%global pkgname   dirsrv

%global srcname   389-ds-base

# Exclude i686 bit arches

ExcludeArch: i686

# for a pre-release, define the prerel field e.g. .a1 .rc2 - comment out for official release

# also remove the space between % and global - this space is needed because

# fedpkg verrel stupidly ignores comment lines

#% global prerel .rc3

# also need the relprefix field for a pre-release e.g. .0 - also comment out for official release

#% global relprefix 0.

# If perl-Socket-2.000 or newer is available, set 0 to use_Socket6.

%global use_Socket6 0

%global use_asan 0

%global use_rust 1

%global use_legacy 1

%global bundle_jemalloc 1

%if %{use_asan}

%global bundle_jemalloc 0

%endif

%if %{bundle_jemalloc}

%global jemalloc_name jemalloc

%global jemalloc_ver 5.2.1

%global __provides_exclude ^libjemalloc\\.so.*$

%endif

# Use Clang instead of GCC

%global use_clang 0

# fedora 15 and later uses tmpfiles.d

# otherwise, comment this out

%{!?with_tmpfiles_d: %global with_tmpfiles_d %{_sysconfdir}/tmpfiles.d}

# systemd support

%global groupname %{pkgname}.target

# set PIE flag

%global _hardened_build 1

# Filter argparse-manpage from autogenerated package Requires

%global __requires_exclude ^python.*argparse-manpage

Summary:          389 Directory Server (base)

