#

#               Red Hat BIND package .spec file

#

%{?!SDB:        %define SDB         1}

%{?!LIBBIND:    %define LIBBIND	    1}

%{?!efence:     %define efence      0}

%{?!test:       %define test        0}

%{?!WITH_DBUS:  %define WITH_DBUS   1} # + dynamic forwarder table management with D-BUS

%{?!DEBUGINFO:  %define DEBUGINFO   1}

%{?!bind_uid:   %define bind_uid   25}

%{?!bind_gid:   %define bind_gid   25}

%{?!selinux:	%define selinux     1}

%define		bind_dir      /var/named

%define    	chroot_prefix %{bind_dir}/chroot

#

Summary: 	The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) server.

Name: 		bind

License: 	BSD-like

Version: 	9.4.0

Release: 	8%{?dist}

Epoch:   	31

Url: 		http://www.isc.org/products/BIND/

Buildroot: 	%{_tmppath}/%{name}-root

Group: 		System Environment/Daemons

#

Source: 	ftp://ftp.isc.org/isc/bind9/%{version}/bind-%{version}.tar.gz

Source1: 	named.sysconfig

Source2: 	named.init

Source3: 	named.logrotate

Source4: 	keygen.c

Source5: 	rfc1912.txt

Source6: 	bind-chroot.tar.gz

Source7: 	bind-9.3.1rc1-sdb_tools-Makefile.in

Source8: 	http://www.venaas.no/ldap/bind-sdb/dnszone.schema

Source9: 	libbind-man.tar.gz

Source10: 	named-dbus.conf

Source11: 	named.service

Source12: 	README.sdb_pgsql

Source13: 	namedSetForwarders

Source14: 	namedGetForwarders

Source16: 	named.caching-nameserver.conf

Source17: 	named.root

Source18: 	named.local

Source19: 	localhost.zone

Source20: 	localdomain.zone

Source21: 	named.ip6.local

Source22: 	named.broadcast

Source23: 	named.zero

Source24:	Copyright.caching-nameserver

Source26: 	bind-chroot-admin.in

Source27:       named.rfc1912.zones

Source28:	libbind.pc

Source29:	named.conf.sample

Source30:       named.rfc1912.zones.sample

Source31:       named.root.hints

#

Patch:  	bind-9.2.0rc3-varrun.patch

Patch1: 	bind-9.3.3rc2-rndckey.patch

Patch2: 	bind-9.3.1beta2-openssl-suffix.patch

Patch4: 	bind-bsdcompat.patch

Patch5: 	bind-nonexec.patch

Patch6: 	bind-9.2.2-nsl.patch

Patch10: 	bind-9.3.2b1-PIE.patch

Patch11: 	bind-9.3.2b2-sdbsrc.patch

Patch12: 	bind-9.3.1rc1-sdb.patch

Patch13: 	bind-9.3.1rc1-fix_libbind_includedir.patch

Patch14: 	libbind-9.3.1rc1-fix_h_errno.patch

Patch15: 	bind-9.3.3rc2-dbus.patch

Patch16: 	bind-9.3.2-redhat_doc.patch

Patch17: 	bind-9.3.2b1-fix_sdb_ldap.patch

#Patch19: 	bind-9.3.1-next_server_on_referral.patch

#Patch20: 	bind-9.3.2b2-no_servfail_stops.patch

Patch22: 	bind-9.3.1-sdb_dbus.patch

Patch23: 	bind-9.3.1-dbus_archdep_libdir.patch

Patch32:	bind-9.3.2-prctl_set_dumpable.patch

Patch52:	bind-9.3.3-edns.patch

#

Requires:	bind-libs = %{epoch}:%{version}-%{release}, glibc  >= 2.2, mktemp

Requires(post): bash, coreutils, sed, grep, chkconfig >= 1.3.26

Requires(pre): 	shadow-utils

Requires(preun):chkconfig >= 1.3.26

%if %{selinux}

Requires(post):	policycoreutils

%endif

BuildRequires: 	gcc, glibc-devel >= 2.2.5-26,  glibc-kernheaders >= 2.4-7.10, openssl-devel, libtool, autoconf, pkgconfig

%if %{SDB}

BuildRequires:  openldap-devel, postgresql-devel

%endif

%if %{WITH_DBUS}

BuildRequires:  dbus-devel

%endif

%if %{test}

BuildRequires:  net-tools, perl

%endif

%description

BIND (Berkeley Internet Name Domain) is an implementation of the DNS

(Domain Name System) protocols. BIND includes a DNS server (named),

which resolves host names to IP addresses; a resolver library

(routines for applications to use when interfacing with DNS); and

tools for verifying that the DNS server is operating properly.

%package  libs

Summary:  Libraries used by the BIND DNS packages

Group:    Applications/System

Obsoletes: bind-libbind-devel

%description libs

Contains libraries used by both the bind server package as well as the utils packages.

%package  utils

Summary:  Utilities for querying DNS name servers.

