Initial commit
This commit is contained in:
Your Name
+4
@@ -0,0 +1,4 @@
|
||||
|
||||
RDEPENDS:packagegroup-security-utils += "\
|
||||
${@bb.utils.contains("DISTRO_FEATURES", "pam", "sssd", "",d)} \
|
||||
"
|
||||
+28
@@ -0,0 +1,28 @@
|
||||
nsupdate path is needed for various exec call
|
||||
but don't run natvie tests on it.
|
||||
|
||||
|
||||
Upstream-Status: Inappropriate [OE specific]
|
||||
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
||||
|
||||
Index: sssd-2.5.0/src/external/nsupdate.m4
|
||||
===================================================================
|
||||
--- sssd-2.5.0.orig/src/external/nsupdate.m4
|
||||
+++ sssd-2.5.0/src/external/nsupdate.m4
|
||||
@@ -3,16 +3,4 @@ AC_MSG_CHECKING(for executable nsupdate)
|
||||
if test -x "$NSUPDATE"; then
|
||||
AC_DEFINE_UNQUOTED([NSUPDATE_PATH], ["$NSUPDATE"], [The path to nsupdate])
|
||||
AC_MSG_RESULT(yes)
|
||||
-
|
||||
- AC_MSG_CHECKING(for nsupdate 'realm' support')
|
||||
- if AC_RUN_LOG([echo realm |$NSUPDATE >&2]); then
|
||||
- AC_MSG_RESULT([yes])
|
||||
- else
|
||||
- AC_MSG_RESULT([no])
|
||||
- AC_MSG_ERROR([nsupdate does not support 'realm'])
|
||||
- fi
|
||||
-
|
||||
-else
|
||||
- AC_MSG_RESULT([no])
|
||||
- AC_MSG_ERROR([nsupdate is not available])
|
||||
fi
|
||||
+25
@@ -0,0 +1,25 @@
|
||||
When calculate value of ldblibdir, it checks whether the directory of
|
||||
$ldblibdir exists. If not, it assigns ldblibdir with ${libdir}/ldb. It is not
|
||||
suitable for cross compile. Fix it that only re-assign ldblibdir when its value
|
||||
is empty.
|
||||
|
||||
Upstream-Status: Inappropriate [cross compile specific]
|
||||
|
||||
Signed-off-by: Kai Kang <kai.kang@windriver.com>
|
||||
---
|
||||
src/external/libldb.m4 | 2 +-
|
||||
1 file changed, 1 insertion(+), 1 deletion(-)
|
||||
|
||||
diff --git a/src/external/libldb.m4 b/src/external/libldb.m4
|
||||
index c400add..5e5f06d 100644
|
||||
--- a/src/external/libldb.m4
|
||||
+++ b/src/external/libldb.m4
|
||||
@@ -19,7 +19,7 @@ if test x"$with_ldb_lib_dir" != x; then
|
||||
ldblibdir=$with_ldb_lib_dir
|
||||
else
|
||||
ldblibdir="`$PKG_CONFIG --variable=modulesdir ldb`"
|
||||
- if ! test -d $ldblibdir; then
|
||||
+ if test -z $ldblibdir; then
|
||||
ldblibdir="${libdir}/ldb"
|
||||
fi
|
||||
fi
|
||||
+27
@@ -0,0 +1,27 @@
|
||||
from ../sssd-2.5.0/src/util/sss_pam_data.c:27:
|
||||
| ../sssd-2.5.0/src/util/debug.h:88:44: error: unknown type name 'uid_t'; did you mean 'uint_t'?
|
||||
| 88 | int chown_debug_file(const char *filename, uid_t uid, gid_t gid);
|
||||
| | ^~~~~
|
||||
| | uint_t
|
||||
| ../sssd-2.5.0/src/util/debug.h:88:55: error: unknown type name 'gid_t'
|
||||
| 88 | int chown_debug_file(const char *filename, uid_t uid, gid_t gid);
|
||||
| | ^~~~~
|
||||
| make[2]: *** [Makefile:22529: src/util/libsss_iface_la-sss_pam_data.lo] Error 1
|
||||
| make[2]: *** Waiting for unfinished jobs....
