244 lines
9.9 KiB
Scheme
244 lines
9.9 KiB
Scheme
;;; GNU Guix --- Functional package management for GNU
|
||
;;; Copyright © 2016, 2017 Ricardo Wurmus <rekado@elephly.net>
|
||
;;; Copyright © 2017, 2018 Tobias Geerinckx-Rice <me@tobias.gr>
|
||
;;; Copyright © 2020 Efraim Flashner <efraim@flashner.co.il>
|
||
;;; Copyright © 2021 Timotej Lazar <timotej.lazar@araneo.si>
|
||
;;; Copyright © 2021 Remco van 't Veer <remco@remworks.net>
|
||
;;;
|
||
;;; This file is part of GNU Guix.
|
||
;;;
|
||
;;; GNU Guix is free software; you can redistribute it and/or modify it
|
||
;;; under the terms of the GNU General Public License as published by
|
||
;;; the Free Software Foundation; either version 3 of the License, or (at
|
||
;;; your option) any later version.
|
||
;;;
|
||
;;; GNU Guix is distributed in the hope that it will be useful, but
|
||
;;; WITHOUT ANY WARRANTY; without even the implied warranty of
|
||
;;; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||
;;; GNU General Public License for more details.
|
||
;;;
|
||
;;; You should have received a copy of the GNU General Public License
|
||
;;; along with GNU Guix. If not, see <http://www.gnu.org/licenses/>.
|
||
|
||
(define-module (gnu packages sssd)
|
||
#:use-module ((guix licenses) #:prefix license:)
|
||
#:use-module (guix packages)
|
||
#:use-module (guix download)
|
||
#:use-module (guix git-download)
|
||
#:use-module (guix utils)
|
||
#:use-module (guix build-system gnu)
|
||
#:use-module (gnu packages)
|
||
#:use-module (gnu packages)
|
||
#:use-module (gnu packages adns)
|
||
#:use-module (gnu packages augeas)
|
||
#:use-module (gnu packages autotools)
|
||
#:use-module (gnu packages check)
|
||
#:use-module (gnu packages curl)
|
||
#:use-module (gnu packages cyrus-sasl)
|
||
#:use-module (gnu packages databases)
|
||
#:use-module (gnu packages dns)
|
||
#:use-module (gnu packages docbook)
|
||
#:use-module (gnu packages documentation)
|
||
#:use-module (gnu packages glib)
|
||
#:use-module (gnu packages kerberos)
|
||
#:use-module (gnu packages libunistring)
|
||
#:use-module (gnu packages linux)
|
||
#:use-module (gnu packages nss)
|
||
#:use-module (gnu packages openldap)
|
||
#:use-module (gnu packages tls)
|
||
#:use-module (gnu packages pcre)
|
||
#:use-module (gnu packages popt)
|
||
#:use-module (gnu packages pkg-config)
|
||
#:use-module (gnu packages samba)
|
||
#:use-module (gnu packages selinux)
|
||
#:use-module (gnu packages web)
|
||
#:use-module (gnu packages xml))
|
||
|
||
(define-public adcli
|
||
(package
|
||
(name "adcli")
|
||
(version "0.9.1")
|
||
(source
|
||
(origin
|
||
(method git-fetch)
|
||
(uri (git-reference
|
||
(url "https://gitlab.freedesktop.org/realmd/adcli.git")
|
||
(commit version)))
|
||
(file-name (git-file-name name version))
|
||
(sha256
|
||
(base32 "1mwzd5vakdsssdvs6vljqpp8pw8i97n5lhxvmn9dn9720am7hfv7"))))
|
||
(build-system gnu-build-system)
|
||
(arguments
|
||
`(#:configure-flags
|
||
;; The net tool is used to update the stored machine key for samba.
|
||
(list (string-append "--with-samba-data-tool="
|
||
(assoc-ref %build-inputs "samba") "/bin/net"))
|
||
#:phases
|
||
(modify-phases %standard-phases
|
||
(add-after 'unpack 'use-local-docbook
|
||
;; Patch Makefile and docs to use local docbook resources.
