import mod_auth_gssapi-1.6.1-6.el8
This commit is contained in:
CentOS Sources
Stepan Oksanichenko
commit
5f6ca65d6a
1
.gitignore
vendored
Normal file
1
.gitignore
vendored
Normal file
@ -0,0 +1 @@
|
|||||||
|
SOURCES/mod_auth_gssapi-1.6.1.tar.gz
|
||||||
1
.mod_auth_gssapi.metadata
Normal file
1
.mod_auth_gssapi.metadata
Normal file
@ -0,0 +1 @@
|
|||||||
|
5dfc4eef25efad5313724bd6a1e55266a6667302 SOURCES/mod_auth_gssapi-1.6.1.tar.gz
|
||||||
38
SOURCES/Fix-integer-sizes-used-with-ap_set_flag_slot.patch
Normal file
38
SOURCES/Fix-integer-sizes-used-with-ap_set_flag_slot.patch
Normal file
@ -0,0 +1,38 @@
|
|||||||
|
From d681fe586a4f4258c5d61237511dd19c1fa84904 Mon Sep 17 00:00:00 2001
|
||||||
|
From: Robbie Harwood <rharwood@redhat.com>
|
||||||
|
Date: Tue, 19 Feb 2019 13:55:12 -0500
|
||||||
|
Subject: [PATCH] Fix integer sizes used with ap_set_flag_slot()
|
||||||
|
|
||||||
|
ap_set_flag_slot() requires a field of type `int`. Previously we
|
||||||
|
passed type `bool` in two places, causing test failures on s390x
|
||||||
|
because logging was not correctly configured.
|
||||||
|
|
||||||
|
Signed-off-by: Robbie Harwood <rharwood@redhat.com>
|
||||||
|
(cherry picked from commit f89b876be5619d750e6ab4ea6e730a9a26b1cac4)
|
||||||
|
(cherry picked from commit 73c690ca9bd1d470c603f5e1ee48d2384941ae55)
|
||||||
|
---
|
||||||
|
src/mod_auth_gssapi.h | 4 ++--
|
||||||
|
1 file changed, 2 insertions(+), 2 deletions(-)
|
||||||
|
|
||||||
|
diff --git a/src/mod_auth_gssapi.h b/src/mod_auth_gssapi.h
|
||||||
|
index 71404ff..8c0b972 100644
|
||||||
|
--- a/src/mod_auth_gssapi.h
|
||||||
|
+++ b/src/mod_auth_gssapi.h
|
||||||
|
@@ -79,7 +79,7 @@ struct mag_config {
|
||||||
|
gid_t deleg_ccache_gid;
|
||||||
|
gss_key_value_set_desc *cred_store;
|
||||||
|
bool deleg_ccache_unique;
|
||||||
|
- bool s4u2self;
|
||||||
|
+ int s4u2self;
|
||||||
|
char *ccname_envvar;
|
||||||
|
#endif
|
||||||
|
struct seal_key *mag_skey;
|
||||||
|
@@ -90,7 +90,7 @@ struct mag_config {
|
||||||
|
bool negotiate_once;
|
||||||
|
struct mag_name_attributes *name_attributes;
|
||||||
|
const char *required_na_expr;
|
||||||
|
- bool enverrs;
|
||||||
|
+ int enverrs;
|
||||||
|
gss_name_t acceptor_name;
|
||||||
|
bool acceptor_name_from_req;
|
||||||
|
};
|
||||||
47
SOURCES/Fix-tests-to-work-with-python3.patch
Normal file
47
SOURCES/Fix-tests-to-work-with-python3.patch
Normal file
@ -0,0 +1,47 @@
|
|||||||
|
From 613933383aa352bb8f350f43ecb393a0604016cc Mon Sep 17 00:00:00 2001
|
||||||
|
From: Robbie Harwood <rharwood@redhat.com>
|
||||||
|
Date: Fri, 21 Dec 2018 11:50:16 -0500
|
||||||
|
Subject: [PATCH] Fix tests to work with python3
|
||||||
|
|
||||||
|
Signed-off-by: Robbie Harwood <rharwood@redhat.com>
|
||||||
|
(cherry picked from commit 751eb09e7abf38f49fc525e1616d48a6f951673f)
|
||||||
|
(cherry picked from commit d2748e79d31f153505f944b09a4790c6231dcd79)
|
||||||
|
---
|
||||||
|
tests/magtests.py | 3 ++-
|
||||||
|
tests/t_spnego_proxy.py | 2 +-
|
||||||
|
2 files changed, 3 insertions(+), 2 deletions(-)
|
||||||
|
|
||||||
|
diff --git a/tests/magtests.py b/tests/magtests.py
|
||||||
|
index 6414503..f14f47a 100755
|
||||||
|
--- a/tests/magtests.py
|
