%define uid		50

%define username	saslauth

%define hint		"Saslauthd user"

%define homedir		%{_var}/empty/%{username}

%define _plugindir2 %{_libdir}/sasl2

%define bootstrap_cyrus_sasl 0

Summary: The Cyrus SASL library

Name: cyrus-sasl

Version: 2.1.23

Release: 9%{?dist}

License: BSD

Group: System Environment/Libraries

# Source0 originally comes from ftp://ftp.andrew.cmu.edu/pub/cyrus-mail/;

# make-no-dlcompatorsrp-tarball.sh removes the "dlcompat" subdirectory and builds a

# new tarball.

Source0: cyrus-sasl-%{version}-nodlcompatorsrp.tar.gz

Source4: saslauthd.init

Source7: sasl-mechlist.c

Source8: sasl-checkpass.c

Source9: saslauthd.sysconfig

Source10: make-no-dlcompatorsrp-tarball.sh

URL: http://asg.web.cmu.edu/sasl/sasl-library.html

Requires: %{name}-lib = %{version}-%{release}

Patch11: cyrus-sasl-2.1.18-no_rpath.patch

Patch15: cyrus-sasl-2.1.20-saslauthd.conf-path.patch

Patch23: cyrus-sasl-2.1.23-man.patch

Patch24: cyrus-sasl-2.1.21-sizes.patch

Patch25: cyrus-sasl-2.1.22-typo.patch

Patch26: cyrus-sasl-2.1.22-digest-commas.patch

Patch27: cyrus-sasl-2.1.22-automake-1.10.patch

Patch28: cyrus-sasl-2.1.21-keytab.patch

Patch30: cyrus-sasl-2.1.22-rimap.patch

Patch31: cyrus-sasl-2.1.22-kerberos4.patch

Patch32: cyrus-sasl-2.1.22-warnings.patch

Patch33: cyrus-sasl-2.1.22-current-db.patch

Patch34: cyrus-sasl-2.1.22-ldap-timeout.patch

Patch35: cyrus-sasl-2.1.22-bad-elif.patch

Patch36: cyrus-sasl-2.1.23-ac-quote.patch

Patch37: cyrus-sasl-2.1.23-race.patch

Buildroot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)

BuildRequires: autoconf, automake, libtool, gdbm-devel, groff

BuildRequires: krb5-devel >= 1.2.2, openssl-devel, pam-devel, pkgconfig

BuildRequires: mysql-devel, postgresql-devel, zlib-devel

BuildRequires: db4-devel

BuildRequires: fedora-usermgmt-devel

%if ! %{bootstrap_cyrus_sasl}

BuildRequires: openldap-devel

%endif

Requires(post): chkconfig, /sbin/service

Requires(pre): /usr/sbin/useradd /usr/sbin/groupadd

Requires(postun): /usr/sbin/userdel /usr/sbin/groupdel

Requires: /sbin/nologin

Provides: user(%username) = %uid

Provides: group(%username) = %uid

%description

The %{name} package contains the Cyrus implementation of SASL.

SASL is the Simple Authentication and Security Layer, a method for

adding authentication support to connection-based protocols.

%package lib

Group: System Environment/Libraries

Summary: Shared libraries needed by applications which use Cyrus SASL

%description lib

The %{name}-lib package contains shared libraries which are needed by

applications which use the Cyrus SASL library.

%package devel

Requires: %{name}-lib = %{version}-%{release}

Requires: %{name} = %{version}-%{release}

Group: Development/Libraries

Summary: Files needed for developing applications with Cyrus SASL

%description devel

The %{name}-devel package contains files needed for developing and

compiling applications which use the Cyrus SASL library.

%package gssapi

Requires: %{name}-lib = %{version}-%{release}

Group: System Environment/Libraries

Summary: GSSAPI authentication support for Cyrus SASL

%description gssapi

The %{name}-gssapi package contains the Cyrus SASL plugins which

support GSSAPI authentication. GSSAPI is commonly used for Kerberos

authentication.

%package plain

Requires: %{name}-lib = %{version}-%{release}

Group: System Environment/Libraries

Summary: PLAIN and LOGIN authentication support for Cyrus SASL

%description plain

The %{name}-plain package contains the Cyrus SASL plugins which support

PLAIN and LOGIN authentication schemes.

%package md5

Requires: %{name}-lib = %{version}-%{release}

Group: System Environment/Libraries

Summary: CRAM-MD5 and DIGEST-MD5 authentication support for Cyrus SASL

%description md5

The %{name}-md5 package contains the Cyrus SASL plugins which support

CRAM-MD5 and DIGEST-MD5 authentication schemes.