Group:    Applications/System

Requires: bind-libs = %{epoch}:%{version}-%{release}

%description utils

Bind-utils contains a collection of utilities for querying DNS (Domain

Name System) name servers to find out information about Internet

hosts. These tools will provide you with the IP addresses for given

host names, as well as other information about registered domains and

network addresses.

You should install bind-utils if you need to get information from DNS name

servers.

%package   devel

Summary:   Header files and libraries needed for BIND DNS development.

Group:     Development/Libraries

Requires:  bind-libs = %{epoch}:%{version}-%{release}

Obsoletes: bind-libbind-devel

%description devel

The bind-devel package contains all the header files and libraries

required for development with ISC BIND 9 and BIND 8

%package -n caching-nameserver

Summary:   Default BIND configuration files for a caching nameserver

Group: 	   System Environment/Daemons

Obsoletes: bind-config

Provides:  bind-config

PreReq:    bind = %{epoch}:%{version}-%{release}

Requires(post):   bash, coreutils, sed, grep

Requires(postun): bash, coreutils, sed, grep

%if %{selinux}

Requires(post): policycoreutils

Conflicts: selinux-policy-strict < 2.2.0

Conflicts: selinux-policy-targeted < 2.2.0

%endif

%description -n caching-nameserver

The  caching-nameserver package includes the configuration files which will make

the ISC BIND named DNS name server act as a simple caching nameserver.

A caching nameserver is a DNS Resolver, as defined in RFC 1035, section 7.

ISC BIND named(8) provides a very efficient, flexible and robust resolver as

well as a server of authoritative DNS data - many users use this package

along with BIND to implement their primary system DNS resolver service.

If you would like to set up a caching name server, you'll need to install

bind, bind-libs, and bind-utils along with this package.

%package   chroot

Summary:   A chroot runtime environment for the ISC BIND DNS server, named(8)

Group: 	   System Environment/Daemons

Prefix:    %{chroot_prefix}

PreReq:    bind = %{epoch}:%{version}-%{release}

Requires(post):  bash, coreutils, sed, grep

Requires(preun): bash, coreutils, sed, grep

%if %{selinux}

Requires(post): policycoreutils

Conflicts: selinux-policy-strict < 2.2.0

Conflicts: selinux-policy-targeted < 2.2.0

%endif

%description chroot

This package contains a tree of files which can be used as a

chroot(2) jail for the named(8) program from the BIND package.

Based off code from Jan "Yenya" Kasprzak <kas@fi.muni.cz>

%if %{SDB}

%package sdb

Summary: The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) server with database backends.

Group: System Environment/Daemons

PreReq:   bind       = %{epoch}:%{version}-%{release}

Requires: bind-utils = %{epoch}:%{version}-%{release}

Requires(pre):    /etc/openldap/schema

Requires(post):   bash, coreutils, sed, grep, mktemp

Requires(preun):  bash, coreutils, sed, grep

%if %{selinux}

Requires(post): policycoreutils

Conflicts: selinux-policy-strict < 2.2.0

Conflicts: selinux-policy-targeted < 2.2.0

%endif

%description sdb

BIND (Berkeley Internet Name Domain) is an implementation of the DNS

(Domain Name System) protocols. BIND includes a DNS server (named),

which resolves host names to IP addresses; a resolver library

(routines for applications to use when interfacing with DNS); and

tools for verifying that the DNS server is operating properly.

BIND SDB (Simplified Database Backend) provides named_sdb, the DNS

name server compiled to include support for using alternative Zone Databases

stored in an LDAP server (ldapdb), a postgreSQL database (pgsqldb), or in the

filesystem (dirdb), in addition  to the standard in-memory RBT (Red Black Tree)

zone database.

