
|
|
||||||
case ERR_ACCOUNT_LOCKED:
|
|
||||||
state->pam_status = PAM_PERM_DENIED;
|
|
||||||
state->dp_err = DP_ERR_OK;
|
|
||||||
+ state->pd->account_locked = true;
|
|
||||||
ret = EOK;
|
|
||||||
goto done;
|
|
||||||
|
|
||||||
@@ -1,16 +0,0 @@
|
|||||||
diff '--color=auto' -Naur a/Makefile.am b/Makefile.am
|
|
||||||
--- a/Makefile.am 2024-12-05 12:16:16.000000000 +0000
|
|
||||||
+++ b/Makefile.am 2025-01-14 12:31:45.831435116 +0000
|
|
||||||
@@ -21,7 +21,11 @@
|
|
||||||
endif
|
|
||||||
|
|
||||||
SUBDIRS += . src/tests/cwrap src/tests/intg src/tests/test_CA \
|
|
||||||
- src/tests/test_ECC_CA src/tools/analyzer
|
|
||||||
+ src/tests/test_ECC_CA
|
|
||||||
+
|
|
||||||
+if BUILD_PYTHON_BINDINGS
|
|
||||||
+SUBDIRS += src/tools/analyzer
|
|
||||||
+endif
|
|
||||||
|
|
||||||
# Some old versions of automake don't define builddir
|
|
||||||
builddir ?= .
|
|
||||||
@@ -1,4 +0,0 @@
|
|||||||
# Copyright 1999-2011 Gentoo Foundation
|
|
||||||
# Distributed under the terms of the GNU General Public License v2
|
|
||||||
|
|
||||||
SSSD_OPTIONS=""
|
|
||||||
@@ -1,28 +0,0 @@
|
|||||||
<?xml version="1.0" encoding="UTF-8"?>
|
|
||||||
<!DOCTYPE pkgmetadata SYSTEM "https://www.gentoo.org/dtd/metadata.dtd">
|
|
||||||
<pkgmetadata>
|
|
||||||
<maintainer type="project">
|
|
||||||
<email>base-system@gentoo.org</email>
|
|
||||||
<name>Gentoo Base System</name>
|
|
||||||
</maintainer>
|
|
||||||
<maintainer type="person" proxied="yes">
|
|
||||||
<email>salah.coronya@gmail.com</email>
|
|
||||||
<name>Christopher Byrne</name>
|
|
||||||
</maintainer>
|
|
||||||
<maintainer type="project" proxied="proxy">
|
|
||||||
<email>proxy-maint@gentoo.org</email>
|
|
||||||
<name>Proxy Maintainers</name>
|
|
||||||
</maintainer>
|
|
||||||
<use>
|
|
||||||
<flag name="acl"> Build and use the cifsidmap plugin</flag>
|
|
||||||
<flag name="netlink">Add support for netlink protocol via <pkg>dev-libs/libnl</pkg></flag>
|
|
||||||
<flag name="nfsv4">Add support for the nfsv4 idmapd plugin provided by <pkg>net-fs/nfs-utils</pkg></flag>
|
|
||||||
<flag name="passkey">Add support for FIDO2 passkeys"</flag>
|
|
||||||
<flag name="samba">Add Privileged Attribute Certificate Support for Kerberos</flag>
|
|
||||||
<flag name="systemtap">Enable SystemTap/DTrace tracing</flag>
|
|
||||||
</use>
|
|
||||||
<upstream>
|
|
||||||
<remote-id type="cpe">cpe:/a:fedoraproject:sssd</remote-id>
|
|
||||||
<remote-id type="github">SSSD/sssd</remote-id>
|
|
||||||
</upstream>
|
|
||||||
</pkgmetadata>
|
|
||||||
@@ -1,391 +0,0 @@
|
|||||||
# Copyright 1999-2026 Gentoo Authors
|
|
||||||
# Distributed under the terms of the GNU General Public License v2
|
|
||||||
|
|
||||||
EAPI=8
|
|
||||||
|
|
||||||
# Ukrainian translation causes compile failure, so skip it for now
|
|
||||||
#PLOCALES="ca de es fr ja ko pt_BR ru sv tr uk"
