# TODO
# - something wrong for doc/ps,pdf generation on my build host. remove completely duplicated doc formats?
#
# Conditional build:
%bcond_with	pwexport	# enable pam_pwexport module (needs hacked pam_unix)
%bcond_without	cap		# don't build pam_cap module
%bcond_without	doc		# don't build documentation
%bcond_without	opie		# don't build pam_opie module
%bcond_with	prelude		# build without Prelude IDS support
%bcond_without	pwdb		# don't build pam_pwdb and pam_radius modules
%bcond_without	selinux		# build without SELinux support
%bcond_without	skey		# don't build pam_skey module
%bcond_without	tcpd		# don't build pam_tcpd module
#
Summary:	Pluggable Authentication Modules: modular, incremental authentication
Summary(de):	Einsteckbare Authentifizierungsmodule: modulare, inkrementäre Authentifizierung
Summary(es):	Módulos de autentificación plugables (PAM)
Summary(fr):	PAM : Pluggable Authentication Modules: modular, incremental authentication
Summary(pl):	Modularny system uwierzytelniania
Summary(pt_BR):	Módulos de autenticação plugáveis (PAM)
Summary(ru):	éÎÔÓÔÒÕÍÅÎÔ, ÏÂÅÓÐÅÞÉ×ÁÀÝÉÊ ÁÕÔÅÎÔÉÆÉËÁÃÉÀ ÄÌÑ ÐÒÉÌÏÖÅÎÉÊ
Summary(tr):	Modüler, artýmsal doðrulama birimleri
Summary(uk):	¶ÎÓÔÒÕÍÅÎÔ, ÝÏ ÚÁÂÅÚÐÅÞÕ¤ ÁÕÔÅÎÔÉƦËÁæÀ ÄÌÑ ÐÒÏÇÒÁÍ
Name:		pam
Version:	0.80.1
Release:	8
Epoch:		0
License:	GPL or BSD
Group:		Base
Source0:	ftp://ftp.pld-linux.org/software/pam/%{name}-pld-%{version}.tar.gz
# Source0-md5:	df374f625e7178f43a263a32e376dd46
Source1:	system-auth.pamd
Patch0:		%{name}-pam_pwgen_app.patch
URL:		http://www.kernel.org/pub/linux/libs/pam/
BuildRequires:	bison
BuildRequires:	cracklib-devel
BuildRequires:	db-devel
BuildRequires:	flex
%{?with_cap:BuildRequires:	libcap-devel}
%{?with_prelude:BuildRequires:	libprelude-devel}
%{?with_selinux:BuildRequires:	libselinux-devel}
BuildRequires:	libtool >= 2:1.5
%{?with_tcpd:BuildRequires:	libwrap-devel >= 7.6-32}
%{?with_opie:BuildRequires:	opie-devel}
%{?with_pwdb:BuildRequires:	pwdb-devel}
BuildRequires:	sgml-tools
%{?with_skey:BuildRequires:	skey-devel}
%if %{with doc}
BuildRequires:	sp
BuildRequires:	tetex-fonts-jknappen
BuildRequires:	tetex-format-latex
BuildRequires:	tetex-metafont
BuildRequires:	tetex-tex-babel
%endif
Requires:	%{name}-libs = %{epoch}:%{version}-%{release}
Requires:	awk
Requires:	cracklib
Requires:	cracklib-dicts
Requires:	make
Provides:	pam-pld
Obsoletes:	pamconfig
Obsoletes:	pam_make
Obsoletes:	pam-doc
BuildRoot:	%{tmpdir}/%{name}-%{version}-root-%(id -u -n)

%define		specflags	-fno-strict-aliasing

%description
PAM (Pluggable Authentication Modules) is a powerful, flexible,
extensible authentication system which allows the system administrator
to configure authentication services individually for every
pam-compliant application without recompiling any of the applications.