%endif

%prep

%setup -q -n %{name}-%{version}%{?prever}

%patch -p1 -b .varrun

%patch1 -p1 -b .key

%patch2 -p1 -b .openssl_suffix

%patch4 -p1 -b .bsdcompat

%patch5 -p1 -b .nonexec

%patch6 -p1 -b .nsl

%patch10 -p1 -b .PIE

%if %{SDB}

%patch11 -p1 -b .sdbsrc

# BUILD 'Simplified Database Backend' (SDB) version of named: named_sdb

cp -rfp bin/named bin/named_sdb

# SDB ldap

cp -fp contrib/sdb/ldap/ldapdb.[ch] bin/named_sdb

# SDB postgreSQL

cp -fp contrib/sdb/pgsql/pgsqldb.[ch] bin/named_sdb

# SDB Berkeley DB - needs to be ported to DB4!

#cp -fp contrib/sdb/bdb/bdb.[ch] bin/named_sdb

# SDB dir

cp -fp contrib/sdb/dir/dirdb.[ch] bin/named_sdb

# SDB tools

mkdir -p bin/sdb_tools

cp -fp %{SOURCE7} bin/sdb_tools/Makefile.in

#cp -fp contrib/sdb/bdb/zone2bdb.c bin/sdb_tools

cp -fp contrib/sdb/ldap/{zone2ldap.1,zone2ldap.c} bin/sdb_tools

cp -fp contrib/sdb/pgsql/zonetodb.c bin/sdb_tools

%patch12 -p1 -b .sdb

%endif

%if %{LIBBIND}

%patch13 -p1 -b .fix_libbind_includedir

%patch14 -p1 -b .fix_h_errno

%endif

%if %{WITH_DBUS}

%patch15 -p1 -b .dbus

%if %{SDB}

%patch22 -p1 -b .sdb_dbus

%endif

%patch23 -p1 -b .dbus_archdep_libdir

%else

%patch16 -p1 -b .redhat_doc

%endif

%if %{SDB}

%patch17 -p1 -b .fix_sdb_ldap

%endif

#%patch19 -p1 -b .next_server_on_referral

#%patch20 -p1 -b .no_servfail_stops

%if %{WITH_DBUS}

#

# this must follow all dbus patches:

#

cp -fp contrib/dbus/{dbus_mgr.c,dbus_service.c} bin/named

cp -fp contrib/dbus/{dbus_mgr.h,dbus_service.h} bin/named/include/named

%if %{SDB}

cp -fp contrib/dbus/{dbus_mgr.c,dbus_service.c} bin/named_sdb

cp -fp contrib/dbus/{dbus_mgr.h,dbus_service.h} bin/named_sdb/include/named

cp -fp bin/named/{log.c,server.c} bin/named_sdb

cp -fp bin/named/include/named/{globals.h,server.h,log.h,types.h} bin/named_sdb/include/named

%endif

%endif

%patch32 -p1 -b .prctl_set_dumpable

%patch52 -p1 -b .edns

:;

%build

libtoolize --copy --force; aclocal; autoconf

cp -f /usr/share/libtool/config.{guess,sub} .

%if %{DEBUGINFO}

export CFLAGS="$RPM_OPT_FLAGS";

%else

export CFLAGS=`echo $RPM_OPT_FLAGS | sed 's/-O2 -g/-g3 -gdwarf-2/g'`;

%endif

export CPPFLAGS="$CFLAGS";

%if %{WITH_DBUS}

%ifarch s390x x86_64 ppc64

# every 64-bit arch EXCEPT ia64 has dbus architecture dependant

# includes in  /usr/lib64/dbus-1.0/include

export DBUS_ARCHDEP_LIBDIR=lib64

%endif

%endif

if pkg-config openssl ; then

	export CFLAGS="$CFLAGS `pkg-config --cflags openssl`"

	export CPPFLAGS="$CPPFLAGS `pkg-config --cflags-only-I openssl`"

	export LDFLAGS="$LDFLAGS `pkg-config --libs-only-L openssl`"

fi

%if %{efence}

export LDFLAGS=-lefence

%endif

%configure \

	--with-libtool \

	--localstatedir=/var \

	--enable-threads \

	--enable-ipv6 \

	--with-pic \

	--with-openssl=/usr \

%if %{LIBBIND}

	--enable-libbind \

%endif

	--disable-openssl-version-check \

	CFLAGS="$CFLAGS" \

;

if [ -s openssl_config.h ]; then cat openssl_config.h >> config.h ; fi;

make %{?_smp_mflags}

%if !%{DEBUGINFO}

%define debug_package %{nil}

%endif

%install

rm -rf ${RPM_BUILD_ROOT}

cp  --preserve=timestamps %{SOURCE5} doc/rfc

gzip -9       doc/rfc/*

mkdir -p ${RPM_BUILD_ROOT}/etc/{rc.d/init.d,logrotate.d}

mkdir -p ${RPM_BUILD_ROOT}/usr/{bin,lib,sbin,include}

mkdir -p ${RPM_BUILD_ROOT}/var/named

mkdir -p ${RPM_BUILD_ROOT}/var/named/slaves

mkdir -p ${RPM_BUILD_ROOT}/var/named/data

mkdir -p ${RPM_BUILD_ROOT}%{_mandir}/{man1,man5,man8}

mkdir -p ${RPM_BUILD_ROOT}/var/run/named

#chroot

mkdir -p ${RPM_BUILD_ROOT}/%{chroot_prefix}

tar --no-same-owner -zxvf %{SOURCE6} --directory ${RPM_BUILD_ROOT}/%{chroot_prefix}