|
|
||||||
PLOCALES="ca de es fr ja ko pt_BR ru sv tr"
|
|
||||||
PLOCALES_BIN="${PLOCALES} bg cs eu fi hu id it ka nb nl pl pt tg zh_TW zh_CN"
|
|
||||||
PLOCALE_BACKUP="sv"
|
|
||||||
PYTHON_COMPAT=( python3_{11..14} )
|
|
||||||
VERIFY_SIG_OPENPGP_KEY_PATH="${BROOT}"/usr/share/openpgp-keys/sssd.asc
|
|
||||||
|
|
||||||
inherit autotools linux-info multilib-minimal optfeature plocale \
|
|
||||||
python-single-r1 pam systemd tmpfiles udev toolchain-funcs verify-sig
|
|
||||||
|
|
||||||
DESCRIPTION="System Security Services Daemon provides access to identity and authentication"
|
|
||||||
HOMEPAGE="https://github.com/SSSD/sssd"
|
|
||||||
if [[ ${PV} != 9999 ]]; then
|
|
||||||
SRC_URI="https://github.com/SSSD/sssd/releases/download/${PV}/${P}.tar.gz"
|
|
||||||
SRC_URI+=" verify-sig? ( https://github.com/SSSD/sssd/releases/download/${PV}/${P}.tar.gz.asc )"
|
|
||||||
KEYWORDS="~amd64 ~arm ~arm64 ~hppa ~m68k ~mips ~ppc ~ppc64 ~riscv ~sparc ~x86"
|
|
||||||
else
|
|
||||||
inherit git-r3
|
|
||||||
EGIT_REPO_URI="https://github.com/SSSD/sssd.git"
|
|
||||||
EGIT_BRANCH="master"
|
|
||||||
fi
|
|
||||||
|
|
||||||
LICENSE="GPL-3"
|
|
||||||
SLOT="0"
|
|
||||||
IUSE="doc +netlink nfsv4 nls passkey python samba selinux systemd systemtap test"
|
|
||||||
REQUIRED_USE="python? ( ${PYTHON_REQUIRED_USE} )"
|
|
||||||
RESTRICT="!test? ( test )"
|
|
||||||
|
|
||||||
DEPEND="
|
|
||||||
>=app-crypt/mit-krb5-1.19.1[${MULTILIB_USEDEP}]
|
|
||||||
app-crypt/p11-kit
|
|
||||||
>=dev-libs/cyrus-sasl-2.1.25-r3[kerberos]
|
|
||||||
>=dev-libs/ding-libs-0.2
|
|
||||||
dev-libs/jansson:=
|
|
||||||
dev-libs/libpcre2:=
|
|
||||||
dev-libs/libunistring:=
|
|
||||||
>=dev-libs/openssl-1.0.2:=
|
|
||||||
>=dev-libs/popt-1.16
|
|
||||||
>=net-dns/bind-9.9[gssapi]
|
|
||||||
>=net-dns/c-ares-1.10.0-r1:=[${MULTILIB_USEDEP}]
|
|
||||||
>=net-nds/openldap-2.4.30:=[sasl,experimental]
|
|
||||||
net-fs/cifs-utils[acl]
|
|
||||||
>=sys-apps/dbus-1.6
|
|
||||||
>=sys-apps/keyutils-1.5:=
|
|
||||||
sys-libs/libcap
|
|
||||||
>=sys-libs/pam-0-r1[${MULTILIB_USEDEP}]
|
|
||||||
>=sys-libs/talloc-2.0.7
|
|
||||||
>=sys-libs/tdb-1.2.9
|
|
||||||
>=sys-libs/tevent-0.9.16
|
|
||||||
virtual/ldb:=
|
|
||||||
virtual/libintl
|
|
||||||
netlink? ( dev-libs/libnl:3 )
|
|
||||||
nfsv4? ( >=net-fs/nfs-utils-2.3.1-r2 )
|
|
||||||
nls? ( >=sys-devel/gettext-0.18 )
|
|
||||||
passkey? ( dev-libs/libfido2:= )
|
|
||||||
python? (
|
|
||||||
${PYTHON_DEPS}
|
|
||||||
systemd? (
|
|
||||||
$(python_gen_cond_dep '
|
|
||||||
dev-python/python-systemd[${PYTHON_USEDEP}]
|
|
||||||
')
|
|
||||||
)
|
|
||||||
)
|
|
||||||
samba? ( >=net-fs/samba-4.10.2[winbind] )
|
|
||||||
selinux? (
|
|
||||||
>=sys-libs/libselinux-2.1.9
|
|
||||||
>=sys-libs/libsemanage-2.1
|
|
||||||
)
|
|
||||||
systemd? (
|
|
||||||
sys-apps/systemd:=
|
|
||||||
