746c8e900a
After update to openEuler bind 9.18.21-3, those cves introduced new database interface change, backport upstream patch and modify it to adapte openEuler bind version. (cherry picked from commit 13e62a758393f1c438308f573924320772b8a94e)
155 lines
4.2 KiB
RPMSpec
155 lines
4.2 KiB
RPMSpec
%define bind_version 32:9.16.16
|
|
%global openssl_pkcs11_version 0.4.10-6
|
|
%global softhsm_version 2.5.0-4
|
|
%global with_bind_pkcs11 0
|
|
|
|
Name: bind-dyndb-ldap
|
|
Version: 11.10
|
|
Release: 4
|
|
Summary: LDAP back-end plug-in for BIND
|
|
License: GPLv2+
|
|
URL: https://releases.pagure.org/bind-dyndb-ldap
|
|
Source0: https://releases.pagure.org/%{name}/%{name}-%{version}.tar.bz2
|
|
Source1: https://releases.pagure.org/%{name}/%{name}-%{version}.tar.bz2.asc
|
|
|
|
Patch1: bind-dyndb-ldap-bind-9.18.10-db-options.patch
|
|
Patch2: bind-dyndb-ldap-bind-9.18.10-logs.patch
|
|
Patch3: bind-dyndb-ldap-bind-9.18.10-staleok.patch
|
|
Patch4: bind-dyndb-ldap-11.10-bind-9.18.11.patch
|
|
Patch5: backport-bind-dyndb-ldap-11.10-bind-9.18.13.patch
|
|
Patch6: backport-bind-dyndb-ldap-11.10-bind-9.18.19.patch
|
|
Patch7: backport-bind-dyndb-ldap-11.10-dns_name_init.patch
|
|
Patch8: backport-bind-dyndb-ldap-bind-9.18.24.patch
|
|
Patch9: backport-bind-dyndb-ldap-11.10-support-for-bind-9.18.21.3.patch
|
|
|
|
BuildRequires: bind-devel >= %{bind_version}
|
|
BuildRequires: krb5-devel
|
|
BuildRequires: openldap-devel
|
|
BuildRequires: libuuid-devel
|
|
BuildRequires: automake, autoconf, libtool, make
|
|
BuildRequires: openssl-devel
|
|
BuildRequires: autoconf-archive
|
|
|
|
%if %{with_bind_pkcs11}
|
|
BuildRequires: bind-pkcs11-devel >= %{bind_version}
|
|
Requires(pre): bind-pkcs11 >= %{bind_version}
|
|
Requires: bind-pkcs11 >= %{bind_version}, bind-pkcs11-utils >= %{bind_version}
|
|
%else
|
|
Requires(pre): bind >= %{bind_version}
|
|
Requires: softhsm >= %{softhsm_version}, openssl-pkcs11 >= %{openssl_pkcs11_version}, bind >= %{bind_version}
|
|
%endif
|
|
|
|
%description
|
|
This package provides an LDAP back-end, the dynamic LDAP back-end is
|
|
a plug-in for BIND that provides an LDAP database back-end capabilities.
|
|
|
|
%prep
|
|
%autosetup -n %{name}-%{version} -p1
|
|
|
|
%build
|
|
autoreconf -fiv
|
|
export BIND9_CFLAGS='-I /usr/include/bind9 -DHAVE_TLS -DHAVE_THREAD_LOCAL'
