contrib/fedora/ipsilon.spec

   1 # Bundling request for bootstrap/patternfly: https://fedorahosted.org/fpc/ticket/483
   2
   3 Name:       ipsilon
   4 Version:    0.6.0
   5 Release:    1%{?builddate}%{?gittag}%{?dist}
   6 Summary:    An Identity Provider Server
   7
   8 Group:      System Environment/Base
   9 License:    GPLv3+
  10 URL:        https://fedorahosted.org/ipsilon/
  11 Source0:    https://fedorahosted.org/released/ipsilon/ipsilon-%{version}.tar.gz
  12 BuildArch:  noarch
  13
  14
  15 BuildRequires:  python2-devel
  16 BuildRequires:  python-setuptools
  17 BuildRequires:  lasso-python
  18 BuildRequires:  python-openid, python-openid-cla, python-openid-teams
  19 BuildRequires:  m2crypto
  20
  21 Requires:       python-requests
  22 Requires:       %{name}-base = %{version}-%{release}
  23 BuildArch:      noarch
  24
  25 %description
  26 Ipsilon is a multi-protocol Identity Provider service. Its function is to
  27 bridge authentication providers and applications to achieve Single Sign On
  28 and Federation.
  29
  30
  31 %package base
  32 Summary:        Ipsilon base IDP server
  33 Group:          System Environment/Base
  34 License:        GPLv3+
  35 Requires:       httpd
  36 Requires:       mod_ssl
  37 Requires:       %{name}-filesystem = %{version}-%{release}
  38 Requires:       %{name}-provider = %{version}-%{release}
  39 Requires:       mod_wsgi
  40 Requires:       python-cherrypy
  41 Requires:       python-jinja2
  42 Requires:       python-lxml
  43 Requires:       python-sqlalchemy
  44 Requires:       open-sans-fonts
  45 Requires(pre):  shadow-utils
  46 Requires(post): %_sbindir/semanage, %_sbindir/restorecon
  47 Requires(postun): %_sbindir/semanage
  48
  49
  50 %description base
  51 The Ipsilon IdP server without installer
  52
  53
  54 %package filesystem
  55 Summary:        Package providing files required by Ipsilon
  56 Group:          System Environment/Base
  57 License:        GPLv3+
  58
  59 %description filesystem
  60 Package providing basic directory structure required
  61 for all Ipsilon parts
  62
  63
  64 %package client
  65 Summary:        Tools for configuring Ipsilon clients
  66 Group:          System Environment/Base
  67 License:        GPLv3+
  68 Requires:       %{name}-filesystem = %{version}-%{release}
  69 Requires:       %{name}-saml2-base = %{version}-%{release}
  70 Requires:       mod_auth_mellon
  71 BuildArch:      noarch
  72
  73 %description client
  74 Client install tools
  75
  76
  77 %package tools-ipa
  78 summary:        IPA helpers
  79 Group:          System Environment/Base
  80 License:        GPLv3+
  81 Requires:       %{name}-authkrb = %{version}-%{release}
  82 Requires:       %{name}-authform = %{version}-%{release}
  83 %if 0%{?rhel}
  84 Requires:       ipa-client
  85 Requires:       ipa-admintools
  86 %else
  87 Requires:       freeipa-client
  88 Requires:       freeipa-admintools
  89 %endif
  90 BuildArch:      noarch
  91
  92 %description tools-ipa
  93 Convenience client install tools for IPA support in the Ipsilon identity Provider
  94
  95
  96 %package saml2-base
  97 Summary:        SAML2 base