# these are required to prevent them being erased during upgrade of previous

# versions that included them (bug #130121):

touch ${RPM_BUILD_ROOT}/%{chroot_prefix}/etc/named.conf

touch ${RPM_BUILD_ROOT}/%{chroot_prefix}/etc/named.rfc1912.zones

touch ${RPM_BUILD_ROOT}/%{chroot_prefix}/etc/rndc.key

touch ${RPM_BUILD_ROOT}/%{chroot_prefix}/dev/null

touch ${RPM_BUILD_ROOT}/%{chroot_prefix}/dev/random

touch ${RPM_BUILD_ROOT}/%{chroot_prefix}/dev/zero

#end chroot

make DESTDIR=${RPM_BUILD_ROOT} install

touch ${RPM_BUILD_ROOT}%{_sysconfdir}/rndc.conf

install -c -m 755 contrib/named-bootconf/named-bootconf.sh ${RPM_BUILD_ROOT}%{_sbindir}/named-bootconf

install -c -m 755 %SOURCE2 ${RPM_BUILD_ROOT}/etc/rc.d/init.d/named

install -c -m 644 %SOURCE3 ${RPM_BUILD_ROOT}/etc/logrotate.d/named

touch ${RPM_BUILD_ROOT}%{_sysconfdir}/rndc.key

%{__cc} $RPM_OPT_FLAGS -o ${RPM_BUILD_ROOT}%{_sbindir}/dns-keygen %{SOURCE4}

mkdir -p ${RPM_BUILD_ROOT}%{_sysconfdir}/sysconfig

cp %{SOURCE1} ${RPM_BUILD_ROOT}%{_sysconfdir}/sysconfig/named

%if %{SDB}

mkdir -p ${RPM_BUILD_ROOT}/etc/openldap/schema

install -c -m 644 %{SOURCE8} ${RPM_BUILD_ROOT}/etc/openldap/schema/dnszone.schema

cp -fp %{SOURCE12} contrib/sdb/pgsql/

%endif

%if %{LIBBIND}

gunzip < %{SOURCE9} | (cd ${RPM_BUILD_ROOT}/usr/share; tar -xpf -)

mkdir -p ${RPM_BUILD_ROOT}/%{_libdir}/pkgconfig

install -m 644 %{SOURCE28} $RPM_BUILD_ROOT%{_libdir}/pkgconfig/libbind.pc

%endif

%if %{WITH_DBUS}

mkdir -p ${RPM_BUILD_ROOT}/etc/dbus-1/system.d

mkdir -p ${RPM_BUILD_ROOT}%{_datadir}/dbus-1/services

cp -fp %{SOURCE10} ${RPM_BUILD_ROOT}/etc/dbus-1/system.d/named.conf

cp -fp %{SOURCE11} ${RPM_BUILD_ROOT}%{_datadir}/dbus-1/services/named.service

cp -fp %{SOURCE13} ${RPM_BUILD_ROOT}%{_sbindir}/namedSetForwarders

cp -fp %{SOURCE14} ${RPM_BUILD_ROOT}%{_sbindir}/namedGetForwarders

%endif

%if %{test}

if [ "`whoami`" = 'root' ]; then

   set -e

   chmod -R a+rwX .

   pushd bin/tests

   pushd system

   ./ifconfig.sh up

   popd

   make test

   e=$?

   pushd system

   ./ifconfig.sh down

   popd

   popd

   if [ "$e" -ne 0 ]; then

      echo "ERROR: this build of BIND failed 'make test'. Aborting."

      exit $e;

   fi;

else

   echo 'test==1 : only root can run the tests (they require an ifconfig).';

fi

%endif

# Files required to run test-suite outside of build tree:

cp -fp config.h ${RPM_BUILD_ROOT}/%{_includedir}/bind9

cp -fp lib/dns/include/dns/forward.h ${RPM_BUILD_ROOT}/%{_includedir}/dns

cp -fp lib/isc/unix/include/isc/keyboard.h ${RPM_BUILD_ROOT}/%{_includedir}/isc

cp -fp lib/isc/include/isc/hash.h ${RPM_BUILD_ROOT}/%{_includedir}/isc

# Remove libtool .la files:

find ${RPM_BUILD_ROOT}/%{_libdir} -name '*.la' -exec '/bin/rm' '-f' '{}' ';';

# /usr/lib/rpm/brp-compress

#

# Ghost config files:

touch ${RPM_BUILD_ROOT}/etc/named.conf

# caching-nameserver files:

mkdir -p ${RPM_BUILD_ROOT}/{etc,var/named}

install -m 644 %{SOURCE16} ${RPM_BUILD_ROOT}/etc/named.caching-nameserver.conf

install -m 644 %{SOURCE27} ${RPM_BUILD_ROOT}/etc/named.rfc1912.zones

install -m 644 %{SOURCE17} ${RPM_BUILD_ROOT}/var/named/named.ca

install -m 644 %{SOURCE18} ${RPM_BUILD_ROOT}/var/named/named.local

install -m 644 %{SOURCE19} ${RPM_BUILD_ROOT}/var/named/localhost.zone

install -m 644 %{SOURCE20} ${RPM_BUILD_ROOT}/var/named/localdomain.zone

install -m 644 %{SOURCE21} ${RPM_BUILD_ROOT}/var/named/named.ip6.local

install -m 644 %{SOURCE22} ${RPM_BUILD_ROOT}/var/named/named.broadcast

install -m 644 %{SOURCE23} ${RPM_BUILD_ROOT}/var/named/named.zero

for f in /etc/named.caching-nameserver.conf /var/named/{named.ca,named.local,localhost.zone,localdomain.zone,named.ip6.local,named.broadcast,named.zero}; do

