[SSSD] [PATCH] Split the providers into separate subpackages

Jakub Hrozek jhrozek at redhat.com
Tue Jun 11 10:03:26 UTC 2013


On Mon, Jun 10, 2013 at 03:49:34PM -0400, Stephen Gallagher wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> On 06/10/2013 02:24 PM, Jakub Hrozek wrote:
> > On Mon, Jun 10, 2013 at 08:56:37AM -0400, Stephen Gallagher wrote:
> >> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
> >> 
> >> On 06/10/2013 07:17 AM, Lukas Slebodnik wrote:
> >>> On (10/06/13 10:03), Jakub Hrozek wrote:
> >>>> On Fri, Jun 07, 2013 at 06:24:48PM +0200, Lukas Slebodnik
> >>>> wrote:
> >>>>> 1. I like idea of divided subpackages. If someone wants
> >>>>> only ldap backend, he needn't install samba-libs (and its 
> >>>>> dependencies)
> >>>>> 
> >>>>> 2. There isn't any rpmlint warnings.
> >>>>> 
> >>>>> I tested yum upgrade upgrade with installed sssd and 
> >>>>> freeipa-client. New packages were installed for
> >>>>> dependencies: sssd-ad sssd-common sssd-ipa sssd-krb5
> >>>>> sssd-krb5-common sssd-ldap Everything worked as expected.
> >>>>> 
> >>>>> Then I decided to remove sssd-ad: yum remove sssd-ad and 
> >>>>> packeges "freeipa-client, sssd" were also removed. I was
> >>>>> little bit confused, because I didn't want to remove sssd
> >>>>> and sssd replied to getent command after packages
> >>>>> "freeipa-client, sssd" were removed.
> >>>> 
> >>>> That's because freeipa-client currently requires sssd, we
> >>>> might want open a ticket to make them require just sssd-ipa.
> >>>> 
> >>> 
> >>> The most confusing thing was for me that sssd was removed. Yes,
> >>> we should file a ticket to freeipa-client after releasing
> >>> sssd.
> >>> 
> >>>>> 
> >>>>> I think, that other users may be also confused with this 
> >>>>> situation. Then I looked to the patch and I found out,
> >>>>> that: --sssd is only "meta package",which require all
> >>>>> backedns subpackages --sssd doesn't contain any useful
> >>>>> files --everything important is in package sssd-common.
> >>>>> 
> >>>>> 
> >>>>> Maybe we should update package description of sssd and 
> >>>>> sssd-common. I hope that system administrators relies on
> >>>>> output of "yum info" and there isn't it very well
> >>>>> explained.
> >>>>> 
> >>>> 
> >>>> Thanks, I updated the summary of both sssd and sssd-common. 
> >>>> Hopefully it would be clearer now.
> >>>> 
> >>> 
> >>> Thank you.
> >>> 
> >>>>> Summary: Everything works well, but I was little bit
> >>>>> confused.
> >>>>> 
> >>>>> Any other opinions?
> >>>>> 
> >>>>> One nitpick inline
> >>>>> 
> >>>>> 
> >>> 
> >>> I think, that patches are OK. Does anybody have another
> >>> comments or objections?
> >>> 
> >> 
> >> Nack.
> >> 
> >> When adding "Provides:" and "Obsoletes:", it is inappropriate to
> >> do Obsoletes: libsss_sudo < %{version}-%{release}
> >> 
> >> The Fedora guidelines require that the Obsoletes: be a specific 
> >> version (the last one before the change occurred). So
> >> 
> >> Obsoletes: libsss_sudo <= 1.9.5
> >> 
> > 
> > OK, in my defense I've seen these in some of the specfiles I've got
> > cloned from Fedora's dist-git (not that it would make them
> > correct).
> > 
> > I made the changes in the version that is attached, just with a 
> > differens version to compare against. I think your suggestion would
> > make sense for a Fedora package, but in upstream, we want to
> > obsolete all the nightly builds prior to the switch as well.
> > 
> > So I added another point version number (minor versions come cheap)
> > and compared against 1.9.93.
> > 
> 
> It needs to be <= 1.9.93. Just less-than won't upgrade packages *at*
> 1.9.93
> 
> Wouldn't things be easier to remember if you just bumped version.m4 to
> 1.9.94 instead? Then you don't need to remember to revert the specfile
> patch. (You can just release 1.9.94. No one is really going to notice
> if the upstream minor release number jumped two digits instead of one
> between pre-releases).
> 

Yes, if it's OK to bump the version then it's definitely easier. Done.

