This commit follows a7fb50b577.
* gnu/packages/sssd.scm [arguments]: Undefine
SMB_HAS_NEW_NDR_PULL_STEAL_SWITCH in add-config-in phase.
Signed-off-by: Oleg Pykhalov <go.wigust@gmail.com>
		
	
			
		
			
				
	
	
		
			257 lines
		
	
	
	
		
			10 KiB
		
	
	
	
		
			Scheme
		
	
	
	
	
	
			
		
		
	
	
			257 lines
		
	
	
	
		
			10 KiB
		
	
	
	
		
			Scheme
		
	
	
	
	
	
;;; GNU Guix --- Functional package management for GNU
 | 
						||
;;; Copyright © 2016, 2017 Ricardo Wurmus <rekado@elephly.net>
 | 
						||
;;; Copyright © 2017, 2018 Tobias Geerinckx-Rice <me@tobias.gr>
 | 
						||
;;; Copyright © 2020 Efraim Flashner <efraim@flashner.co.il>
 | 
						||
;;; Copyright © 2021 Timotej Lazar <timotej.lazar@araneo.si>
 | 
						||
;;; Copyright © 2021, 2022 Remco van 't Veer <remco@remworks.net>
 | 
						||
;;;
 | 
						||
;;; This file is part of GNU Guix.
 | 
						||
;;;
 | 
						||
;;; GNU Guix is free software; you can redistribute it and/or modify it
 | 
						||
;;; under the terms of the GNU General Public License as published by
 | 
						||
;;; the Free Software Foundation; either version 3 of the License, or (at
 | 
						||
;;; your option) any later version.
 | 
						||
;;;
 | 
						||
;;; GNU Guix is distributed in the hope that it will be useful, but
 | 
						||
;;; WITHOUT ANY WARRANTY; without even the implied warranty of
 | 
						||
;;; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 | 
						||
;;; GNU General Public License for more details.
 | 
						||
;;;
 | 
						||
;;; You should have received a copy of the GNU General Public License
 | 
						||
;;; along with GNU Guix.  If not, see <http://www.gnu.org/licenses/>.
 | 
						||
 | 
						||
(define-module (gnu packages sssd)
 | 
						||
  #:use-module ((guix licenses) #:prefix license:)
 | 
						||
  #:use-module (guix packages)
 | 
						||
  #:use-module (guix download)
 | 
						||
  #:use-module (guix git-download)
 | 
						||
  #:use-module (guix utils)
 | 
						||
  #:use-module (guix build-system gnu)
 | 
						||
  #:use-module (gnu packages)
 | 
						||
  #:use-module (gnu packages)
 | 
						||
  #:use-module (gnu packages adns)
 | 
						||
  #:use-module (gnu packages augeas)
 | 
						||
  #:use-module (gnu packages autotools)
 | 
						||
  #:use-module (gnu packages check)
 | 
						||
  #:use-module (gnu packages curl)
 | 
						||
  #:use-module (gnu packages cyrus-sasl)
 | 
						||
  #:use-module (gnu packages databases)
 | 
						||
  #:use-module (gnu packages dns)
 | 
						||
  #:use-module (gnu packages docbook)
 | 
						||
  #:use-module (gnu packages documentation)
 | 
						||
  #:use-module (gnu packages glib)
 | 
						||
  #:use-module (gnu packages kerberos)
 | 
						||
  #:use-module (gnu packages libunistring)
 | 
						||
  #:use-module (gnu packages linux)
 | 
						||
  #:use-module (gnu packages nss)
 | 
						||
  #:use-module (gnu packages openldap)
 | 
						||
  #:use-module (gnu packages tls)
 | 
						||
  #:use-module (gnu packages pcre)
 | 
						||
  #:use-module (gnu packages popt)
 | 
						||
  #:use-module (gnu packages pkg-config)
 | 
						||
  #:use-module (gnu packages samba)
 | 
						||
  #:use-module (gnu packages selinux)
 | 
						||
  #:use-module (gnu packages web)
 | 
						||
  #:use-module (gnu packages xml))
 | 
						||
 | 
						||
(define-public adcli
 | 
						||
  (package
 | 
						||
    (name "adcli")
 | 
						||
    (version "0.9.1")
 | 
						||
    (source
 | 
						||
     (origin
 | 
						||
       (method git-fetch)
 | 
						||
       (uri (git-reference
 | 
						||