    touch ${RPM_BUILD_ROOT}/%{chroot_prefix}/$f;

done

install -m 644 %{SOURCE5}  ./rfc1912.txt

install -m 644 %{SOURCE24} ./Copyright

# bind-chroot-admin script:

sed -e 's^@BIND_CHROOT_PREFIX@^'%{chroot_prefix}'^;s^@BIND_DIR@^'%{bind_dir}'^' < %{SOURCE26} > bind-chroot-admin;

install -m 754 bind-chroot-admin ${RPM_BUILD_ROOT}/%{_sbindir}

# sample bind configuration files for %doc:

mkdir -p sample/etc sample/var/named/{data,slaves}

cp -fp %{SOURCE29} sample/etc/named.conf

cp -fp %{SOURCE30} sample/etc/named.rfc1912.zones

cp -fp %{SOURCE31} sample/etc/

cp -fp %{SOURCE17} %{SOURCE18} %{SOURCE19} %{SOURCE20} %{SOURCE21} %{SOURCE22} %{SOURCE23} sample/var/named

for f in my.internal.zone.db slaves/my.slave.internal.zone.db slaves/my.ddns.internal.zone.db my.external.zone.db; do 

  echo '@ in soa localhost. root 1 3H 15M 1W 1D

  ns localhost.' > sample/var/named/$f; 

done

/usr/bin/tail -n '+'`/bin/egrep -n '\\$Id: bind.spec,v 1.164 2007/03/06 15:32:16 atkac Exp $/+1/' | bc` bin/rndc/rndc.conf | sed '/Sample rndc configuration file./{p;i\

 *\

 * NOTE: you only need to create this file if it is to\

 * differ from the following default contents:

;d}' > sample/etc/rndc.conf;

#

%if !%{DEBUGINFO}

echo 'WARNING - NOT generating debuginfo!'

/usr/lib/rpm/brp-compress

exit 0

%endif

chmod 0755 ${RPM_BUILD_ROOT}%{_libdir}/lib*so.*

:;

%files

%defattr(0640,root,named,0750)

%dir /var/named

%defattr(0660,named,named,0770)

%dir /var/named/slaves

%dir /var/named/data

%dir /var/run/named

%defattr(0754,root,root,0750)

%config /etc/rc.d/init.d/named

%defattr(0640,root,named,0750)

%config(noreplace) /etc/sysconfig/named

%ghost %config(noreplace) /etc/rndc.key

# ^- rndc.key now created on first install only if it does not exist

# %verify(not size,not md5) %config(noreplace) %attr(0640,root,named) /etc/rndc.conf

# ^- Let the named internal default rndc.conf be used -

#    rndc.conf not required unless it differs from default.

%ghost %config(noreplace) /etc/named.conf

# ^- Ensure something owns named.conf, even though it may not be installed at all

%ghost %config(noreplace) /etc/rndc.conf

# ^- The default rndc.conf which uses rndc.key is in named's default internal config -

#    so rndc.conf is not necessary.

%config(noreplace) /etc/logrotate.d/named

%defattr(-,root,root)

%{_sbindir}/dnssec*

%{_sbindir}/named-check*

%{_sbindir}/dns-keygen

%defattr(0750,root,root,0755)

%{_sbindir}/lwresd

%{_sbindir}/named

%{_sbindir}/named-bootconf

%{_sbindir}/rndc*

%{_sbindir}/bind-chroot-admin

%{_sbindir}/named-compilezone

%defattr(0644,root,root,0755)

%{_mandir}/man5/named.conf.5*

%{_mandir}/man5/rndc.conf.5*

%{_mandir}/man8/rndc.8*

%{_mandir}/man8/named.8*

%{_mandir}/man8/lwresd.8*

%{_mandir}/man8/dnssec*.8*

%{_mandir}/man8/named-checkconf.8*

%{_mandir}/man8/named-checkzone.8*

%{_mandir}/man8/named-compilezone.8*

%{_mandir}/man8/rndc-confgen.8*

%doc CHANGES COPYRIGHT README

%doc doc/arm doc/misc

%doc sample/

%if %{WITH_DBUS}

%doc contrib/dbus/README.DBUS

%attr(644,root,root) %config /etc/dbus-1/system.d/named.conf

%attr(644,root,root) %config /usr/share/dbus-1/services/named.service

%attr(750,root,root) %{_sbindir}/namedGetForwarders

%attr(750,root,root) %{_sbindir}/namedSetForwarders

%endif

%files libs

%defattr(-,root,root,0755)

%{_libdir}/*so.*

%files utils

%defattr(0755,root,root,0755)

%{_bindir}/dig

%{_bindir}/host

%{_bindir}/nslookup

%{_bindir}/nsupdate

%defattr(0644,root,root,0755)

%{_mandir}/man1/host.1*

%{_mandir}/man8/nsupdate.8*

%{_mandir}/man1/dig.1*

%{_mandir}/man1/nslookup.1*

%files devel

%defattr(-,root,root,0755)