Name:             389-ds-base

Version:          1.4.3.23

Release:          %{?relprefix}10%{?prerel}%{?dist}

License:          GPLv3+

URL:              https://www.port389.org

Group:            System Environment/Daemons

Conflicts:        selinux-policy-base < 3.9.8

Conflicts:        freeipa-server < 4.0.3

Obsoletes:        %{name} <= 1.4.0.9

Provides:         ldif2ldbm >= 0

##### Bundled cargo crates list - START #####

Provides:  bundled(crate(ansi_term)) = 0.11.0

Provides:  bundled(crate(atty)) = 0.2.14

Provides:  bundled(crate(autocfg)) = 1.0.1

Provides:  bundled(crate(base64)) = 0.10.1

Provides:  bundled(crate(bitflags)) = 1.2.1

Provides:  bundled(crate(byteorder)) = 1.4.2

Provides:  bundled(crate(cbindgen)) = 0.9.1

Provides:  bundled(crate(cc)) = 1.0.66

Provides:  bundled(crate(cfg-if)) = 0.1.10

Provides:  bundled(crate(cfg-if)) = 1.0.0

Provides:  bundled(crate(clap)) = 2.33.3

Provides:  bundled(crate(fernet)) = 0.1.3

Provides:  bundled(crate(foreign-types)) = 0.3.2

Provides:  bundled(crate(foreign-types-shared)) = 0.1.1

Provides:  bundled(crate(getrandom)) = 0.1.16

Provides:  bundled(crate(hermit-abi)) = 0.1.17

Provides:  bundled(crate(itoa)) = 0.4.7

Provides:  bundled(crate(lazy_static)) = 1.4.0

Provides:  bundled(crate(libc)) = 0.2.82

Provides:  bundled(crate(librnsslapd)) = 0.1.0

Provides:  bundled(crate(librslapd)) = 0.1.0

Provides:  bundled(crate(log)) = 0.4.11

Provides:  bundled(crate(openssl)) = 0.10.32

Provides:  bundled(crate(openssl-sys)) = 0.9.60

Provides:  bundled(crate(pkg-config)) = 0.3.19

Provides:  bundled(crate(ppv-lite86)) = 0.2.10

Provides:  bundled(crate(proc-macro2)) = 1.0.24

Provides:  bundled(crate(quote)) = 1.0.8

Provides:  bundled(crate(rand)) = 0.7.3

Provides:  bundled(crate(rand_chacha)) = 0.2.2

Provides:  bundled(crate(rand_core)) = 0.5.1

Provides:  bundled(crate(rand_hc)) = 0.2.0

Provides:  bundled(crate(redox_syscall)) = 0.1.57

Provides:  bundled(crate(remove_dir_all)) = 0.5.3

Provides:  bundled(crate(rsds)) = 0.1.0

Provides:  bundled(crate(ryu)) = 1.0.5

Provides:  bundled(crate(serde)) = 1.0.118

Provides:  bundled(crate(serde_derive)) = 1.0.118

Provides:  bundled(crate(serde_json)) = 1.0.61

Provides:  bundled(crate(slapd)) = 0.1.0

Provides:  bundled(crate(strsim)) = 0.8.0

Provides:  bundled(crate(syn)) = 1.0.58

Provides:  bundled(crate(tempfile)) = 3.1.0

Provides:  bundled(crate(textwrap)) = 0.11.0

Provides:  bundled(crate(toml)) = 0.5.8

Provides:  bundled(crate(unicode-width)) = 0.1.8

Provides:  bundled(crate(unicode-xid)) = 0.2.1

Provides:  bundled(crate(vcpkg)) = 0.2.11

Provides:  bundled(crate(vec_map)) = 0.8.2

Provides:  bundled(crate(wasi)) = 0.9.0+wasi_snapshot_preview1

Provides:  bundled(crate(winapi)) = 0.3.9

Provides:  bundled(crate(winapi-i686-pc-windows-gnu)) = 0.4.0

Provides:  bundled(crate(winapi-x86_64-pc-windows-gnu)) = 0.4.0

##### Bundled cargo crates list - END #####

BuildRequires:    nspr-devel

BuildRequires:    nss-devel >= 3.34

BuildRequires:    perl-generators

BuildRequires:    openldap-devel

BuildRequires:    libdb-devel

BuildRequires:    cyrus-sasl-devel

BuildRequires:    icu

BuildRequires:    libicu-devel

BuildRequires:    pcre-devel

BuildRequires:    cracklib-devel

%if %{use_clang}

BuildRequires:    libatomic

BuildRequires:    clang

%else

BuildRequires:    gcc

BuildRequires:    gcc-c++

%endif

# The following are needed to build the snmp ldap-agent

BuildRequires:    net-snmp-devel

BuildRequires:    lm_sensors-devel

BuildRequires:    bzip2-devel

BuildRequires:    zlib-devel

BuildRequires:    openssl-devel

# the following is for the pam passthru auth plug-in

BuildRequires:    pam-devel

BuildRequires:    systemd-units

BuildRequires:    systemd-devel

%if %{use_asan}

BuildRequires:    libasan

%endif

# If rust is enabled

%if %{use_rust}

BuildRequires: cargo

BuildRequires: rust

%endif

BuildRequires:    pkgconfig

BuildRequires:    pkgconfig(systemd)

BuildRequires:    pkgconfig(krb5)