|
||||
|
||||
Upstream-Status: Pending
|
||||
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
||||
|
||||
Index: sssd-2.7.1/src/util/debug.h
|
||||
===================================================================
|
||||
--- sssd-2.7.1.orig/src/util/debug.h
|
||||
+++ sssd-2.7.1/src/util/debug.h
|
||||
@@ -24,6 +24,8 @@
|
||||
#include "config.h"
|
||||
|
||||
#include <stdio.h>
|
||||
+#include <unistd.h>
|
||||
+#include <sys/types.h>
|
||||
#include <stdbool.h>
|
||||
#include <sys/types.h>
|
||||
|
||||
+53
@@ -0,0 +1,53 @@
|
||||
fix musl build failures
|
||||
|
||||
Missing _PATH_HOSTS and some NETDB defines when musl is enabled.
|
||||
|
||||
These are work arounds for now while we figure out where the real fix should reside (musl, gcompact, sssd):
|
||||
|
||||
./sssd-2.5.1/src/providers/fail_over.c:1199:19: error: '_PATH_HOSTS' undeclared (first use in this function)
|
||||
| 1199 | _PATH_HOSTS);
|
||||
| | ^~~~~~~~~~~
|
||||
|
||||
and
|
||||
|
||||
i./sssd-2.5.1/src/sss_client/nss_ipnetworks.c:415:21: error: 'NETDB_INTERNAL' undeclared (first use in this function)
|
||||
| 415 | *h_errnop = NETDB_INTERNAL;
|
||||
|
||||
|
||||
Upstream-Status: Pending
|
||||
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
||||
|
||||
Index: sssd-2.5.1/src/providers/fail_over.c
|
||||
===================================================================
|
||||
--- sssd-2.5.1.orig/src/providers/fail_over.c
|
||||
+++ sssd-2.5.1/src/providers/fail_over.c
|
||||
@@ -31,6 +31,10 @@
|
||||
#include <talloc.h>
|
||||
#include <netdb.h>
|
||||
|
||||
+#if !defined(_PATH_HOSTS)
|
||||
+#define _PATH_HOSTS "/etc/hosts"
|
||||
+#endif
|
||||
+
|
||||
#include "util/dlinklist.h"
|
||||
#include "util/refcount.h"
|
||||
#include "util/util.h"
|
||||
Index: sssd-2.5.1/src/sss_client/sss_cli.h
|
||||
===================================================================
|
||||
--- sssd-2.5.1.orig/src/sss_client/sss_cli.h
|
||||
+++ sssd-2.5.1/src/sss_client/sss_cli.h
|
||||
@@ -44,6 +44,14 @@ typedef int errno_t;
|
||||
#define EOK 0
|
||||
#endif
|
||||
|
||||
+#ifndef NETDB_INTERNAL
|
||||
+# define NETDB_INTERNAL (-1)
|
||||
+#endif
|
||||
+
|
||||
+#ifndef NETDB_SUCCESS
|
||||
+# define NETDB_SUCCESS (0)
|
||||
+#endif
|
||||
+
|
||||
#define SSS_NSS_PROTOCOL_VERSION 1
|
||||
#define SSS_PAM_PROTOCOL_VERSION 3
|
||||
#define SSS_SUDO_PROTOCOL_VERSION 1
|
||||
+19
@@ -0,0 +1,19 @@
|
||||
don't run generate-sbus-code
|
||||
|
||||