%{_libdir}/libbind9.a

%{_libdir}/libdns.a

%{_libdir}/libisc.a

%{_libdir}/libisccc.a

%{_libdir}/libisccfg.a

%{_libdir}/liblwres.a

%{_libdir}/*so

%{_includedir}/bind9

%{_includedir}/dns

%{_includedir}/dst

%{_includedir}/isc

%{_includedir}/isccc

%{_includedir}/isccfg

%{_includedir}/lwres

%{_mandir}/man3/lwres*

%{_bindir}/isc-config.sh

%doc doc/draft doc/rfc

%if %{LIBBIND}

%{_libdir}/libbind.a

%{_libdir}/pkgconfig/libbind.pc

%{_includedir}/bind

%{_mandir}/man3/libbind-*

%{_mandir}/man7/libbind-*

%{_mandir}/man5/libbind-*

%endif

%files -n caching-nameserver

%defattr(0640,root,named,0750)

%config %verify(not link) /etc/named.caching-nameserver.conf

%ghost %config %{chroot_prefix}/etc/named.caching-nameserver.conf

%config %verify(not link) /etc/named.rfc1912.zones

%ghost %config %{chroot_prefix}/etc/named.rfc1912.zones

%ghost %config(noreplace) /etc/named.conf

%ghost %config(noreplace) %{chroot_prefix}/etc/named.conf

%config %verify(not link) /var/named/named.ca

%ghost  %config %{chroot_prefix}/var/named/named.ca

%config %verify(not link) /var/named/named.local

%ghost  %config %{chroot_prefix}/var/named/named.local

%config %verify(not link) /var/named/localhost.zone

%ghost  %config %{chroot_prefix}/var/named/localhost.zone

%config %verify(not link) /var/named/localdomain.zone

%ghost  %config %{chroot_prefix}/var/named/localdomain.zone

%config %verify(not link) /var/named/named.ip6.local

%ghost  %config %{chroot_prefix}/var/named/named.ip6.local

%config %verify(not link) /var/named/named.broadcast

%ghost  %config %{chroot_prefix}/var/named/named.broadcast

%config %verify(not link) /var/named/named.zero

%ghost  %config %{chroot_prefix}/var/named/named.zero

%defattr(0644,root,root,0755)

%doc Copyright

%doc rfc1912.txt

%files chroot

%defattr(0640,root,named,0750)

%dir %prefix

%dir %prefix/dev

%dir %prefix/etc

%dir %prefix/var

%dir  %prefix/var/run

%dir  %prefix/var/named

%ghost %config(noreplace) %prefix/etc/named.conf

%ghost %config(noreplace) %prefix/etc/named.caching-nameserver.conf

%ghost %config(noreplace) %prefix/etc/rndc.key

%defattr(0660,named,named,0770)

%dir %prefix/var/named/slaves

%dir %prefix/var/named/data

%dir %prefix/var/run/named

%dir %prefix/var/tmp

%ghost %prefix/dev/null

%ghost %prefix/dev/random

%ghost %prefix/dev/zero

%if %{SDB}

%files sdb

%defattr(0750,root,named,0755)

%{_sbindir}/named_sdb

%{_sbindir}/zone2ldap

%{_sbindir}/ldap2zone

%{_sbindir}/zonetodb

%defattr(0644,root,root,0755)

%config(noreplace) /etc/openldap/schema/dnszone.schema

%defattr(0644,root,named,0755)

%{_mandir}/man1/zone2ldap.1*

%doc contrib/sdb/ldap/README.ldap contrib/sdb/ldap/INSTALL.ldap contrib/sdb/pgsql/README.sdb_pgsql

%endif

%pre

if [ "$1" -eq 1 ]; then

   /usr/sbin/groupadd -g %{bind_gid} -f -r named >/dev/null 2>&1 || :;

   /usr/sbin/useradd  -u %{bind_uid} -r -n -M -g named -s /sbin/nologin -d /var/named -c Named named >/dev/null 2>&1 || :;

fi;

:;

%post

/sbin/ldconfig

/sbin/chkconfig --add named

if [ "$1" -eq 1 ]; then

	# no more named.boot autoconversion! No-one should be using BIND-4 anymore.

	if [ ! -e /etc/rndc.key ]; then

	# create the rndc.key file:

	   echo 'key "rndckey" {

	algorithm	hmac-md5;

	secret		"'`/usr/sbin/dns-keygen`'";

};'  >     /etc/rndc.key;

	elif /bin/egrep -q '@KEY@' /etc/rndc.key; then

	   # fix potential problem with older versions

	   /bin/sed -i -e 's^@KEY@^'`/usr/sbin/dns-keygen`'^' /etc/rndc.key ;

	fi

%if %{selinux}

        [ -e /selinux/enforce ] && [ -x /sbin/restorecon ] && /sbin/restorecon /etc/rndc.* /etc/named.* >/dev/null 2>&1 ;

%endif

fi

:;

%preun

if [ "$1" = 0 ]; then

   /sbin/service named stop >/dev/null 2>&1 || :;