> 
> >> The reason for this is so we don't force yum to handle Obsoletes 
> >> processing at every update (which I'm told is expensive).
> >> 
> > 
> > I see, I didn't know that.
> > 
> 
> Technically, it also allows the capability to add that back in as a
> package or subpackage at a higher version at some later date without
> breakage (because the re-added one would be at a higher N-V-R). That's
> not something that matters to us though, just a bit of academia.
> 
> >> We only need to carry this explicit Obsoletes: until Fedora no
> >> longer has install media with the older version (so until F19 is
> >> the oldest supported version).
> >> 
> >> 
> >> Why do you have Conflicts: sssd < %{version}-%{release}? Given
> >> that the packages are identically-named (and that name isn't
> >> 'kernel'), this should be unnecessary.
> >> 
> > 
> > I wanted to be really defensive and make sure that everything the
> > old version contained is gone with the new version. That Conflicts:
> > is gone with the attached patches.
> > 
> >> 
> >> Is there a particular reason that the proxy provider doesn't have
> >> a subpackage as well?
> >> 
> > 
> > Just that the proxy provider has no dependencies. But from a
> > logical standpoint it makes sense, so there is a proxy subpackage
> > now, too.
> > 
> 
> Thanks, but you forgot to add it to the dependencies of the 'sssd'
> meta-package.
> 

Oops, fixed.

> 
> If we're being pedantic about this, we should probably split out the
> 'simple' provider as well, but I'm not going to nack over it. It's < 40k.
> 

I think it's better if the simple provider stays in the common package.
It can be used along with any other provider, so the other providers
would have to require it anyway. Also, it has no dependencies.

> 
> >> If we're breaking up packages to make it easier to create a
> >> minimal install, might it be best to just drop all of the
> >> manpages into an sssd-docs subpackage (that gets pulled in by the
> >> sssd metapackage)? Including translations, those can add up.
> >> Which brings me to my next point:
> >> 
> >> The provider subpackages have only the English manpage included
> >> in them. The translated ones are all landing in the sssd-common
> >> package.
> > 
> > I don't really like this option. As a user of SSSD I would expect
> > the sssd-ad man page to be present if I installed the sssd-ad
> > package. Also, I think it is better to have a single man page
> > installed (even if it's along with the translations) for the
> > provider I care about than the whole bunch. The space savings
> > provided by this split would also come by the means of not 
> > installing all the dependencies rather than not installing the
> > files that form the providers.
> > 
> > Thank you for the review, new patches are attached.
> > 
> 
> 
> Hmm, the translated manpages seem to have disappeared from the builds
> entirely:
> 

I see the same behaviour with parallel build (also with master w/o these
patches), but with an in-tree build, the man pages are generated fine.

Here is a scratch build I built:
http://koji.fedoraproject.org/koji/taskinfo?taskID=5490069

For instance, check out the sssd-ldap subpackage:
$ rpm -qpl sssd-ldap-1.9.94-0.fc19.x86_64.rpm | grep man
/usr/share/man/ja/man5/sssd-ldap.5.gz
/usr/share/man/man5/sssd-ldap.5.gz
/usr/share/man/uk/man5/sssd-ldap.5.gz

> 
> [sgallagh at sgallagh520:x86_64 (master *)]$ rpm -qpl
> /home/sgallagh/workspace/sssd/x86_64/rpmbuild/RPMS/x86_64/sssd-*.rpm
> |grep man
> /usr/share/man/man5/sssd-ad.5.gz
> /usr/share/man/man8/pam_sss.8.gz
> /usr/share/man/man8/sssd_krb5_locator_plugin.8.gz
> /usr/share/man/man1/sss_ssh_authorizedkeys.1.gz
> /usr/share/man/man1/sss_ssh_knownhostsproxy.1.gz
> /usr/share/man/man5/sssd-simple.5.gz
> /usr/share/man/man5/sssd-sudo.5.gz
> /usr/share/man/man5/sssd.conf.5.gz
> /usr/share/man/man8/sss_cache.8.gz
> /usr/share/man/man8/sssd.8.gz
> /usr/share/man/man5/sssd-ipa.5.gz
> /usr/share/man/man5/sssd-krb5.5.gz
> /usr/share/man/man5/sssd-ldap.5.gz
> /usr/share/man/man8/sss_debuglevel.8.gz
> /usr/share/man/man8/sss_groupadd.8.gz
> /usr/share/man/man8/sss_groupdel.8.gz
> /usr/share/man/man8/sss_groupmod.8.gz
> /usr/share/man/man8/sss_groupshow.8.gz
> /usr/share/man/man8/sss_obfuscate.8.gz
> /usr/share/man/man8/sss_seed.8.gz
> /usr/share/man/man8/sss_useradd.8.gz
> /usr/share/man/man8/sss_userdel.8.gz
> /usr/share/man/man8/sss_usermod.8.gz
> 
> 
> I'm running it as a Koji scratch-build right now to make sure it's not
> some peculiarity of my system, but I think there's something wrong
> with the *.lang files :-/
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.13 (GNU/Linux)
> Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
> 
> iEYEARECAAYFAlG2Lc4ACgkQeiVVYja6o6M4oACeL5MfE5GrFIiBHY8VgLqOHtFA
> pU4AniDjHpq3aa+5vAqhHvFPSQ7Fr/5o
> =Cvwq
> -----END PGP SIGNATURE-----
-------------- next part --------------
>From 80f3757cb6fa6588928e778f7465e17959564a59 Mon Sep 17 00:00:00 2001
From: Jakub Hrozek <jhrozek at redhat.com>
Date: Wed, 5 Jun 2013 14:03:41 +0200
Subject: [PATCH 1/2] rpm: Use hardened flags for RPM build