             (url "https://gitlab.freedesktop.org/realmd/adcli.git")
 | 
						||
             (commit version)))
 | 
						||
       (file-name (git-file-name name version))
 | 
						||
       (sha256
 | 
						||
        (base32 "1mwzd5vakdsssdvs6vljqpp8pw8i97n5lhxvmn9dn9720am7hfv7"))))
 | 
						||
    (build-system gnu-build-system)
 | 
						||
    (arguments
 | 
						||
     `(#:configure-flags
 | 
						||
       ;; The net tool is used to update the stored machine key for samba.
 | 
						||
       (list (string-append "--with-samba-data-tool="
 | 
						||
                            (assoc-ref %build-inputs "samba") "/bin/net"))
 | 
						||
       #:phases
 | 
						||
       (modify-phases %standard-phases
 | 
						||
         (add-after 'unpack 'use-local-docbook
 | 
						||
           ;; Patch Makefile and docs to use local docbook resources.
 | 
						||
           (lambda _
 | 
						||
             (let* ((docbook-xml (assoc-ref %build-inputs "docbook-xml"))
 | 
						||
                    (docbook-xsl (assoc-ref %build-inputs "docbook-xsl"))
 | 
						||
                    (xsldir (string-append docbook-xsl "/xml/xsl/docbook-xsl-"
 | 
						||
                                           ,(package-version docbook-xsl))))
 | 
						||
                    (with-directory-excursion "doc"
 | 
						||
                      (substitute*
 | 
						||
                          '("Makefile.am" "adcli.xml" "adcli-devel.xml" "adcli-docs.xml")
 | 
						||
                        (("http://docbook.sourceforge.net/release/xsl/current(/[^\"]*)" _ path)
 | 
						||
                         (string-append xsldir path))
 | 
						||
                        (("http://www.oasis-open.org/docbook/xml/4.3/docbookx.dtd")
 | 
						||
                         (string-append docbook-xml "/xml/dtd/docbook/docbookx.dtd")))
 | 
						||
                      (substitute* "Makefile.am"
 | 
						||
                        (("\\$\\(XMLTO\\)" xmlto)
 | 
						||
                         (string-append xmlto " --searchpath " xsldir "/html"))))))))))
 | 
						||
    (native-inputs
 | 
						||
     (list autoconf
 | 
						||
           automake
 | 
						||
           docbook-xml
 | 
						||
           docbook-xsl
 | 
						||
           libtool
 | 
						||
           libxslt
 | 
						||
           util-linux ; For `rev` command used in tests.
 | 
						||
           xmlto))
 | 
						||
    (inputs
 | 
						||
     (list cyrus-sasl mit-krb5 samba openldap))
 | 
						||
    (home-page "https://gitlab.freedesktop.org/realmd/adcli/")
 | 
						||
    (synopsis "Helper library and tools for Active Directory client operations")
 | 
						||
    (description "@command{adcli} is a command‐line tool to join a computer to
 | 
						||
an Active Directory domain.  It can also update the machine password and
 | 
						||
manage user, group and computer accounts for a domain.")
 | 
						||
    (license license:lgpl2.1+)))
 | 
						||
 | 
						||
(define-public ding-libs
 | 
						||
  (package
 | 
						||
    (name "ding-libs")
 | 
						||
    (version "0.6.1")
 | 
						||
    (source (origin
 | 
						||
              (method url-fetch)
 | 
						||
              (uri (string-append "https://releases.pagure.org/SSSD/ding-libs/"
 | 
						||
                                  "ding-libs-" version ".tar.gz"))
 | 
						||
              (sha256
 | 
						||
               (base32
 | 
						||
                "1h97mx2jdv4caiz4r7y8rxfsq78fx0k4jjnfp7x2s7xqvqks66d3"))))
 | 
						||
    (build-system gnu-build-system)
 | 
						||