%description -l de
PAM (Pluggable Authentication Modules) ist ein leistungsfähiges,
flexibles und erweiterbares Authentifizierungssystem, mit dem der
Systemverwalter Authentifizierungs-Dienste individuell für jede
pam-kompatible Anwendung konfigurieren kann, ohne diese neu
kompilieren zu müssen.

%description -l es
PAM (Módulos de Autenticación Plugables) es un potente, flexible y
extensible sistema de autentificación, que permite al administrador
del sistema configurar servicios de autentificación individualmente
para cada aplicación pam compatible, sin la necesidad de recompilar
cualquier una de las aplicaciones.

%description -l fr
PAM (Pluggable Authentication Modules) est un systéme
d'authentification puissant, souple et extensible permettant à
l'administrateur système de configurer les individuellement les
services d'authentification pour chaque application conforme à PAM,
sans recompiler aucune application.

%description -l pl
PAM (Pluggable Authentication Modules) jest silnym i ³atwo
dostosowywalnym do potrzeb systemem uwierzytelniania, który umo¿liwia
administratorowi indywidualne konfigurowanie poszczególnych us³ug,
które s± dostosowane i skonsolidowane z bibliotekami PAM, bez
pó¼niejszej ich rekompilacji w momencie zmiany sposobu
uwierzytelniania tych¿e us³ug.

%description -l pt_BR
PAM (Módulos de Autenticação Plugáveis) é um poderoso, flexível e
extensível sistema de autenticação, que permite o administrador do
sistema configurar serviços de autenticação individualmente para cada
aplicação pam compatível, sem necessidade de recompilar qualquer uma
das aplicações.

%description -l uk
PAM (Pluggable Authentication Modules) - ÃÅ ÐÏÔÕÖÎÁ, ÇÎÕÞËÁ, ÚÄÁÔÎÁ ÄÏ
ÒÏÚÛÉÒÅÎÎÑ ÓÉÓÔÅÍÁ ÁÕÔÅÎÔÉËÁæ§, ÑËÁ ÄÏÚ×ÏÌѤ ÓÉÓÔÅÍÎÏÍÕ
ÁÄͦΦÓÔÒÁÔÏÒÕ ÎÁÌÁÇÏÄÖÕ×ÁÔÉ ÓÅצÓÉ Á×ÔÏÒÉÚÁæ§ ÄÏÓÔÕÐÕ (ÁÕÔÅÎÔÉËÁæ§)
¦ÎÄÉצÄÕÁÌØÎÏ ÄÌÑ ËÏÖÎϧ pam-ÓÕͦÓÎϧ ÐÒÏÇÒÁÍÉ ÂÅÚ ÎÅÏÂȦÄÎÏÓÔ¦
ÐÅÒÅËÏÍЦÌÑæ§ ÓÁÍϧ ÐÒÏÇÒÁÍÉ. ãÅ ÂÁÚÏ×ÉÊ ÍÅÈÁΦÚÍ ÁÕÔÅÎÔÉËÁæ§ × PLD
Linux.

%description -l tr
PAM (Pluggable Authentication Modules) sistem yöneticilerinin
uygulamalardan herhangi birini yeniden derlemeksizin bütün PAM uyumlu
uygulamalar için doðrulama hizmetlerini ayarlamalarýna yardýmcý olan,
güclü, esnek ve kapsamlý bir doðrulama sistemidir.

%description -l ru
PAM (Pluggable Authentication Modules) - ÜÔÏ ÍÏÝÎÁÑ, ÇÉÂËÁÑ,
ÒÁÓÛÉÒÑÅÍÁÑ ÓÉÓÔÅÍÁ ÁÕÔÅÎÔÉËÁÃÉÉ, ÐÏÚ×ÏÌÑÀÝÁÑ ÓÉÓÔÅÍÎÏÍÕ
ÁÄÍÉÎÉÓÔÒÁÔÏÒÕ ËÏÎÆÉÇÕÒÉÒÏ×ÁÔØ ÓÅÒ×ÉÓÙ Á×ÔÏÒÉÚÁÃÉÉ ÄÏÓÔÕÐÁ
(ÁÕÔÅÎÔÉËÁÃÉÉ) ÉÎÄÉ×ÉÄÕÁÌØÎÏ ÄÌÑ ËÁÖÄÏÊ pam-ÓÏ×ÍÅÓÔÉÍÏÊ ÐÒÏÇÒÁÍÍÙ ÂÅÚ
ÎÅÏÂÈÏÄÉÍÏÓÔÉ ÐÅÒÅËÏÍÐÉÌÌÑÃÉÉ ÓÁÍÏÊ ÐÒÏÇÒÁÍÍÙ. üÔÏ ÂÁÚÏ×ÙÊ ÍÅÈÁÎÉÚÍ
ÁÕÔÅÎÔÉËÁÃÉÉ × PLD Linux.

