Summary: A RFC 1413 ident protocol daemon

Name: authd

Version: 1.4.3

Release: 42%{?dist}

License: GPLv2+

Group: System Environment/Daemons

URL: https://fedorahosted.org/authd/

Obsoletes: pidentd <= 3.2

Provides: pidentd = 3.2

Requires(post): openssl

Source0: http://fedorahosted.org/releases/a/u/authd/authd-1.4.3.tar.gz

Source1: auth.socket

Source2: auth@.service

Patch0: authd-1.4.3-gcc4.patch

Patch1: authd-1.4.3-disable.patch

Patch2: authd-1.4.3-ipv6-mapping.patch

Patch3: authd-1.4.3-locale.patch

Patch4: authd-1.4.3-longopt-identifier.patch

Patch5: authd-1.4.3-jiffies64.patch

Patch6: authd-1.4.3-valist.patch

Patch7: authd-1.4.3-license.patch

Patch8: authd-1.4.3-relro.patch

BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root

BuildRequires: openssl-devel gettext help2man systemd-units

Requires(post): systemd-units

Requires(preun): systemd-units

Requires(postun): systemd-units

%description

authd is a small and fast RFC 1413 ident protocol daemon

with both xinetd server and interactive modes that

supports IPv6 and IPv4 as well as the more popular features

of pidentd.

%prep

%setup -q

%patch0 -p1

%patch1 -p1

%patch2 -p1 -b .ipv6map

%patch3 -p1 -b .locale

%patch4 -p1

%patch5 -p1 -b .jiffies64

%patch6 -p1 -b .valist

%patch7 -p1 -b .license

sed -i -e "s|/etc|%{_sysconfdir}|" config.h

sed -i -e "/^CFLAGS=.*$/d" GNUmakefile

%patch8 -p1 -b .relro

%build

CFLAGS="$RPM_OPT_FLAGS -std=c99 -DNDEBUG -fPIE" make prefix=%{_prefix}

%install

rm -rf $RPM_BUILD_ROOT

%makeinstall

install -d ${RPM_BUILD_ROOT}%{_unitdir}/

install -m 644 %{SOURCE1} ${RPM_BUILD_ROOT}%{_unitdir}/

install -m 644 %{SOURCE2} ${RPM_BUILD_ROOT}%{_unitdir}/

install -d ${RPM_BUILD_ROOT}%{_sysconfdir}/

touch ${RPM_BUILD_ROOT}%{_sysconfdir}/ident.key

install -d ${RPM_BUILD_ROOT}/%{_mandir}/man1/

help2man -N -v -V ${RPM_BUILD_ROOT}/%{_sbindir}/in.authd -o \

         ${RPM_BUILD_ROOT}/%{_mandir}/man1/in.authd.1

%find_lang %{name}

%clean

rm -rf $RPM_BUILD_ROOT

%post

/usr/sbin/adduser -s /sbin/nologin -u 98 -r -d '/' ident 2>/dev/null || true

/usr/bin/openssl rand -base64 -out %{_sysconfdir}/ident.key 32

echo CHANGE THE LINE ABOVE TO A PASSPHRASE >> %{_sysconfdir}/ident.key

/bin/chown ident:ident %{_sysconfdir}/ident.key

chmod o-rw %{_sysconfdir}/ident.key

%systemd_post auth.socket

%postun

%systemd_postun_with_restart auth.socket

%preun

%systemd_preun auth.socket

%files -f authd.lang

%defattr(-,root,root,-)

%verify(not md5 size mtime user group) %config(noreplace) %attr(640,root,root) %{_sysconfdir}/ident.key