%package ntlm

Requires: %{name}-lib = %{version}-%{release}

Group: System Environment/Libraries

Summary: NTLM authentication support for Cyrus SASL

%description ntlm

The %{name}-ntlm package contains the Cyrus SASL plugin which supports

the NTLM authentication scheme.

# This would more appropriately be named cyrus-sasl-auxprop-sql.

%package sql

Requires: %{name}-lib = %{version}-%{release}

Group: System Environment/Libraries

Summary: SQL auxprop support for Cyrus SASL

%description sql

The %{name}-sql package contains the Cyrus SASL plugin which supports

using a RDBMS for storing shared secrets.

%if ! %{bootstrap_cyrus_sasl}

# This was *almost* named cyrus-sasl-auxprop-ldapdb, but that's a lot of typing.

%package ldap

Requires: %{name}-lib = %{version}-%{release}

Group: System Environment/Libraries

Summary: LDAP auxprop support for Cyrus SASL

%description ldap

The %{name}-ldap package contains the Cyrus SASL plugin which supports using

a directory server, accessed using LDAP, for storing shared secrets.

%endif

%prep

%setup -q

chmod -x doc/*.html

chmod -x include/*.h

%patch11 -p1 -b .no_rpath

%patch15 -p1 -b .path

%patch23 -p1 -b .man

%patch24 -p1 -b .sizes

%patch25 -p1 -b .typo

%patch26 -p2 -b .digest-commas

%patch27 -p1 -b .automake-1.10

%patch28 -p1 -b .keytab

%patch30 -p1 -b .rimap

%patch31 -p1 -b .krb4

%patch32 -p1 -b .warnings

%patch33 -p1 -b .current-db

%patch34 -p1 -b .ldap-timeout

%patch35 -p1 -b .elif

%patch36 -p1 -b .ac-quote

%patch37 -p1 -b .race

%build

# FIXME - we remove these files directly so that we can avoid using the -f

# flag, which has a nasty habit of overwriting files like COPYING.

rm -f config/config.guess config/config.sub 

rm -f config/ltconfig config/ltmain.sh config/libtool.m4

rm -fr autom4te.cache

libtoolize -c

aclocal -I config -I cmulocal

automake -a -c

autoheader

autoconf

pushd saslauthd

rm -f config/config.guess config/config.sub 

rm -f config/ltconfig config/ltmain.sh config/libtool.m4

rm -fr autom4te.cache

libtoolize -c

aclocal -I config -I ../cmulocal -I ../config

automake -a -c

autoheader

autoconf

popd

CFLAGS="$RPM_OPT_FLAGS -fPIC"; export CFLAGS

# Find Kerberos.

krb5_prefix=`krb5-config --prefix`

if test x$krb5_prefix = x%{_prefix} ; then

        krb5_prefix=

else

        CPPFLAGS="-I${krb5_prefix}/include"; export CPPFLAGS

        CFLAGS="-I${krb5_prefix}/include $CFLAGS"

        LDFLAGS="-L${krb5_prefix}/%{_lib}"; export LDFLAGS

fi

# Find OpenSSL.

LIBS="-lcrypt"; export LIBS

if pkg-config openssl ; then

        CPPFLAGS="`pkg-config --cflags-only-I openssl` $CPPFLAGS"; export CPPFLAGS

        CFLAGS="`pkg-config --cflags openssl` $CFLAGS"; export CFLAGS

        LDFLAGS="`pkg-config --libs-only-L openssl` $LDFLAGS"; export LDFLAGS

fi

# Find the SQL libraries used needed by the SQL auxprop plugin.

mysql_config=mysql_config

pg_config=pg_config

SQL_CFLAGS=`${mysql_config} --cflags`" -I"`${pg_config} --includedir`

SQL_LIBS=`${mysql_config} --libs`" -L"`${pg_config} --libdir`" -lpq"

SQL_CFLAGS=`eval echo "$SQL_CFLAGS" | sed -e 's,-I%{_includedir}[^/],,g' -e 's,-I%{_includedir}$,,g' -e 's,[[:blank:]]+, ,g'`

SQL_LIBS=`eval echo "$SQL_LIBS" | sed -e 's,-L%{_libdir}[^/],,g' -e 's,-L%{_libdir}$,,g' -e 's,[[:blank:]]+, ,g'`