https://fedorahosted.org/sssd/ticket/1797

This patch adds the _hardened_build macro on platforms where it is
defined by the RPM. The macro amounts to compiling with cc
--spec=/usr/lib/rpm/redhat/redhat-hardened-cc1 and then linking with ld
--spec=/usr/lib/rpm/redhat/redhat-hardened-ld.

On Fedora 19, the gcc spec files contain -z now and fPIC or fPIE.
---
 contrib/sssd.spec.in | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/contrib/sssd.spec.in b/contrib/sssd.spec.in
index 65832166bc141ad37e5d24bf3ed969aef260fc66..c48a5de9095d50d2ac8856b45a8c2ed9b040f7bf 100644
--- a/contrib/sssd.spec.in
+++ b/contrib/sssd.spec.in
@@ -41,6 +41,10 @@
 # Determine the location of the LDB modules directory
 %global ldb_modulesdir %(pkg-config --variable=modulesdir ldb)
 
+%if (0%{?fedora} > 15 || 0%{?rhel} >= 7)
+%define _hardened_build 1
+%endif
+
 Name: @PACKAGE_NAME@
 Version: @PACKAGE_VERSION@
 Release: 0 at PRERELEASE_VERSION@%{?dist}
-- 
1.8.2.1

-------------- next part --------------
>From 6e3c359364ba53393a4ddbd1405c3edf3fca8ce6 Mon Sep 17 00:00:00 2001
From: Jakub Hrozek <jhrozek at redhat.com>
Date: Wed, 5 Jun 2013 12:53:30 +0200
Subject: [PATCH 2/2] rpm: Split providers into separate subpackages

https://fedorahosted.org/sssd/ticket/1510

This patch splits the previously monolithic sssd package into sssd-common
that contains the deamon and the responders and per-provider packages
such as sssd-ldap or sssd-ipa.

This split would benefit two parties:
1) security auditors who are often trying to find the smallest package
   set including dependencies needed for the package to function.
   They would be able to i.e. install sssd-ldap and not bother
   about sssd-ipa or sssd-ad pulling in more dependencies.
2) 3rd party programs such as realmd or authconfig
   that would only be able to require or install on demand the
   needed packages.
---
 contrib/sssd.spec.in | 233 +++++++++++++++++++++++++++++++++++++++++----------
 version.m4           |   2 +-
 2 files changed, 188 insertions(+), 47 deletions(-)

diff --git a/contrib/sssd.spec.in b/contrib/sssd.spec.in
index c48a5de9095d50d2ac8856b45a8c2ed9b040f7bf..b9f852201dd9b9d53876c4dcd1c280bb5a31c73c 100644
--- a/contrib/sssd.spec.in
+++ b/contrib/sssd.spec.in
@@ -60,30 +60,13 @@ Patch0001:  sssd-1.9-man-change-default-ccache.patch
 