  98 Group:          System Environment/Base
  99 License:        GPLv3+
 100 Requires:       lasso-python
 101 Requires:       python-lxml
 102 BuildArch:      noarch
 103
 104 %description saml2-base
 105 Provides core SAML2 utilities
 106
 107
 108 %package saml2
 109 Summary:        SAML2 provider plugin
 110 Group:          System Environment/Base
 111 License:        GPLv3+
 112 Provides:       ipsilon-provider = %{version}-%{release}
 113 Requires:       %{name} = %{version}-%{release}
 114 Requires:       %{name}-saml2-base = %{version}-%{release}
 115 BuildArch:      noarch
 116
 117 %description saml2
 118 Provides a SAML2 provider plugin for the Ipsilon identity Provider
 119
 120
 121 %package openid
 122 Summary:        Openid provider plugin
 123 Group:          System Environment/Base
 124 License:        GPLv3+
 125 Provides:       ipsilon-provider = %{version}-%{release}
 126 Requires:       %{name} = %{version}-%{release}
 127 Requires:       python-openid
 128 Requires:       python-openid-cla
 129 Requires:       python-openid-teams
 130 BuildArch:      noarch
 131
 132 %description openid
 133 Provides an OpenId provider plugin for the Ipsilon identity Provider
 134
 135
 136 %package persona
 137 Summary:        Persona provider plugin
 138 Group:          System Environment/Base
 139 License:        GPLv3+
 140 Provides:       ipsilon-provider = %{version}-%{release}
 141 Requires:       %{name} = %{version}-%{release}
 142 Requires:       m2crypto
 143 BuildArch:      noarch
 144
 145 %description persona
 146 Provides a Persona provider plugin for the Ipsilon identity Provider
 147
 148
 149 %package authfas
 150 Summary:        Fedora Authentication System login plugin
 151 Group:          System Environment/Base
 152 License:        GPLv3+
 153 Requires:       %{name} = %{version}-%{release}
 154 Requires:       python-fedora
 155 BuildArch:      noarch
 156
 157 %description authfas
 158 Provides a login plugin to authenticate against the Fedora Authentication System
 159
 160
 161 %package authform
 162 Summary:        mod_intercept_form_submit login plugin
 163 Group:          System Environment/Base
 164 License:        GPLv3+
 165 Requires:       %{name} = %{version}-%{release}
 166 Requires:       mod_intercept_form_submit
 167 BuildArch:      noarch
 168
 169 %description authform
 170 Provides a login plugin to authenticate with mod_intercept_form_submit
 171
 172
 173 %package authpam
 174 Summary:        PAM based login plugin
 175 Group:          System Environment/Base
 176 License:        GPLv3+
 177 Requires:       %{name} = %{version}-%{release}
 178 Requires:       python-pam
 179 BuildArch:      noarch
 180
 181 %description authpam
 182 Provides a login plugin to authenticate against the local PAM stack
 183
 184
 185 %package authkrb
 186 Summary:        mod_auth_kerb based login plugin
 187 Group:          System Environment/Base
 188 License:        GPLv3+
 189 Requires:       %{name} = %{version}-%{release}
 190 Requires:       mod_auth_kerb
 191 BuildArch:      noarch
 192
 193 %description authkrb
 194 Provides a login plugin to allow authentication via the mod_auth_kerb Apache
 195 module.