%package libs
Summary:	PAM modules and libraries
Summary(pl):	Modu³y i biblioteki PAM
Group:		Libraries

%description libs
Core PAM modules and libraries.

%description libs -l pl
Modu³y i biblioteki PAM.

%package devel
Summary:	PAM header files
Summary(pl):	Pliki nag³ówkowe i dokumentacja programisty do PAM
Summary(pt_BR):	Bibliotecas e arquivos de inclusão para desenvolvimento com PAM
Summary(ru):	âÉÂÌÉÏÔÅËÉ ÒÁÚÒÁÂÏÔÞÉËÁ ÄÌÑ PAM
Summary(uk):	â¦Â̦ÏÔÅËÉ ÐÒÏÇÒÁͦÓÔÁ ÄÌÑ PAM
Group:		Development/Libraries
Requires:	%{name} = %{epoch}:%{version}-%{release}
Requires:	FHS >= 2.2-9

%description devel
Header files for developing PAM based applications.

%description devel -l pl
Pliki nag³ówkowe i dokumentacja programisty do PAM.

%description devel -l pt_BR
Bibliotecas e arquivos de inclusão para desenvolvimento com PAM

%description devel -l ru
üÔÏÔ ÐÁËÅÔ ÓÏÄÅÒÖÉÔ ÈÅÄÅÒÙ É ÂÉÂÌÉÏÔÅËÉ ÒÁÚÒÁÂÏÔÞÉËÁ ÄÌÑ PAM.

%description devel -l uk
ãÅÊ ÐÁËÅÔ Í¦ÓÔÉÔØ ÈÅÄÅÒÉ ÔÁ ¦Â̦ÏÔÅËÉ ÐÒÏÇÒÁͦÓÔÁ ÄÌÑ PAM.

%package static
Summary:	PAM static libraries
Summary(pl):	Biblioteki statyczne PAM
Summary(ru):	óÔÁÔÉÞÅÓËÉÅ ÂÉÂÌÉÏÔÅËÉ ÒÁÚÒÁÂÏÔÞÉËÁ ÄÌÑ PAM
Summary(uk):	óÔÁÔÉÞΦ ¦Â̦ÏÔÅËÉ ÐÒÏÇÒÁͦÓÔÁ ÄÌÑ PAM
Group:		Development/Libraries
Requires:	%{name}-devel = %{epoch}:%{version}-%{release}

%description static
PAM static libraries.

%description static -l pl
Biblioteki statyczne PAM.

%description static -l ru
üÔÏÔ ÐÁËÅÔ ÓÏÄÅÒÖÉÔ ÓÔÁÔÉÞÅÓËÉÅ ÂÉÂÌÉÏÔÅËÉ ÒÁÚÒÁÂÏÔÞÉËÁ ÄÌÑ PAM.

%description static -l uk
ãÅÊ ÐÁËÅÔ Í¦ÓÔÉÔØ ÓÔÁÔÉÞΦ ¦Â̦ÏÔÅËÉ ÐÒÏÇÒÁͦÓÔÁ ÄÌÑ PAM.

%package pam_pwdb
Summary:	pam_pwdb module
Summary(pl):	Modu³ pam_pwdb
Group:		Base
Requires:	%{name} = %{epoch}:%{version}-%{release}
Requires:	pwdb >= 0.54-2

%description pam_pwdb
pam_pwdb module.