# Needed to support regeneration of the autotool artifacts.

BuildRequires:    autoconf

BuildRequires:    automake

BuildRequires:    libtool

# For our documentation

BuildRequires:    doxygen

# For tests!

BuildRequires:    libcmocka-devel

BuildRequires:    libevent-devel

# For lib389 and related components

BuildRequires:    python%{python3_pkgversion}

BuildRequires:    python%{python3_pkgversion}-devel

BuildRequires:    python%{python3_pkgversion}-setuptools

BuildRequires:    python%{python3_pkgversion}-ldap

BuildRequires:    python%{python3_pkgversion}-six

BuildRequires:    python%{python3_pkgversion}-pyasn1

BuildRequires:    python%{python3_pkgversion}-pyasn1-modules

BuildRequires:    python%{python3_pkgversion}-dateutil

BuildRequires:    python%{python3_pkgversion}-argcomplete

BuildRequires:    python%{python3_pkgversion}-argparse-manpage

BuildRequires:    python%{python3_pkgversion}-policycoreutils

BuildRequires:    python%{python3_pkgversion}-libselinux

# For cockpit

BuildRequires:    rsync

Requires:         %{name}-libs = %{version}-%{release}

Requires:         python%{python3_pkgversion}-lib389 = %{version}-%{release}

# this is needed for using semanage from our setup scripts

Requires:         policycoreutils-python-utils

Requires:         /usr/sbin/semanage

Requires:         libsemanage-python%{python3_pkgversion}

Requires:         selinux-policy >= 3.14.1-29

# the following are needed for some of our scripts

Requires:         openldap-clients

Requires:         openssl-perl

Requires:         python%{python3_pkgversion}-ldap

# this is needed to setup SSL if you are not using the

# administration server package

Requires:         nss-tools

Requires:         nss >= 3.34

# these are not found by the auto-dependency method

# they are required to support the mandatory LDAP SASL mechs

Requires:         cyrus-sasl-gssapi

Requires:         cyrus-sasl-md5

Requires:         cyrus-sasl-plain

# this is needed for verify-db.pl

Requires:         libdb-utils

# Needed for password dictionary checks

Requires:         cracklib-dicts

# This picks up libperl.so as a Requires, so we add this versioned one

Requires:         perl(:MODULE_COMPAT_%(eval "`%{__perl} -V:version`"; echo $version))

Requires:         perl-Errno >= 1.23-360

# Needed by logconv.pl

Requires:         perl-DB_File

Requires:         perl-Archive-Tar

# Needed for password dictionary checks

Requires:         cracklib-dicts

# Picks up our systemd deps.

%{?systemd_requires}

Obsoletes:        %{name} <= 1.3.5.4

Source0:          https://releases.pagure.org/389-ds-base/%{name}-%{version}.tar.bz2

# 389-ds-git.sh should be used to generate the source tarball from git

Source1:          %{name}-git.sh

Source2:          %{name}-devel.README

%if %{bundle_jemalloc}

Source3:          https://github.com/jemalloc/%{jemalloc_name}/releases/download/%{jemalloc_ver}/%{jemalloc_name}-%{jemalloc_ver}.tar.bz2

%endif

%if %{use_rust}

Source4:          vendor-%{version}-2.tar.gz

Source5:          Cargo.lock

%endif

Patch01:          0001-Issue-4747-Remove-unstable-unstatus-tests-from-PRCI-.patch

Patch02:          0002-Issue-4701-RFE-Exclude-attributes-from-retro-changel.patch

Patch03:          0003-Ticket-137-Implement-EntryUUID-plugin.patch

Patch04:          0004-Ticket-4326-entryuuid-fixup-did-not-work-correctly-4.patch

Patch05:          0005-Issue-4498-BUG-entryuuid-replication-may-not-work-45.patch

Patch06:          0006-Issue-4421-Unable-to-build-with-Rust-enabled-in-clos.patch

Patch07:          0007-Ticket-51175-resolve-plugin-name-leaking.patch

Patch08:          0008-Issue-4773-Enable-interval-feature-of-DNA-plugin.patch

Patch09:          0009-Issue-4623-RFE-Monitor-the-current-DB-locks-4762.patch

Patch10:          0010-Issue-4764-replicated-operation-sometime-checks-ACI-.patch

Patch11:          0011-Issue-4778-RFE-Allow-setting-TOD-for-db-compaction-a.patch

Patch12:          0012-Issue-4778-RFE-Add-changelog-compaction-task-in-1.4..patch

Patch13:          0013-Issue-4797-ACL-IP-ADDRESS-evaluation-may-corrupt-c_i.patch

Patch14:          0014-Issue-4396-Minor-memory-leak-in-backend-4558-4572.patch

Patch15:          0015-Issue-4700-Regression-in-winsync-replication-agreeme.patch

Patch16:          0016-Issue-4725-Fix-compiler-warnings.patch

Patch17:          0017-Issue-4814-_cl5_get_tod_expiration-may-crash-at-star.patch