||||||
|
+++ b/tests/magtests.py
|
||||||
|
@@ -431,7 +431,7 @@ def kinit_user(testdir, kdcenv):
|
||||||
|
stdin=subprocess.PIPE,
|
||||||
|
stdout=logfile, stderr=logfile,
|
||||||
|
env=testenv, preexec_fn=os.setsid)
|
||||||
|
- kinit.communicate('%s\n' % USR_PWD)
|
||||||
|
+ kinit.communicate(('%s\n' % USR_PWD).encode("utf8"))
|
||||||
|
kinit.wait()
|
||||||
|
if kinit.returncode != 0:
|
||||||
|
raise ValueError('kinit failed')
|
||||||
|
@@ -495,6 +495,7 @@ def test_spnego_auth(testdir, testenv, logfile):
|
||||||
|
else:
|
||||||
|
sys.stderr.write('SPNEGO No Auth: SUCCESS\n')
|
||||||
|
|
||||||
|
+
|
||||||
|
return error_count
|
||||||
|
|
||||||
|
|
||||||
|
diff --git a/tests/t_spnego_proxy.py b/tests/t_spnego_proxy.py
|
||||||
|
index 6219721..c47558b 100755
|
||||||
|
--- a/tests/t_spnego_proxy.py
|
||||||
|
+++ b/tests/t_spnego_proxy.py
|
||||||
|
@@ -17,7 +17,7 @@ def getAuthToken(target):
|
||||||
|
ctx = gssapi.SecurityContext(name=name, mech=spnego_mech)
|
||||||
|
token = ctx.step()
|
||||||
|
|
||||||
|
- return 'Negotiate %s' % b64encode(token)
|
||||||
|
+ return 'Negotiate %s' % b64encode(token).decode()
|
||||||
|
|
||||||
|
|
||||||
|
if __name__ == '__main__':
|
||||||
43
SOURCES/In-tests-show-the-exception-on-failure.patch
Normal file
43
SOURCES/In-tests-show-the-exception-on-failure.patch
Normal file
@ -0,0 +1,43 @@
|
|||||||
|
From 3fc1f9f5d7f5a33900572b419ecdfd2d3672ceca Mon Sep 17 00:00:00 2001
|
||||||
|
From: Robbie Harwood <rharwood@redhat.com>
|
||||||
|
Date: Fri, 21 Dec 2018 10:50:49 -0500
|
||||||
|
Subject: [PATCH] In tests, show the exception on failure
|
||||||
|
|
||||||
|
Otherwise, the user might get nothing at all out, depending on what failed.
|
||||||
|
|
||||||
|
Signed-off-by: Robbie Harwood <rharwood@redhat.com>
|
||||||
|
(cherry picked from commit 881f98ee08f6d8d7a2352ab2f3e8e38845cf8039)
|
||||||
|
(cherry picked from commit 1de81677f1878ea1667b56169fe714d685771b4e)
|
||||||
|
---
|
||||||
|
tests/magtests.py | 4 +++-
|
||||||
|
1 file changed, 3 insertions(+), 1 deletion(-)
|
||||||
|
|
||||||
|
diff --git a/tests/magtests.py b/tests/magtests.py
|
||||||
|
index 576e88f..6414503 100755
|
||||||
|
--- a/tests/magtests.py
|
||||||
|
+++ b/tests/magtests.py
|
||||||
|
@@ -8,6 +8,7 @@ import shutil
|
||||||
|
import signal
|
||||||
|
import subprocess
|
||||||
|
import sys
|
||||||
|
+import traceback
|
||||||
|
|
||||||
|
# check that we can import requests (for use in test scripts)
|
||||||
|
import requests
|
||||||
|
@@ -207,7 +208,6 @@ def setup_test_certs(testdir, testenv, logfile):
|
||||||
|
with open(opensslcnf, 'w+') as f:
|
||||||
|
f.write(text)
|
||||||
|
|
||||||
|
- print(pkinit_key)
|
||||||
|
cmd = subprocess.Popen(["openssl", "genrsa", "-out", pkinit_key,
|
||||||
|
"2048"], stdout=logfile,
|
||||||
|
stderr=logfile, env=testenv,
|
||||||
|
@@ -718,6 +718,8 @@ if __name__ == '__main__':
|
||||||
|
errs += test_basic_auth_krb5(testdir, testenv, logfile)
|
||||||
|
|
||||||
|
errs += test_no_negotiate(testdir, testenv, logfile)
|
||||||
|
+ except Exception:
|
||||||
|
+ traceback.print_exc()
|
||||||
|
finally:
|
||||||
|
for name in processes:
|
||||||
|
logfile.write("Killing %s\n" % name)