 ### Dependencies ###
 
-Requires: libldb >= 0.9.3
-Requires: libtdb >= 1.1.3
-Requires: sssd-client%{?_isa} = %{version}-%{release}
-Requires: libipa_hbac = %{version}-%{release}
-Requires: libsss_idmap = %{version}-%{release}
+Requires: sssd-common = %{version}-%{release}
+Requires: sssd-ldap = %{version}-%{release}
+Requires: sssd-krb5 = %{version}-%{release}
+Requires: sssd-ipa = %{version}-%{release}
+Requires: sssd-ad = %{version}-%{release}
+Requires: sssd-proxy = %{version}-%{release}
 Requires: python-sssdconfig = %{version}-%{release}
-Requires: cyrus-sasl-gssapi
-%if (0%{?use_systemd} == 1)
-Requires(post): systemd-units systemd-sysv
-Requires(preun): systemd-units
-Requires(postun): systemd-units
-%else
-Requires(post): initscripts chkconfig
-Requires(preun):  initscripts chkconfig
-Requires(postun): initscripts chkconfig
-%endif
-
-### Provides ###
-Provides: libsss_sudo = %{version}-%{release}
-Obsoletes: libsss_sudo < %{version}-%{release}
-Provides: libsss_sudo-devel = %{version}-%{release}
-Obsoletes: libsss_sudo-devel < %{version}-%{release}
-Provides: libsss_autofs = %{version}-%{release}
-Obsoletes: libsss_autofs < %{version}-%{release}
 
 %global servicename sssd
 %global sssdstatedir %{_localstatedir}/lib/sss
@@ -159,6 +142,40 @@ the system and a pluggable backend system to connect to multiple different
 account sources. It is also the basis to provide client auditing and policy
 services for projects like FreeIPA.
 
+The sssd subpackage is a meta-package that contains the deamon as well as all
+the existing back ends.
+
+%package common
+Summary: Common files for the SSSD
+Group: Applications/System
+License: GPLv3+
+Requires: libldb >= 0.9.3
+Requires: libtdb >= 1.1.3
+Requires: sssd-client%{?_isa} = %{version}-%{release}
+Conflicts: sssd < %{version}-%{release}
+%if (0%{?use_systemd} == 1)
+Requires(post): systemd-units systemd-sysv
+Requires(preun): systemd-units
+Requires(postun): systemd-units
+%else
+Requires(post): initscripts chkconfig
+Requires(preun):  initscripts chkconfig
+Requires(postun): initscripts chkconfig
+%endif
+
+### Provides ###
+Provides: libsss_sudo = %{version}-%{release}
+Obsoletes: libsss_sudo <= 1.9.93
+Provides: libsss_sudo-devel = %{version}-%{release}
+Obsoletes: libsss_sudo-devel <= 1.9.93
+Provides: libsss_autofs = %{version}-%{release}
+Obsoletes: libsss_autofs <= 1.9.93
+
+%description common
+Common files for the SSSD. The common package includes all the files needed
+to run a particular back end, however, the back ends are packaged in separate
+subpackages such as sssd-ldap.
+
 %package client
 Summary: SSSD Client libraries for NSS and PAM
 Group: Applications/System
@@ -174,7 +191,7 @@ service.
 Summary: Userspace tools for use with the SSSD
 Group: Applications/System
 License: GPLv3+
-Requires: sssd = %{version}-%{release}
+Requires: sssd-common = %{version}-%{release}
 
 %description tools
 Provides userspace tools for manipulating users, groups, and nested groups in
@@ -194,6 +211,83 @@ BuildArch: noarch
 %description -n python-sssdconfig
 Provides python files for manipulation SSSD and IPA configuration files.
 