Patch18:          0018-Issue-4789-Temporary-password-rules-are-not-enforce-.patch

Patch19:          0019-Issue-4788-CLI-should-support-Temporary-Password-Rul.patch

Patch20:          0020-Issue-4447-Crash-when-the-Referential-Integrity-log-.patch

Patch21:          0021-Issue-4791-Missing-dependency-for-RetroCL-RFE.patch

Patch22:          0022-Issue-4656-remove-problematic-language-from-ds-replc.patch

Patch23:          0023-Issue-4443-Internal-unindexed-searches-in-syncrepl-r.patch

Patch24:          0024-Issue-4817-BUG-locked-crypt-accounts-on-import-may-a.patch

Patch25:          0025-Issue-4837-persistent-search-returns-entries-even-wh.patch

Patch26:          0026-Hardcode-gost-crypt-passsword-storage-scheme.patch

Patch27:          0027-Issue-4734-import-of-entry-with-no-parent-warning-47.patch

Patch28:          0028-Issue-4872-BUG-entryuuid-enabled-by-default-causes-r.patch

Patch29:          0029-Remove-GOST-YESCRYPT-password-sotrage-scheme.patch

Patch30:          0030-Issue-4884-server-crashes-when-dnaInterval-attribute.patch

%description

389 Directory Server is an LDAPv3 compliant server.  The base package includes

the LDAP server and command line utilities for server administration.

%if %{use_asan}

WARNING! This build is linked to Address Sanitisation libraries. This probably

isn't what you want. Please contact support immediately.

Please see http://seclists.org/oss-sec/2016/q1/363 for more information.

%endif

%package          libs

Summary:          Core libraries for 389 Directory Server

Group:            System Environment/Daemons

BuildRequires:    nspr-devel

BuildRequires:    nss-devel >= 3.34

BuildRequires:    openldap-devel

BuildRequires:    libdb-devel

BuildRequires:    cyrus-sasl-devel

BuildRequires:    libicu-devel

BuildRequires:    pcre-devel

BuildRequires:    libtalloc-devel

BuildRequires:    libevent-devel

BuildRequires:    libtevent-devel

Requires:         krb5-libs

Requires:         libevent

BuildRequires:    systemd-devel

Provides:         svrcore = 4.1.4

Conflicts:        svrcore

Obsoletes:        svrcore <= 4.1.3

%description      libs

Core libraries for the 389 Directory Server base package.  These libraries

are used by the main package and the -devel package.  This allows the -devel

package to be installed with just the -libs package and without the main package.

%if %{use_legacy}

%package          legacy-tools

Summary:          Legacy utilities for 389 Directory Server

Group:            System Environment/Daemons

Obsoletes:        %{name} <= 1.4.0.9

Requires:         %{name}-libs = %{version}-%{release}

# for setup-ds.pl to support ipv6

%if %{use_Socket6}

Requires:         perl-Socket6

%else

Requires:         perl-Socket

%endif

Requires:         perl-NetAddr-IP

# use_openldap assumes perl-Mozilla-LDAP is built with openldap support

Requires:         perl-Mozilla-LDAP

# for setup-ds.pl

Requires:         bind-utils

%global __provides_exclude_from %{_libdir}/%{pkgname}/perl

%global __requires_exclude perl\\((DSCreate|DSMigration|DSUpdate|DSUtil|Dialog|DialogManager|FileConn|Inf|Migration|Resource|Setup|SetupLog)

%{?perl_default_filter}

%description      legacy-tools

Legacy (and deprecated) utilities for 389 Directory Server. This includes

the old account management and task scripts. These are deprecated in favour of

the dscreate, dsctl, dsconf and dsidm tools.