|
||
(lambda _
|
||
(let* ((docbook-xml (assoc-ref %build-inputs "docbook-xml"))
|
||
(docbook-xsl (assoc-ref %build-inputs "docbook-xsl"))
|
||
(xsldir (string-append docbook-xsl "/xml/xsl/docbook-xsl-"
|
||
,(package-version docbook-xsl))))
|
||
(with-directory-excursion "doc"
|
||
(substitute*
|
||
'("Makefile.am" "adcli.xml" "adcli-devel.xml" "adcli-docs.xml")
|
||
(("http://docbook.sourceforge.net/release/xsl/current(/[^\"]*)" _ path)
|
||
(string-append xsldir path))
|
||
(("http://www.oasis-open.org/docbook/xml/4.3/docbookx.dtd")
|
||
(string-append docbook-xml "/xml/dtd/docbook/docbookx.dtd")))
|
||
(substitute* "Makefile.am"
|
||
(("\\$\\(XMLTO\\)" xmlto)
|
||
(string-append xmlto " --searchpath " xsldir "/html"))))))))))
|
||
(native-inputs
|
||
(list autoconf
|
||
automake
|
||
docbook-xml
|
||
docbook-xsl
|
||
libtool
|
||
libxslt
|
||
util-linux ; For `rev` command used in tests.
|
||
xmlto))
|
||
(inputs
|
||
(list cyrus-sasl mit-krb5 samba openldap))
|
||
(home-page "https://gitlab.freedesktop.org/realmd/adcli/")
|
||
(synopsis "Helper library and tools for Active Directory client operations")
|
||
(description "@command{adcli} is a command‐line tool to join a computer to
|
||
an Active Directory domain. It can also update the machine password and
|
||
manage user, group and computer accounts for a domain.")
|
||
(license license:lgpl2.1+)))
|
||
|
||
(define-public ding-libs
|
||
(package
|
||
(name "ding-libs")
|
||
(version "0.6.1")
|
||
(source (origin
|
||
(method url-fetch)
|
||
(uri (string-append "https://releases.pagure.org/SSSD/ding-libs/"
|
||
"ding-libs-" version ".tar.gz"))
|
||
(sha256
|
||
(base32
|
||
"1h97mx2jdv4caiz4r7y8rxfsq78fx0k4jjnfp7x2s7xqvqks66d3"))))
|
||
(build-system gnu-build-system)
|
||
(home-page "https://pagure.io/SSSD/ding-libs/")
|
||
(synopsis "Libraries for SSSD")
|
||
(description
|
||
"DING-LIBS (DING Is Not Glib) are a set of small, useful libraries that
|
||
the @dfn{System Security Services Daemon} (SSSD) uses and makes available to
|
||
other projects. They include: libdhash, an implementation of a dynamic hash
|
||
table which will dynamically resize to achieve optimal storage and access time
|
||
properties; ini_config, a library for parsing and managing @code{INI} files;
|
||
path_utils, a library to manage UNIX paths and subsets of paths; collection, a
|
||
generic, hierarchical grouping mechanism for complex data sets; ref_array, a
|
||
dynamically-growing, reference-counted array; libbasicobjects, a set of
|
||
fundamental object types for C.")
|
||
(license license:lgpl3+)))
|
||
|
||
;; Note: This package installs modules for ldb and nss. For the former we
|
||
;; need to set LDB_MODULES_PATH. For the latter LD_PRELOAD or LD_LIBRARY_PATH
|
||
;; is needed.