SQL_LDFLAGS=`eval echo "$SQL_LIBS" | sed -e 's,-[^L][^ ]*,,g'`

echo $SQL_LDFLAGS

SQL_LIBS=`eval echo "$SQL_LIBS" | sed -e 's,-[^l][^ ]*,,g'`

echo $SQL_LIBS

cleanup_flags() {

        sed -r -e 's,-D_GNU_SOURCE(=[^[:blank:]]+)?,,g' \

               -e 's,-D_FILE_OFFSET_BITS=[[:digit:]]+,,g' \

               -e 's,-D_LARGEFILE_SOURCE(=[^[:blank:]]+)?,,g' \

               -e 's,[[:blank:]]+, ,g'

}

CFLAGS=`echo $CFLAGS $SQL_CFLAGS | cleanup_flags`; export CFLAGS

CPPFLAGS=`echo $CPPFLAGS $SQL_CFLAGS | cleanup_flags`; export CPPFLAGS

LDFLAGS=`echo $LDFLAGS $SQL_LDFLAGS | cleanup_flags`; export LDFLAGS

%configure \

        --enable-shared --disable-static \

        --disable-java \

        --with-plugindir=%{_plugindir2} \

        --with-configdir=%{_plugindir2}:%{_sysconfdir}/sasl2 \

        --disable-krb4 \

        --enable-gssapi${krb5_prefix:+=${krb5_prefix}} \

        --with-gss_impl=mit \

        --with-rc4 \

        --with-dblib=berkeley \

        --with-saslauthd=/var/run/saslauthd --without-pwcheck \

%if ! %{bootstrap_cyrus_sasl}

        --with-ldap \

%endif

        --with-devrandom=/dev/urandom \

        --enable-anon \

        --enable-cram \

        --enable-digest \

        --enable-ntlm \

        --enable-plain \

        --enable-login \

        --disable-otp \

%if ! %{bootstrap_cyrus_sasl}

        --enable-ldapdb \

%endif

        --enable-sql --with-mysql=%{_prefix} --with-pgsql=%{_prefix} \

        --without-sqlite \

        "$@"

        # --enable-auth-sasldb -- EXPERIMENTAL

make sasldir=%{_plugindir2}

make -C saslauthd testsaslauthd

make -C sample

# Build a small program to list the available mechanisms, because I need it.

pushd lib

../libtool --tag=CC --mode=link %{__cc} -o sasl2-shared-mechlist -I../include $CFLAGS %{SOURCE7} $LDFLAGS ./libsasl2.la

%install

test "$RPM_BUILD_ROOT" != "/" && rm -rf $RPM_BUILD_ROOT

make install DESTDIR=$RPM_BUILD_ROOT sasldir=%{_plugindir2}

make install DESTDIR=$RPM_BUILD_ROOT sasldir=%{_plugindir2} -C plugins

install -m755 -d $RPM_BUILD_ROOT%{_bindir}

./libtool --tag=CC --mode=install \

install -m755 sample/client $RPM_BUILD_ROOT%{_bindir}/sasl2-sample-client

./libtool --tag=CC --mode=install \

install -m755 sample/server $RPM_BUILD_ROOT%{_bindir}/sasl2-sample-server

./libtool --tag=CC --mode=install \

install -m755 saslauthd/testsaslauthd $RPM_BUILD_ROOT%{_sbindir}/testsaslauthd

# Install the saslauthd mdoc page in the expected location.  Sure, it's not

# really a man page, but groff seems to be able to cope with it.

install -m755 -d $RPM_BUILD_ROOT%{_mandir}/man8/

install -m644 -p saslauthd/saslauthd.mdoc $RPM_BUILD_ROOT%{_mandir}/man8/saslauthd.8

