%{!?python_sitelib: %global python_sitelib %(%{__python} -c "from distutils.sysconfig import get_python_lib; print get_python_lib()")} Name: fas Version: 0.10.0 Release: 4%{?dist} Summary: Fedora Account System Group: Development/Languages License: GPLv2 URL: https://fedorahosted.org/fas/ Source0: https://fedorahosted.org/releases/f/a/fas/%{name}-%{version}.tar.xz BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) BuildArch: noarch BuildRequires: python2-devel BuildRequires: python-setuptools BuildRequires: gettext %if 0%{?fedora} || 0%{?rhel} && 0%{?rhel} < 7 BuildRequires: TurboGears %endif Requires: TurboGears >= 1.0.4 Requires: python-sqlalchemy # Note: python-fedora-turbogears will get rid of this dep someday so let's be # explicit here Requires: python-bugzilla Requires: python-TurboMail Requires: python-fedora-turbogears >= 0.3.25 Requires: babel Requires: pygpgme Requires: python-babel Requires: python-genshi Requires: python-kitchen Requires: pytz Requires: python-GeoIP Requires: pyOpenSSL Requires: python-memcached Requires: python-webob Requires: tulrich-tuffy-fonts # For the audio captcha Requires: espeak Requires: python-tgcaptcha2 # We really do want this, just optional for now. #Requires: fedmsg %description The Fedora Account System is a web application that manages the accounts of Fedora Project Contributors. It's built in TurboGears and comes with a json API for querying against remotely. The python-fedora-infrastructure package has a TurboGears identity provider that works with the Account System. %package clients Summary: Clients for the Fedora Account System Group: Applications/System Requires: python-fedora >= 0.3.12.1 Requires: authconfig %if 0%{?rhel} && 0%{?rhel} < 7 Requires: nss_db %endif Requires: libselinux-python %description clients Additional scripts that work as clients to the accounts system. %prep %setup -q -n %{name}-%{version} %build %if 0%{?fedora} || 0%{?rhel} && 0%{?rhel} < 7 # Bit hacky. On EPEL7 we only need the client (which doesn't get byte # compiled as everything's in a single script). setup.py doesn't work # because it builds the server too (which needs TG1) %{__python} setup.py build --install-data='%{_datadir}' %endif %install %{__rm} -rf %{buildroot} %{__mkdir_p} %{buildroot}%{_sysconfdir} # fas-client stuff %{__install} -m 600 client/fas.conf %{buildroot}%{_sysconfdir} %{__install} -m 700 -d %{buildroot}%{_localstatedir}/lib/fas %if 0%{?fedora} || 0%{?rhel} && 0%{?rhel} < 7 %{__python} setup.py install --skip-build --install-data='%{_datadir}' --root %{buildroot} %{__mkdir_p} %{buildroot}%{_sbindir} %{__mv} %{buildroot}%{_bindir}/start-fas %{buildroot}%{_sbindir} %{__install} fas.wsgi %{buildroot}%{_sbindir} # Unreadable by others because it's going to contain a database password. %{__install} -m 640 fas.cfg.sample %{buildroot}%{_sysconfdir}/fas.cfg %{__mv} %{buildroot}%{_bindir}/export-bugzilla.py %{buildroot}%{_sbindir}/export-bugzilla %{__install} -m 0600 scripts/export-bugzilla.cfg %{buildroot}%{_sysconfdir}/ %{__mv} %{buildroot}%{_bindir}/account-expiry.py %{buildroot}%{_sbindir}/account-expiry %{__install} -m 0600 scripts/account-expiry.cfg %{buildroot}%{_sysconfdir}/ cp -pr updates/ %{buildroot}%{_datadir}/fas %find_lang %{name} %else # Little hacky -- this is normally