+%package ldap
+Summary: The LDAP back end of the SSSD
+Group: Applications/System
+License: GPLv3+
+Conflicts: sssd < %{version}-%{release}
+Requires: sssd-common = %{version}-%{release}
+Requires: libsss_idmap = %{version}-%{release}
+Requires: sssd-krb5-common = %{version}-%{release}
+
+%description ldap
+Provides the LDAP back end that the SSSD can utilize to fetch identity data
+from and authenticate against an LDAP server.
+
+%package krb5-common
+Summary: SSSD helpers needed for Kerberos and GSSAPI authentication
+Group: Applications/System
+License: GPLv3+
+Conflicts: sssd < %{version}-%{release}
+Requires: cyrus-sasl-gssapi
+Requires: sssd-common = %{version}-%{release}
+
+%description krb5-common
+Provides helper processes that the LDAP and Kerberos back ends can use for
+Kerberos user or host authentication.
+
+%package krb5
+Summary: The Kerberos authentication back end for the SSSD
+Group: Applications/System
+License: GPLv3+
+Conflicts: sssd < %{version}-%{release}
+Requires: sssd-common = %{version}-%{release}
+Requires: sssd-krb5-common = %{version}-%{release}
+
+%description krb5
+Provides the Kerberos back end that the SSSD can utilize authenticate
+against a Kerberos server.
+
+%package ipa
+Summary: The IPA back end of the SSSD
+Group: Applications/System
+License: GPLv3+
+Conflicts: sssd < %{version}-%{release}
+Requires: sssd-common = %{version}-%{release}
+Requires: sssd-krb5-common = %{version}-%{release}
+Requires: libipa_hbac = %{version}-%{release}
+Requires: libsss_idmap = %{version}-%{release}
+Requires: bind-utils
+
+%description ipa
+Provides the IPA back end that the SSSD can utilize to fetch identity data
+from and authenticate against an IPA server.
+
+%package ad
+Summary: The AD back end of the SSSD
+Group: Applications/System
+License: GPLv3+
+Conflicts: sssd < %{version}-%{release}
+Requires: sssd-common = %{version}-%{release}
+Requires: sssd-krb5-common = %{version}-%{release}
+Requires: libsss_idmap = %{version}-%{release}
+Requires: bind-utils
+
+%description ad
+Provides the Active Directory back end that the SSSD can utilize to fetch
+identity data from and authenticate against an Active Directory server.
+
+%package proxy
+Summary: The proxy back end of the SSSD
+Group: Applications/System
+License: GPLv3+
+Conflicts: sssd < %{version}-%{release}
+Requires: sssd-common = %{version}-%{release}
+
+%description proxy
+Provides the proxy back end which can be used to wrap an existing NSS and/or
+PAM modules to leverage SSSD caching.
+
 %package -n libsss_idmap
 Summary: FreeIPA Idmap library
 Group: Development/Libraries
@@ -272,7 +366,7 @@ The libsss_nss_idmap-python contains the bindings so that libsss_nss_idmap can
 be used by Python applications.
 
 %prep
-%setup -q
+%setup -q -n %{name}-%{version}
 %if (0%{?fedora} >= 17)
 %patch0001 -p1
 %endif
@@ -359,6 +453,11 @@ done
 touch sssd.lang
 touch sssd_tools.lang
 touch sssd_client.lang
+for provider in ldap krb5 ipa ad proxy
+do
+    touch sssd_$provider.lang
+done
+
 for man in `find $RPM_BUILD_ROOT/%{_mandir}/??/man?/ -type f | sed -e "s#$RPM_BUILD_ROOT/%{_mandir}/##"`
 do
     lang=`echo $man | cut -c 1-2`
@@ -372,6 +471,21 @@ do
         sssd_krb5_*)
             echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd_client.lang
             ;;
+        sssd-ldap*)
+            echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd_ldap.lang
+            ;;
+        sssd-krb5*)
+            echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd_krb5.lang
+            ;;
+        sssd-ipa*)
+            echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd_ipa.lang
+            ;;
+        sssd-ad*)
+            echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd_ad.lang
+            ;;
+        sssd-proxy*)
+            echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd_proxy.lang
+            ;;
         *)
             echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd.lang
             ;;
@@ -386,7 +500,11 @@ touch $RPM_BUILD_ROOT/%{mcpath}/group
 %clean
 rm -rf $RPM_BUILD_ROOT
 
-%files -f sssd.lang
+%files
+%defattr(-,root,root,-)
+%doc COPYING
+
+%files common -f sssd.lang
 %defattr(-,root,root,-)
 %doc COPYING
 %doc src/examples/sssd-example.conf
@@ -398,9 +516,6 @@ rm -rf $RPM_BUILD_ROOT
 %endif
 
 %dir %{_libexecdir}/%{servicename}
-%{_libexecdir}/%{servicename}/krb5_child
-%{_libexecdir}/%{servicename}/ldap_child
-%{_libexecdir}/%{servicename}/proxy_child
 %{_libexecdir}/%{servicename}/sssd_be
 %{_libexecdir}/%{servicename}/sssd_nss
 %{_libexecdir}/%{servicename}/sssd_pam
@@ -409,25 +524,13 @@ rm -rf $RPM_BUILD_ROOT
 %{_libexecdir}/%{servicename}/sssd_ssh
 %{_libexecdir}/%{servicename}/sssd_sudo
 
-# RHEL 5 is too old to support the PAC responder
-%if !0%{?is_rhel5}
-%{_libexecdir}/%{servicename}/sssd_pac
-
-%endif
-
 %dir %{_libdir}/%{name}
-%{_libdir}/%{name}/libsss_ad.so
-%{_libdir}/%{name}/libsss_ipa.so
-%{_libdir}/%{name}/libsss_krb5.so
-%{_libdir}/%{name}/libsss_ldap.so
-%{_libdir}/%{name}/libsss_proxy.so
 %{_libdir}/%{name}/libsss_simple.so
 