|
|
%configure
|
|
%if %{?openEuler:1}0
|
|
%make_build
|
|
%else
|
|
# unset SOURCE_DATE_EPOCH eliminate bep differences
|
|
unset SOURCE_DATE_EPOCH
|
|
%make_build
|
|
set SOURCE_DATE_EPOCH
|
|
%endif
|
|
|
|
%install
|
|
rm -rf %{buildroot}
|
|
%make_install
|
|
install -d -m 770 %{buildroot}/%{_localstatedir}/named/dyndb-ldap
|
|
|
|
%post
|
|
[ -f /etc/named.conf ] || exit 0
|
|
# Transform named.conf if it still has old-style API.
|
|
PLATFORM=$(uname -m)
|
|
|
|
if [ $PLATFORM == "x86_64" ] ; then
|
|
LIBPATH=/usr/lib64
|
|
else
|
|
LIBPATH=/usr/lib
|
|
fi
|
|
|
|
while read -r PATTERN
|
|
do
|
|
SEDSCRIPT+="$PATTERN"
|
|
done <<EOF
|
|
/^\s*dynamic-db/,/};/ {
|
|
s/\(\s*\)arg\s\+\(["']\)\([a-zA-Z_]\+\s\)/\1\3\2/g;
|
|
s/^dynamic-db/dyndb/;
|
|
s@\(dyndb "[^"]\+"\)@\1 "$LIBPATH/bind/ldap.so"@;
|
|
s@\(dyndb '[^']\+'\)@\1 '$LIBPATH/bind/ldap.so'@;
|
|
/\s*library[^;]\+;/d;
|
|
/\s*cache_ttl[^;]\+;/d;
|
|
/\s*psearch[^;]\+;/d;
|
|
/\s*serial_autoincrement[^;]\+;/d;
|
|
/\s*zone_refresh[^;]\+;/d;
|
|
}
|
|
EOF
|
|
|
|
sed -i.bak -e "$SEDSCRIPT" /etc/named.conf
|
|
|
|
%files
|
|
%exclude %{_libdir}/bind/ldap.la
|
|
%doc NEWS README.md COPYING doc/{example,schema}.ldif
|
|
%dir %attr(770, root, named) %{_localstatedir}/named/dyndb-ldap
|
|
%{_libdir}/bind/ldap.so
|
|
|
|
|
|
%changelog
|
|
* Wed Aug 07 2024 Zhao Mengmeng <zhaomengmeng@kylinos.cn> - 11.10-4
|
|
- Type:bugfix
|
|
- CVE:NA
|
|
- SUG:NA
|
|
- DESC: fix build failure caused by bind update to 9.18.21-3
|
|
|
|
* Wed Mar 20 2024 xinghe <xinghe2@h-partners.com> - 11.10-3
|
|
- Type:bugfix
|
|
- CVE:NA
|
|
- SUG:NA
|
|
- DESC:fix build failed
|
|
|
|
* Tue Mar 05 2024 xinghe <xinghe2@h-partners.com> - 11.10-2
|
|
- Type:bugfix
|
|
- CVE:NA
|
|
- SUG:NA
|
|
- DESC:fix build error
|
|
|
|
* Sun Jan 29 2023 xinghe <xinghe2@h-partners.com> - 11.10-1
|
|
- Type:requirement
|
|
- CVE:NA
|
|
- SUG:NA
|
|
- DESC:update to 11.10
|
|
|
|
* Fri Jun 10 2022 gaihuiying <eaglegai@163.com> - 11.9-2
|
|
- Type:bugfix
|
|
- CVE:NA
|
|
- SUG:NA
|
|
- DESC:add macros to control if need to eliminate bep differences
|
|
|
|
* Mon Mar 21 2022 xihaochen <xihaochen@h-partners.com> - 11.9-1
|
|
- Type:requirement
|
|
- ID:NA
|
|
- SUG:NA
|
|
- DESC:update to 11.9
|
|
|
|
* Mon Jul 27 2020 gaihuiying <gaihuiying1@huawei.com> - 11.3-1
|
|
- Type:requirement
|
|
- ID:NA
|
|
- SUG:NA
|
|
- DESC:update to 11.3
|
|
|
|
* Mon Jun 22 2020 gaihuiying <gaihuiying1@huawei.com> - 11.1-14
|
|
- Type:bugfix
|
|
- ID:NA
|
|
- SUG:NA
|
|
- DESC:fix build error with gcc9
|
|
|
|
* Wed Sep 11 2019 AlexChao <zhaolei746@huawei.com> - 11.1-13
|
|
- Package init
|