# Create the saslauthd listening directory.

install -m755 -d $RPM_BUILD_ROOT/var/run/saslauthd

# Install the init script for saslauthd and the init script's config file.

install -m755 -d $RPM_BUILD_ROOT/etc/rc.d/init.d $RPM_BUILD_ROOT/etc/sysconfig

install -m755 -p %{SOURCE4} $RPM_BUILD_ROOT/etc/rc.d/init.d/saslauthd

install -m644 -p %{SOURCE9} $RPM_BUILD_ROOT/etc/sysconfig/saslauthd

# Install the config dirs if they're not already there.

install -m755 -d $RPM_BUILD_ROOT/%{_sysconfdir}/sasl2

install -m755 -d $RPM_BUILD_ROOT/%{_plugindir2}

# Provide an easy way to query the list of available mechanisms.

./libtool --tag=CC --mode=install \

install -m755 lib/sasl2-shared-mechlist $RPM_BUILD_ROOT/%{_sbindir}/

# Remove unpackaged files from the buildroot.

rm -f $RPM_BUILD_ROOT%{_libdir}/sasl2/libotp.*

rm -f $RPM_BUILD_ROOT%{_libdir}/sasl2/*.a

rm -f $RPM_BUILD_ROOT%{_libdir}/sasl2/*.la

rm -f $RPM_BUILD_ROOT%{_libdir}/*.la

rm -f $RPM_BUILD_ROOT%{_mandir}/cat8/saslauthd.8

%clean

test "$RPM_BUILD_ROOT" != "/" && rm -rf $RPM_BUILD_ROOT

%pre

%__fe_groupadd %{uid} -r %{username} >/dev/null  2>&1 || :

%__fe_useradd %{uid} -r -c \"%{hint}\" -g %{username} -s /sbin/nologin -d %{homedir} %{username} >/dev/null 2>&1 || :

%post

/sbin/chkconfig --add saslauthd

%preun

if [ $1 -eq 0 ] ; then

        /sbin/service saslauthd stop 2>&1 > /dev/null

        /sbin/chkconfig --del saslauthd

fi

%postun

if [ $1 -ne 0 ] ; then

        /sbin/service saslauthd condrestart 2>&1 > /dev/null

fi

%__fe_userdel %{username} >/dev/null 2>&1 || :

%__fe_groupdel %{username} >/dev/null 2>&1 || :

%post lib -p /sbin/ldconfig

%postun lib -p /sbin/ldconfig

%files

%defattr(-,root,root)

%doc saslauthd/LDAP_SASLAUTHD

%dir %{_plugindir2}/

%{_mandir}/man8/*

%{_sbindir}/pluginviewer

%{_sbindir}/saslauthd

%{_sbindir}/testsaslauthd

%config(noreplace) /etc/sysconfig/saslauthd

/etc/rc.d/init.d/saslauthd

/var/run/saslauthd

%files lib

%defattr(-,root,root)

%doc AUTHORS COPYING NEWS README doc/*.html

%{_libdir}/libsasl*.so.*

%dir %{_sysconfdir}/sasl2

%dir %{_plugindir2}/

%{_plugindir2}/*anonymous*.so*

%{_plugindir2}/*sasldb*.so*

%{_sbindir}/saslpasswd2

%{_sbindir}/sasldblistusers2

%files plain

%defattr(-,root,root)

%{_plugindir2}/*plain*.so*

%{_plugindir2}/*login*.so*

%if ! %{bootstrap_cyrus_sasl}

%files ldap

%defattr(-,root,root)

%{_plugindir2}/*ldapdb*.so*

%endif

%files md5

%defattr(-,root,root)

%{_plugindir2}/*crammd5*.so*

%{_plugindir2}/*digestmd5*.so*

%files ntlm

%defattr(-,root,root)

%{_plugindir2}/*ntlm*.so*

%files sql

%defattr(-,root,root)

%{_plugindir2}/*sql*.so*

%files gssapi

%defattr(-,root,root)

%{_plugindir2}/*gssapi*.so*

%files devel

%defattr(-,root,root)

%doc doc/*.txt

%{_bindir}/sasl2-sample-client

%{_bindir}/sasl2-sample-server

%{_includedir}/*

%{_libdir}/libsasl*.*so

%{_mandir}/man3/*

%{_sbindir}/sasl2-shared-mechlist

%changelog

* Mon Feb 22 2010 Jan F. Chadima <jchadima@redhat.com> - 2.1.23-9

- solve race condition (#566875)

* Wed Feb 17 2010 Stepan Kasal <skasal@redhat.com> - 2.1.23-8

- improve m4 quoting to fix saslauthd/configure (#566088)

- call autotools in build, not in prep

* Fri Feb  5 2010 Jan F. Chadima <jchadima@redhat.com> - 2.1.23-7

- Add man page to testtcpauthd (#526189)

* Fri Oct 16 2009 Jan F. Chadima <jchadima@redhat.com> - 2.1.23-6

- Create the saslauth user according to fedora packaging guide

* Thu Sep 24 2009 Jan F. Chadima <jchadima@redhat.com> - 2.1.23-5

- Repair initscript to make condrestart working properly (#522103)

* Wed Sep 23 2009 Jan F. Chadima <jchadima@redhat.com> - 2.1.23-3

- Add possibility to run the saslauth without root privilegies (#185614)