installed by setup.py but we can't run that # on epel7 due to not having TG which is only needed for the server portion %{__mkdir_p} %{buildroot}%{_bindir} %{__install} -m 0755 client/fasClient %{buildroot}%{_bindir}/fasClient %{__install} -m 0755 client/fasClient %{buildroot}%{_bindir}/restricted-shell %endif %clean %{__rm} -rf %{buildroot} %pre /usr/sbin/useradd -c 'Fedora Account System user' -s /sbin/nologin \ -r -M -d %{_datadir}/fas fas &> /dev/null || : %if 0%{?fedora} || 0%{?rhel} && 0%{?rhel} < 7 %files -f %{name}.lang %defattr(-,root,root,-) %doc README TODO COPYING NEWS fas2.sql fas.spec fas.conf.wsgi %{python_sitelib}/* # Bad Toshio. Next release aims to fix this by making the location ofthe cert # files configurable at build time %config(noreplace) %{_datadir}/fas/static/fedora-server-ca.cert %config(noreplace) %{_datadir}/fas/static/fedora-upload-ca.cert %dir %{_datadir}/fas/ %{_datadir}/fas/updates/ %dir %{_datadir}/fas/static/ %{_datadir}/fas/static/css/ %{_datadir}/fas/static/images/ %{_datadir}/fas/static/js/ %{_datadir}/fas/static/theme/ %{_datadir}/fas/static/robots.txt %{_sbindir}/start-fas %{_sbindir}/fas.wsgi %{_sbindir}/export-bugzilla %{_sbindir}/account-expiry %attr(-,root,fas) %config(noreplace) %{_sysconfdir}/fas.cfg %attr(-,root,fas) %config(noreplace) %{_sysconfdir}/export-bugzilla.cfg %attr(-,root,fas) %config(noreplace) %{_sysconfdir}/account-expiry.cfg %endif %files clients %defattr(-,root,root,-) %{_bindir}/* %config(noreplace) %{_sysconfdir}/fas.conf %attr(0700,root,root) %dir %{_localstatedir}/lib/fas %changelog * Mon Jul 14 2014 Toshio Kuratomi - 0.10.0-4 - Remove nss_db dep in rhel7 * Mon Jul 14 2014 Toshio Kuratomi - 0.10.0-3 - Fix building of the clients subpackage on EPEL7 * Mon Jul 14 2014 Xavier Lamien - 0.10.0-2 - Add an option to fasClient to reduce verbosity on std-output. * Thu May 22 2014 Xavier Lamien - 0.10.0-1 - Add moderator group with restricted privileges. - Update FPCA, Red Hat mailing address. - Update groupdb format creation from fasClient. * Thu Mar 06 2014 Xavier Lamien - 0.9.0 - Add pkgdb2 support. - Link GPG's keys to key.fedoraproject.org. - Update helps infos. - Improve GPG key validation feature. - Notify addresses from export-bugzilla script. * Wed May 8 2013 Toshio Kuratomi - 0.8.17-1 - **Security update** Fix information leak on group/view. * Thu Feb 28 2013 Toshio Kuratomi - 0.8.16-1 - 0.8.6 final * Mon Feb 18 2013 Toshio Kuratomi - 0.8.15.90-1 - First beta of the 0.8.6 release * Thu Oct 18 2012 Toshio Kuratomi - 0.8.15-1 - Update translations. Final release * Mon Sep 24 2012 Ricky Elrod - 0.8.14.92-2 - Update translations * Fri Sep 14 2012 Ricky Elrod - 0.8.14.92-1 - Remove blog feed commit, because it was dependant on fancyflash. * Thu Aug 30 2012 Ricky Elrod - 0.8.14.91-1 - Add a patch from ctria (see infra #3027) for checking passwords against libpwquality. (Ricky Elrod) * Sat Aug 10 2012 Ricky Elrod - 0.8.14.90-1 - Differing colors of headers for differing types of deployment. - Add a place where users are able to add their blog to the planet - Show the content of the group if there are less than 10 people in it - Pull in latest translations to prepare for 0.8.15. * Sat Jul 28 2012 Patrick Uiterwijk - 0.8.14-1 - Added security question system, with encrypted