%endif

%package          devel

Summary:          Development libraries for 389 Directory Server

Group:            Development/Libraries

Requires:         %{name}-libs = %{version}-%{release}

Requires:         pkgconfig

Requires:         nspr-devel

Requires:         nss-devel >= 3.34

Requires:         openldap-devel

Requires:         libtalloc

Requires:         libevent

Requires:         libtevent

Requires:         systemd-libs

Provides:         svrcore-devel = 4.1.4

Conflicts:        svrcore-devel

Obsoletes:        svrcore-devel <= 4.1.3

%description      devel

Development Libraries and headers for the 389 Directory Server base package.

%package          snmp

Summary:          SNMP Agent for 389 Directory Server

Group:            System Environment/Daemons

Requires:         %{name} = %{version}-%{release}

Obsoletes:        %{name} <= 1.4.0.0

%description      snmp

SNMP Agent for the 389 Directory Server base package.

%package -n python%{python3_pkgversion}-lib389

Summary:  A library for accessing, testing, and configuring the 389 Directory Server

BuildArch:        noarch

Group:            Development/Libraries

Requires: openssl

Requires: iproute

Requires: platform-python

Recommends: bash-completion

Requires: python%{python3_pkgversion}-ldap

Requires: python%{python3_pkgversion}-six

Requires: python%{python3_pkgversion}-pyasn1

Requires: python%{python3_pkgversion}-pyasn1-modules

Requires: python%{python3_pkgversion}-dateutil

Requires: python%{python3_pkgversion}-argcomplete

Requires: python%{python3_pkgversion}-libselinux

Requires: python%{python3_pkgversion}-setuptools

Requires: python%{python3_pkgversion}-distro

%{?python_provide:%python_provide python%{python3_pkgversion}-lib389}

%description -n python%{python3_pkgversion}-lib389

This module contains tools and libraries for accessing, testing,

 and configuring the 389 Directory Server.

%package -n cockpit-389-ds

Summary:          Cockpit UI Plugin for configuring and administering the 389 Directory Server

BuildArch:        noarch

Requires:         cockpit

Requires:         platform-python

Requires:         python%{python3_pkgversion}-lib389

%description -n cockpit-389-ds

A cockpit UI Plugin for configuring and administering the 389 Directory Server

%prep

%autosetup -p1 -v -n %{name}-%{version}%{?prerel}

%if %{use_rust}

tar xvzf %{SOURCE4}

cp %{SOURCE5} src/

%endif

%if %{bundle_jemalloc}

%setup -q -n %{name}-%{version}%{?prerel} -T -D -b 3

%endif

cp %{SOURCE2} README.devel

%build

OPENLDAP_FLAG="--with-openldap"

%{?with_tmpfiles_d: TMPFILES_FLAG="--with-tmpfiles-d=%{with_tmpfiles_d}"}

# hack hack hack https://bugzilla.redhat.com/show_bug.cgi?id=833529

NSSARGS="--with-nss-lib=%{_libdir} --with-nss-inc=%{_includedir}/nss3"

%if %{use_asan}

ASAN_FLAGS="--enable-asan --enable-debug"

%endif

%if %{use_rust}

RUST_FLAGS="--enable-rust --enable-rust-offline"

%endif

%if %{use_legacy}

LEGACY_FLAGS="--enable-legacy --enable-perl"

%else

LEGACY_FLAGS="--disable-legacy --disable-perl"

%endif

%if %{use_clang}

export CC=clang

export CXX=clang++

CLANG_FLAGS="--enable-clang"