%doc COPYING README.html rfc1413.txt

%{_sbindir}/in.authd

%{_mandir}/*/*

%{_unitdir}/*

%changelog

* Mon Jul 27 2015 Tomas Smetana <tsmetana@redhat.com> - 1.4.3-42

- Build with PIE and full RELRO

  Resolves: #1092568

* Tue Mar 11 2014 Jan Synáček <jsynacek@redhat.com> - 1.4.3-41

- Use CFLAGS correctly

  Resolves: #1070785

* Fri Jan 24 2014 Daniel Mach <dmach@redhat.com> - 1.4.3-40

- Mass rebuild 2014-01-24

* Fri Dec 27 2013 Daniel Mach <dmach@redhat.com> - 1.4.3-39

- Mass rebuild 2013-12-27

* Wed Feb 13 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.4.3-38

- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild

* Fri Nov 30 2012 Roman Rakus <rrakus@redhat.com> - 1.4.3-37

- Fix a typo in build requirements

* Fri Nov 30 2012 Roman Rakus <rrakus@redhat.com> - 1.4.3-36

- Provide native systemd service file

  Resolves: #737153

* Thu Nov 29 2012 Roman Rakus <rrakus@redhat.com> - 1.4.3-35

- Generate and include man page

* Mon Nov 19 2012 Roman Rakus <rrakus@redhat.com> - 1.4.3-34

- Fixed address in license text

* Wed Jul 18 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.4.3-33

- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild

* Thu Jan 12 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.4.3-32

- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild

* Mon Feb 07 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.4.3-31

- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild

* Mon Jun 14 2010 Roman Rakus <rrakus@redhat.com> - 1.4.3-30

- Use only once defattr macro

- Use RPM_OPT_FLAGS for CFLAGS in build section

* Fri Aug 21 2009 Tomas Mraz <tmraz@redhat.com> - 1.4.3-28

- rebuilt with new openssl

* Fri Jul 24 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.4.3-27

- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild

* Thu Apr 09 2009 Roman Rakus <rrakus@redhat.com> - 1.4.3-26

- get back to older version of jiffies64 patch

* Tue Mar 31 2009 Roman Rakus <rrakus@redhat.com> - 1.4.3-25

- Fixed source tag

* Tue Mar 31 2009 Roman Rakus <rrakus@redhat.com> - 1.4.3-24

- Fixed using valist with log option on.

  Resolves: #446844

- user ident has home dir set to /

  Resolves: #458144

* Mon Feb 23 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.4.3-23

- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild

* Thu Jan 15 2009 Tomas Mraz <tmraz@redhat.com> - 1.4.3-22

- rebuild with new openssl

* Wed Jul 23 2008 Roman Rakus <rrakus@redhat.com> - 1.4.3-21

- Corrected config directive for ident.key to noreplace

- Fixed some typos in specfile

* Tue Apr 29 2008 Roman Rakus <rrakus@redhat.com> - 1.4.3-20

- another corrections of jiffies64 patch

* Wed Mar 26 2008 Roman Rakus <rrakus@redhat.com> - 1.4.3-19

- corrected jiffies64 patch

* Thu Mar  6 2008 Roman Rakus <rrakus@redhat.com> - 1.4.3-18

- corrected Source0

- corrected link in URL

- source added to svn on fedorahosted

* Wed Mar  5 2008 Roman Rakus <rrakus@redhat.com> - 1.4.3-16

- fixed Source0

* Wed Mar  5 2008 Roman Rakus <rrakus@redhat.com> - 1.4.3-15

- added dist tag

- added URL

* Tue Feb 26 2008 Roman Rakus <rrakus@redhat.com> - 1.4.3-14

- fix 234262 bug

* Wed Feb 13 2008 Jan Safranek <jsafrane@redhat.com> - 1.4.3-13

- fix rpmlint errors

* Tue Feb 12 2008 Jan Safranek <jsafrane@redhat.com> - 1.4.3-12

- fix build with new gcc

* Fri Dec 07 2007 Release Engineering <rel-eng at fedoraproject dot org> - 1.4.3-11

- Rebuild for deps

* Wed Sep 19 2007 Ondrej Dvoracek <odvorace@redhat.com> - 1.4.3-10

- corrected illegal identifier in longopt enumeration (#245436)

- corrected summary and license

* Mon Jul 24 2006 Martin Stransky <stransky@redhat.com> - 1.4.3-9

- added locale patch (#199721)

* Wed Jul 12 2006 Jesse Keating <jkeating@redhat.com> - 1.4.3-8.1

- rebuild

* Sun May 28 2006 Martin Stransky <stransky@redhat.com> - 1.4.3-8

- added gettext dependency (#193350)

* Fri Feb 10 2006 Jesse Keating <jkeating@redhat.com> - 1.4.3-7.1

- bump again for double-long bug on ppc(64)

* Tue Feb 07 2006 Martin Stransky <stransky@redhat.com> - 1.4.3-7

- re-tag

* Tue Feb 07 2006 Jesse Keating <jkeating@redhat.com> - 1.4.3-6.devel.2

- rebuilt for new gcc4.1 snapshot and glibc changes

* Fri Dec 09 2005 Jesse Keating <jkeating@redhat.com>

- rebuilt

* Tue Nov 8  2005 Martin Stransky <stransky@redhat.com>

- rebuilt

* Thu Jun 24 2005 Martin Stransky <stransky@redhat.com> - 1.4.3-5.devel

- add xinetd to Prereq

- fix for #150502 (authd doesn't map IPv6 to IPv4 from xinetd)

