|
 |
f441eb |
Name: adcli
|
|
|
f441eb |
Version: 0.8.2
|
|
|
f441eb |
Release: 3%{?dist}
|
|
|
f441eb |
Summary: Active Directory enrollment
|
|
|
f441eb |
License: LGPLv2+
|
|
|
f441eb |
URL: http://cgit.freedesktop.org/realmd/adcli
|
|
|
f441eb |
Source0: http://www.freedesktop.org/software/realmd/releases/adcli-%{version}.tar.gz
|
|
|
f441eb |
|
|
|
f441eb |
Patch1: 0001-Remove-upper-case-only-check-when-looking-for-the-Ne.patch
|
|
|
f441eb |
Patch2: 0002-Use-strdup-if-offset-are-used.patch
|
|
|
f441eb |
Patch3: 0003-correct-spelling-of-adcli_tool_computer_delete-descr.patch
|
|
|
f441eb |
Patch4: 0004-doc-explain-that-all-credential-cache-types-are-supp.patch
|
|
|
f441eb |
Patch5: 0005-library-add-adcli_conn_is_writeable.patch
|
|
|
f441eb |
Patch6: 0006-Handle-kvno-increment-for-RODCs.patch
|
|
|
f441eb |
Patch7: 0007-Fix-memory-leak-in-test_check_nt_time_string_lifetim.patch
|
|
|
f441eb |
Patch8: 0008-library-add-_adcli_bin_sid_to_str.patch
|
|
|
f441eb |
Patch9: 0009-library-add-_adcli_call_external_program.patch
|
|
|
f441eb |
Patch10: 0010-library-add-_adcli_ldap_parse_sid.patch
|
|
|
f441eb |
Patch11: 0011-library-add-lookup_domain_sid.patch
|
|
|
f441eb |
Patch12: 0012-library-add-adcli_conn_get_domain_sid.patch
|
|
|
f441eb |
Patch13: 0013-tools-add-option-add-samba-data.patch
|
|
|
f441eb |
Patch14: 0014-tools-store-Samba-data-if-requested.patch
|
|
|
f441eb |
Patch15: 0015-make-Samba-data-tool-configurable.patch
|
|
|
f441eb |
Patch16: 0016-Add-trusted-for-delegation-option.patch
|
|
|
f441eb |
Patch17: 0017-Only-update-attributes-given-on-the-command-line.patch
|
|
|
f441eb |
Patch18: 0018-update-allow-to-add-service-names.patch
|
|
|
f441eb |
Patch19: 0019-Calculate-enctypes-in-a-separate-function.patch
|
|
|
f441eb |
Patch20: 0020-join-add-all-attributes-while-creating-computer-obje.patch
|
|
|
f441eb |
Patch21: 0021-util-add-_adcli_strv_remove_unsorted.patch
|
|
|
f441eb |
Patch22: 0022-Add-add-service-principal-and-remove-service-princip.patch
|
|
|
f441eb |
Patch23: 0023-adcli_conn_is_writeable-do-not-crash-id-domain_disco.patch
|
|
|
f441eb |
Patch24: 0024-doc-fix-typos-in-the-adcli-man-page.patch
|
|
|
f441eb |
|
|
|
f441eb |
Patch25: 0001-fix-typo-in-flag-value.patch
|
|
|
f441eb |
Patch26: 0002-_adcli_call_external_program-silence-noisy-debug-mes.patch
|
|
|
f441eb |
Patch27: 0003-Do-not-add-service-principals-twice.patch
|
|
|
f441eb |
Patch28: 0004-Do-not-depend-on-default_realm-in-krb5.conf.patch
|
|
|
f441eb |
|
|
|
f441eb |
# rhbz#1677194 - Realm cannot join domain when hostname is not FQDN
|
|
|
f441eb |
Patch29: 0001-adutil-add-_adcli_strv_add_unique.patch
|
|
|
f441eb |