%endif

%if %{bundle_jemalloc}

# Override page size, bz #1545539

# 4K

%ifarch %ix86 %arm x86_64 s390x

%define lg_page --with-lg-page=12

%endif

# 64K

%ifarch ppc64 ppc64le aarch64

%define lg_page --with-lg-page=16

%endif

# Override huge page size on aarch64

# 2M instead of 512M

%ifarch aarch64

%define lg_hugepage --with-lg-hugepage=21

%endif

# Build jemalloc

pushd ../%{jemalloc_name}-%{jemalloc_ver}

%configure \

        --libdir=%{_libdir}/%{pkgname}/lib \

        --bindir=%{_libdir}/%{pkgname}/bin \

        --enable-prof

make %{?_smp_mflags}        

popd

%endif

# Enforce strict linking

%define _strict_symbol_defs_build 1

# Rebuild the autotool artifacts now.

autoreconf -fiv

%configure --enable-autobind --with-selinux $OPENLDAP_FLAG $TMPFILES_FLAG \

           --with-systemd \

           --with-systemdsystemunitdir=%{_unitdir} \

           --with-systemdsystemconfdir=%{_sysconfdir}/systemd/system \

           --with-systemdgroupname=%{groupname}  \

           --libexecdir=%{_libexecdir}/%{pkgname} \

           $NSSARGS $ASAN_FLAGS $RUST_FLAGS $LEGACY_FLAGS $CLANG_FLAGS \

           --enable-cmocka 

# lib389

pushd ./src/lib389

%py3_build

popd

# argparse-manpage dynamic man pages have hardcoded man v1 in header,

# need to change it to v8

sed -i  "1s/\"1\"/\"8\"/" %{_builddir}/%{name}-%{version}%{?prerel}/src/lib389/man/dsconf.8

sed -i  "1s/\"1\"/\"8\"/" %{_builddir}/%{name}-%{version}%{?prerel}/src/lib389/man/dsctl.8

sed -i  "1s/\"1\"/\"8\"/" %{_builddir}/%{name}-%{version}%{?prerel}/src/lib389/man/dsidm.8

sed -i  "1s/\"1\"/\"8\"/" %{_builddir}/%{name}-%{version}%{?prerel}/src/lib389/man/dscreate.8

# Generate symbolic info for debuggers

export XCFLAGS=$RPM_OPT_FLAGS

#make %{?_smp_mflags}

make

%install

mkdir -p %{buildroot}%{_datadir}/gdb/auto-load%{_sbindir}

mkdir -p %{buildroot}%{_datadir}/cockpit

make DESTDIR="$RPM_BUILD_ROOT" install

# Cockpit file list

find %{buildroot}%{_datadir}/cockpit/389-console -type d | sed -e "s@%{buildroot}@@" | sed -e 's/^/\%dir /' > cockpit.list

find %{buildroot}%{_datadir}/cockpit/389-console -type f | sed -e "s@%{buildroot}@@" >> cockpit.list

# Copy in our docs from doxygen.

cp -r %{_builddir}/%{name}-%{version}%{?prerel}/man/man3 $RPM_BUILD_ROOT/%{_mandir}/man3

# lib389

pushd src/lib389

%py3_install

popd

mkdir -p $RPM_BUILD_ROOT/var/log/%{pkgname}

mkdir -p $RPM_BUILD_ROOT/var/lib/%{pkgname}

mkdir -p $RPM_BUILD_ROOT/var/3lock/%{pkgname}

# for systemd

mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}/systemd/system/%{groupname}.wants

#remove libtool archives and static libs

find %{buildroot} -type f -name "*.la" -delete

find %{buildroot} -type f -name "*.a" -delete

%if %{use_legacy}

# make sure perl scripts have a proper shebang

sed -i -e 's|#{{PERL-EXEC}}|#!/usr/bin/perl|' $RPM_BUILD_ROOT%{_datadir}/%{pkgname}/script-templates/template-*.pl

%endif

%if %{bundle_jemalloc}

pushd ../%{jemalloc_name}-%{jemalloc_ver}

make DESTDIR="$RPM_BUILD_ROOT" install_lib install_bin

cp -pa COPYING ../%{name}-%{version}%{?prerel}/COPYING.jemalloc

cp -pa README ../%{name}-%{version}%{?prerel}/README.jemalloc

popd

%endif

%check

# This checks the code, if it fails it prints why, then re-raises the fail to shortcircuit the rpm build.

if ! make DESTDIR="$RPM_BUILD_ROOT" check; then cat ./test-suite.log && false; fi