|
||||||
@ -0,0 +1,40 @@
|
|||||||
|
From ce83aa116397fb71143e5b1363ce7563f7a4444d Mon Sep 17 00:00:00 2001
|
||||||
|
From: Robbie Harwood <rharwood@redhat.com>
|
||||||
|
Date: Mon, 11 Mar 2019 14:56:31 -0400
|
||||||
|
Subject: [PATCH] [tests] Test suite fixes for virtualenv and clang
|
||||||
|
|
||||||
|
- Typo fix - VIRTUAL_ENV in magtests.py
|
||||||
|
- testenv object manipulation fix in magtests.py
|
||||||
|
- Work around -fstack-clash-protection problems in clang
|
||||||
|
|
||||||
|
Signed-off-by: Robbie Harwood <rharwood@redhat.com>
|
||||||
|
(cherry picked from commit 6aa0a5bfe9d60a50cf36c561268c5d7c1fdb2f0e)
|
||||||
|
[rharwood@redhat.com: drop Travis goo]
|
||||||
|
(cherry picked from commit 11c966cc630393e322ef6b88df91d16247bbfc37)
|
||||||
|
---
|
||||||
|
tests/magtests.py | 5 ++++-
|
||||||
|
1 file changed, 4 insertions(+), 1 deletion(-)
|
||||||
|
|
||||||
|
diff --git a/tests/magtests.py b/tests/magtests.py
|
||||||
|
index f14f47a..a4842a0 100755
|
||||||
|
--- a/tests/magtests.py
|
||||||
|
+++ b/tests/magtests.py
|
||||||
|
@@ -687,7 +687,7 @@ if __name__ == '__main__':
|
||||||
|
|
||||||
|
# support virtualenv
|
||||||
|
testenv['PATH'] = os.environ.get('PATH', '')
|
||||||
|
- testenv['ViRTUAL_ENV'] = os.environ.get('VIRTUAL_ENV', '')
|
||||||
|
+ testenv['VIRTUAL_ENV'] = os.environ.get('VIRTUAL_ENV', '')
|
||||||
|
|
||||||
|
testenv['DELEGCCACHE'] = os.path.join(testdir, 'httpd',
|
||||||
|
USR_NAME + '@' + TESTREALM)
|
||||||
|
@@ -716,6 +716,9 @@ if __name__ == '__main__':
|
||||||
|
'MAG_USER_NAME_2': USR_NAME_2,
|
||||||
|
'MAG_USER_PASSWORD_2': USR_PWD_2}
|
||||||
|
testenv.update(kdcenv)
|
||||||
|
+ testenv['PATH'] = os.environ.get('PATH', '')
|
||||||
|
+ testenv['VIRTUAL_ENV'] = os.environ.get('VIRTUAL_ENV', '')
|
||||||
|
+
|
||||||
|
errs += test_basic_auth_krb5(testdir, testenv, logfile)
|
||||||
|
|
||||||
|
errs += test_no_negotiate(testdir, testenv, logfile)
|
||||||
169
SPECS/mod_auth_gssapi.spec
Normal file
169
SPECS/mod_auth_gssapi.spec
Normal file
@ -0,0 +1,169 @@
|
|||||||
|
Name: mod_auth_gssapi
|
||||||
|
Version: 1.6.1
|
||||||
|
Release: 6%{?dist}
|
||||||
|
Summary: A GSSAPI Authentication module for Apache
|
||||||
|
|
||||||
|
Group: System Environment/Daemons
|
||||||
|
License: MIT
|
||||||
|
URL: https://github.com/modauthgssapi/mod_auth_gssapi
|
||||||
|
Source0: https://github.com/modauthgssapi/%{name}/releases/download/v%{version}/%name-%{version}.tar.gz
|
||||||
|
|
||||||
|
Patch0: In-tests-show-the-exception-on-failure.patch
|
||||||
|
Patch1: Fix-tests-to-work-with-python3.patch
|
||||||
|
Patch2: tests-Test-suite-fixes-for-virtualenv-and-clang.patch
|
||||||
|
Patch3: Fix-integer-sizes-used-with-ap_set_flag_slot.patch
|
||||||
|
|
||||||
|
BuildRequires: httpd-devel, krb5-devel, openssl-devel, autoconf, automake, libtool
|
||||||
|
BuildRequires: gssntlmssp-devel
|
||||||
|
BuildRequires: git
|
||||||
|
Requires: httpd-mmn = %{_httpd_mmn}
|
||||||
|
Requires: krb5-libs >= 1.11.5
|
||||||
|
|
||||||
|
%description
|
||||||
|
The mod_auth_gssapi module is an authentication service that implements the
|
||||||
|
SPNEGO based HTTP Authentication protocol defined in RFC4559.
