#
# spec file for the CASA_auth_token native ( Version @VERSION@ ) 
#
# Copyright (c) 2006 SUSE LINUX Products GmbH, Nuernberg, Germany.
# This file and all modifications and additions to the pristine
# package are under the same license as the package itself.
#
# Please submit bugfixes or comments via http://bugs.opensuse.org/
#

# norootforbuild

Name:           CASA_auth_token_native
%define cfg Release
%define debug_opt ""
                                                                                                                           
URL:            http://www.novell.com/products
BuildRequires:  CASA-devel apache2-devel expat gcc-c++ glib2-devel krb5-devel libgcc libgssapi libstdc++ libstdc++-devel mono-devel pam-devel pkgconfig update-alternatives java-1_5_0-ibm java-1_5_0-ibm-devel java-1_5_0-ibm-alsa sysvinit insserv
%define prefix /usr
License:        LGPL
Group:          System/Libraries
Autoreqprov:    on
%define	        bldno	@VERSION@
Version:        @VERSION@ 
Release:        1
Summary:        Novell CASA Authentication Token Libraries
Source:         %{name}-%{version}.tar.bz2
BuildRoot:      %{_tmppath}/%{name}-%{version}-build
Requires:       expat binutils java-1_5_0-ibm CASA_auth_token_jaas_support sysvinit insserv
PreReq:         %fillup_prereq %insserv_prereq
PreReq:		/usr/bin/awk, /usr/bin/test, /bin/grep, /bin/cat, /usr/bin/install, /bin/pwd
PreReq:		/usr/sbin/groupadd, /usr/sbin/useradd, /usr/sbin/userdel, /usr/bin/getent

%description
CASA_auth_token is an authentication token infrastructure with support
for multiple authentication mechanisms with an emphasis on providing a
scalable single sign-on solution.

A key feature of CASA_auth_token is that its authentication tokens
contain identity information about the entity being authenticated. This
information is made available to the consuming services. The amount of
information contained in the tokens is configured on a per-service
basis. Because of this feature, we say that CASA_auth_token projects an
"Authenticated Identity".

The CASA_auth_token_native package contains the CASA (Common
Authentication Services Adapter) authentication token infrastructure
is recomended that this library not be invoked directly by
applications, instead it is recomended that appplication invoke its
services through the support modules provided to integrate with PAM or
the Apache Web Server.

Authors:
--------
    Juan Carlos Luciani - jluciani@novell.com
 
%package -n CASA_auth_token_pam_support
Summary:        Novell CASA Authentication Token PAM Support Components
Group:          System/Libraries
Requires:       CASA_auth_token_native pam

%description -n CASA_auth_token_pam_support
CASA_auth_token is an authentication token infrastructure with support
for multiple authentication mechanisms with an emphasis on providing a
scalable single sign-on solution.

A key feature of CASA_auth_token is that its authentication tokens
contain identity information about the entity being authenticated. This
information contained in the tokens is configured on a per-service
basis. Because of this feature, we say that CASA_auth_token projects an
"Authenticated Identity".

The CASA_auth_token_pam_support package contains the CASA (Common
Authentication Services Adapter) authentication token infrastructure
PAM module for token verification.

Authors:
--------
    Juan Carlos Luciani - jluciani@novell.com
 
%package -n CASA_auth_token_apache2_2_support
Summary:        Novell CASA Authentication Token Apache2_2 Support Components
Group:          System/Libraries
Requires:       apache2 CASA_auth_token_native

%description -n CASA_auth_token_apache2_2_support
CASA_auth_token is an authentication token infrastructure with support
for multiple authentication mechanisms with an emphasis on providing a
scalable single sign-on solution.

A key feature of CASA_auth_token is that its authentication tokens
contain identity information about the entity being authenticated. This
information contained in the tokens is configured on a per-service
basis. Because of this feature, we say that CASA_auth_token projects an
"Authenticated Identity".

The CASA_auth_token_apache2_2_support package contains the CASA (Common
Authentication Services Adapter) authentication token infrastructure
Apache v2.2 authentication provider module for token verification. The
module expects that users authenticate utilizing the HTTP Basic
authentication scheme and that the password utilized consist of a CASA
authentication token. Information about the authenticated identity is
environment variable.

