This repository has been archived by the owner on Apr 12, 2021. It is now read-only.
-
Notifications
You must be signed in to change notification settings - Fork 50
/
Copy pathfas.spec
360 lines (278 loc) · 12.6 KB
/
fas.spec
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
%{!?python_sitelib: %global python_sitelib %(%{__python} -c "from distutils.sysconfig import get_python_lib; print get_python_lib()")}
Name: fas
Version: 0.14.1
Release: 1%{?dist}
Summary: Fedora Account System
Group: Development/Languages
License: GPLv2
URL: https://fedorahosted.org/fas/
Source0: https://fedorahosted.org/releases/f/a/fas/%{name}-%{version}.tar.gz
BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
BuildArch: noarch
BuildRequires: python2-devel
BuildRequires: python-setuptools
BuildRequires: gettext
%if 0%{?fedora} || 0%{?rhel} && 0%{?rhel} < 7
BuildRequires: TurboGears
%endif
Requires: TurboGears >= 1.0.4
Requires: python-sqlalchemy
# Note: python-fedora-turbogears will get rid of this dep someday so let's be
# explicit here
Requires: python-bugzilla
Requires: python-TurboMail
Requires: python-fedora-turbogears >= 0.3.25
Requires: babel
Requires: pygpgme
Requires: python-babel
Requires: python-genshi
Requires: python-kitchen
Requires: pytz
Requires: python-GeoIP
Requires: pyOpenSSL
Requires: python-memcached
Requires: python-webob
Requires: tulrich-tuffy-fonts
Requires: python-requests
# For the audio captcha
Requires: espeak
Requires: python-tgcaptcha2 >= 0.3.0
# We really do want this, just optional for now.
#Requires: fedmsg
%description
The Fedora Account System is a web application that manages the accounts of
Fedora Project Contributors. It's built in TurboGears and comes with a json
API for querying against remotely.
The python-fedora-infrastructure package has a TurboGears identity provider
that works with the Account System.
%package clients
Summary: Clients for the Fedora Account System
Group: Applications/System
Requires: python-fedora >= 0.3.12.1
Requires: authconfig
%if 0%{?rhel} && 0%{?rhel} < 7
Requires: nss_db
%endif
Requires: libselinux-python
%description clients
Additional scripts that work as clients to the accounts system.
%prep
%setup -q -n %{name}-%{version}
%build
%if 0%{?fedora} || 0%{?rhel} && 0%{?rhel} < 7
# Bit hacky. On EPEL7 we only need the client (which doesn't get byte
# compiled as everything's in a single script). setup.py doesn't work
# because it builds the server too (which needs TG1)
%{__python} setup.py build --install-data='%{_datadir}'
%endif
%install
%{__rm} -rf %{buildroot}
%{__mkdir_p} %{buildroot}%{_sysconfdir}
# fas-client stuff
%{__install} -m 600 client/fas.conf %{buildroot}%{_sysconfdir}
%{__install} -m 700 -d %{buildroot}%{_localstatedir}/lib/fas
%if 0%{?fedora} || 0%{?rhel} && 0%{?rhel} < 7
%{__python} setup.py install --skip-build --install-data='%{_datadir}' --root %{buildroot}