sys-apps/util-linux
|
|
||||||
)
|
|
||||||
systemtap? ( dev-debug/systemtap )"
|
|
||||||
RDEPEND="${DEPEND}
|
|
||||||
acct-user/sssd
|
|
||||||
acct-group/sssd
|
|
||||||
passkey? ( sys-apps/pcsc-lite[policykit] )
|
|
||||||
selinux? ( >=sec-policy/selinux-sssd-2.20120725-r9 )"
|
|
||||||
DEPEND+="
|
|
||||||
sys-apps/shadow"
|
|
||||||
BDEPEND="
|
|
||||||
acct-user/sssd
|
|
||||||
acct-group/sssd
|
|
||||||
sys-libs/libcap
|
|
||||||
virtual/pkgconfig
|
|
||||||
${PYTHON_DEPS}
|
|
||||||
doc? ( app-text/doxygen )
|
|
||||||
nls? ( app-text/po4a
|
|
||||||
sys-devel/gettext )
|
|
||||||
test? (
|
|
||||||
dev-libs/check
|
|
||||||
dev-libs/softhsm:2
|
|
||||||
dev-util/cmocka
|
|
||||||
net-libs/gnutls[pkcs11,tools]
|
|
||||||
sys-libs/libfaketime
|
|
||||||
sys-libs/nss_wrapper
|
|
||||||
sys-libs/pam_wrapper
|
|
||||||
sys-libs/uid_wrapper
|
|
||||||
)
|
|
||||||
verify-sig? ( sec-keys/openpgp-keys-sssd )
|
|
||||||
app-text/docbook-xml-dtd:4.4
|
|
||||||
>=dev-libs/libxslt-1.1.26
|
|
||||||
"
|
|
||||||
|
|
||||||
CONFIG_CHECK="~KEYS"
|
|
||||||
|
|
||||||
PATCHES=(
|
|
||||||
"${FILESDIR}/${PN}-2.8.2-krb5_pw_locked.patch"
|
|
||||||
"${FILESDIR}/${PN}-2.9.6-conditional-python-install.patch"
|
|
||||||
"${FILESDIR}/${PN}-2.10.0_beta2-fix-systemd-systemconfdir.patch"
|
|
||||||
)
|
|
||||||
|
|
||||||
MULTILIB_WRAPPED_HEADERS=(
|
|
||||||
/usr/include/ipa_hbac.h
|
|
||||||
/usr/include/sss_idmap.h
|
|
||||||
/usr/include/sss_nss_idmap.h
|
|
||||||
# --with-ifp
|
|
||||||
/usr/include/sss_sifp.h
|
|
||||||
/usr/include/sss_sifp_dbus.h
|
|
||||||
# from 1.15.3
|
|
||||||
/usr/include/sss_certmap.h
|
|
||||||
)
|
|
||||||
|
|
||||||
sssd_migrate_files() {
|
|
||||||
if has_version "<=sys-auth/sssd-2.9.9999"
|
|
||||||
then
|
|
||||||
einfo "Checking if sssd is running"
|
|
||||||
if [ -f /run/sssd.pid ]
|
|
||||||
then
|
|
||||||
elog "Please stop sssd after installing before"
|
|
||||||
elog "performing the migration process"
|
|
||||||
fi
|
|
||||||
einfo "Checking if /var/lib/sss ownership"
|
|
||||||
if [ -d /var/lib/sss ] && [ $(stat -c "%U:%G" /var/lib/sss) != "sssd:sssd" ]
|
|
||||||
then
|
|
||||||
elog "After installing, please execute"
|
|
||||||
elog "chown -R sssd:sssd /var/lib/sss"
|
|
||||||
fi
|
|
||||||
einfo "Checking if /var/log/sssd ownership"
|
|
||||||
if [ -d /var/log/sssd ] && [ $(stat -c "%U:%G" /var/log/sssd) != "sssd:sssd" ]
|
|
||||||
then
|
|
||||||
elog "After installing, please execute"
|
|
||||||
elog "chown -R sssd:sssd /var/log/sssd"
|
|
||||||
fi
|
|
||||||
einfo "Checking if /etc/sssd ownership"
|
|
||||||
if ! use systemd && [ -d /etc/sssd ] && [ $(stat -c "%U:%G" /etc/sssd) != "root:sssd" ]
|
|
||||||
then
|
|
||||||
elog "After installing, please execute"
|
|
||||||
elog "chown -R root:sssd /etc/sssd"
|
|
||||||
fi
|
|
||||||
fi
|
|
||||||
}
|
|