%clean

rm -rf $RPM_BUILD_ROOT

%post

if [ -n "$DEBUGPOSTTRANS" ] ; then

    output=$DEBUGPOSTTRANS

    output2=${DEBUGPOSTTRANS}.upgrade

else

    output=/dev/null

    output2=/dev/null

fi

# reload to pick up any changes to systemd files

/bin/systemctl daemon-reload >$output 2>&1 || :

# https://fedoraproject.org/wiki/Packaging:UsersAndGroups#Soft_static_allocation

# Soft static allocation for UID and GID

USERNAME="dirsrv"

ALLOCATED_UID=389

GROUPNAME="dirsrv"

ALLOCATED_GID=389

HOMEDIR="/usr/share/dirsrv"

getent group $GROUPNAME >/dev/null || /usr/sbin/groupadd -f -g $ALLOCATED_GID -r $GROUPNAME

if ! getent passwd $USERNAME >/dev/null ; then

    if ! getent passwd $ALLOCATED_UID >/dev/null ; then

      /usr/sbin/useradd -r -u $ALLOCATED_UID -g $GROUPNAME -d $HOMEDIR -s /sbin/nologin -c "user for 389-ds-base" $USERNAME

    else

      /usr/sbin/useradd -r -g $GROUPNAME -d $HOMEDIR -s /sbin/nologin -c "user for 389-ds-base" $USERNAME

    fi

fi

# Reload our sysctl before we restart (if we can)

sysctl --system &> $output; true

%preun

if [ $1 -eq 0 ]; then # Final removal

    # remove instance specific service files/links

    rm -rf %{_sysconfdir}/systemd/system/%{groupname}.wants/* > /dev/null 2>&1 || :

fi

%postun

if [ $1 = 0 ]; then # Final removal

    rm -rf /var/run/%{pkgname}

fi

%post snmp

%systemd_post %{pkgname}-snmp.service

%preun snmp

%systemd_preun %{pkgname}-snmp.service %{groupname}

%postun snmp

%systemd_postun_with_restart %{pkgname}-snmp.service

%if %{use_legacy}

%post legacy-tools

# START UPGRADE SCRIPT

if [ -n "$DEBUGPOSTTRANS" ] ; then

    output=$DEBUGPOSTTRANS

    output2=${DEBUGPOSTTRANS}.upgrade

else

    output=/dev/null

    output2=/dev/null

fi

# find all instances

instances="" # instances that require a restart after upgrade

ninst=0 # number of instances found in total

echo looking for instances in %{_sysconfdir}/%{pkgname} > $output 2>&1 || :

instbase="%{_sysconfdir}/%{pkgname}"

for dir in $instbase/slapd-* ; do

    echo dir = $dir >> $output 2>&1 || :

    if [ ! -d "$dir" ] ; then continue ; fi

    case "$dir" in *.removed) continue ;; esac

    basename=`basename $dir`

    inst="%{pkgname}@`echo $basename | sed -e 's/slapd-//g'`"

    echo found instance $inst - getting status  >> $output 2>&1 || :

    if /bin/systemctl -q is-active $inst ; then

       echo instance $inst is running >> $output 2>&1 || :

       instances="$instances $inst"

    else

       echo instance $inst is not running >> $output 2>&1 || :

    fi

    ninst=`expr $ninst + 1`

done

if [ $ninst -eq 0 ] ; then

    echo no instances to upgrade >> $output 2>&1 || :

    exit 0 # have no instances to upgrade - just skip the rest

fi

# shutdown all instances

echo shutting down all instances . . . >> $output 2>&1 || :

for inst in $instances ; do

    echo stopping instance $inst >> $output 2>&1 || :

    /bin/systemctl stop $inst >> $output 2>&1 || :

done

echo remove pid files . . . >> $output 2>&1 || :

/bin/rm -f /var/run/%{pkgname}*.pid /var/run/%{pkgname}*.startpid

# do the upgrade

echo upgrading instances . . . >> $output 2>&1 || :