* Fri Apr  8 2005 Martin Stransky <stransky@redhat.com> - 1.4.3-4.devel

- clear last update

* Fri Apr  8 2005 Martin Stransky <stransky@redhat.com> - 1.4.3-3.devel

- delete user "ident" after uninstalation

* Thu Apr  7 2005 Martin Stransky <stransky@redhat.com> - 1.4.3-2.devel

- in.authd disabled by default (#151905)

* Mon Mar  7 2005 Martin Stransky <stransky@redhat.com> - 1.4.3-1.devel

- update to 1.4.3

- gcc4.0 patch

- add post-uninstall reconfiguration (#150460)

* Mon Feb 14 2005 Adrian Havill <havill@redhat.com>

- rebuilt

* Fri Oct 15 2004 Adrian Havill <havill@redhat.com> - 1.4.2-8

- tweak setting of uid/gid for key file so systems with no prior

  ident user/group don't generate a warning (#135837)

* Thu Oct 14 2004 Adrian Havill <havill@redhat.com> - 1.4.2-4

- slightly better error checking for insane cases

- tweak of the openssl requires dependency loop (#131291)

- as ident.key is created in %%post, tweak so verify passes (#131530)

- make the uid/gid for ident conform to the past (#135752)

* Wed Jul 28 2004 Adrian Havill <havill@redhat.com> - 1.4.1-1

- only scan for ESTABLISHED connections

- extra debug output for crypto

* Mon Jul 26 2004 Adrian Havill <havill@redhat.com> - 1.4.0-1

- revise makefile; don't over-optimize as gcc can produce bad code

- ptr cleanup when multiquery and missing /proc/net/tcp*

- improve create_opt (error handling, debugging, identifiers)

- add --prefix option for matching IPv4 to IPv6

* Tue Jul 13 2004 Adrian Havill <havill@redhat.com> - 1.3.4-1

- retry reading proc with pauses to reduce false negatives

- match IPv4 addresses against IPv6 compatibility addresses

* Mon Jul 12 2004 Adrian Havill <havill@redhat.com> - 1.3.3-1

- use gnu *_unlocked stream funcs for faster I/O

* Sat Jul 10 2004 Adrian Havill <havill@redhat.com> - 1.3.2-1

- enforce rfc restriction limiting port search to the connected

  local/foreign pair

* Fri Jul 08 2004 Adrian Havill <havill@redhat.com> - 1.3.1-1

- increase default connections-per-sec/max-instances for HP

- more doc cleanup

- remove unnecessary rootdir check for -N/--ident

* Fri Jul 02 2004 Adrian Havill <havill@redhat.com> - 1.3.0-1

- add unknown-error only -e option

- edit readme, add rfc to docdir

- code cleanup; remove static buffers, orthagonalize id names

- ipv6 hybrid addr zero run correction

- extra eight bits added to random key

* Wed Jun 30 2004 Adrian Havill <havill@redhat.com> - 1.2.8-1

- zero out invalid port(s)

* Tue Jun 29 2004 Adrian Havill <havill@redhat.com> - 1.2.7-1

- added Provides to satisfy HP pkg rpm dep (#121447, #111640)

- more code cleanup; minimize --resolve dns lookups

* Mon Jun 28 2004 Adrian Havill <havill@redhat.com> - 1.2.6-1

- incorporated suggestions from Thomas Zehetbauer (#124914)

* Sat Jun 26 2004 Adrian Havill <havill@redhat.com> - 1.2.5-1

- clean up src

* Thu Jun 24 2004 Adrian Havill <havill@redhat.com> - 1.2.4-1

- code vet and minor changes re alan@'s comments

- default operating mode to alias all usernames as 'nobody'

  to prevent noobies from getting their mail addr harvested

- clean up README documentation

* Wed Jun 23 2004 Adrian Havill <havill@redhat.com> - 1.2.3-1

- mark xinetd conf file as a noreplace config file

- more robust error checking for proper rfc1413 tokens

* Tue Jun 22 2004 Adrian Havill <havill@redhat.com> - 1.2.1-1

- add Requires and BuildRequires

* Mon Jun 21 2004 Adrian Havill <havill@redhat.com> - 1.2.0-1

- A few tweaks in the cmdline options for orthagonality

- minor bug fix regarding reading from stdin in some multiquery cmdline cases

- add --resolve

* Sun Jun 20 2004 Adrian Havill <havill@redhat.com> - 1.1.0-1

- add extra options for --help, --usage

* Sat Jun 19 2004 Adrian Havill <havill@redhat.com> - 1.0.0-2

- Obsolete pidentd -- authd and pidentd can't/shouldn't coexist on FC/RHEL

- license tweak to allow openssl under any condition

- no spec url needed; package is not worthy enough.

* Fri Jun 18 2004 Jens Petersen <petersen@redhat.com> - 1.0.0-1

- Initial packaging