Upstream-Status: Inappropriate [OE Specific]
|
||||
|
||||
Signed-off-by: Armin Kuster <akuster808@gmail.com>
|
||||
|
||||
Index: sssd-2.7.1/Makefile.am
|
||||
===================================================================
|
||||
--- sssd-2.7.1.orig/Makefile.am
|
||||
+++ sssd-2.7.1/Makefile.am
|
||||
@@ -1023,8 +1023,6 @@ generate-sbus-code:
|
||||
|
||||
.PHONY: generate-sbus-code
|
||||
|
||||
-BUILT_SOURCES += generate-sbus-code
|
||||
-
|
||||
EXTRA_DIST += \
|
||||
sbus_generate.sh.in \
|
||||
src/sbus/codegen/dbus.xml \
|
||||
@@ -0,0 +1,15 @@
|
||||
[sssd]
|
||||
services = nss, pam
|
||||
domains = shadowutils
|
||||
|
||||
[nss]
|
||||
|
||||
[pam]
|
||||
|
||||
[domain/shadowutils]
|
||||
id_provider = files
|
||||
|
||||
auth_provider = proxy
|
||||
proxy_pam_target = sssd-shadowutils
|
||||
|
||||
proxy_fast_alias = True
|
||||
+1
@@ -0,0 +1 @@
|
||||
d root root 0750 /var/log/sssd none
|
||||
@@ -0,0 +1,157 @@
|
||||
SUMMARY = "system security services daemon"
|
||||
DESCRIPTION = "SSSD is a system security services daemon"
|
||||
HOMEPAGE = "https://pagure.io/SSSD/sssd/"
|
||||
SECTION = "base"
|
||||
LICENSE = "GPL-3.0-or-later"
|
||||
LIC_FILES_CHKSUM = "file://COPYING;md5=d32239bcb673463ab874e80d47fae504"
|
||||
|
||||
DEPENDS = "acl attr cyrus-sasl libtdb ding-libs libpam c-ares krb5 autoconf-archive"
|
||||
DEPENDS:append = " libldb dbus libtalloc libpcre2 glib-2.0 popt e2fsprogs libtevent"
|
||||
DEPENDS:append = " openldap bind p11-kit jansson softhsm openssl libunistring"
|
||||
|
||||
DEPENDS:append:libc-musl = " musl-nscd"
|
||||
|
||||
# If no crypto has been selected, default to DEPEND on nss, since that's what
|
||||
# sssd will pick if no active choice is made during configure
|
||||
DEPENDS += "${@bb.utils.contains('PACKAGECONFIG', 'nss', '', \
|
||||
bb.utils.contains('PACKAGECONFIG', 'crypto', '', 'nss', d), d)}"
|
||||
|
||||
SRC_URI = "https://github.com/SSSD/sssd/releases/download/${PV}/sssd-${PV}.tar.gz \
|
||||
file://sssd.conf \
|
||||
file://volatiles.99_sssd \
|
||||
file://no_gen.patch \
|
||||
file://fix_gid.patch \
|
||||
file://drop_ntpdate_chk.patch \
|
||||
file://fix-ldblibdir.patch \
|
||||
file://musl_fixup.patch \
|
||||
"
|
||||
|
||||
SRC_URI[sha256sum] = "10ef90c63fdbfda905145077679035bd5ad16b24daad13160de8d0ff82ea9950"
|
||||
|
||||
UPSTREAM_CHECK_URI = "https://github.com/SSSD/${BPN}/releases"
|
||||
|
||||
inherit autotools pkgconfig gettext python3-dir features_check systemd
|
||||
|
||||