%{__mkdir_p} %{buildroot}%{_sbindir}
%{__mv} %{buildroot}%{_bindir}/start-fas %{buildroot}%{_sbindir}
%{__install} fas.wsgi %{buildroot}%{_sbindir}
# Unreadable by others because it's going to contain a database password.
%{__install} -m 640 fas.cfg.sample %{buildroot}%{_sysconfdir}/fas.cfg
%{__mv} %{buildroot}%{_bindir}/export-bugzilla.py %{buildroot}%{_sbindir}/export-bugzilla
%{__install} -m 0600 scripts/export-bugzilla.cfg %{buildroot}%{_sysconfdir}/
%{__mv} %{buildroot}%{_bindir}/account-expiry.py %{buildroot}%{_sbindir}/account-expiry
%{__install} -m 0600 scripts/account-expiry.cfg %{buildroot}%{_sysconfdir}/
cp -pr updates/ %{buildroot}%{_datadir}/fas
%find_lang %{name}
%else
# Little hacky -- this is normally installed by setup.py but we can't run that
# on epel7 due to not having TG which is only needed for the server portion
%{__mkdir_p} %{buildroot}%{_bindir}
%{__install} -m 0755 client/fasClient %{buildroot}%{_bindir}/fasClient
%{__install} -m 0755 client/fasClient %{buildroot}%{_bindir}/restricted-shell
%endif
%clean
%{__rm} -rf %{buildroot}
%pre
/usr/sbin/useradd -c 'Fedora Account System user' -s /sbin/nologin \
-r -M -d %{_datadir}/fas fas &> /dev/null || :
%if 0%{?fedora} || 0%{?rhel} && 0%{?rhel} < 7
%files -f %{name}.lang
%defattr(-,root,root,-)
%doc README.rst TODO COPYING NEWS fas2.sql fas.spec fas.conf.wsgi
%{python_sitelib}/*
# Bad Toshio. Next release aims to fix this by making the location ofthe cert
# files configurable at build time
%config(noreplace) %{_datadir}/fas/static/fedora-server-ca.cert
%config(noreplace) %{_datadir}/fas/static/fedora-upload-ca.cert
%dir %{_datadir}/fas/
%{_datadir}/fas/updates/
%dir %{_datadir}/fas/static/
%{_datadir}/fas/static/css/
%{_datadir}/fas/static/images/
%{_datadir}/fas/static/js/
%{_datadir}/fas/static/theme/
%{_datadir}/fas/static/robots.txt
%{_sbindir}/start-fas
%{_sbindir}/fas.wsgi
%{_sbindir}/export-bugzilla
%{_sbindir}/account-expiry
%attr(-,root,fas) %config(noreplace) %{_sysconfdir}/fas.cfg
%attr(-,root,fas) %config(noreplace) %{_sysconfdir}/export-bugzilla.cfg
%attr(-,root,fas) %config(noreplace) %{_sysconfdir}/account-expiry.cfg
%endif
%files clients
%defattr(-,root,root,-)
%{_bindir}/*
%config(noreplace) %{_sysconfdir}/fas.conf
%attr(0700,root,root) %dir %{_localstatedir}/lib/fas
%changelog
* Wed Jan 18 2017 Xavier Lamien <[email protected]> - 0.14.1-1
- Add robustness on valid_ssh_key retrieval.
- Remove IPA's session.
* Tue Aug 09 2016 Patrick Uiterwijk <[email protected]> - 0.14.0-1
- Update YubiKey documentation
- Update FPCA template
- Word-wrap ssh keys
- Allow ecdsa ssh keys
- Add IPA sync code
* Tue Aug 09 2016 Patrick Uiterwijk <[email protected]> - 0.13.1-1
- Add checks to make sure username and groupname overlaps dont happen
* Mon Aug 8 2016 Patrick Uiterwijk <[email protected]> - 0.13.0-1
- Fixed authentication bypass (CVE-2016-1000038)
* Fri Mar 11 2016 Patrick Uiterwijk <[email protected]> - 0.12.0-1
- Add hook points into anti-spam script on account creation and CLA signing
* Wed Mar 09 2016 Patrick Uiterwijk <[email protected]> - 0.11.0-1
- Added nonce system from tgcaptcha2-0.3.0+ (Related to DWF-2016-89000)
* Mon Jan 26 2015 Xavier Lamien <[email protected]> - 0.10.2-2
- Rebuild with up-to-date source tarball.
* Sat Jan 24 2015 Xavier Lamien <[email protected]> - 0.10.2-1
- Fix Downgrade members function (github #82).
- fasClient: load config as rawConfig.
- fasClient: Add username to ssh_command string.