|
||||||
|
|
||||||
|
%prep
|
||||||
|
%autosetup -S git
|
||||||
|
|
||||||
|
%build
|
||||||
|
export APXS=%{_httpd_apxs}
|
||||||
|
autoreconf -fi
|
||||||
|
%configure
|
||||||
|
make %{?_smp_mflags}
|
||||||
|
|
||||||
|
%install
|
||||||
|
mkdir -p %{buildroot}%{_httpd_moddir}
|
||||||
|
install -m 755 src/.libs/%{name}.so %{buildroot}%{_httpd_moddir}
|
||||||
|
|
||||||
|
# Apache configuration for the module
|
||||||
|
echo "LoadModule auth_gssapi_module modules/mod_auth_gssapi.so" > 10-auth_gssapi.conf
|
||||||
|
mkdir -p %{buildroot}%{_httpd_modconfdir}
|
||||||
|
install -m 644 10-auth_gssapi.conf %{buildroot}%{_httpd_modconfdir}
|
||||||
|
|
||||||
|
%files
|
||||||
|
%doc
|
||||||
|
%defattr(-,root,root)
|
||||||
|
%doc README COPYING
|
||||||
|
%config(noreplace) %{_httpd_modconfdir}/10-auth_gssapi.conf
|
||||||
|
%{_httpd_moddir}/mod_auth_gssapi.so
|
||||||
|
|
||||||
|
%changelog
|
||||||
|
* Fri Mar 22 2019 Robbie Harwood <rharwood@redhat.com> - 1.6.1-6
|
||||||
|
- Gating update
|
||||||
|
- Resolves: #1682259
|
||||||
|
|
||||||
|
* Mon Mar 18 2019 Robbie Harwood <rharwood@redhat.com> - 1.6.1-5
|
||||||
|
- Fix integer sizes used with ap_set_flag_slot()
|
||||||
|
- Resolves: #1674501
|
||||||
|
|
||||||
|
* Mon Mar 18 2019 Robbie Harwood <rharwood@redhat.com> - 1.6.1-4
|
||||||
|
- Fix virtualenv logic and add gating
|
||||||
|
- Resolves: #1682259
|
||||||
|
|
||||||
|
* Thu Mar 14 2019 Robbie Harwood <rharwood@redhat.com> - 1.6.1-3
|
||||||
|
- Fix tests to work with python3
|
||||||
|
- Resolves: #1661589
|
||||||
|
|
||||||
|
* Fri Jul 13 2018 Fedora Release Engineering <releng@fedoraproject.org> - 1.6.1-2
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
|
||||||
|
|
||||||
|
* Mon Apr 23 2018 Robbie Harwood <rharwood@redhat.com> - 1.6.1-1
|
||||||
|
- Release 1.6.1
|
||||||
|
- Resolves: #1570271
|
||||||
|
|
||||||
|
* Thu Feb 08 2018 Fedora Release Engineering <releng@fedoraproject.org> - 1.6.0-2
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
|
||||||
|
|
||||||
|
* Mon Nov 06 2017 Robbie Harwood <rharwood@redhat.com> - 1.6.0-1
|
||||||
|
- Release 1.6.0
|
||||||
|
|
||||||
|
* Fri Oct 27 2017 Robbie Harwood <rharwood@redhat.com> - 1.5.1-6
|
||||||
|
- Document gssapi-no-negotiate
|
||||||
|
|
||||||
|
* Tue Oct 03 2017 Robbie Harwood <rharwood@redhat.com> - 1.5.1-5
|
||||||
|
- Handle extra large NSS entries
|
||||||
|
- Resolves: #1498175
|
||||||
|
|
||||||
|
* Mon Oct 02 2017 Robbie Harwood <rharwood@redhat.com> - 1.5.1-4
|
||||||
|
- Allow admins to selectively suppress negotiation
|
||||||
|
- Migrate to autosetup
|
||||||
|
|
||||||
|
* Thu Aug 03 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.5.1-3
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
|
||||||
|
|
||||||
|
* Wed Jul 26 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.5.1-2
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
|
||||||
|
|
||||||
|
* Thu Mar 9 2017 Simo Sorce <simo@redhat.com> - 1.5.1-1
|
||||||
|
- Korabl-Sputnik 4 launch (1.5.1)
|
||||||
|
|
||||||
|