   /sbin/chkconfig --del named || :;

fi

:;

%postun

/sbin/ldconfig

if [ "$1" -ge 1 ]; then

   /sbin/service named condrestart >/dev/null 2>&1 || :;

fi;

:;

%triggerpostun -- bind < 8.2.2_P5-15

/sbin/chkconfig --add named

/sbin/ldconfig

:;

%triggerpostun -n bind -- bind <= 24:9.3.1-11

if [ "$1" -gt 0 ]; then

# bind <= 22:9.3.0-2:

# These versions of bind installed named service at order 55 in

# runlevel startup order, after programs like  nis / ntp / nfs

# which may need its services if using no nameservers in resolv.conf.

# bind <= 24:9.3.1-11:

# These versions ran bind with order 11 in runlevel 2, after syslog

# at order 12 . BIND should run after syslog and now has order '- 13 87'.

#

    /sbin/chkconfig named resetpriorities

fi

:;

%post libs -p /sbin/ldconfig

%postun libs -p /sbin/ldconfig

%post -n caching-nameserver

if [ "$1" -gt 0 ]; then

   /sbin/restorecon /etc/named.caching-nameserver.conf >/dev/null 2>&1 || :;

   /sbin/restorecon /etc/named.rfc1912.zones >/dev/null 2>&1 || :;

   . /usr/sbin/bind-chroot-admin --sync;

fi;

:;

%post chroot

if [ "$1" -gt 0 ]; then

   . /usr/sbin/bind-chroot-admin --enable > /dev/null 2>&1;

fi;

:;

%preun chroot

if [ "$1" -eq 0 ]; then

   . /usr/sbin/bind-chroot-admin --disable > /dev/null 2>&1;

fi

:;

%if %{SDB}

%post sdb

if [ "$1" -ge 1 ]; then

   # check that dnszone.schema is installed in OpenLDAP's slapd.conf

   if [ -x /usr/sbin/named_sdb ] && [ -f /etc/openldap/slapd.conf ]; then

   # include the LDAP dnszone.schema in slapd.conf:

      if ! /bin/egrep -q '^include.*\dnszone.schema' /etc/openldap/slapd.conf; then

         tf=`/bin/mktemp /tmp/XXXXXX`

         let n=`/bin/grep -n '^include.*\.schema' /etc/openldap/slapd.conf | /usr/bin/tail -1 | /bin/sed 's/:.*//'`

         if [ "$n" -gt 0 ]; then

   	    /bin/cp -fp /etc/openldap/slapd.conf /etc/openldap/slapd.conf.rpmsave;

	    /usr/bin/head -$n /etc/openldap/slapd.conf > $tf

            echo 'include         /etc/openldap/schema/dnszone.schema' >> $tf

            let n='n+1'

            /usr/bin/tail -n +$n /etc/openldap/slapd.conf >> $tf

            /bin/mv -f $tf /etc/openldap/slapd.conf;

            /bin/chmod --reference=/etc/openldap/slapd.conf.rpmsave /etc/openldap/slapd.conf

            [ -e /selinux/enforce ] && [ -x /sbin/restorecon ] && /sbin/restorecon /etc/openldap/slapd.conf >/dev/null 2>&1 || :;

            [ -x /etc/init.d/ldap ] && /etc/init.d/ldap condrestart >/dev/null 2>&1

         fi

         rm -f $tf >/dev/null 2>&1 || :;

      fi;

   fi;

fi;

:;

%preun sdb

if [ "$1" -eq 0 ] && [ -x /usr/sbin/named_sdb ] && [ -f /etc/openldap/slapd.conf ]; then

   if /bin/egrep -q '^include.*\dnszone.schema' /etc/openldap/slapd.conf; then

      tf=`/bin/mktemp /tmp/XXXXXX`

      /bin/egrep -v '^include.*dnszone\.schema' /etc/openldap/slapd.conf > $tf

      /bin/mv -f $tf /etc/openldap/slapd.conf;

      rm -f $tf >/dev/null 2>&1

      [ -e /selinux/enforce ] && [ -x /sbin/restorecon ] && /sbin/restorecon /etc/openldap/slapd.conf >/dev/null 2>&1 || :;

      [ -x /etc/init.d/ldap ] && /etc/init.d/ldap condrestart >/dev/null 2>&1 || :;

   fi;

fi;

:;

%endif # SDB

%clean

rm -rf ${RPM_BUILD_ROOT}

:;

%changelog

* Tue Mar 06 2007 Adam Tkac <atkac@redhat.com> 31:9.3.4-8.fc7

- updated to 9.4.0

- bind-chroot-admin now sets EAs correctly (#213926)

* Thu Feb 15 2007 Adam Tkac <atkac@redhat.com> 31:9.3.4-7.fc7

- minor cleanup in bind-chroot-admin script

* Fri Feb 09 2007 Adam Tkac <atkac@redhat.com> 31:9.3.4-6.fc7

- fixed broken bind-chroot-admin script (#227995)