* Wed Oct 29 2014 Patrick Uiterwijk <[email protected]> - 0.10.1-1
- Fix bug in getting json user list
- Fedmsg mesages for yubikey added
- Inactive accounts no longer sent to bugzilla
- New group status sent in fedmsg messages
- Admins no longer need to verify email changes
* Tue Jul 15 2014 Xavier Lamien <[email protected]> - 0.10.0-5
- Install right shadow database.
* Mon Jul 14 2014 Toshio Kuratomi <[email protected]> - 0.10.0-4
- Remove nss_db dep in rhel7
* Mon Jul 14 2014 Toshio Kuratomi <[email protected]> - 0.10.0-3
- Fix building of the clients subpackage on EPEL7
* Mon Jul 14 2014 Xavier Lamien <[email protected]> - 0.10.0-2
- Add an option to fasClient to reduce verbosity on std-output.
* Thu May 22 2014 Xavier Lamien <[email protected]> - 0.10.0-1
- Add moderator group with restricted privileges.
- Update FPCA, Red Hat mailing address.
- Update groupdb format creation from fasClient.
* Thu Mar 06 2014 Xavier Lamien <[email protected]> - 0.9.0
- Add pkgdb2 support.
- Link GPG's keys to key.fedoraproject.org.
- Update helps infos.
- Improve GPG key validation feature.
- Notify addresses from export-bugzilla script.
* Wed May 8 2013 Toshio Kuratomi <[email protected]> - 0.8.17-1
- **Security update** Fix information leak on group/view.
* Thu Feb 28 2013 Toshio Kuratomi <[email protected]> - 0.8.16-1
- 0.8.6 final
* Mon Feb 18 2013 Toshio Kuratomi <[email protected]> - 0.8.15.90-1
- First beta of the 0.8.6 release
* Thu Oct 18 2012 Toshio Kuratomi <[email protected]> - 0.8.15-1
- Update translations. Final release
* Mon Sep 24 2012 Ricky Elrod <[email protected]> - 0.8.14.92-2
- Update translations
* Fri Sep 14 2012 Ricky Elrod <[email protected]> - 0.8.14.92-1
- Remove blog feed commit, because it was dependant on fancyflash.
* Thu Aug 30 2012 Ricky Elrod <[email protected]> - 0.8.14.91-1
- Add a patch from ctria (see infra #3027) for checking passwords against
libpwquality. (Ricky Elrod)
* Sat Aug 10 2012 Ricky Elrod <[email protected]> - 0.8.14.90-1
- Differing colors of headers for differing types of deployment.
- Add a place where users are able to add their blog to the planet
- Show the content of the group if there are less than 10 people in it
- Pull in latest translations to prepare for 0.8.15.
* Sat Jul 28 2012 Patrick Uiterwijk <[email protected]> - 0.8.14-1
- Added security question system, with encrypted security answer
* Fri Jul 06 2012 Ralph Bean <[email protected]> - 0.8.13-2
- Typo fix. python-fedmsg should just be 'fedmsg'.
* Fri Jul 06 2012 Ralph Bean <[email protected]> - 0.8.13-1
- Version bump for fedmsg in stg.
* Sat Mar 31 2012 Ralph Bean <[email protected]> - 0.8.12-2
- Added dependency on fedmsg.
* Tue Feb 21 2012 Xavier Laminen <[email protected]> - 0.8.12-1
- Upstream release.
- Add heuristics human's name check.
* Tue Jan 24 2012 Toshio Kuratomi <[email protected]> - 0.8.11-1
- New upstream release -- allows email to be used to login, implements an audio
captcha, and normalizes some error codes.
* Fri Nov 18 2011 Toshio Kuratomi <[email protected]> - 0.8.9.1-1
- Important fix: the new strength checking validator introduced in 0.8.8.90 (or
hotfixes before that) was allowing users to set empty passwords.
* Thu Nov 17 2011 Toshio Kuratomi <[email protected]> - 0.8.9-1
- FAS final release.