Authors:
--------
    Juan Carlos Luciani - jluciani@novell.com

%package -n CASA_auth_token-devel
Summary:        Novell CASA Authentication Token Development Files
Group:          Development/Libraries/C and C++
Requires:       CASA-devel CASA_auth_token_native CASA_auth_token_jaas_support CASA_auth_token_pam_support CASA_auth_token_apache2_2_support CASA_auth_token_svc

%description -n CASA_auth_token-devel
CASA_auth_token is an authentication token infrastructure with support
for multiple authentication mechanisms with an emphasis on providing a
scalable single sign-on solution.

A key feature of CASA_auth_token is that its authentication tokens
contain identity information about the entity being authenticated. This
information contained in the tokens is configured on a per-service
basis. Because of this feature, we say that CASA_auth_token projects an
"Authenticated Identity".

The CASA_auth_token-devel package contains the files necessary for the
development of client and server applications that utilize the CASA
(Common Authentication Service Adapter) authentication token
infrastructure for authentication.

 
%prep
%setup -q
#%patch
%if %{_lib} == "lib64"
%define binsource bin64
%else
%define binsource bin
%endif

%build
export PATH=.:$PATH:/usr/%_lib/qt3/bin
%if %suse_version > 1000
export CFLAGS="$CFLAGS $RPM_OPT_FLAGS -fstack-protector"
%endif 

./autogen.sh 
make


%install

export NO_BRP_BYTECODE_VERSION=1

## Prime the file system ##
install -d %{buildroot}%{prefix}
install -d %{buildroot}%{prefix}/bin
install -d %{buildroot}%{prefix}/%{_lib}
install -d %{buildroot}/%{_lib}/security
install -d %{buildroot}%{prefix}/include
install -d %{buildroot}/etc/init.d
install -d %{buildroot}/etc/ld.so.conf.d
install -d %{buildroot}/var
install -d %{buildroot}/var/lib
install -d -m 755 %{buildroot}/var/lib/CASA
install -d -m 755 %{buildroot}/var/lib/CASA/authtoken
install -d -m 755 %{buildroot}/var/lib/CASA/authtoken/validate
install -d -m 755 %{buildroot}/etc/CASA
install -d -m 755 %{buildroot}/etc/CASA/authtoken.d
install -d -m 755 %{buildroot}/etc/CASA/authtoken.d/validate.d
install -d -m 755 %{buildroot}/etc/CASA/authtoken.d/modules.d

## CASA_auth_token_native ##
# Libs
install -m 755 %{_lib}/%{cfg}/libcasa_s_authtoken.so %{buildroot}%{prefix}/%{_lib}/libcasa_s_authtoken.so.%{bldno}
install -m 755 %{_lib}/%{cfg}/casa_iden_token.so %{buildroot}%{prefix}/%{_lib}/casa_iden_token.so.%{bldno}
install -m 755 %{_lib}/%{cfg}/libcasa_c_ipc.so %{buildroot}%{prefix}/%{_lib}/libcasa_c_ipc.so.%{bldno}
install -m 755 %{_lib}/%{cfg}/libcasa_s_ipc.so %{buildroot}%{prefix}/%{_lib}/libcasa_s_ipc.so.%{bldno}

# Lib Symbolic Links
ln -sf libcasa_s_authtoken.so.%{bldno} %{buildroot}%{prefix}/%{_lib}/libcasa_s_authtoken.so
ln -sf libcasa_s_authtoken.so.%{bldno} %{buildroot}%{prefix}/%{_lib}/libcasa_s_authtoken.so.1
ln -sf casa_iden_token.so.%{bldno} %{buildroot}%{prefix}/%{_lib}/casa_iden_token.so
ln -sf casa_iden_token.so.%{bldno} %{buildroot}%{prefix}/%{_lib}/casa_iden_token.so.1
ln -sf libcasa_c_ipc.so.%{bldno} %{buildroot}%{prefix}/%{_lib}/libcasa_c_ipc.so
ln -sf libcasa_c_ipc.so.%{bldno} %{buildroot}%{prefix}/%{_lib}/libcasa_c_ipc.so.1
ln -sf libcasa_s_ipc.so.%{bldno} %{buildroot}%{prefix}/%{_lib}/libcasa_s_ipc.so
ln -sf libcasa_s_ipc.so.%{bldno} %{buildroot}%{prefix}/%{_lib}/libcasa_s_ipc.so.1