REQUIRED_DISTRO_FEATURES = "pam"
|
||||
|
||||
SSSD_UID ?= "root"
|
||||
SSSD_GID ?= "root"
|
||||
|
||||
CACHED_CONFIGUREVARS = "ac_cv_member_struct_ldap_conncb_lc_arg=no \
|
||||
ac_cv_prog_HAVE_PYTHON3=${PYTHON_DIR} \
|
||||
"
|
||||
|
||||
PACKAGECONFIG ?="nss autofs sudo infopipe"
|
||||
PACKAGECONFIG += "${@bb.utils.contains('DISTRO_FEATURES', 'selinux', 'selinux', '', d)}"
|
||||
PACKAGECONFIG += "${@bb.utils.contains('DISTRO_FEATURES', 'systemd', 'systemd', '', d)}"
|
||||
|
||||
PACKAGECONFIG[autofs] = "--with-autofs, --with-autofs=no"
|
||||
PACKAGECONFIG[crypto] = ", , libcrypto"
|
||||
PACKAGECONFIG[curl] = "--with-kcm, --without-kcm, curl jansson"
|
||||
PACKAGECONFIG[infopipe] = "--with-infopipe, --with-infopipe=no, "
|
||||
PACKAGECONFIG[manpages] = "--with-manpages, --with-manpages=no, libxslt-native docbook-xml-dtd4-native docbook-xsl-stylesheets-native"
|
||||
PACKAGECONFIG[nl] = "--with-libnl, --with-libnl=no, libnl"
|
||||
PACKAGECONFIG[nss] = ", ,nss,"
|
||||
PACKAGECONFIG[oidc_child] = "--with-oidc-child, --without-oidc-child"
|
||||
PACKAGECONFIG[python3] = "--with-python3-bindings, --without-python3-bindings"
|
||||
PACKAGECONFIG[samba] = "--with-samba, --with-samba=no, samba"
|
||||
PACKAGECONFIG[selinux] = "--with-selinux, --with-selinux=no --with-semanage=no, libselinux"
|
||||
PACKAGECONFIG[ssh] = "--with-ssh, --with-ssh=no, "
|
||||
PACKAGECONFIG[sudo] = "--with-sudo, --with-sudo=no, "
|
||||
PACKAGECONFIG[systemd] = "--with-initscript=systemd,--with-initscript=sysv"
|
||||
|
||||
EXTRA_OECONF += " \
|
||||
--disable-cifs-idmap-plugin \
|
||||
--without-nfsv4-idmapd-plugin \
|
||||
--without-ipa-getkeytab \
|
||||
--without-python2-bindings \
|
||||
--enable-pammoddir=${base_libdir}/security \
|
||||
--without-python2-bindings \
|
||||
--with-xml-catalog-path=${STAGING_ETCDIR_NATIVE}/xml/catalog \
|
||||
--with-pid-path=/run \
|
||||
"
|
||||
|
||||
do_configure:prepend() {
|
||||
mkdir -p ${AUTOTOOLS_AUXDIR}/build
|
||||
cp ${STAGING_DATADIR_NATIVE}/gettext/config.rpath ${AUTOTOOLS_AUXDIR}/build/
|
||||
|
||||
# additional_libdir defaults to /usr/lib so replace with staging_libdir globally
|
||||
sed -i -e "s#\$additional_libdir#\${STAGING_LIBDIR}#" ${S}/src/build_macros.m4
|
||||
}
|
||||
|
||||
do_compile:prepend () {
|
||||
echo '#define NSUPDATE_PATH "${bindir}"' >> ${B}/config.h
|
||||
}
|
||||
do_install () {
|
||||
oe_runmake install DESTDIR="${D}"
|
||||
rmdir --ignore-fail-on-non-empty "${D}/${bindir}"