Patch30: 0002-adenroll-use-_adcli_strv_add_unique-for-service-prin.patch
|
|
|
f441eb |
|
|
|
f441eb |
# Forward port of RHEL-7.7 ticket rhbz#1642546 - adcli exports kerberos ticket
|
|
|
f441eb |
# with old kvno
|
|
|
f441eb |
Patch31: 0001-Increment-kvno-after-password-change-with-user-creds.patch
|
|
|
f441eb |
|
|
|
f441eb |
# Forward port of RHEL-7.7 ticket rhbz#1595911 - [RFE] Have `adcli join` work
|
|
|
f441eb |
# without FQDN in `hostname` output
|
|
|
f441eb |
Patch32: 0001-library-use-getaddrinfo-with-AI_CANONNAME-to-find-a-.patch
|
|
|
f441eb |
|
|
|
f441eb |
# Forward port of RHEL-7.7 ticket rhbz#1644311 - Improve handling of service
|
|
|
f441eb |
# principals
|
|
|
f441eb |
Patch33: 0001-join-always-add-service-principals.patch
|
|
|
f441eb |
Patch34: 0002-library-return-error-if-no-matching-key-was-found.patch
|
|
|
f441eb |
|
|
|
f441eb |
# Forward port of RHEL-7.7 ticket rhbz#1337489 - [RFE] adcli command with
|
|
|
f441eb |
# --unix-* options doesn't update values in UnixAttributes Tab for user
|
|
|
f441eb |
Patch35: 0001-create-user-add-nis-domain-option.patch
|
|
|
f441eb |
Patch36: 0002-create-user-try-to-find-NIS-domain-if-needed.patch
|
|
|
f441eb |
|
|
|
f441eb |
# Forward port of RHEL-7.7 ticket rhbz#1630187 - [RFE] adcli join should
|
|
|
f441eb |
# preserve SPN added by adcli preset-computer
|
|
|
f441eb |
Patch37: 0001-ensure_keytab_principals-do-not-leak-memory-when-cal.patch
|
|
|
f441eb |
Patch38: 0002-library-make-_adcli_strv_has_ex-public.patch
|
|
|
f441eb |
Patch39: 0003-library-_adcli_krb5_build_principal-allow-principals.patch
|
|
|
f441eb |
Patch40: 0004-library-make-sure-server-side-SPNs-are-preserved.patch
|
|
|
f441eb |
|
|
|
f441eb |
# Forward port of RHEL-7.7 ticket rhbz#1622583 - [RFE] Need an option for adcli
|
|
|
f441eb |
# command which will show domain join status.
|
|
|
f441eb |
Patch41: 0001-Implement-adcli-testjoin.patch
|
|
|
f441eb |
|
|
|
f441eb |
# Forward port of RHEL-7.7 ticket rhbz#1630187 - [RFE] adcli join should
|
|
|
f441eb |
# preserve SPN added by adcli preset-computer - additional patch
|
|
|
f441eb |
Patch42: 0001-library-add-missing-strdup.patch
|
|
|
f441eb |
|
|
|
f441eb |
# Forward port of RHEL-7.7 ticket rhbz#1588596 - many adcli-krb5-?????
|
|
|
f441eb |
# directories are created /tmp
|
|
|
f441eb |
Patch43: 0001-tools-remove-errx-from-computer-commands.patch
|
|
|
f441eb |
Patch44: 0002-tools-remove-errx-from-user-and-group-commands.patch
|
|
|
f441eb |
Patch45: 0003-tools-remove-errx-from-info-commands.patch
|
|
|
f441eb |
Patch46: 0004-tools-remove-errx-from-adcli_read_password_func.patch
|
|
|
f441eb |