 196
 197
 198 %package authldap
 199 Summary:        mod_auth_kerb based login plugin
 200 Group:          System Environment/Base
 201 License:        GPLv3+
 202 Requires:       %{name} = %{version}-%{release}
 203 Requires:       python-ldap
 204 BuildArch:      noarch
 205
 206 %description authldap
 207 Provides a login plugin to allow authentication and info retrieval via LDAP.
 208
 209 %package infosssd
 210 Summary:        SSSD & mod_lookup_identity-based identity plugin
 211 Group:          System Environment/Base
 212 License:        GPLv3+
 213 Requires:       %{name} = %{version}-%{release}
 214 Requires:       mod_lookup_identity
 215 Requires:       libsss_simpleifp
 216 Requires:       sssd >= 1.12.4
 217 BuildArch:      noarch
 218
 219 %description infosssd
 220 Provides an info plugin to allow retrieval via mod_lookup_identity and
 221 SSSD.
 222
 223 %prep
 224 %setup -q
 225
 226
 227 %build
 228 CFLAGS="%{optflags}" %{__python} setup.py build
 229
 230
 231 %install
 232 %{__python} setup.py install --skip-build --root %{buildroot}
 233 mkdir -p %{buildroot}%{_sbindir}
 234 mkdir -p %{buildroot}%{_defaultdocdir}
 235 # These 0700 permissions are because ipsilon will store private keys here
 236 install -d -m 0700 %{buildroot}%{_sharedstatedir}/ipsilon
 237 install -d -m 0700 %{buildroot}%{_sysconfdir}/ipsilon
 238 mv %{buildroot}/%{_bindir}/ipsilon %{buildroot}/%{_sbindir}
 239 mv %{buildroot}/%{_bindir}/ipsilon-server-install %{buildroot}/%{_sbindir}
 240 mv %{buildroot}%{_defaultdocdir}/%{name} %{buildroot}%{_defaultdocdir}/%{name}-%{version}
 241 rm -fr %{buildroot}%{python2_sitelib}/tests
 242 ln -s %{_datadir}/fonts %{buildroot}%{_datadir}/ipsilon/ui/fonts
 243
 244 #%check
 245 # The test suite is not being run because:
 246 #  1. The last step of %%install removes the entire test suite
 247 #  2. It increases build time a lot
 248 #  3. It adds more build dependencies (namely postgresql server and client libraries)
 249
 250 %pre
 251 getent group ipsilon >/dev/null || groupadd -r ipsilon
 252 getent passwd ipsilon >/dev/null || \
 253     useradd -r -g ipsilon -d %{_sharedstatedir}/ipsilon -s /sbin/nologin \
 254     -c "Ipsilon Server" ipsilon
 255 exit 0
 256
 257 %post
 258 semanage fcontext -a -t httpd_var_lib_t '%{_sharedstatedir}/ipsilon(/.*)?' || :
 259 semanage fcontext -a -t var_lib_t '%{_sharedstatedir}/ipsilon(/.*)/*.conf' || :
 260 restorecon -R %{_sharedstatedir}/ipsilon || :
 261
 262 %postun
 263 # Clean up after package removal
 264 if [ $1 -eq 0 ]; then
 265     semanage fcontext -d -t var_lib_t '%{_sharedstatedir}/ipsilon(/.*)/*.conf' || :
 266     semanage fcontext -d -t httpd_var_lib_t '%{_sharedstatedir}/ipsilon(/.*)?' || :
 267 fi
 268
 269
 270 %files filesystem
 271 %doc COPYING README
 272 %dir %{_datadir}/ipsilon
 273 %dir %{_datadir}/ipsilon/templates
 274 %dir %{_datadir}/ipsilon/templates/install
 275 %dir %{python2_sitelib}/ipsilon
 276 %{python2_sitelib}/ipsilon/__init__.py*
 277 %{python2_sitelib}/ipsilon-*.egg-info
 278 %dir %{python2_sitelib}/ipsilon/tools
 279 %{python2_sitelib}/ipsilon/tools/__init__.py*
 280 %{python2_sitelib}/ipsilon/tools/files.py*
 281
 282 %files
 283 %{_sbindir}/ipsilon-server-install
 284 %{_datadir}/ipsilon/templates/install/*.conf
 285 %{_datadir}/ipsilon/ui/saml2sp
 286 %dir %{python2_sitelib}/ipsilon/helpers
 287 %{python2_sitelib}/ipsilon/helpers/common.py*
 288 %{python2_sitelib}/ipsilon/helpers/__init__.py*
 289
 290 %files base
 291 %{_defaultdocdir}/%{name}-%{version}
 292 %{python2_sitelib}/ipsilon/admin
 293 %{python2_sitelib}/ipsilon/rest
 294 %dir %{python2_sitelib}/ipsilon/login