||||||
|
|
||||||
pkg_setup() {
|
|
||||||
linux-info_pkg_setup
|
|
||||||
python-single-r1_pkg_setup
|
|
||||||
|
|
||||||
sssd_migrate_files
|
|
||||||
}
|
|
||||||
|
|
||||||
src_prepare() {
|
|
||||||
default
|
|
||||||
|
|
||||||
plocale_get_locales > src/man/po/LINGUAS || die
|
|
||||||
|
|
||||||
sed -i \
|
|
||||||
-e "/_langs]/ s/ .*//" \
|
|
||||||
src/man/po/po4a.cfg \
|
|
||||||
|| die
|
|
||||||
enable_locale() {
|
|
||||||
local locale=${1}
|
|
||||||
|
|
||||||
sed -i \
|
|
||||||
-e "/_langs]/ s/$/ ${locale}/" \
|
|
||||||
src/man/po/po4a.cfg \
|
|
||||||
|| die
|
|
||||||
}
|
|
||||||
|
|
||||||
plocale_for_each_locale enable_locale
|
|
||||||
|
|
||||||
PLOCALES="${PLOCALES_BIN}"
|
|
||||||
plocale_get_locales > po/LINGUAS || die
|
|
||||||
|
|
||||||
sed -i \
|
|
||||||
-e 's:/var/run:/run:' \
|
|
||||||
src/examples/logrotate \
|
|
||||||
|| die
|
|
||||||
|
|
||||||
# disable flaky test, see https://github.com/SSSD/sssd/issues/5631
|
|
||||||
sed -i \
|
|
||||||
-e '/^\s*pam-srv-tests[ \\]*$/d' \
|
|
||||||
Makefile.am \
|
|
||||||
|| die
|
|
||||||
|
|
||||||
# requires valgrind headers installed, see
|
|
||||||
# https://github.com/SSSD/sssd/pull/7845
|
|
||||||
sed -i \
|
|
||||||
-e '/^\s*test_iobuf[ \\]*$/d' \
|
|
||||||
Makefile.am \
|
|
||||||
|| die
|
|
||||||
|
|
||||||
eautoreconf
|
|
||||||
|
|
||||||
multilib_copy_sources
|
|
||||||
}
|
|
||||||
|
|
||||||
src_configure() {
|
|
||||||
local native_dbus_cflags=$($(tc-getPKG_CONFIG) --cflags dbus-1 || die)
|
|
||||||
|
|
||||||
multilib-minimal_src_configure
|
|
||||||
}
|
|
||||||
|
|
||||||
multilib_src_configure() {
|
|
||||||
local myconf=()
|
|
||||||
|
|
||||||
myconf+=(
|
|
||||||
--libexecdir="${EPREFIX}"/usr/libexec
|
|
||||||
--localstatedir="${EPREFIX}"/var
|
|
||||||
--runstatedir="${EPREFIX}"/run
|
|
||||||
--sbindir="${EPREFIX}"/usr/sbin
|
|
||||||
--with-pid-path="${EPREFIX}"/run/sssd
|
|
||||||
--with-plugin-path="${EPREFIX}"/usr/$(get_libdir)/sssd
|
|
||||||
--enable-pammoddir="${EPREFIX}"/$(getpam_mod_dir)
|
|
||||||
--with-ldb-lib-dir="${EPREFIX}"/usr/$(get_libdir)/samba/ldb
|
|
||||||
--with-db-path="${EPREFIX}"/var/lib/sss/db
|
|
||||||
--with-gpo-cache-path="${EPREFIX}"/var/lib/sss/gpo_cache
|
|
||||||
--with-pubconf-path="${EPREFIX}"/var/lib/sss/pubconf
|
|
||||||
--with-pipe-path="${EPREFIX}"/var/lib/sss/pipes
|
|
||||||
--with-mcache-path="${EPREFIX}"/var/lib/sss/mc
|
|
||||||
--with-secrets-db-path="${EPREFIX}"/var/lib/sss/secrets
|
|
||||||
--with-log-path="${EPREFIX}"/var/log/sssd
|
|
||||||
--with-tmpfilesdir=/usr/lib/tmpfiles.d
|
|
||||||
--with-udevrulesdir="$(get_udevdir)/rules.d"
|
|
||||||
--with-kcm
|
|
||||||
--enable-kcm-renewal
|
|
||||||
--with-os=gentoo
|
|
||||||
--disable-rpath
|
|
||||||
--disable-static
|
|
||||||
# Valgrind is only used for tests
|
|
||||||