* Fri Aug 21 2009 Tomas Mraz <tmraz@redhat.com> - 2.1.23-2

- rebuilt with new openssl

* Fri Aug  7 2009 Jan F. Chadima <jchadima@redhat.com> - 2.1.23-1

- update to 2.1.23

* Fri Jul 24 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.22-25

- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild

* Mon May 11 2009 Jan F. Chadima <jchadima@redhat.com> - 2.1.22-24

- repair sasl_encode64 nul termination (#487251)

* Thu Apr 16 2009 Robert Scheck <robert@fedoraproject.org> - 2.1.22-23

- Don't build the krb4 plugin as krb5 1.7 will drop it (#225974 #c6)

* Tue Feb 24 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.22-22

- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild

* Fri Feb  6 2009 Tomas Mraz <tmraz@redhat.com> - 2.1.22-21

- fix build with gcc-4.4

* Fri Jan 23 2009 Tomas Mraz <tmraz@redhat.com> - 2.1.22-20

- set LDAP_OPT_TIMEOUT (#326452)

- provide LSB compatible init script (#246900)

* Fri Sep 26 2008 Tomas Mraz <tmraz@redhat.com> - 2.1.22-19

- always use the current external db4 when linking,

  thanks to Dan Horak for the original patch (#464098)

* Wed Sep 10 2008 Tomas Mraz <tmraz@redhat.com> - 2.1.22-18

- fix most critical build warnings (#433583)

- use external db4

* Fri Aug 29 2008 Tomas Mraz <tmraz@redhat.com> - 2.1.22-17

- always link against the internal db4 (#459163)

- rediff patches for no fuzz

* Wed Jul  9 2008 Tomas Mraz <tmraz@redhat.com> - 2.1.22-16

- update internal db4 (#449737)

* Tue Jul  1 2008 Tomas Mraz <tmraz@redhat.com> - 2.1.22-15

- drop reload from initscript help (#448154)

- fix hang in rimap auth method (#438533)

- build the krb4 plugin (#154675)

* Fri May 23 2008 Dennis Gilmore <dennis@ausil.us> - 2.1.22-14

- make it so that bootstrap actually works

* Thu May 22 2008 Tom "spot" Callaway <tcallawa@redhat.com> - 2.1.22-13.1

- minor release bump for sparc rebuild

* Tue Feb 19 2008 Fedora Release Engineering <rel-eng@fedoraproject.org> - 2.1.22-13

- Autorebuild for GCC 4.3

* Thu Feb 14 2008 Steve Conklin <sconklin@redhat.com> - 2.1.22-12

- rebuild for gcc4.3

* Fri Jan 25 2008 Steve Conklin <sconklin@redhat.com> - 2.1.22-11

- Cleanup after merge review bz #225673

- no longer mark /etc/rc.d/init.d/saslauthd as config file

- removed -x permissions on include files

- added devel package dependency on cyrus-sasl

- removed some remaining .la files that were being delivered

* Wed Dec 05 2007 Release Engineering <rel-eng at fedoraproject dot org> - 2.1.22-10

 - Rebuild for deps

* Wed Nov  7 2007 Steve Conklin <sconklin@redhat.com> - 2.1.22-9

- Fixed a typo in the spec file

* Wed Nov  7 2007 Steve Conklin <sconklin@redhat.com> - 2.1.22-8

- Removed srp plugin source and added dist to NVR

* Tue Sep 18 2007 Steve Conklin <sconklin@redhat.com> 2.1.22-7

- use db4 version 4.6.19 bz#249737

* Mon Feb 26 2007 Nalin Dahyabhai <nalin@redhat.com> 2.1.22-6

- install config files and init scripts using -p

- pull in patch to build with current automake (#229010, Jacek Konieczny

  and Robert Scheck)

- remove prereq on ldconfig, RPM should pick it up based on the -libs

  scriptlets

- pull in patch to correctly detect gsskrb5_register_acceptor_identity

  (#200892, Mirko Streckenbach)

- move sasldb auxprop modules into the -lib subpackage, so that we'll pick

  it up for multilib systems

* Thu Feb 22 2007 Nalin Dahyabhai <nalin@redhat.com>

- pull CVS fix for not tripping over extra commas in digest-md5

  challenges (#229640)

* Fri Feb 16 2007 Nalin Dahyabhai <nalin@redhat.com>

- remove static build, which is no longer a useful option because not all of

  our dependencies are available as static libraries

- drop patches which were needed to keep static builds going

- drop gssapi-generic patch due to lack of interest

- update the bundled copy of db to 4.5.20 (#229012)

