[PATCH] Updated spec file for RPM

Andrew Bartlett abartlet at pcug.org.au
Sun Mar 25 21:49:25 GMT 2001


Gerald Carter wrote:
> 
> On Fri, 9 Feb 2001, Andrew Bartlett wrote:
> 
> > I have made a few changes to the RedHat RPM spec file for Samba 2.2,
> > allowing a functional install of samba via RPM.  It rebuilds on RH6.2
> > and RH7+rawhide except in that the makerpms script doesn't work on
> > RPMv4.
> >
> > I've had this sitting around waiting to be dealt with for a while, so
> > something recent might have broken it, but in any case its better than
> > what's currently in CVS.
> >
> > Quirks:  I have removed the second copy of the samba book, pointing swat
> > (which I don't use and haven't tested) to the RH7 documentation
> > directory.  I have also moved code page generation into the RPM, thus
> > getting rid of the code-page source from the final distribution (idea
> > from what RH does on their own spec file).
> 
> I don't know if this ever got applied.  I'll check on Monday and
> if not will deal with it then.  Thanks for the help Andrew.  Did you ever
> get any feedback on your PAM patch?  If not I'll look into that as well.
> 
> CHeers, jerry

No, it didn't get applied.  I have since made some further
modifications, attempting to use the --with-fhs option.  A decision
needs to be made as to if we are going to use the full FHS, or to keep
things like smb.conf/smbpasswd in their present location (/etc).  (I'm
not even sure if we can keep them in /etc, the --with-fhs option seems
to override --sysconfdir and --with-private-dir.)

I'll give these a test, and submit a patch.

(The other thing to look at it if to use the new RPMv4 macros,
particularly as RPMv4 has been released for all platforms.  )

As regards the PAM patch, I talked to Tridge at a recent CLUG, and while
he agreed with the account checking (for encrypted passwords, giving us
account expiration), I am yet to convince him about session support.  He
did think that maybe it could be moved into the authentication context,
where we are actually allowed to a 'sorry, permission denied'.  (Or at
least that's my recollection, but it was getting pretty late...).

My PAM patch also adjusts the utmp not to record entries for IPC$
connections, but all connections (including IPC$ sessions) are put
through PAM.  This allows pam_limits to do its magic, as well as
allowing interesting things like PAM based utmp-like accounting. 

The PAM patch works, as tested by the staff and students at Hawker
College :-).

Tridge also commented about the code, apparently its pretty obvious
exactly how long I have been coding C... :-). 

Thanks,
Andrew Bartlett
-- 
Andrew Bartlett
abartlet at pcug.org.au




More information about the samba-technical mailing list