]>
Commit | Line | Data |
---|---|---|
2ebfbf87 | 1 | # |
2ca913e8 | 2 | # Conditional build: |
bb7a58b9 | 3 | %bcond_without audit # sshd audit support |
f6c7fa07 | 4 | %bcond_with gnome # with gnome-askpass (GNOME 1.x) utility |
cd53fc87 | 5 | %bcond_without gtk # without GTK+ (2.x) |
b32891d6 | 6 | %bcond_without ldap # with ldap support |
f6c7fa07 | 7 | %bcond_without libedit # without libedit (editline/history support in sftp client) |
9cfed0b2 | 8 | %bcond_without kerberos5 # without kerberos5 support |
70329622 | 9 | %bcond_without selinux # build without SELinux support |
5c609334 | 10 | %bcond_with hpn # High Performance SSH/SCP - HPN-SSH including Cipher NONE (broken too often) |
516496e1 | 11 | |
cef904f1 JB |
12 | # gtk2-based gnome-askpass means no gnome1-based |
13 | %{?with_gtk:%undefine with_gnome} | |
cc788d8e | 14 | |
2ebfbf87 ER |
15 | %if "%{pld_release}" == "ac" |
16 | %define pam_ver 0.79.0 | |
17 | %else | |
18 | %define pam_ver 0.99.7.1 | |
19 | %endif | |
20 | ||
52000378 | 21 | Summary: OpenSSH free Secure Shell (SSH) implementation |
25e16946 ER |
22 | Summary(de.UTF-8): OpenSSH - freie Implementation der Secure Shell (SSH) |
23 | Summary(es.UTF-8): Implementación libre de SSH | |
24 | Summary(fr.UTF-8): Implémentation libre du shell sécurisé OpenSSH (SSH) | |
25 | Summary(it.UTF-8): Implementazione gratuita OpenSSH della Secure Shell | |
26 | Summary(pl.UTF-8): Publicznie dostępna implementacja bezpiecznego shella (SSH) | |
27 | Summary(pt.UTF-8): Implementação livre OpenSSH do protocolo 'Secure Shell' (SSH) | |
28 | Summary(pt_BR.UTF-8): Implementação livre do SSH | |
29 | Summary(ru.UTF-8): OpenSSH - свободная реализация протокола Secure Shell (SSH) | |
30 | Summary(uk.UTF-8): OpenSSH - вільна реалізація протоколу Secure Shell (SSH) | |
52000378 | 31 | Name: openssh |
afde20c1 | 32 | Version: 5.9p1 |
eefe27ae | 33 | Release: 7 |
f5fc6a92 | 34 | Epoch: 2 |
5d1c7089 | 35 | License: BSD |
36 | Group: Applications/Networking | |
6481986b | 37 | Source0: ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/%{name}-%{version}.tar.gz |
afde20c1 | 38 | # Source0-md5: b50a499fa02616a47984b1920848b565 |
486d736c JR |
39 | Source1: http://www.mif.pg.gda.pl/homepages/ankry/man-PLD/%{name}-non-english-man-pages.tar.bz2 |
40 | # Source1-md5: 66943d481cc422512b537bcc2c7400d1 | |
41 | Source2: %{name}d.init | |
42 | Source3: %{name}d.pamd | |
43 | Source4: %{name}.sysconfig | |
44 | Source5: ssh-agent.sh | |
45 | Source6: ssh-agent.conf | |
b32891d6 | 46 | Source7: %{name}-lpk.schema |
c0f446a0 | 47 | Source8: %{name}d.upstart |
2ebfbf87 | 48 | Patch100: %{name}-heimdal.patch |
89eac7b5 | 49 | Patch0: %{name}-no_libnsl.patch |
8d59ede4 JB |
50 | Patch2: %{name}-pam_misc.patch |
51 | Patch3: %{name}-sigpipe.patch | |
501aed94 AM |
52 | # http://pkgs.fedoraproject.org/gitweb/?p=openssh.git;a=tree |
53 | Patch4: %{name}-5.9p1-ldap.patch | |
54 | Patch5: %{name}-5.9p1-ldap-fixes.patch | |
be063a4e | 55 | Patch8: ldap.conf.patch |
501aed94 | 56 | Patch6: %{name}-config.patch |
108bb9ae ER |
57 | # https://bugzilla.mindrot.org/show_bug.cgi?id=1663 |
58 | Patch7: authorized-keys-command.patch | |
0a069c2e | 59 | # High Performance SSH/SCP - HPN-SSH - http://www.psc.edu/networking/projects/hpn-ssh/ |
0d5b2bd4 ER |
60 | # http://www.psc.edu/networking/projects/hpn-ssh/openssh-5.2p1-hpn13v6.diff.gz |
61 | Patch9: %{name}-5.2p1-hpn13v6.diff | |
8d59ede4 | 62 | Patch10: %{name}-include.patch |
100234b3 | 63 | Patch11: %{name}-chroot.patch |
342ae3ba | 64 | # http://people.debian.org/~cjwatson/%{name}-blacklist.diff |
cc788d8e | 65 | Patch12: %{name}-blacklist.diff |
92dc7c43 | 66 | Patch13: %{name}-kuserok.patch |
eefe27ae | 67 | Patch14: %{name}-bind.patch |
c5eb8e82 | 68 | URL: http://www.openssh.com/portable.html |
0a069c2e | 69 | BuildRequires: %{__perl} |
26d23d17 JB |
70 | %{?with_audit:BuildRequires: audit-libs-devel} |
71 | BuildRequires: autoconf >= 2.50 | |
8f12ae30 | 72 | BuildRequires: automake |
9cfed0b2 | 73 | %{?with_gnome:BuildRequires: gnome-libs-devel} |