# Bins
install -m 755 bin/%{cfg}/CasaAuthtokenValidateD %{buildroot}%{prefix}/bin/casa_atvd

# Others
install -m 644 server/AuthTokenValidate/idenTokenProviders/casa/linux/CasaIdentityToken.conf %{buildroot}/etc/CASA/authtoken.d/modules.d/CasaIdentityToken.conf
install -m 755 server/AuthTokenValidate/Svc/linux/CasaAuthtokenValidateD %{buildroot}/etc/init.d/casa_atvd

## CASA_auth_token_pam_support ##
# Libs
install -m 755 %{_lib}/%{cfg}/pam_casaauthtok.so %{buildroot}/%{_lib}/security/pam_casaauthtok.so


## CASA_auth_token_apache2_2_support ##
# Libs
install -m 755 %{_lib}/%{cfg}/mod_authn_casa.so %{buildroot}%{prefix}/%{_lib}/mod_authn_casa.so.%{bldno}

# Lib Symbolic Links
ln -sf mod_authn_casa.so.%{bldno} %{buildroot}%{prefix}/%{_lib}/mod_authn_casa.so
ln -sf mod_authn_casa.so.%{bldno} %{buildroot}%{prefix}/%{_lib}/mod_authn_casa.so.1

## CASA_auth_token-devel ##
# Header Files
install -m 644 include/casa_c_authtoken.h %{buildroot}%{prefix}/include
install -m 644 include/casa_s_authtoken.h %{buildroot}%{prefix}/include
install -m 644 include/casa_c_ipc.h %{buildroot}%{prefix}/include
install -m 644 include/casa_s_ipc.h %{buildroot}%{prefix}/include


%clean
rm -rf $RPM_BUILD_ROOT


## CASA_auth_token_native ##
%pre

# Do necessary user and group administration
group_present=`getent group | grep ^casaauth`
if [ -z "$group_present" ] ; then
        /usr/sbin/groupadd -r casaauth
fi

user_present=`getent passwd | grep ^casaatvd`
if [ -z "$user_present" ] ; then
        /usr/sbin/useradd -c "casa_atvd System User" -s /bin/false -r -d /var/lib/CASA/authtoken/validate -g casaauth casaatvd 2> /dev/null || :
fi

%post
/sbin/ldconfig

CAVD_ETC_DIR=/etc/CASA/authtoken.d/validate.d

setup_casa_atvd_env()
{
        # Save copy of enviroments file if it already exists
        if [ -f $CAVD_ETC_DIR/envvars ]; then
                mv $CAVD_ETC_DIR/envvars $CAVD_ETC_DIR/envvars.bak
        fi
        
        # Create envvars file
        cat > $CAVD_ETC_DIR/envvars <<!
############################################################
#                                                          #
# Environment variable file for casa_atvd.                 #
#                                                          #
# Note: This file is sourced by the casa_atvd rc script    #
# when starting the service.                               #
#                                                          #
# The following variables are utilized by the daemon       #
# and its rc script:                                       #
#                                                          #
#   DAEMON_NO_AUTORESTART_AFTER_CRASH -                    #
#                                                          #
#   Set this variable to "1" if you want to disable the    #
#   auto-restart daemon after abnormal termination         #
#   feature. This variable is intended to facilitate       #
#   the discovery of problems during quality assurance     #
#   testing. Disabling of the auto-restart daemon after    #
#   abnormal termination feature will result in a          #
#   configuration that is less fault tolerant.             #
#                                                          #
#   DAEMON_COREDUMPS_WANTED -                              #
#                                                          #
#   Set this variable to allow core dumps to be taken      #
#   when a daemon terminates abnormally. This variable     #
#   is only meaningful when the auto-restart daemon        #
#   feature mentioned above is enabled. Core dumps are     #
#   allowed to be taken when the auto-restart daemon       #
#   feature is disabled. Core dumps of novell-xsrvd        #
#   service processes are taken to the                     #
#   /var/novell/xtier folder.                              #
#                                                          #
############################################################
LD_LIBRARY_PATH="\${LD_LIBRARY_PATH}":/usr/lib/jvm/java-1.5.0-ibm/jre/bin:/usr/lib/jvm/java-1.5.0-ibm/jre/bin/classic
export LD_LIBRARY_PATH
!
        chmod +x $CAVD_ETC_DIR/envvars
}