security answer * Fri Jul 06 2012 Ralph Bean - 0.8.13-2 - Typo fix. python-fedmsg should just be 'fedmsg'. * Fri Jul 06 2012 Ralph Bean - 0.8.13-1 - Version bump for fedmsg in stg. * Sat Mar 31 2012 Ralph Bean - 0.8.12-2 - Added dependency on fedmsg. * Tue Feb 21 2012 Xavier Laminen - 0.8.12-1 - Upstream release. - Add heuristics human's name check. * Tue Jan 24 2012 Toshio Kuratomi - 0.8.11-1 - New upstream release -- allows email to be used to login, implements an audio captcha, and normalizes some error codes. * Fri Nov 18 2011 Toshio Kuratomi - 0.8.9.1-1 - Important fix: the new strength checking validator introduced in 0.8.8.90 (or hotfixes before that) was allowing users to set empty passwords. * Thu Nov 17 2011 Toshio Kuratomi - 0.8.9-1 - FAS final release. - Mark the cert files as config * Thu Oct 27 2011 Toshio Kuratomi - 0.8.8.92-1 - Going to to daily new rpms until release so translators can see their work. * Thu Oct 27 2011 Toshio Kuratomi - 0.8.8.91-1 - Second beta * Thu Oct 27 2011 Toshio Kuratomi - 0.8.8.90-1 - Beta of the 0.8.9 release. * Mon May 2 2011 Toshio Kuratomi - 0.8.8-1 - Final release * Tue Apr 5 2011 Toshio Kuratomi - 0.8.8-0.1.a1 - Update for FPCA - Move fas.wsgi into /usr/sbin - Include the updates directory in the package - Make the apache configfile %%doc instead of installing it * Mon Feb 07 2011 Jim Lieb - 0.8.7.5-1.1 - Localize UI to Yahoo. - Make wsgi instantiation work * Fri Sep 24 2010 Mike McGrath - 0.8.7.5-1 - Upstream released new version * Thu Sep 09 2010 Mike McGrath - 0.8.7.4-1 - Upstream released new version * Fri Aug 27 2010 Mike McGrath - 0.8.7.3-1 - Upstream released new version * Tue Aug 10 2010 Mike McGrath - 0.8.7.1-1 - New upstream release - Removed python-webob dep (was a false dep anyway) * Mon Aug 09 2010 Mike McGrath - 0.8.7-1 - New upstream release * Fri Jul 30 2010 Jon Stanley - 0.8.6.2.6-1 - New upstream release * Thu Jul 29 2010 Jon Stanley - 0.8.6.2.5-2 - Fix fas.cfg=>fas.cfg.sample rename upstream * Thu Jul 29 2010 Jon Stanley - 0.8.6.2.5-1 - New upstream release - Now conflicts with python-sqlalchemy, and requires python-sqlalchemy0.5 * Wed Sep 16 2009 Toshio Kuratomi - 0.8.6.2.3-1 - New release that implements a captcha for new accounts and fixes a few bugs. * Tue Jun 11 2009 Ricky Zhou - 0.8.6.2.2-1 - Add Requires on python-memcached. - Fix /var/lib/fas directory. - Some export-bugzilla fixes. * Tue Jun 6 2009 Ricky Zhou - 0.8.6.2.1-1 - Typo fix release. * Tue Jun 4 2009 Ricky Zhou - 0.8.6.2-1 - Upstream released a new version. * Tue Jun 3 2009 Ricky Zhou - 0.8.6.1-1 - Upstream released a new version. * Tue Jun 2 2009 Mike McGrath - 0.8.6-1 - Upstream released new version - Cached group/user data * Sun Apr 12 2009 Ricky Zhou - 0.8.5.2-3 - Fix fas user's home directory (was missing a slash). * Thu Mar 13 2009 Ricky Zhou - 0.8.5.2-2 - Add /var/lib/fas directory. * Thu Mar 12 2009 Toshio Kuratomi - 0.8.5.2-1 - Bugfix for fasClient alias generation and template fixes for the csrf token. * Mon Mar 9 2009 Toshio Kuratomi - 0.8.5.1-1 - Quick little bugfix for using the login method via json. * Sat Mar 7 2009 Toshio Kuratomi - 0.8.5-1 - Beta new upstream release with CSRF fixes. * Thu Feb 12 2009 Ricky Zhou - 0.8.4.8-1 - New upstream release that fixes some security issues.