 #Internal shared libraries
 %{_libdir}/%{name}/libsss_child.so
 %{_libdir}/%{name}/libsss_crypt.so
 %{_libdir}/%{name}/libsss_debug.so
-%{_libdir}/%{name}/libsss_krb5_common.so
 %{_libdir}/%{name}/libsss_ldap_common.so
 %{_libdir}/%{name}/libsss_util.so
 
@@ -448,7 +551,6 @@ rm -rf $RPM_BUILD_ROOT
 %ghost %attr(0644,root,root) %verify(not md5 size mtime) %{mcpath}/group
 %attr(755,root,root) %dir %{pipepath}
 %attr(755,root,root) %dir %{pubconfpath}
-%attr(755,root,root) %dir %{pubconfpath}/krb5.include.d
 %attr(700,root,root) %dir %{pipepath}/private
 %attr(750,root,root) %dir %{_var}/log/%{name}
 %attr(711,root,root) %dir %{_sysconfdir}/sssd
@@ -459,10 +561,6 @@ rm -rf $RPM_BUILD_ROOT
 %{_datadir}/sssd/sssd.api.conf
 %{_datadir}/sssd/sssd.api.d
 %{_mandir}/man5/sssd.conf.5*
-%{_mandir}/man5/sssd-ipa.5*
-%{_mandir}/man5/sssd-ad.5*
-%{_mandir}/man5/sssd-krb5.5*
-%{_mandir}/man5/sssd-ldap.5*
 %{_mandir}/man5/sssd-simple.5*
 %{_mandir}/man5/sssd-sudo.5*
 %{_mandir}/man8/sssd.8*
@@ -472,6 +570,49 @@ rm -rf $RPM_BUILD_ROOT
 %{python_sitearch}/pysss.so
 %{python_sitearch}/pysss_murmur.so
 
+%files ldap -f sssd_ldap.lang
+%defattr(-,root,root,-)
+%doc COPYING
+%{_libdir}/%{name}/libsss_ldap.so
+%{_mandir}/man5/sssd-ldap.5*
+
+%files krb5-common
+%defattr(-,root,root,-)
+%doc COPYING
+%{_libdir}/%{name}/libsss_krb5_common.so
+%{_libexecdir}/%{servicename}/ldap_child
+%{_libexecdir}/%{servicename}/krb5_child
+
+%files krb5 -f sssd_krb5.lang
+%defattr(-,root,root,-)
+%doc COPYING
+%{_libdir}/%{name}/libsss_krb5.so
+%{_mandir}/man5/sssd-krb5.5*
+
+%files ipa -f sssd_ipa.lang
+%defattr(-,root,root,-)
+%doc COPYING
+# RHEL 5 is too old to support the PAC responder
+%if !0%{?is_rhel5}
+%{_libexecdir}/%{servicename}/sssd_pac
+%endif
+
+%attr(755,root,root) %dir %{pubconfpath}/krb5.include.d
+%{_libdir}/%{name}/libsss_ipa.so
+%{_mandir}/man5/sssd-ipa.5*
+
+%files ad -f sssd_ad.lang
+%defattr(-,root,root,-)
+%doc COPYING
+%{_libdir}/%{name}/libsss_ad.so
+%{_mandir}/man5/sssd-ad.5*
+
+%files proxy
+%defattr(-,root,root,-)
+%doc COPYING
+%{_libexecdir}/%{servicename}/proxy_child
+%{_libdir}/%{name}/libsss_proxy.so
+
 %files client -f sssd_client.lang
 %defattr(-,root,root,-)
 %doc src/sss_client/COPYING src/sss_client/COPYING.LESSER
diff --git a/version.m4 b/version.m4
index 7a07ea5e0f985cf9901497f9ae8ce3dea4d8b10e..1435f6999f6d4ffb06ad0dfd4261b03357fd0cfa 100644
--- a/version.m4
+++ b/version.m4
@@ -1,5 +1,5 @@
 # Primary version number
-m4_define([VERSION_NUMBER], [1.9.93])
+m4_define([VERSION_NUMBER], [1.9.94])
 
 # If the PRERELEASE_VERSION_NUMBER is set, we'll append
 # it to the release tag when creating an RPM or SRPM
-- 
1.8.2.1



More information about the sssd-devel mailing list