* Wed Feb 07 2007 Adam Tkac <atkac@redhat.com> 31:9.3.4-5.fc7

- bind-chroot-admin now uses correct chroot path (#227600)

* Mon Feb 05 2007 Adam Tkac <atkac@redhat.com> 31:9.3.4-4.fc7

- fixed conflict between bind-sdb and ldap

- removed duplicated bind directory in bind-libs

* Thu Feb 01 2007 Adam Tkac <atkac@redhat.com> 31:9.3.4-3.fc7

- fixed building without libbind

- fixed post section (selinux commands is now in if-endif statement)

- prever macro has been removed from version

* Mon Jan 29 2007 Adam Tkac <atkac@redhat.com> 31:9.3.4-2.fc7

- redirected output from bind-chroot prep and preun stages to /dev/null

* Wed Jan 25 2007 Adam Tkac <atkac@redhat.com> 31:9.3.4-1.fc7

- updated to version 9.3.4 which contains security bugfixes

* Tue Jan 23 2007 Adam Tkac <atkac@redhat.com> 31:9.3.3-5.fc7

- package bind-libbind-devel has been marked as obsolete

* Mon Jan 22 2007 Adam Tkac <atkac@redhat.com> 31:9.3.3-4.fc7

- package bind-libbind-devel has beed removed (libs has been moved to bind-devel & bind-libs)

- Resolves: #214208

* Tue Jan 16 2007 Martin Stransky <stransky@redhat.com> - 31:9.3.3-3

- fixed a multi-lib issue

- Resolves: rhbz#222717

* Thu Jan 4 2007 Martin Stransky <stransky@redhat.com> - 31:9.3.3-2

- added namedGetForwarders written in shell (#176100),

  created by Baris Cicek <baris@nerd.com.tr>.

* Sun Dec 10 2006 Martin Stransky <stransky@redhat.com> - 31:9.3.3-1

- update to 9.3.3 final

- fix for #219069: file included twice in src.rpm

* Wed Dec 6 2006 Martin Stransky <stransky@redhat.com> - 31:9.3.3-0.1.rc3

- added back an interval to restart

- renamed package, it should meet the N-V-R criteria

- fix for #216185: bind-chroot-admin able to change root mode 750

- added fix from #215997: incorrect permissions on dnszone.schema

- added a notice to init script when /etc/named.conf doesn't exist (#216075)

* Mon Oct 30 2006 Martin Stransky <stransky@redhat.com> - 30:9.3.3-6

- fix for #200465: named-checkzone and co. cannot be run as non-root user

- fix for #212348: chroot'd named causes df permission denied error

- fix for #211249, #211083 - problems with stopping named

- fix for #212549: init script does not unmount /proc filesystem

- fix for #211282: EDNS is globally enabled, crashing CheckPoint FW-1,

    added edns-enable options to named configuration file which can suppress

    EDNS in queries to DNS servers (see /usr/share/doc/bind-9.3.3/misc/options)

- fix for #212961: bind-chroot doesn't clean up its mess on %preun

- update to 9.3.3rc3, removed already merged patches

* Fri Oct 13 2006 Martin Stransky <stransky@redhat.com> - 30:9.3.3-5

- fix for #209359: bind-libs from compatlayer CD will not 

  install on ia64

* Tue Oct 10 2006 Martin Stransky <stransky@redhat.com> - 30:9.3.3-4

- added fix for #210096: warning: group named does not exist - using root

* Thu Oct  5 2006 Martin Stransky <stransky@redhat.com> - 30:9.3.3-3

- added fix from #209400 - Bind Init Script does not create 

  the PID file always, created by Jeff Means

- added timeout to stop section of init script. 

  The default is 100 sec. and can be adjusted by NAMED_SHUTDOWN_TIMEOUT

  shell variable.

* Mon Oct  2 2006 Martin Stransky <stransky@redhat.com> - 30:9.3.3-2

- removed chcon from post script, replaced by restorecon 

  (Bug 202547, comment no. 37)

* Fri Sep 15 2006 Martin Stransky <stransky@redhat.com> - 30:9.3.3-1

- updated to the latest upstream (9.3.3rc2)

* Wed Sep  6 2006 Martin Stransky <stransky@redhat.com> - 30:9.3.2-41

- added upstream patch for correct SIG handling - CVE-2006-4095

* Tue Sep  5 2006 Martin Stransky <stransky@redhat.com> - 30:9.3.2-40

- suppressed messages from bind-chroot-admin

- cleared notes about bind-config

* Mon Aug 22 2006 Martin Stransky <stransky@redhat.com> - 30:9.3.2-39

- added fix for #203522 - "bind-chroot-admin -e" command fails

* Mon Aug 21 2006 Martin Stransky <stransky@redhat.com> - 30:9.3.2-38

- fix for #203194 - tmpfile usage

* Thu Aug 17 2006 Martin Stransky <stransky@redhat.com> - 30:9.3.2-37

- fix for #202542 - /usr/sbin/bind-chroot-admin: No such file or directory

- fix for #202547 - file_contexts: invalid context