Patch47: 0005-tools-remove-errx-from-setup_krb5_conf_directory.patch
|
|
|
f441eb |
Patch48: 0006-tools-entry-remove-errx-from-parse_option.patch
|
|
|
f441eb |
Patch49: 0007-tools-computer-remove-errx-from-parse_option.patch
|
|
|
f441eb |
|
|
|
f441eb |
# rhbz#1717355 - `adcli join` fails in FIPS enabled environment
|
|
|
f441eb |
Patch50: 0001-Fix-for-issues-found-by-Coverity.patch
|
|
|
f441eb |
Patch51: 0001-adenroll-make-sure-only-allowed-enctypes-are-used-in.patch
|
|
|
f441eb |
Patch52: 0002-adconn-add-adcli_conn_set_krb5_context.patch
|
|
|
f441eb |
Patch53: 0003-adenroll-add-adcli_enroll_get_permitted_keytab_encty.patch
|
|
|
f441eb |
Patch54: 0004-adenroll-use-only-enctypes-permitted-by-Kerberos-con.patch
|
|
|
f441eb |
|
|
|
f441eb |
BuildRequires: gcc
|
|
|
f441eb |
BuildRequires: intltool pkgconfig
|
|
|
f441eb |
BuildRequires: libtool
|
|
|
f441eb |
BuildRequires: gettext-devel
|
|
|
f441eb |
BuildRequires: krb5-devel
|
|
|
f441eb |
BuildRequires: openldap-devel
|
|
|
f441eb |
BuildRequires: libxslt
|
|
|
f441eb |
BuildRequires: xmlto
|
|
|
f441eb |
|
|
|
f441eb |
Requires: cyrus-sasl-gssapi
|
|
|
f441eb |
|
|
|
f441eb |
# adcli no longer has a library of development files
|
|
|
f441eb |
# the adcli tool itself is to be used by callers
|
|
|
f441eb |
Obsoletes: adcli-devel < 0.5
|
|
|
f441eb |
|
|
|
f441eb |
%description
|
|
|
f441eb |
adcli is a tool for joining an Active Directory domain using
|
|
|
f441eb |
standard LDAP and Kerberos calls.
|
|
|
f441eb |
|
|
|
f441eb |
%define _hardened_build 1
|
|
|
f441eb |
|
|
|
f441eb |
%prep
|
|
|
f441eb |
%autosetup -p1
|
|
|
f441eb |
|
|
|
f441eb |
%build
|
|
|
f441eb |
autoreconf --force --install --verbose
|
|
|
f441eb |
%configure --disable-static --disable-silent-rules
|
|
|
f441eb |
make %{?_smp_mflags}
|
|
|
f441eb |
|
|
|
f441eb |
%check
|
|
|
f441eb |
make check
|
|
|
f441eb |
|
|
|
f441eb |
%install
|
|
|
f441eb |
make install DESTDIR=%{buildroot}
|
|
|
f441eb |
find $RPM_BUILD_ROOT -name '*.la' -exec rm -f {} ';'
|
|
|
f441eb |
|
|
|
f441eb |
%post -p /sbin/ldconfig
|
|
|
f441eb |
|
|
|
f441eb |
%postun -p /sbin/ldconfig
|
|
|
f441eb |
|
|
|
f441eb |
%clean
|
|
|
f441eb |
|
|
|
f441eb |
%files
|
|
|
f441eb |
%{_sbindir}/adcli
|
|
|
f441eb |
%doc AUTHORS COPYING ChangeLog NEWS README
|
|
|
f441eb |
%doc %{_mandir}/*/*
|
|
|
f441eb |
|
|
|
f441eb |
%package doc
|
|
|
f441eb |
Summary: adcli documentation
|
|
|
f441eb |
BuildArch: noarch
|
|
|
f441eb |
|
|
|
f441eb |
%description doc
|
|
|
f441eb |
adcli is a tool for joining an Active Directory domain using
|
|
|
f441eb |
standard LDAP and Kerberos calls. This package contains its
|
|
|
f441eb |
documentation.