--disable-valgrind
|
|
||||||
$(use_with samba)
|
|
||||||
--with-smb-idmap-interface-version=6
|
|
||||||
--enable-cifs-idmap-plugin
|
|
||||||
$(multilib_native_use_with selinux)
|
|
||||||
--enable-krb5-locator-plugin
|
|
||||||
$(use_enable samba pac-responder)
|
|
||||||
$(multilib_native_use_with nfsv4 nfsv4-idmapd-plugin)
|
|
||||||
$(use_enable nls)
|
|
||||||
$(multilib_native_use_with netlink libnl)
|
|
||||||
--with-manpages
|
|
||||||
--with-sudo
|
|
||||||
$(multilib_native_with autofs)
|
|
||||||
$(multilib_native_with ssh)
|
|
||||||
--without-oidc-child
|
|
||||||
$(multilib_native_with passkey)
|
|
||||||
--with-subid
|
|
||||||
$(use_enable systemtap)
|
|
||||||
--without-python2-bindings
|
|
||||||
$(multilib_native_use_with python python3-bindings)
|
|
||||||
# Annoyingly configure requires that you pick systemd XOR sysv
|
|
||||||
--with-initscript=$(usex systemd systemd sysv)
|
|
||||||
--with-sssd-user=sssd
|
|
||||||
KRB5_CONFIG="${ESYSROOT}"/usr/bin/krb5-config
|
|
||||||
CPPFLAGS="${CPPFLAGS} -I${ESYSROOT}/usr/include/samba-4.0"
|
|
||||||
)
|
|
||||||
|
|
||||||
use systemd && myconf+=(
|
|
||||||
--with-systemdunitdir=$(systemd_get_systemunitdir)
|
|
||||||
)
|
|
||||||
|
|
||||||
if ! multilib_is_native_abi; then
|
|
||||||
# work-around all the libraries that are used for CLI and server
|
|
||||||
myconf+=(
|
|
||||||
{POPT,TALLOC,TDB,TEVENT,LDB}_{CFLAGS,LIBS}=' '
|
|
||||||
# ldb headers are fine since native needs it
|
|
||||||
# ldb lib fails... but it does not seem to bother
|
|
||||||
{DHASH,UNISTRING,INI_CONFIG_V{0,1,1_1,1_3}}_{CFLAGS,LIBS}=' '
|
|
||||||
{PCRE,CARES,SYSTEMD_LOGIN,SASL,DBUS,CRYPTO,P11_KIT}_{CFLAGS,LIBS}=' '
|
|
||||||
{NDR_NBT,SAMBA_UTIL,SMBCLIENT,NDR_KRB5PAC,JANSSON}_{CFLAGS,LIBS}=' '
|
|
||||||
|
|
||||||
# use native include path for dbus (needed for build)
|
|
||||||
DBUS_CFLAGS="${native_dbus_cflags}"
|
|
||||||
|
|
||||||
# non-pkgconfig checks
|
|
||||||
ac_cv_lib_ldap_ldap_search=yes
|
|
||||||
--without-kcm
|
|
||||||
--without-manpages
|
|
||||||
)
|
|
||||||
fi
|
|
||||||
|
|
||||||
econf "${myconf[@]}"
|
|
||||||
}
|
|
||||||
|
|
||||||
multilib_src_compile() {
|
|
||||||
if multilib_is_native_abi; then
|
|
||||||
default
|
|
||||||
use doc && emake docs
|
|
||||||
else
|
|
||||||
emake libnss_sss.la pam_sss.la pam_sss_gss.la
|
|
||||||
emake sssd_krb5_locator_plugin.la
|
|
||||||
use samba && emake sssd_pac_plugin.la
|
|
||||||
fi
|
|
||||||
}
|
|
||||||
|
|
||||||
multilib_src_test() {
|
|
||||||
if multilib_is_native_abi; then
|
|
||||||
local -x CK_TIMEOUT_MULTIPLIER=10
|
|
||||||
emake check VERBOSE=yes
|
|
||||||
fi
|
|
||||||
}
|
|
||||||
|
|
||||||
multilib_src_install() {
|
|
||||||
if multilib_is_native_abi; then
|
|
||||||
emake -j1 DESTDIR="${D}" install
|
|
||||||
if use python; then
|
|
||||||
python_fix_shebang "${ED}"