- drop dbconverter-2, as we haven't bundled v1 libraries since FC4

* Tue Dec  5 2006 Nalin Dahyabhai <nalin@redhat.com> 2.1.22-5

- rebuild

- add 'authentication' or 'auxprop' to summaries for plugin packages to

  better indicate what the plugin provides

- switch from automake 1.9 to automake 1.7

* Fri Sep 29 2006 Nalin Dahyabhai <nalin@redhat.com> 2.1.22-4

- rebuild without 'dlcompat' bits (#206119)

* Mon Jul 17 2006 Nalin Dahyabhai <nalin@redhat.com> 2.1.22-3

- rebuild

* Tue Jun 20 2006 Nalin Dahyabhai <nalin@redhat.com> 2.1.22-2

- fix a typo in sasl_client_start(3) (#196066)

* Mon May 22 2006 Nalin Dahyabhai <nalin@redhat.com> 2.1.22-1

- update to 2.1.22, adding pluginviewer to %%{_sbindir}

* Tue May 16 2006 Nalin Dahyabhai <nalin@redhat.com> 2.1.21-12

- add conditionalized build dependency on openldap-devel (#191855)

- patch md5global.h to be the same on all architectures

* Thu Apr 27 2006 Nalin Dahyabhai <nalin@redhat.com> 2.1.21-11

- add unapplied patch which makes the DIGEST-MD5 plugin omit the realm

  argument when the environment has $CYRUS_SASL_DIGEST_MD5_OMIT_REALM set to a

  non-zero value, for testing purposes

- add missing buildrequires on zlib-devel (#190113)

* Mon Feb 20 2006 Nalin Dahyabhai <nalin@redhat.com> 2.1.21-10

- add missing buildrequires on gdbm-devel (Karsten Hopp)

* Fri Feb 10 2006 Jesse Keating <jkeating@redhat.com> - 2.1.21-9.2

- bump again for double-long bug on ppc(64)

* Tue Feb 07 2006 Jesse Keating <jkeating@redhat.com> - 2.1.21-9.1

- rebuilt for new gcc4.1 snapshot and glibc changes

* Mon Dec 19 2005 Nalin Dahyabhai <nalin@redhat.com> 2.1.21-9

- use --as-needed to avoid linking dbconverter-2 with SQL libraries, which

  it doesn't use because it manipulates files directly (#173321)

* Fri Dec 09 2005 Jesse Keating <jkeating@redhat.com>

- rebuilt

* Mon Nov 14 2005 Nalin Dahyabhai <nalin@redhat.com> 2.1.21-8

- rebuild with new OpenLDAP, overriding the version checks to assume that

  2.3.11 is acceptable

- remove a lingering patch for 1.x which we no longer use

* Sat Nov 12 2005 Tom Lane <tgl@redhat.com> 2.1.21-7

- Rebuild due to mysql update.

* Tue Nov  8 2005 Tomas Mraz <tmraz@redhat.com> 2.1.21-6

- rebuilt with new openssl

* Fri Sep  9 2005 Nalin Dahyabhai <nalin@redhat.com> 2.1.21-5

- add missing buildrequires: on groff (#163032)

* Thu Sep  1 2005 Nalin Dahyabhai <nalin@redhat.com> 2.1.21-4

- move the ldapdb auxprop support into a subpackage (#167300)

  (note: the ldap password check support in saslauthd doesn't use auxprop)

* Tue Aug 30 2005 Nalin Dahyabhai <nalin@redhat.com> 2.1.21-3

- correct a use of uninitialized memory in the bundled libdb (Arjan van de Ven)

* Mon Aug 29 2005 Nalin Dahyabhai <nalin@redhat.com> 2.1.21-2

- move the ANONYMOUS mech plugin to the -lib subpackage so that multilib

  systems can use it without installing the main package

- build the static libraries without sql auxprop support

* Mon Aug 29 2005 Nalin Dahyabhai <nalin@redhat.com> 2.1.21-1

- update to 2.1.21

- turn off compilation of libsasl v1 (finally)

- explicitly disable sqlite to avoid the build warning

- change the default mechanism which is set for saslauthd from "shadow" to

  "pam" (#159194)

- split the shared library up from saslauthd so that multilib systems don't

  have to pull in every dependency of saslauthd for the compat arch (#166749)

* Wed Apr 13 2005 Nalin Dahyabhai <nalin@redhat.com> 2.1.20-5

- rebuild with new deps

* Tue Mar  1 2005 Nalin Dahyabhai <nalin@redhat.com> 2.1.20-4

- rebuild with new deps

* Thu Nov 11 2004 Jeff Johnson <jbj@jbj.org> 2.1.20-3

- rebuild against db-4.3.21.