- Mark the cert files as config
* Thu Oct 27 2011 Toshio Kuratomi <[email protected]> - 0.8.8.92-1
- Going to to daily new rpms until release so translators can see their work.
* Thu Oct 27 2011 Toshio Kuratomi <[email protected]> - 0.8.8.91-1
- Second beta
* Thu Oct 27 2011 Toshio Kuratomi <[email protected]> - 0.8.8.90-1
- Beta of the 0.8.9 release.
* Mon May 2 2011 Toshio Kuratomi <[email protected]> - 0.8.8-1
- Final release
* Tue Apr 5 2011 Toshio Kuratomi <[email protected]> - 0.8.8-0.1.a1
- Update for FPCA
- Move fas.wsgi into /usr/sbin
- Include the updates directory in the package
- Make the apache configfile %%doc instead of installing it
* Mon Feb 07 2011 Jim Lieb <[email protected]> - 0.8.7.5-1.1
- Localize UI to Yahoo.
- Make wsgi instantiation work
* Fri Sep 24 2010 Mike McGrath <[email protected]> - 0.8.7.5-1
- Upstream released new version
* Thu Sep 09 2010 Mike McGrath <[email protected]> - 0.8.7.4-1
- Upstream released new version
* Fri Aug 27 2010 Mike McGrath <[email protected]> - 0.8.7.3-1
- Upstream released new version
* Tue Aug 10 2010 Mike McGrath <[email protected]> - 0.8.7.1-1
- New upstream release
- Removed python-webob dep (was a false dep anyway)
* Mon Aug 09 2010 Mike McGrath <[email protected]> - 0.8.7-1
- New upstream release
* Fri Jul 30 2010 Jon Stanley <[email protected]> - 0.8.6.2.6-1
- New upstream release
* Thu Jul 29 2010 Jon Stanley <[email protected]> - 0.8.6.2.5-2
- Fix fas.cfg=>fas.cfg.sample rename upstream
* Thu Jul 29 2010 Jon Stanley - 0.8.6.2.5-1
- New upstream release
- Now conflicts with python-sqlalchemy, and requires python-sqlalchemy0.5
* Wed Sep 16 2009 Toshio Kuratomi <[email protected]> - 0.8.6.2.3-1
- New release that implements a captcha for new accounts and fixes a few
bugs.
* Tue Jun 11 2009 Ricky Zhou <[email protected]> - 0.8.6.2.2-1
- Add Requires on python-memcached.
- Fix /var/lib/fas directory.
- Some export-bugzilla fixes.
* Tue Jun 6 2009 Ricky Zhou <[email protected]> - 0.8.6.2.1-1
- Typo fix release.
* Tue Jun 4 2009 Ricky Zhou <[email protected]> - 0.8.6.2-1
- Upstream released a new version.
* Tue Jun 3 2009 Ricky Zhou <[email protected]> - 0.8.6.1-1
- Upstream released a new version.
* Tue Jun 2 2009 Mike McGrath <[email protected]> - 0.8.6-1
- Upstream released new version
- Cached group/user data
* Sun Apr 12 2009 Ricky Zhou <[email protected]> - 0.8.5.2-3
- Fix fas user's home directory (was missing a slash).
* Thu Mar 13 2009 Ricky Zhou <[email protected]> - 0.8.5.2-2
- Add /var/lib/fas directory.
* Thu Mar 12 2009 Toshio Kuratomi <[email protected]> - 0.8.5.2-1
- Bugfix for fasClient alias generation and template fixes for the csrf token.
* Mon Mar 9 2009 Toshio Kuratomi <[email protected]> - 0.8.5.1-1
- Quick little bugfix for using the login method via json.
* Sat Mar 7 2009 Toshio Kuratomi <[email protected]> - 0.8.5-1
- Beta new upstream release with CSRF fixes.
* Thu Feb 12 2009 Ricky Zhou <[email protected]> - 0.8.4.8-1
- New upstream release that fixes some security issues.