|
|
||||||
python_optimize
|
|
||||||
fi
|
|
||||||
else
|
|
||||||
# easier than playing with automake...
|
|
||||||
dopammod .libs/pam_sss.so
|
|
||||||
dopammod .libs/pam_sss_gss.so
|
|
||||||
|
|
||||||
into /
|
|
||||||
dolib.so .libs/libnss_sss.so*
|
|
||||||
|
|
||||||
exeinto /usr/$(get_libdir)/krb5/plugins/libkrb5
|
|
||||||
doexe .libs/sssd_krb5_locator_plugin.so
|
|
||||||
|
|
||||||
if use samba; then
|
|
||||||
exeinto /usr/$(get_libdir)/krb5/plugins/authdata
|
|
||||||
doexe .libs/sssd_pac_plugin.so
|
|
||||||
fi
|
|
||||||
fi
|
|
||||||
}
|
|
||||||
|
|
||||||
multilib_src_install_all() {
|
|
||||||
einstalldocs
|
|
||||||
|
|
||||||
insinto /etc/sssd
|
|
||||||
insopts -m600
|
|
||||||
doins src/examples/sssd-example.conf
|
|
||||||
|
|
||||||
insinto /etc/logrotate.d
|
|
||||||
insopts -m644
|
|
||||||
newins src/examples/logrotate sssd
|
|
||||||
|
|
||||||
newconfd "${FILESDIR}"/sssd.conf sssd
|
|
||||||
|
|
||||||
keepdir /var/lib/sss/db
|
|
||||||
keepdir /var/lib/sss/deskprofile
|
|
||||||
keepdir /var/lib/sss/gpo_cache
|
|
||||||
keepdir /var/lib/sss/keytabs
|
|
||||||
keepdir /var/lib/sss/mc
|
|
||||||
keepdir /var/lib/sss/pipes/private
|
|
||||||
keepdir /var/lib/sss/pubconf/krb5.include.d
|
|
||||||
keepdir /var/lib/sss/secrets
|
|
||||||
keepdir /var/log/sssd
|
|
||||||
keepdir /etc/sssd/conf.d
|
|
||||||
keepdir /etc/sssd/pki
|
|
||||||
|
|
||||||
# strip empty dirs
|
|
||||||
if ! use doc; then
|
|
||||||
rm -r "${ED}"/usr/share/doc/"${PF}"/doc || die
|
|
||||||
rm -r "${ED}"/usr/share/doc/"${PF}"/{hbac,idmap,nss_idmap}_doc || die
|
|
||||||
fi
|
|
||||||
|
|
||||||
rm -r "${ED}"/run || die
|
|
||||||
find "${ED}" -type f -name '*.la' -delete || die
|
|
||||||
}
|
|
||||||
|
|
||||||
pkg_postinst() {
|
|
||||||
tmpfiles_process sssd-tmpfiles.conf
|
|
||||||
echo
|
|
||||||
elog "You must set up sssd.conf (default installed into /etc/sssd)"
|
|
||||||
elog "and (optionally) configuration in /etc/pam.d in order to use SSSD"
|
|
||||||
elog "features."
|
|
||||||
echo
|
|
||||||
optfeature "Kerberos keytab renew (see krb5_renew_interval)" app-crypt/adcli
|
|
||||||
|
|
||||||
if ! use python; then
|
|
||||||
echo
|
|
||||||
ewarn "sssctl analyze will not work because the python USE flag is disabled."
|
|
||||||
fi
|
|
||||||
}
|
|
||||||
Reference in New Issue
Block a user