* Thu Nov 11 2004 Nalin Dahyabhai <nalin@redhat.com> 2.1.20-2

- build with mysql-devel instead of mysqlclient10

* Mon Nov  1 2004 Nalin Dahyabhai <nalin@redhat.com> 2.1.20-1

- build with mysqlclient10 instead of mysql-devel

* Wed Oct 27 2004 Nalin Dahyabhai <nalin@redhat.com> 2.1.20-0

- update to 2.1.20, including the fix for CAN-2004-0884

* Thu Oct  5 2004 Nalin Dahyabhai <nalin@redhat.com> 2.1.19-3

- use notting's fix for incorrect patch for CAN-2004-0884 for 1.5.28

* Thu Oct  5 2004 Nalin Dahyabhai <nalin@redhat.com> 2.1.19-2

- don't trust the environment in setuid/setgid contexts (CAN-2004-0884, #134660)

* Thu Aug 19 2004 Nalin Dahyabhai <nalin@redhat.com> 2.1.19-1

- rebuild (the 2.1.19 changelog for fixing a buffer overflow referred to a CVS

  revision between 2.1.18 and 2.1.19)

* Mon Jul 19 2004 Nalin Dahyabhai <nalin@redhat.com> 2.1.19-0

- update to 2.1.19, maybe for update

* Tue Jun 15 2004 Elliot Lee <sopwith@redhat.com>

- rebuilt

* Mon Jun  7 2004 Nalin Dahyabhai <nalin@redhat.com> 2.1.18-4

- enable sql auxprop support in a subpackage

- include LDAP_SASLAUTHD documentation file (#124830)

* Fri Jun  4 2004 Nalin Dahyabhai <nalin@redhat.com>

- turn on ntlm in a subpackage

* Thu May 13 2004 Thomas Woerner <twoerner@redhat.com> 2.1.18-3

- removed rpath

* Tue Mar 16 2004 Nalin Dahyabhai <nalin@redhat.com> 2.1.18-2

- turn on building of libsasl v1 again

* Fri Mar 12 2004 Nalin Dahyabhai <nalin@redhat.com> 2.1.18-1

- update to 2.1.18

- saslauthd's ldap code is no longer marked experimental, so we build it

* Mon Mar  8 2004 Nalin Dahyabhai <nalin@redhat.com> 2.1.17-4

- rebuild

* Tue Mar 02 2004 Elliot Lee <sopwith@redhat.com>

- rebuilt

* Fri Feb 13 2004 Elliot Lee <sopwith@redhat.com>

- rebuilt

* Tue Feb  3 2004 Nalin Dahyabhai <nalin@redhat.com> 2.1.17-2

- include default /etc/sysconfig/saslauthd configuration file for the init

  script (#114868)

* Thu Jan 29 2004 Nalin Dahyabhai <nalin@redhat.com>

- drop saslauthd_version patch for libsasl2

* Thu Jan 29 2004 Nalin Dahyabhai <nalin@redhat.com>

- add a saslauthd_version option to libsasl's saslauthd client and teach it to

  do the right thing

- enable the saslauthd client code in libsasl version 1 (it's still going away!)

- add saslauthd1-checkpass/saslauthd2-checkpass for testing the above change

* Wed Jan  7 2004 Nalin Dahyabhai <nalin@redhat.com> 2.1.17-1

- forcibly disable otp and sql plugins at compile-time

* Fri Dec 19 2003 Nalin Dahyabhai <nalin@redhat.com>

- update to 2.1.17, forcing the gssapi plugin to be shared now, as before

- use a bundled libdb (#112215)

- build static-with-all-plugins and normal-shared libsasl versions

- add sasl2-{shared,static}-mechlist for very basic sanity checking

- make inclusion of sasl1 stuffs conditional, because it's so going away

* Sat Dec 13 2003 Jeff Johnson <jbj@jbj.org> 2.1.15-7

- rebuild against db-4.2.52.

* Thu Oct 23 2003 Nalin Dahyabhai <nalin@redhat.com> 2.1.15-6

- use /dev/urandom instead of /dev/random for SASL2 (docs indicate that this is

  safe if you aren't using OTP or SRP, and we build neither); SASL1 appears to

  use it to seed the libc RNG only (#103378)

* Mon Oct 20 2003 Nalin Dahyabhai <nalin@redhat.com>

- obey RPM_OPT_FLAGS again when krb5_prefix != %%{_prefix}

* Fri Oct 17 2003 Nalin Dahyabhai <nalin@redhat.com> 2.1.15-5

- install saslauthd's mdoc page instead of the pre-formatted man page, which

  would get formatted again

* Thu Sep 25 2003 Jeff Johnson <jbj@jbj.org> 2.1.15-5

- rebuild against db-4.2.42.