* Fri Feb 10 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.5.0-2
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
|
||||||
|
|
||||||
|
* Mon Jan 16 2017 Simo Sorce <simo@redhat.com> - 1.5.0-1
|
||||||
|
- Last listoff of Space Shuttle Columbia release (1.5.0)
|
||||||
|
|
||||||
|
* Mon Nov 14 2016 Joe Orton <jorton@redhat.com> - 1.4.1-2
|
||||||
|
- rebuild for new OpenSSL
|
||||||
|
|
||||||
|
* Mon Aug 15 2016 Robbie Harwood <rharwood@redhat.com> 1.4.1-1
|
||||||
|
- Mishka & Chizhik fly on a rocket release (1.4.1)
|
||||||
|
- Fix bogus changelog date
|
||||||
|
|
||||||
|
* Fri Jun 17 2016 Simo Sorce <simo@redhat.com> 1.4.0-1
|
||||||
|
- Lunar Reconnaissance Orbiter (2009) release (1.4.0)
|
||||||
|
|
||||||
|
* Mon Feb 22 2016 Simo Sorce <simo@redhat.com> 1.3.2-1
|
||||||
|
- NEAR Shoemaker launch (1996) release (1.3.2)
|
||||||
|
|
||||||
|
* Thu Feb 04 2016 Fedora Release Engineering <releng@fedoraproject.org> - 1.3.1-3
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
|
||||||
|
|
||||||
|
* Thu Sep 3 2015 Simo Sorce <simo@redhat.com> 1.3.1-1
|
||||||
|
- Viking 2 landing (1976) release (1.3.1)
|
||||||
|
|
||||||
|
* Tue Jul 7 2015 Simo Sorce <simo@redhat.com> 1.3.0-2
|
||||||
|
- Fix annoying incorrect behavior with simple configuration where
|
||||||
|
GssapiAllowedMech is not used.
|
||||||
|
|
||||||
|
* Sat Jul 4 2015 Simo Sorce <simo@redhat.com> 1.3.0-1
|
||||||
|
- US Independence Day Release
|
||||||
|
|
||||||
|
* Wed Jun 17 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2.0-2
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
|
||||||
|
|
||||||
|
* Tue Apr 21 2015 Simo Sorce <simo@redhat.com> 1.2.0-1
|
||||||
|
- New minor release 1.2.0
|
||||||
|
- Adds delegation support on Basic Auth
|
||||||
|
- Response fix, send last auth token on successful auth
|
||||||
|
|
||||||
|
* Tue Mar 31 2015 Simo Sorce <simo@redhat.com> 1.1.0-3
|
||||||
|
- Fix some authentication issues
|
||||||
|
|
||||||
|
* Thu Mar 26 2015 Simo Sorce <simo@redhat.com> 1.1.0-2
|
||||||
|
- Fix saving delegated credentials for SPNs
|
||||||
|
|
||||||
|
* Thu Mar 12 2015 Simo Sorce <simo@redhat.com> 1.1.0-1
|
||||||
|
- New minor release 1.1.0
|
||||||
|
- New feature: Basic Auth support
|
||||||
|
- Improvements: Better crypto for sesison cookies
|
||||||
|
|
||||||
|
* Sat Nov 8 2014 Simo Sorce <simo@redhat.com> 1.0.4-1
|
||||||
|
- Patch release 1.0.4
|
||||||
|
- logging initialization fixes
|
||||||
|
- additional build fixes
|
||||||
|
|
||||||
|
* Sat Oct 11 2014 Simo Sorce <simo@redhat.com> 1.0.3-1
|
||||||
|
- Patch release 1.0.3
|
||||||
|
- fixes some build issues on various distros
|
||||||
|
|
||||||
|
* Wed Aug 27 2014 Simo Sorce <simo@redhat.com> 1.0.2-1
|
||||||
|
- Adds documntation to README
|
||||||
|
- fixes bad bug that crippled configuration
|
||||||
|
|
||||||
|
* Thu Aug 14 2014 Simo Sorce <simo@redhat.com> 1.0.1-1
|
||||||
|
- Patch release 1.0.1
|
||||||
|
|
||||||
|
* Mon Aug 4 2014 Simo Sorce <simo@redhat.com> 1.0.0-1
|
||||||
|
- First release
|
||||||
Loading…
Reference in New Issue
Block a user