    (home-page "https://pagure.io/SSSD/ding-libs/")
 | 
						||
    (synopsis "Libraries for SSSD")
 | 
						||
    (description
 | 
						||
     "DING-LIBS (DING Is Not Glib) are a set of small, useful libraries that
 | 
						||
the @dfn{System Security Services Daemon} (SSSD) uses and makes available to
 | 
						||
other projects.  They include: libdhash, an implementation of a dynamic hash
 | 
						||
table which will dynamically resize to achieve optimal storage and access time
 | 
						||
properties; ini_config, a library for parsing and managing @code{INI} files;
 | 
						||
path_utils, a library to manage UNIX paths and subsets of paths; collection, a
 | 
						||
generic, hierarchical grouping mechanism for complex data sets; ref_array, a
 | 
						||
dynamically-growing, reference-counted array; libbasicobjects, a set of
 | 
						||
fundamental object types for C.")
 | 
						||
    (license license:lgpl3+)))
 | 
						||
 | 
						||
;; Note: This package installs modules for ldb and nss.  For the former we
 | 
						||
;; need to set LDB_MODULES_PATH.  For the latter LD_PRELOAD or LD_LIBRARY_PATH
 | 
						||
;; is needed.
 | 
						||
(define-public sssd
 | 
						||
  (package
 | 
						||
    (name "sssd")
 | 
						||
    (version "1.16.5")
 | 
						||
    (source (origin
 | 
						||
              (method url-fetch)
 | 
						||
              (uri (string-append "https://releases.pagure.org/SSSD/sssd/"
 | 
						||
                                  "sssd-" version ".tar.gz"))
 | 
						||
              (sha256
 | 
						||
               (base32
 | 
						||
                "1h6hwibaf3xa2w6qpzjiiywmfj6zkgbz4r2isf3gd0xm6vq7n6if"))
 | 
						||
              (patches (search-patches "sssd-fix-samba.patch"
 | 
						||
                                       "sssd-system-directories.patch"
 | 
						||
                                       "sssd-collision-with-external-nss-symbol.patch"
 | 
						||
                                       "sssd-fix-samba-4.15.3.patch"))))
 | 
						||
    (build-system gnu-build-system)
 | 
						||
    (arguments
 | 
						||
     `(#:make-flags
 | 
						||
       (list (string-append "DOCBOOK_XSLT="
 | 
						||
                            (assoc-ref %build-inputs "docbook-xsl")
 | 
						||
                            "/xml/xsl/docbook-xsl-"
 | 
						||
                            ,(package-version docbook-xsl)
 | 
						||
                            "/manpages/docbook.xsl")
 | 
						||
             ;; Remove "--postvalid" option, because that requires access to
 | 
						||
             ;; online DTDs.
 | 
						||
             "XMLLINT_FLAGS = --catalogs --nonet --noent --xinclude --noout")
 | 
						||
       #:configure-flags
 | 
						||
       (list "--localstatedir=/var" ;for /var/lib/sss, /var/run/sssd.pid, etc.
 | 
						||
             "--sysconfdir=/etc"    ;/etc/sssd
 | 
						||
 | 
						||
             "--disable-cifs-idmap-plugin"
 | 
						||
             "--without-nfsv4-idmapd-plugin"
 | 
						||
             "--without-python2-bindings"
 | 
						||
             "--without-python3-bindings"
 | 
						||
             (string-append "--with-plugin-path="
 | 
						||
                            (assoc-ref %outputs "out")
 | 
						||
                            "/lib/sssd")
 | 
						||
             (string-append "--with-krb5-plugin-path="
 | 
						||
                            (assoc-ref %outputs "out")
 | 
						||
                            "/lib/krb5/plugins/libkrb5")
 | 
						||
             (string-append "--with-cifs-plugin-path="
 | 
						||