|
|
|
f441eb |
|
|
|
f441eb |
%files doc
|
|
|
f441eb |
%doc %{_datadir}/doc/adcli/*
|
|
|
f441eb |
|
|
|
f441eb |
%changelog
|
|
|
f441eb |
* Fri Jun 14 2019 Sumit Bose <sbose@redhat.com> - 0.8.2-3
|
|
|
f441eb |
- use autosetup macro to simplify patch handling
|
|
|
f441eb |
- fixed rpmlint warnings in the spec file
|
|
|
f441eb |
- join failed if hostname is not FQDN [#1677194]
|
|
|
f441eb |
- adcli join fails in FIPS enabled environment [#1717355]
|
|
|
f441eb |
- forward port of RHEL-7.7 fixes and enhancements
|
|
|
f441eb |
|
|
|
f441eb |
* Tue Oct 09 2018 Sumit Bose <sbose@redhat.com> - 0.8.2-2
|
|
|
f441eb |
- Do not add service principals twice and related fixes
|
|
|
f441eb |
- Resolves: rhbz#1631734
|
|
|
f441eb |
|
|
|
f441eb |
* Thu Jul 05 2018 Sumit Bose <sbose@redhat.com> - 0.8.2-1
|
|
|
f441eb |
- Update to upstream release 0.8.2
|
|
|
f441eb |
- various other fixes and improvements from the latest Fedora update
|
|
|
f441eb |
|
|
|
f441eb |
* Wed Feb 07 2018 Fedora Release Engineering <releng@fedoraproject.org> - 0.8.0-6
|
|
|
f441eb |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
|
|
|
f441eb |
|
|
|
f441eb |
* Wed Aug 02 2017 Fedora Release Engineering <releng@fedoraproject.org> - 0.8.0-5
|
|
|
f441eb |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
|
|
|
f441eb |
|
|
|
f441eb |
* Wed Jul 26 2017 Fedora Release Engineering <releng@fedoraproject.org> - 0.8.0-4
|
|
|
f441eb |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
|
|
|
f441eb |
|
|
|
f441eb |
* Fri Feb 10 2017 Fedora Release Engineering <releng@fedoraproject.org> - 0.8.0-3
|
|
|
f441eb |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
|
|
|
f441eb |
|
|
|
f441eb |
* Wed Feb 03 2016 Fedora Release Engineering <releng@fedoraproject.org> - 0.8.0-2
|
|
|
f441eb |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
|
|
|
f441eb |
|
|
|
f441eb |
* Thu Dec 17 2015 Sumit Bose <sbose@redhat.com> - 0.8.0-1
|
|
|
f441eb |
- Update to upstream release 0.8.0
|
|
|
f441eb |
|
|
|
f441eb |
* Mon Oct 19 2015 Stef Walter <stefw@redhat.com> - 0.7.6-1
|
|
|
f441eb |
- Fix issue with keytab use with sshd
|
|
|
f441eb |
- Resolves: rhbz#1267319
|
|
|
f441eb |
- Put documentation in a subpackage
|
|
|
f441eb |
|
|
|
f441eb |
* Tue Jun 16 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.7.5-5
|
|
|
f441eb |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
|
|
|
f441eb |
|
|
|
f441eb |
* Fri Aug 15 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.7.5-4
|
|
|
f441eb |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
|
|
|
f441eb |
|
|
|
f441eb |
* Sat Jun 07 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.7.5-3
|
|
|
f441eb |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
|
|
|
f441eb |
|
|
|
f441eb |
* Thu Jan 30 2014 Stef Walter <stefw@redhat.com> - 0.7.5-2
|
|
|
f441eb |
- Fix incorrect ownership of manual page directory
|
|
|
f441eb |
|
|
|
f441eb |
* Fri Sep 13 2013 Stef Walter <stefw@redhat.com> - 0.7.5-1
|
|
|
f441eb |
- Update to upstream point release 0.7.5
|
|
|
f441eb |
- Workaround for discovery via IPv6 address
|
|
|