%description pam_pwdb -l pl
Modu³ pam_pwdb.

%package pam_radius
Summary:	pam_radius module
Summary(pl):	Modu³ pam_radius
Group:		Base
Requires:	%{name} = %{epoch}:%{version}-%{release}
Requires:	pwdb >= 0.54-2

%description pam_radius
pam_radius module.

%description pam_radius -l pl
Modu³ pam_radius.

%package pam_skey
Summary:	pam_skey module
Summary(pl):	Modu³ pam_skey
Group:		Base
Requires:	%{name} = %{epoch}:%{version}-%{release}
Requires:	skey

%description pam_skey
pam_skey module.

%description pam_skey -l pl
Modu³ pam_skey.

%package pam_opie
Summary:	pam_opie module
Summary(pl):	Modu³ pam_opie
Group:		Base
Requires:	%{name} = %{epoch}:%{version}-%{release}
Requires:	opie

%description pam_opie
pam_opie module.

%description pam_opie -l pl
Modu³ pam_opie.

%package pam_tcpd
Summary:	pam_tcpd module
Summary(pl):	Modu³ pam_tcpd
Group:		Base
Requires:	%{name} = %{epoch}:%{version}-%{release}
Requires:	libwrap >= 7.6-32

%description pam_tcpd
pam_tcpd module.

%description pam_tcpd -l pl
Modu³ pam_tcpd.

%package pam_cap
Summary:	pam_cap module
Summary(pl):	Modu³ pam_cap
Group:		Base
Requires:	%{name} = %{epoch}:%{version}-%{release}
Requires:	libcap

%description pam_cap
pam_cap module.

%description pam_cap -l pl
Modu³ pam_cap.

%package pam_selinux
Summary:	PAM module - SELinux support
Summary(pl):	Modu³ PAM pozwalaj±cy na zmianê kontekstów SELinuksa
Group:		Base

%description pam_selinux
PAM module - SELinux support.

%description pam_selinux -l pl
Modu³ PAM pozwalaj±cy na zmianê kontekstów SELinuksa.

%prep
%setup -q -n %{name}-pld-%{version}
%patch0 -p1

%build
find doc/ -type f | xargs %{__perl} -pi -e 's#/lib/security#/%{_lib}/security#g'
%configure \
	%{!?with_doc:--without-docs} \
	%{!?with_cap:--disable-cap} \
	%{!?with_opie:--disable-opie} \
	%{!?with_pwdb:--disable-pwdb} \
	%{!?with_skey:--disable-skey} \
	%{!?with_tcpd:--disable-tcpd} \
	%{?with_pwexport:--enable-want-pwexport-module} \
	%{!?with_selinux:--disable-selinux} \
	%{!?with_prelude:--disable-prelude} \
	--enable-strong-crypto

%{__make}

%install
rm -rf $RPM_BUILD_ROOT
install -d $RPM_BUILD_ROOT/%{_lib}

%{__make} install \
	DESTDIR=$RPM_BUILD_ROOT

rm -rf docs
cp -a doc docs
rm -f docs/{ps,txts}/{README,*.log} \
	docs/{html,txts}/Makefile*

:> $RPM_BUILD_ROOT/etc/security/opasswd
:> $RPM_BUILD_ROOT/etc/security/blacklist

mv -f $RPM_BUILD_ROOT%{_libdir}/lib*.so.*.*.* $RPM_BUILD_ROOT/%{_lib}

install pamcrypt/.libs/libpamcrypt.a $RPM_BUILD_ROOT%{_libdir}

cd $RPM_BUILD_ROOT/%{_lib}
ln -sf /%{_lib}/$(echo libpam.so.*.*.*) $RPM_BUILD_ROOT%{_libdir}/libpam.so
ln -sf /%{_lib}/$(echo libpam_misc.so.*.*.*) $RPM_BUILD_ROOT%{_libdir}/libpam_misc.so
ln -sf /%{_lib}/$(echo libpamc.so.*.*.*) $RPM_BUILD_ROOT%{_libdir}/libpamc.so

cp %{SOURCE1} $RPM_BUILD_ROOT/etc/pam.d/system-auth

# useless - shut up check-files
rm -f $RPM_BUILD_ROOT/%{_lib}/security/*.{la,a}
rm -f $RPM_BUILD_ROOT%{_libdir}/libpamcrypt.a