DEBUGPOSTSETUPOPT=`/usr/bin/echo $DEBUGPOSTSETUP | /usr/bin/sed -e "s/[^d]//g"`

if [ -n "$DEBUGPOSTSETUPOPT" ] ; then

    %{_sbindir}/setup-ds.pl -$DEBUGPOSTSETUPOPT -u -s General.UpdateMode=offline >> $output 2>&1 || :

else

    %{_sbindir}/setup-ds.pl -u -s General.UpdateMode=offline >> $output 2>&1 || :

fi

# restart instances that require it

for inst in $instances ; do

    echo restarting instance $inst >> $output 2>&1 || :

    /bin/systemctl start $inst >> $output 2>&1 || :

done

#END UPGRADE

%endif

exit 0

%files

%if %{bundle_jemalloc}

%doc LICENSE LICENSE.GPLv3+ LICENSE.openssl README.jemalloc

%license COPYING.jemalloc

%else

%doc LICENSE LICENSE.GPLv3+ LICENSE.openssl

%endif

%dir %{_sysconfdir}/%{pkgname}

%dir %{_sysconfdir}/%{pkgname}/schema

%config(noreplace)%{_sysconfdir}/%{pkgname}/schema/*.ldif

%dir %{_sysconfdir}/%{pkgname}/config

%dir %{_sysconfdir}/systemd/system/%{groupname}.wants

%config(noreplace)%{_sysconfdir}/%{pkgname}/config/slapd-collations.conf

%config(noreplace)%{_sysconfdir}/%{pkgname}/config/certmap.conf

%{_datadir}/%{pkgname}

%{_datadir}/gdb/auto-load/*

%{_unitdir}

%{_bindir}/dbscan

%{_mandir}/man1/dbscan.1.gz

%{_bindir}/ds-replcheck

%{_mandir}/man1/ds-replcheck.1.gz

%{_bindir}/ds-logpipe.py

%{_mandir}/man1/ds-logpipe.py.1.gz

%{_bindir}/ldclt

%{_mandir}/man1/ldclt.1.gz

%{_sbindir}/ldif2ldap

%{_mandir}/man8/ldif2ldap.8.gz

%{_bindir}/logconv.pl

%{_mandir}/man1/logconv.pl.1.gz

%{_bindir}/pwdhash

%{_mandir}/man1/pwdhash.1.gz

%{_bindir}/readnsstate

%{_mandir}/man1/readnsstate.1.gz

# Remove for now: %caps(CAP_NET_BIND_SERVICE=pe) {_sbindir}/ns-slapd

%{_sbindir}/ns-slapd

%{_mandir}/man8/ns-slapd.8.gz

%{_libexecdir}/%{pkgname}/ds_systemd_ask_password_acl

%{_mandir}/man5/99user.ldif.5.gz

%{_mandir}/man5/certmap.conf.5.gz

%{_mandir}/man5/slapd-collations.conf.5.gz

%{_mandir}/man5/dirsrv.5.gz

%{_mandir}/man5/dirsrv.systemd.5.gz

%{_libdir}/%{pkgname}/python

%dir %{_libdir}/%{pkgname}/plugins

%{_libdir}/%{pkgname}/plugins/*.so

# This has to be hardcoded to /lib - $libdir changes between lib/lib64, but

# sysctl.d is always in /lib.

%{_prefix}/lib/sysctl.d/*

%dir %{_localstatedir}/lib/%{pkgname}

%dir %{_localstatedir}/log/%{pkgname}

%ghost %dir %{_localstatedir}/lock/%{pkgname}

%exclude %{_sbindir}/ldap-agent*

%exclude %{_mandir}/man1/ldap-agent.1.gz

%exclude %{_unitdir}/%{pkgname}-snmp.service

%if %{bundle_jemalloc}

%{_libdir}/%{pkgname}/lib/

%{_libdir}/%{pkgname}/bin/

%exclude %{_libdir}/%{pkgname}/bin/jemalloc-config

%exclude %{_libdir}/%{pkgname}/bin/jemalloc.sh