                            (assoc-ref %outputs "out")
 | 
						||
                            "/lib/cifs-utils")
 | 
						||
             (string-append "--with-init-dir="
 | 
						||
                            (assoc-ref %outputs "out")
 | 
						||
                            "/etc/init.d")
 | 
						||
             (string-append "--with-ldb-lib-dir="
 | 
						||
                            (assoc-ref %outputs "out")
 | 
						||
                            "/lib/ldb/modules/ldb")
 | 
						||
             (string-append "--with-xml-catalog-path="
 | 
						||
                            (assoc-ref %build-inputs "docbook-xml")
 | 
						||
                            "/xml/dtd/docbook/catalog.xml"))
 | 
						||
       #:phases
 | 
						||
       (modify-phases %standard-phases
 | 
						||
         (add-after 'unpack 'disable-failing-test
 | 
						||
           (lambda _
 | 
						||
             (substitute* "src/tests/responder_socket_access-tests.c"
 | 
						||
               (("tcase_add_test\\(tc_utils, resp_str_to_array_test\\);") ""))
 | 
						||
             #t))
 | 
						||
         (add-after 'unpack 'add-config-in
 | 
						||
           (lambda _
 | 
						||
             (let ((config.h (open-file "config.h.in" "a")))
 | 
						||
               (display (string-append "
 | 
						||
/* Missing in commits on original repo, dunno why but won't work without. */
 | 
						||
#undef SMB_HAS_NEW_NDR_PULL_STEAL_SWITCH
 | 
						||
")
 | 
						||
                        config.h)
 | 
						||
               (close config.h))))
 | 
						||
         (add-before 'configure 'autoconf
 | 
						||
           (lambda _
 | 
						||
             (invoke "autoconf"))))))
 | 
						||
    (inputs
 | 
						||
     (list augeas
 | 
						||
           `(,isc-bind "utils")
 | 
						||
           c-ares
 | 
						||
           curl
 | 
						||
           cyrus-sasl
 | 
						||
           dbus
 | 
						||
           ding-libs
 | 
						||
           glib
 | 
						||
           gnutls
 | 
						||
           http-parser
 | 
						||
           jansson
 | 
						||
           ldb
 | 
						||
           libselinux
 | 
						||
           libsemanage
 | 
						||
           libunistring
 | 
						||
           linux-pam
 | 
						||
           mit-krb5
 | 
						||
           nss
 | 
						||
           openldap
 | 
						||
           openssl
 | 
						||
           pcre
 | 
						||
           popt
 | 
						||
           samba
 | 
						||
           talloc
 | 
						||
           tdb
 | 
						||
           tevent))
 | 
						||
    (native-inputs
 | 
						||
     (list autoconf-2.69
 | 
						||
           check-0.14
 | 
						||
           docbook-xsl
 | 
						||
           docbook-xml
 | 
						||
           libxml2 ; for xmllint
 | 
						||
           libxslt
 | 
						||
           pkg-config
 | 
						||
           `(,util-linux "lib"))) ;for uuid.h, reqired for KCM
 | 
						||
    (home-page "https://pagure.io/SSSD/sssd/")
 | 
						||
    (synopsis "System security services daemon")
 | 
						||
    (description "SSSD is a system daemon.  Its primary function is to provide
 | 
						||
access to identity and authentication remote resource through a common
 | 
						||
framework that can provide caching and offline support to the system.  It
 | 
						||
provides PAM and NSS modules, and in the future will support D-BUS based
 | 
						||
interfaces for extended user information.  It also provides a better database
 | 
						||
to store local users as well as extended user data.")
 | 
						||
    (license license:gpl3+)))
 |