|
||
(define-public sssd
|
||
(package
|
||
(name "sssd")
|
||
(version "1.16.5")
|
||
(source (origin
|
||
(method url-fetch)
|
||
(uri (string-append "https://releases.pagure.org/SSSD/sssd/"
|
||
"sssd-" version ".tar.gz"))
|
||
(sha256
|
||
(base32
|
||
"1h6hwibaf3xa2w6qpzjiiywmfj6zkgbz4r2isf3gd0xm6vq7n6if"))
|
||
(patches (search-patches "sssd-fix-samba.patch"
|
||
"sssd-system-directories.patch"
|
||
"sssd-collision-with-external-nss-symbol.patch"))))
|
||
(build-system gnu-build-system)
|
||
(arguments
|
||
`(#:make-flags
|
||
(list (string-append "DOCBOOK_XSLT="
|
||
(assoc-ref %build-inputs "docbook-xsl")
|
||
"/xml/xsl/docbook-xsl-"
|
||
,(package-version docbook-xsl)
|
||
"/manpages/docbook.xsl")
|
||
;; Remove "--postvalid" option, because that requires access to
|
||
;; online DTDs.
|
||
"XMLLINT_FLAGS = --catalogs --nonet --noent --xinclude --noout")
|
||
#:configure-flags
|
||
(list "--localstatedir=/var" ;for /var/lib/sss, /var/run/sssd.pid, etc.
|
||
"--sysconfdir=/etc" ;/etc/sssd
|
||
|
||
"--disable-cifs-idmap-plugin"
|
||
"--without-nfsv4-idmapd-plugin"
|
||
"--without-python2-bindings"
|
||
"--without-python3-bindings"
|
||
(string-append "--with-plugin-path="
|
||
(assoc-ref %outputs "out")
|
||
"/lib/sssd")
|
||
(string-append "--with-krb5-plugin-path="
|
||
(assoc-ref %outputs "out")
|
||
"/lib/krb5/plugins/libkrb5")
|
||
(string-append "--with-cifs-plugin-path="
|
||
(assoc-ref %outputs "out")
|
||
"/lib/cifs-utils")
|
||
(string-append "--with-init-dir="
|
||
(assoc-ref %outputs "out")
|
||
"/etc/init.d")
|
||
(string-append "--with-ldb-lib-dir="
|
||
(assoc-ref %outputs "out")
|
||
"/lib/ldb/modules/ldb")
|
||
(string-append "--with-xml-catalog-path="
|
||
(assoc-ref %build-inputs "docbook-xml")
|
||
"/xml/dtd/docbook/catalog.xml"))
|
||
#:phases
|
||
(modify-phases %standard-phases
|
||
(add-after 'unpack 'disable-failing-test
|
||
(lambda _
|
||
(substitute* "src/tests/responder_socket_access-tests.c"
|
||
(("tcase_add_test\\(tc_utils, resp_str_to_array_test\\);") ""))
|
||
#t)))))
|
||
(inputs
|
||
(list augeas
|
||
`(,isc-bind "utils")
|
||
c-ares
|
||
curl
|
||
cyrus-sasl
|
||
dbus
|
||
ding-libs
|
||
glib
|
||
gnutls
|
||
http-parser
|
||
jansson
|
||
ldb
|
||
libselinux
|
||
libsemanage
|
||
libunistring
|
||
linux-pam
|
||
mit-krb5
|
||
nss
|
||
openldap
|
||
openssl
|
||
pcre
|
||
popt
|
||
samba
|
||
talloc
|
||
tdb
|
||
tevent))
|
||
(native-inputs
|
||
(list check-0.14
|
||
docbook-xsl
|
||
docbook-xml
|
||
libxml2 ; for xmllint
|
||
libxslt
|
||
pkg-config
|
||
`(,util-linux "lib"))) ;for uuid.h, reqired for KCM
|
||
(home-page "https://pagure.io/SSSD/sssd/")
|
||
(synopsis "System security services daemon")
|
||
(description "SSSD is a system daemon. Its primary function is to provide
|
||
access to identity and authentication remote resource through a common
|
||
framework that can provide caching and offline support to the system. It
|
||
provides PAM and NSS modules, and in the future will support D-BUS based
|
||
interfaces for extended user information. It also provides a better database
|
||
to store local users as well as extended user data.")
|
||
(license license:gpl3+)))
|