* Mon Sep 15 2003 Nalin Dahyabhai <nalin@redhat.com>

- include testsaslauthd

- note in the README that the saslauthd protocol is different for v1 and v2,

  so v1's clients can't talk to the v2 server

* Thu Aug 21 2003 Nalin Dahyabhai <nalin@redhat.com> 2.1.15-4

- rebuild

* Thu Aug 21 2003 Nalin Dahyabhai <nalin@redhat.com> 2.1.15-3

- add logic to build with gssapi libs in either /usr or /usr/kerberos

* Mon Jul 21 2003 Nalin Dahyabhai <nalin@redhat.com> 2.1.15-2

- rebuild

* Tue Jul 15 2003 Nalin Dahyabhai <nalin@redhat.com> 2.1.15-1

- update to 2.1.15

* Mon Jul 14 2003 Nalin Dahyabhai <nalin@redhat.com> 2.1.14-1

- update to 2.1.14

* Wed Jun 04 2003 Elliot Lee <sopwith@redhat.com>

- rebuilt

* Fri May  9 2003 Nalin Dahyabhai <nalin@redhat.com> 2.1.13-3

- change -m argument to saslauthd to be a directory instead of a path

* Thu May  8 2003 Nalin Dahyabhai <nalin@redhat.com> 2.1.13-2

- link libsasl2 with -lpthread to ensure that the sasldb plug-in can always

  be loaded

* Tue Apr 29 2003 Nalin Dahyabhai <nalin@redhat.com> 2.1.13-1

- update to 2.1.13

* Wed Jan 22 2003 Tim Powers <timp@redhat.com>

- rebuilt

* Tue Jan  7 2003 Nalin Dahyabhai <nalin@redhat.com> 2.1.10-3

- rebuild

* Thu Dec 12 2002 Nalin Dahyabhai <nalin@redhat.com>

- consider either des_cbc_encrypt or DES_cbc_encrypt to be sufficient when

  searching for a DES implementation in libcrypto

- pull in CPPFLAGS and LDFLAGS from openssl's pkg-config data, if it exists

* Mon Dec  9 2002 Nalin Dahyabhai <nalin@redhat.com> 2.1.10-2

- rebuild

* Mon Dec  9 2002 Nalin Dahyabhai <nalin@redhat.com> 2.1.10-1

- update to 2.1.10, fixing buffer overflows in libsasl2 noted by Timo Sirainen

* Tue Nov 12 2002 Tim Powers <timp@redhat.com> 2.1.7-5

- remove files from $RPM_BUILD_ROOT that we don't intend to include

* Tue Oct  9 2002 Nalin Dahyabhai <nalin@redhat.com> 2.1.7-4

- update to SASLv1 to final 1.5.28

* Fri Sep 13 2002 Nalin Dahyabhai <nalin@redhat.com> 2.1.7-3

- rebuild, overriding sasldir when running make so that on multilib systems

  applications will be able to load modules for the right arch

* Mon Sep  2 2002 Nalin Dahyabhai <nalin@redhat.com> 2.1.7-2

- include dbconverter-2 (#68741)

* Fri Aug  9 2002 Nalin Dahyabhai <nalin@redhat.com> 2.1.7-1

- update to 2.1.7, fixing a race condition in digest-md5

* Wed Jul 17 2002 Nalin Dahyabhai <nalin@redhat.com> 2.1.6-1

- update to 2.1.6 and 1.5.28

* Fri Jun 21 2002 Tim Powers <timp@redhat.com>

- automated rebuild

* Thu Jun 13 2002 Nalin Dahyabhai <nalin@redhat.com> 2.1.5-1

- update to 2.1.5

* Mon Jun 10 2002 Nalin Dahyabhai <nalin@redhat.com> 2.1.4-1

- update to 2.1.4

* Sun May 26 2002 Tim Powers <timp@redhat.com>

- automated rebuild

* Thu May 16 2002 Nalin Dahyabhai <nalin@redhat.com> 2.1.2-1

- modify to build with db 4.x

* Thu Apr 18 2002 Nalin Dahyabhai <nalin@redhat.com>

- update cyrus-sasl 2 to 2.1.2

- change buildreq to db3-devel