f441eb |
- Correctly put IPv6 addresses in temporary krb5.conf
|
|
|
f441eb |
|
|
|
f441eb |
* Mon Sep 09 2013 Stef Walter <stefw@redhat.com> - 0.7.4-1
|
|
|
f441eb |
- Update to upstream point release 0.7.4
|
|
|
f441eb |
- Correctly handle truncating long host names
|
|
|
f441eb |
- Try to contact all available addresses for discovery
|
|
|
f441eb |
- Build fixes
|
|
|
f441eb |
|
|
|
f441eb |
* Wed Aug 07 2013 Stef Walter <stefw@redhat.com> - 0.7.3-1
|
|
|
f441eb |
- Update to upstream point release 0.7.3
|
|
|
f441eb |
- Don't try to set encryption types on Windows 2003
|
|
|
f441eb |
|
|
|
f441eb |
* Sat Aug 03 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.7.2-2
|
|
|
f441eb |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
|
|
|
f441eb |
|
|
|
f441eb |
* Mon Jul 22 2013 Stef Walter <stefw@redhat.com> - 0.7.2-1
|
|
|
f441eb |
- Update to upstream point release 0.7.2
|
|
|
f441eb |
- Part of fix for bug [#961244]
|
|
|
f441eb |
|
|
|
f441eb |
* Mon Jul 15 2013 Stef Walter <stefw@redhat.com> - 0.7.1-4
|
|
|
f441eb |
- Build with verbose output logging
|
|
|
f441eb |
|
|
|
f441eb |
* Tue Jun 11 2013 Stef Walter <stefw@redhat.com> - 0.7.1-3
|
|
|
f441eb |
- Run 'make check' when building the package
|
|
|
f441eb |
|
|
|
f441eb |
* Mon May 13 2013 Stef Walter <stefw@redhat.com> - 0.7.1-2
|
|
|
f441eb |
- Bump version to get around botched update
|
|
|
f441eb |
|
|
|
f441eb |
* Mon May 13 2013 Stef Walter <stefw@redhat.com> - 0.7.1-1
|
|
|
f441eb |
- Update to upstream 0.7.1 release
|
|
|
f441eb |
- Fix problems with salt discovery [#961399]
|
|
|
f441eb |
|
|
|
f441eb |
* Mon May 06 2013 Stef Walter <stefw@redhat.com> - 0.7-1
|
|
|
f441eb |
- Work around broken krb5 with empty passwords [#960001]
|
|
|
f441eb |
- Fix memory corruption issue [#959999]
|
|
|
f441eb |
- Update to 0.7, fixing various bugs
|
|
|
f441eb |
|
|
|
f441eb |
* Mon Apr 29 2013 Stef Walter <stefw@redhat.com> - 0.6-1
|
|
|
f441eb |
- Update to 0.6, fixing various bugs
|
|
|
f441eb |
|
|
|
f441eb |
* Wed Apr 10 2013 Stef walter <stefw@redhat.com> - 0.5-2
|
|
|
f441eb |
- Add appropriate Obsoletes line for libadcli removal
|
|
|
f441eb |
|
|
|
f441eb |
* Wed Apr 10 2013 Stef Walter <stefw@redhat.com> - 0.5-1
|
|
|
f441eb |
- Update to upstream 0.5 version
|
|
|
f441eb |
- No more libadcli, and thus no adcli-devel
|
|
|
f441eb |
- Many new adcli commands
|
|
|
f441eb |
- Documentation
|
|
|
f441eb |
|
|
|
f441eb |
* Wed Feb 13 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.4-2
|
|
|
f441eb |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
|
|
|
f441eb |
|
|
|
f441eb |
* Mon Nov 12 2012 Stef Walter <stefw@redhat.com> - 0.4-1
|
|
|
f441eb |
- Update for 0.4 version, fixing various bugs
|
|
|
f441eb |
|
|
|
f441eb |
* Sat Oct 20 2012 Stef Walter <stefw@redhat.com> - 0.3-1
|
|
|
f441eb |
- Update for 0.3 version
|
|
|
f441eb |
|
|
|
f441eb |
* Tue Sep 4 2012 Stef Walter <stefw@redhat.com> - 0.2-1
|
|
|
f441eb |
- Update for 0.2 version
|
|
|
f441eb |
|
|
|
f441eb |
* Wed Aug 15 2012 Stef Walter <stefw@redhat.com> - 0.1-1
|
|
|
f441eb |
- Initial 0.1 package
|