# Do not run the rest of the script if this is an upgrade
if test "$1" != 1; then
	setup_casa_atvd_env
        exit 0
fi

# Create link to init.d script in /usr/sbin
if [ -f /usr/sbin/rccasa_atvd ] || [ -L /usr/sbin/rccasa_atvd ]; then
        rm -f /usr/sbin/rccasa_atvd
fi
ln -s /etc/init.d/casa_atvd /usr/sbin/rccasa_atvd

setup_casa_atvd_env

# Install casa_atvd init script
/usr/lib/lsb/install_initd /etc/init.d/casa_atvd


%preun

# Do not run script if this is an install
if test "$1" == 1; then
        exit 0
fi

# Stop casa_atvd
/etc/init.d/casa_atvd stop

# Remove casa_atvd init script
/usr/lib/lsb/remove_initd /etc/init.d/casa_atvd


%postun
/sbin/ldconfig

# We just want to start the casa_atvd service if this is an upgrade
if test "$1" == 1; then
        /etc/init.d/casa_atvd start
        exit 0
fi

# Remove symbolic link to init.d script
if [ -f /usr/sbin/rccasa_atvd ] || [ -L /usr/sbin/rccasa_atvd ]; then
        rm -f /usr/sbin/rccasa_atvd
fi

# Delete the casaatvd user
userdel casaatvd

# Delete the var files
rm -rf //var/lib/CASA/authtoken/validate


%files
%defattr(-,root,root)
%dir /var/lib/CASA
%dir /var/lib/CASA/authtoken
%dir %attr(-, casaatvd, casaauth) /var/lib/CASA/authtoken/validate
%dir /etc/CASA
%dir /etc/CASA/authtoken.d
%dir /etc/CASA/authtoken.d/validate.d
%dir /etc/CASA/authtoken.d/modules.d
%{prefix}/%{_lib}/libcasa_s_authtoken.so.%{bldno}
%{prefix}/%{_lib}/libcasa_s_authtoken.so
%{prefix}/%{_lib}/libcasa_s_authtoken.so.1
%{prefix}/%{_lib}/casa_iden_token.so.%{bldno}
%{prefix}/%{_lib}/casa_iden_token.so
%{prefix}/%{_lib}/casa_iden_token.so.1
%{prefix}/%{_lib}/libcasa_c_ipc.so.%{bldno}
%{prefix}/%{_lib}/libcasa_c_ipc.so
%{prefix}/%{_lib}/libcasa_c_ipc.so.1
%{prefix}/%{_lib}/libcasa_s_ipc.so.%{bldno}
%{prefix}/%{_lib}/libcasa_s_ipc.so
%{prefix}/%{_lib}/libcasa_s_ipc.so.1
%{prefix}/bin/casa_atvd
/etc/CASA/authtoken.d/modules.d/CasaIdentityToken.conf
/etc/init.d/casa_atvd


## CASA_auth_token_pam_support ##
%pre -n CASA_auth_token_pam_support
# Nothing to do in this pre script

%post -n CASA_auth_token_pam_support
/sbin/ldconfig

%preun -n CASA_auth_token_pam_support
# Nothing to do in this preun script

%postun -n CASA_auth_token_pam_support
/sbin/ldconfig

%files -n CASA_auth_token_pam_support
%defattr(-,root,root)
%dir /%{_lib}/security
/%{_lib}/security/pam_casaauthtok.so


## CASA_auth_token_apache2_2_support ##
%pre -n CASA_auth_token_apache2_2_support
# Nothing to do in this pre script

%post -n CASA_auth_token_apache2_2_support
/sbin/ldconfig

%preun -n CASA_auth_token_apache2_2_support
# Nothing to do in this preun script

%postun -n CASA_auth_token_apache2_2_support
/sbin/ldconfig

%files -n CASA_auth_token_apache2_2_support
%defattr(-,root,root)
%{prefix}/%{_lib}/mod_authn_casa.so.%{bldno}
%{prefix}/%{_lib}/mod_authn_casa.so
%{prefix}/%{_lib}/mod_authn_casa.so.1


## CASA_auth_token-devel ##
%pre -n CASA_auth_token-devel
# Nothing to do in this pre script

%post -n CASA_auth_token-devel
# Nothing to do in this post script

%preun -n CASA_auth_token-devel
# Nothing to do in this preun script

%postun -n CASA_auth_token-devel
# Nothing to do in this postun script

%files -n CASA_auth_token-devel
%defattr(-,root,root)
%{prefix}/include/casa_c_authtoken.h
%{prefix}/include/casa_s_authtoken.h
%{prefix}/include/casa_c_ipc.h
%{prefix}/include/casa_s_ipc.h

%changelog -n CASA_auth_token_native