%if %{without selinux}
rm -rf $RPM_BUILD_ROOT{/%{_lib}/security/pam_selinux.so,%{_sbindir}/pam_selinux_check,%{_mandir}/man8/pam_selinux*.8*}
%endif

%clean
rm -rf $RPM_BUILD_ROOT

%post	libs -p /sbin/ldconfig
%postun	libs -p /sbin/ldconfig

%files
%defattr(644,root,root,755)
%doc CHANGELOG ChangeLog Copyright doc/CREDITS
%if %{with doc}
%doc docs/{html,txts,specs/*.{raw,txt}}
# FIXME: doesn't build for me! missing BR!:
#builder@pld-i686 ps $  sgml2latex -o ps ../psgml2latex -o ps ../pam
#Processing file ../pam
#load_char_maps: no entity maps found
#parse_data: no entity map for `[lowbar]'
#sh: latex: not found
#sh: latex: not found
#dvips: ! DVI file can't be opened.
#%doc docs/ps/*.ps
%endif
%dir /etc/pam.d
%dir /sbin/pam_filter
%dir /var/lock/console
%dir /etc/security/console.apps
%config(noreplace) %verify(not md5 mtime size) /etc/pam.d/other
%config(noreplace) %verify(not md5 mtime size) /etc/pam.d/system-auth
%config(noreplace) %verify(not md5 mtime size) /etc/security/access.conf
%config(noreplace) %verify(not md5 mtime size) /etc/security/pam_env.conf
%config(noreplace) %verify(not md5 mtime size) /etc/security/group.conf
%config(noreplace) %verify(not md5 mtime size) /etc/security/limits.conf
%config(noreplace) %verify(not md5 mtime size) /etc/security/time.conf
%config(noreplace) %verify(not md5 mtime size) /etc/security/consoles
%config(noreplace) %verify(not md5 mtime size) /etc/security/trigram*
%config(noreplace) %verify(not md5 mtime size) /etc/security/blacklist
%config(noreplace) %verify(not md5 mtime size) /etc/security/pam_mail.conf
%attr(600,root,root) %config(noreplace) %verify(not md5 mtime size) /etc/security/opasswd
%attr(755,root,root) /sbin/pam_filter/upperLOWER
%attr(4755,root,root) /sbin/unix_chkpwd
%attr(755,root,root) %{_bindir}/pam_pwgen
%attr(755,root,root) %{_sbindir}/pam_tally
%attr(755,root,root) %{_sbindir}/pwgen_trigram
%{_mandir}/man5/*
%{_mandir}/man8/pam.*
%{_mandir}/man8/pam_localuser*
%{_mandir}/man8/pam_succeed_if*
%{_mandir}/man8/pam_xauth*