 295 %{python2_sitelib}/ipsilon/login/__init__*
 296 %{python2_sitelib}/ipsilon/login/common*
 297 %{python2_sitelib}/ipsilon/login/authtest*
 298 %dir %{python2_sitelib}/ipsilon/info
 299 %{python2_sitelib}/ipsilon/info/__init__*
 300 %{python2_sitelib}/ipsilon/info/common*
 301 %{python2_sitelib}/ipsilon/info/infonss*
 302 %dir %{python2_sitelib}/ipsilon/providers
 303 %{python2_sitelib}/ipsilon/providers/__init__*
 304 %{python2_sitelib}/ipsilon/providers/common*
 305 %{python2_sitelib}/ipsilon/root.py*
 306 %{python2_sitelib}/ipsilon/util
 307 %{_mandir}/man*/ipsilon*
 308 %{_datadir}/ipsilon/templates/*.html
 309 %{_datadir}/ipsilon/templates/admin
 310 %dir %{_datadir}/ipsilon/templates/login
 311 %{_datadir}/ipsilon/templates/login/index.html
 312 %{_datadir}/ipsilon/templates/login/form.html
 313 %dir %{_datadir}/ipsilon/ui
 314 %{_datadir}/ipsilon/ui/css
 315 %{_datadir}/ipsilon/ui/img
 316 %{_datadir}/ipsilon/ui/js
 317 %{_datadir}/ipsilon/ui/fonts
 318 %{_sbindir}/ipsilon
 319 %dir %attr(0700,ipsilon,ipsilon) %{_sharedstatedir}/ipsilon
 320 %dir %attr(0700,ipsilon,ipsilon) %{_sysconfdir}/ipsilon
 321
 322 %files client
 323 %{_bindir}/ipsilon-client-install
 324 %{_datadir}/ipsilon/templates/install/saml2
 325
 326 %files tools-ipa
 327 %{python2_sitelib}/ipsilon/helpers/ipa.py*
 328
 329 %files saml2-base
 330 %{python2_sitelib}/ipsilon/tools/saml2metadata.py*
 331 %{python2_sitelib}/ipsilon/tools/certs.py*
 332
 333 %files saml2
 334 %{python2_sitelib}/ipsilon/providers/saml2*
 335 %{_datadir}/ipsilon/templates/saml2
 336
 337 %files openid
 338 %{python2_sitelib}/ipsilon/providers/openid*
 339 %{_datadir}/ipsilon/templates/openid
 340
 341 %files persona
 342 %{python2_sitelib}/ipsilon/providers/persona*
 343 %{_datadir}/ipsilon/templates/persona
 344
 345 %files authfas
 346 %{python2_sitelib}/ipsilon/login/authfas*
 347
 348 %files authform
 349 %{python2_sitelib}/ipsilon/login/authform*
 350
 351 %files authpam
 352 %{python2_sitelib}/ipsilon/login/authpam*
 353
 354 %files authkrb
 355 %{python2_sitelib}/ipsilon/login/authkrb*
 356 %{_datadir}/ipsilon/templates/login/krb.html
 357
 358 %files authldap
 359 %{python2_sitelib}/ipsilon/login/authldap*
 360 %{python2_sitelib}/ipsilon/info/infoldap*
 361
 362 %files infosssd
 363 %{python2_sitelib}/ipsilon/info/infosssd.*
 364
 365 %changelog
 366 * Wed Apr 15 2015 Patrick Uiterwijk <puiterwijk@redhat.com> - 0.6.0-1
 367 - Release 0.6.0
 368
 369 * Mon Mar 30 2015 Patrick Uiterwijk <puiterwijk@redhat.com> - 0.5.0-1
 370 - Released 0.5.0
 371
 372 * Fri Feb 27 2015 Patrick Uiterwijk <puiterwijk@redhat.com> - 0.4.0-1
 373 - Released 0.4.0
 374
 375 * Tue Feb 24 2015 Patrick Uiterwijk <puiterwijk@redhat.com> - 0.3.0-7
 376 - Split the installer into -tools
 377 - Split authform into -authform
 378
 379 * Thu Feb 12 2015 Rob Crittenden <rcritten@redhat.com> - 0.3.0-6
 380 - Add mod_identity_lookup info plugin package
 381
 382 * Wed Jan 28 2015 Patrick Uiterwijk <puiterwijk@redhat.com> - 0.3.0-5
 383 - Split IPA tools
 384
 385 * Mon Jan 12 2015 Patrick Uiterwijk <puiterwijk@redhat.com> - 0.3.0-4
 386 - Add symlink to fonts directory
 387
 388 * Tue Dec 16 2014 Patrick Uiterwijk <puiterwijk@redhat.com> - 0.3.0-3
 389 - Fix typo
 390 - Add comments on why the test suite is not in check
 391 - The subpackages require the base package
 392 - Add link to FPC ticket for bundling exception request
 393
 394 * Tue Dec 16 2014 Patrick Uiterwijk <puiterwijk@redhat.com> - 0.3.0-2
 395 - Fix shebang removal
 396
 397 * Tue Dec 16 2014 Patrick Uiterwijk <puiterwijk@redhat.com> - 0.3.0-1
 398 - Initial packaging