|
||||
|
||||
install -d ${D}/${sysconfdir}/${BPN}
|
||||
install -d ${D}/${PYTHON_SITEPACKAGES_DIR}
|
||||
mv ${D}/${BPN} ${D}/${PYTHON_SITEPACKAGES_DIR}
|
||||
|
||||
install -m 600 ${WORKDIR}/${BPN}.conf ${D}/${sysconfdir}/${BPN}
|
||||
|
||||
# /var/log/sssd needs to be created in runtime. Use rmdir to catch if
|
||||
# upstream stops creating /var/log/sssd, or adds something else in
|
||||
# /var/log.
|
||||
rmdir ${D}${localstatedir}/log/${BPN} ${D}${localstatedir}/log
|
||||
rmdir --ignore-fail-on-non-empty ${D}${localstatedir}
|
||||
|
||||
if ${@bb.utils.contains('DISTRO_FEATURES', 'systemd', 'true', 'false', d)}; then
|
||||
install -d ${D}${sysconfdir}/tmpfiles.d
|
||||
echo "d /var/log/sssd 0750 - - - -" > ${D}${sysconfdir}/tmpfiles.d/sss.conf
|
||||
fi
|
||||
|
||||
if [ "${@bb.utils.filter('DISTRO_FEATURES', 'sysvinit', d)}" ]; then
|
||||
install -d ${D}${sysconfdir}/default/volatiles
|
||||
echo "d ${SSSD_UID}:${SSSD_GID} 0755 ${localstatedir}/log/${BPN} none" > ${D}${sysconfdir}/default/volatiles/99_${BPN}
|
||||
fi
|
||||
|
||||
# Remove /run as it is created on startup
|
||||
rm -rf ${D}/run
|
||||
|
||||
# rm -fr ${D}/sssd
|
||||
rm -f ${D}${systemd_system_unitdir}/sssd-secrets.*
|
||||
}
|
||||
|
||||
pkg_postinst_ontarget:${PN} () {
|
||||
if [ -e /etc/init.d/populate-volatile.sh ] ; then
|
||||
${sysconfdir}/init.d/populate-volatile.sh update
|
||||
fi
|
||||
chown ${SSSD_UID}:${SSSD_GID} ${sysconfdir}/${BPN}/${BPN}.conf
|
||||
}
|
||||
|
||||
CONFFILES:${PN} = "${sysconfdir}/${BPN}/${BPN}.conf"
|
||||
|
||||
INITSCRIPT_NAME = "sssd"
|
||||
INITSCRIPT_PARAMS = "start 02 5 3 2 . stop 20 0 1 6 ."
|
||||
SYSTEMD_SERVICE:${PN} = " \
|
||||
${@bb.utils.contains('PACKAGECONFIG', 'autofs', 'sssd-autofs.service sssd-autofs.socket', '', d)} \
|
||||
${@bb.utils.contains('PACKAGECONFIG', 'curl', 'sssd-kcm.service sssd-kcm.socket', '', d)} \
|
||||
${@bb.utils.contains('PACKAGECONFIG', 'infopipe', 'sssd-ifp.service ', '', d)} \
|
||||
${@bb.utils.contains('PACKAGECONFIG', 'ssh', 'sssd-ssh.service sssd-ssh.socket', '', d)} \
|
||||
${@bb.utils.contains('PACKAGECONFIG', 'sudo', 'sssd-sudo.service sssd-sudo.socket', '', d)} \
|
||||
sssd-nss.service \
|
||||
sssd-nss.socket \
|
||||
sssd-pam-priv.socket \
|
||||
sssd-pam.service \
|
||||
sssd-pam.socket \
|
||||
sssd.service \
|
||||
"
|
||||
SYSTEMD_AUTO_ENABLE = "disable"
|
||||
|
||||
PACKAGES =+ "libsss-sudo"
|
||||
ALLOW_EMPTY:libsss-sudo = "1"
|
||||
|
||||
FILES:${PN} += "${base_libdir}/security/pam_sss*.so \
|
||||
${nonarch_libdir}/tmpfiles.d \
|
||||
${datadir}/dbus-1/system-services/*.service \
|
||||
${libdir}/krb5/* \
|
||||
${libdir}/ldb/* \
|
||||
${PYTHON_SITEPACKAGES_DIR}/sssd \
|
||||
"
|
||||
|
||||
FILES:libsss-sudo = "${libdir}/libsss_sudo.so"
|
||||
|
||||
RDEPENDS:${PN} = "bind bind-utils dbus libldb libpam libsss-sudo"
|
||||
Reference in New Issue
Block a user