%files libs
%defattr(644,root,root,755)
%attr(755,root,root) /%{_lib}/lib*.so.*.*
%attr(755,root,root) /%{_lib}/security/pam_access.so
%attr(755,root,root) /%{_lib}/security/pam_console.so
%attr(755,root,root) /%{_lib}/security/pam_cracklib.so
%attr(755,root,root) /%{_lib}/security/pam_debug.so
%attr(755,root,root) /%{_lib}/security/pam_deny.so
%attr(755,root,root) /%{_lib}/security/pam_env.so
%attr(755,root,root) /%{_lib}/security/pam_filter.so
%attr(755,root,root) /%{_lib}/security/pam_ftp.so
%attr(755,root,root) /%{_lib}/security/pam_group.so
%attr(755,root,root) /%{_lib}/security/pam_homedir.so
%attr(755,root,root) /%{_lib}/security/pam_issue.so
%attr(755,root,root) /%{_lib}/security/pam_lastlog.so
%attr(755,root,root) /%{_lib}/security/pam_limits.so
%attr(755,root,root) /%{_lib}/security/pam_listfile.so
%attr(755,root,root) /%{_lib}/security/pam_localuser.so
%attr(755,root,root) /%{_lib}/security/pam_mail.so
%attr(755,root,root) /%{_lib}/security/pam_make.so
%attr(755,root,root) /%{_lib}/security/pam_motd.so
%attr(755,root,root) /%{_lib}/security/pam_netid.so
%attr(755,root,root) /%{_lib}/security/pam_nologin.so
%attr(755,root,root) /%{_lib}/security/pam_permit.so
%attr(755,root,root) /%{_lib}/security/pam_pwgen.so
%attr(755,root,root) /%{_lib}/security/pam_rhosts.so
%attr(755,root,root) /%{_lib}/security/pam_rootok.so
%attr(755,root,root) /%{_lib}/security/pam_securetty.so
%attr(755,root,root) /%{_lib}/security/pam_shells.so
%attr(755,root,root) /%{_lib}/security/pam_stress.so
%attr(755,root,root) /%{_lib}/security/pam_succeed_if.so
%attr(755,root,root) /%{_lib}/security/pam_tally.so
%attr(755,root,root) /%{_lib}/security/pam_time.so
%attr(755,root,root) /%{_lib}/security/pam_unix.so
%attr(755,root,root) /%{_lib}/security/pam_userdb.so
%attr(755,root,root) /%{_lib}/security/pam_usertty.so
%attr(755,root,root) /%{_lib}/security/pam_utmp.so
%attr(755,root,root) /%{_lib}/security/pam_warn.so
%attr(755,root,root) /%{_lib}/security/pam_wheel.so
%attr(755,root,root) /%{_lib}/security/pam_xauth.so
%{?with_pwexport:%attr(755,root,root) /%{_lib}/security/pam_pwexport.so}

%files devel
%defattr(644,root,root,755)
%attr(755,root,root) %{_libdir}/lib*.so
%{_libdir}/lib*.la
%{_libdir}/libpammodutil.a
%{_includedir}/security/*.h
%{_mandir}/man3/*

%files static
%defattr(644,root,root,755)
%{_libdir}/libpam.a
%{_libdir}/libpamc.a
%{_libdir}/libpam_misc.a

%if %{with pwdb}
%files pam_pwdb
%defattr(644,root,root,755)
%attr(755,root,root) /%{_lib}/security/pam_pwdb.so
%attr(4755,root,root) /sbin/pwdb_chkpwd

%files pam_radius
%defattr(644,root,root,755)
%attr(755,root,root) /%{_lib}/security/pam_radius.so
%endif

%if %{with skey}
%files pam_skey
%defattr(644,root,root,755)
%attr(755,root,root) /%{_lib}/security/pam_skey.so
%endif

%if %{with opie}
%files pam_opie
%defattr(644,root,root,755)
%attr(755,root,root) /%{_lib}/security/pam_opie.so
%attr(755,root,root) /%{_lib}/security/pam_opietrust.so
%endif

%if %{with tcpd}
%files pam_tcpd
%defattr(644,root,root,755)
%attr(755,root,root) /%{_lib}/security/pam_tcpd.so
%endif

%if %{with cap}
%files pam_cap
%defattr(644,root,root,755)
%config(noreplace) %verify(not md5 mtime size) /etc/security/capability.conf
%attr(755,root,root) /%{_lib}/security/pam_cap.so
%endif

%if %{with selinux}
%files pam_selinux
%defattr(644,root,root,755)
%doc README
%attr(755,root,root) /%{_lib}/security/pam_selinux.so
%attr(755,root,root) %{_sbindir}/pam_selinux_check
#TODO: %config(noreplace) %verify(not size mtime md5) /etc/pam.d/pam_selinux_check
%{_mandir}/man8/pam_selinux*.8*
%endif