74 | %{?with_gtk:BuildRequires: gtk+2-devel} | |
044fff96 | 75 | %{?with_kerberos5:BuildRequires: heimdal-devel >= 0.7} |
f6c7fa07 | 76 | %{?with_libedit:BuildRequires: libedit-devel} |
70329622 | 77 | %{?with_selinux:BuildRequires: libselinux-devel} |
a14c109c | 78 | BuildRequires: libwrap-devel |
044fff96 | 79 | %{?with_ldap:BuildRequires: openldap-devel} |
b12dd014 | 80 | BuildRequires: openssl-devel >= 0.9.7d |
92d612e6 | 81 | BuildRequires: pam-devel |
9cfed0b2 | 82 | %{?with_gtk:BuildRequires: pkgconfig} |
2ebfbf87 | 83 | BuildRequires: rpm >= 4.4.9-56 |
9be30b5d | 84 | BuildRequires: rpmbuild(macros) >= 1.318 |
a42c5034 | 85 | BuildRequires: sed >= 4.0 |
a14c109c | 86 | BuildRequires: zlib-devel |
2ebfbf87 ER |
87 | %if "%{pld_release}" == "ac" |
88 | Requires: filesystem >= 2.0-1 | |
89 | Requires: pam >= 0.79.0 | |
90 | %else | |
680fc8d4 | 91 | Requires: filesystem >= 3.0-11 |
2ebfbf87 | 92 | Requires: pam >= %{pam_ver} |
35844bbb | 93 | Suggests: openssh-blacklist |
a9abed26 | 94 | Suggests: xorg-app-xauth |
2ebfbf87 | 95 | %endif |
f937b661 | 96 | Obsoletes: ssh |
05fbd2e9 | 97 | BuildRoot: %{tmpdir}/%{name}-%{version}-root-%(id -u -n) |
52000378 | 98 | |
b7b47957 | 99 | %define _sysconfdir /etc/ssh |
1dd7cf18 | 100 | %define _libexecdir %{_libdir}/%{name} |
a14c109c | 101 | %define _privsepdir /usr/share/empty |
b32891d6 | 102 | %define schemadir /usr/share/openldap/schema |
6fe24471 AF |
103 | |
104 | %description | |
105 | Ssh (Secure Shell) a program for logging into a remote machine and for | |
11530f15 | 106 | executing commands in a remote machine. It is intended to replace |
107 | rlogin and rsh, and provide secure encrypted communications between | |
108 | two untrusted hosts over an insecure network. X11 connections and | |
109 | arbitrary TCP/IP ports can also be forwarded over the secure channel. | |
6fe24471 | 110 | |
11530f15 | 111 | OpenSSH is OpenBSD's rework of the last free version of SSH, bringing |
112 | it up to date in terms of security and features, as well as removing | |
113 | all patented algorithms to seperate libraries (OpenSSL). | |
6fe24471 | 114 | |
11530f15 | 115 | This package includes the core files necessary for both the OpenSSH |
116 | client and server. To make this package useful, you should also | |
117 | install openssh-clients, openssh-server, or both. | |
a42c5034 | 118 | |
0d5b2bd4 | 119 | %if %{with hpn} |
0a069c2e | 120 | This release includes High Performance SSH/SCP patches from |
a42c5034 ER |
121 | http://www.psc.edu/networking/projects/hpn-ssh/ which are supposed to |
122 | increase throughput on fast connections with high RTT (20-150 msec). | |
088aab43 | 123 | See the website for '-w' values for your connection and /proc/sys TCP |
124 | values. BTW. in a LAN you have got generally RTT < 1 msec. | |
125 | %endif | |
6fe24471 | 126 | |
84ae85a3 | 127 | %description -l de.UTF-8 |
aebfac88 JB |
128 | OpenSSH (Secure Shell) stellt den Zugang zu anderen Rechnern her. Es |
129 | ersetzt telnet, rlogin, rexec und rsh und stellt eine sichere, | |
84ae85a3 JR |
130 | verschlüsselte Verbindung zwischen zwei nicht vertrauenswürdigen Hosts |
131 | über eine unsicheres Netzwerk her. X11 Verbindungen und beliebige | |
132 | andere TCP/IP Ports können ebenso über den sicheren Channel | |
aebfac88 JB |
133 | weitergeleitet werden. |
134 | ||
84ae85a3 JR |
135 | %description -l es.UTF-8 |
136 | SSH es un programa para accesar y ejecutar órdenes en computadores | |
137 | remotos. Sustituye rlogin y rsh, y suministra un canal de comunicación | |
6c34819e | 138 | seguro entre dos servidores en una red insegura. Conexiones X11 y |
84ae85a3 | 139 | puertas TCP/IP arbitrárias también pueden ser usadas por el canal |
6c34819e | 140 | seguro. |
141 | ||
142 | OpenSSH es el resultado del trabajo del equipo de OpenBSD para | |
84ae85a3 JR |
143 | continuar la última versión gratuita de SSH, actualizándolo en |
144 | términos de seguridad y recursos,así también eliminando todos los | |
145 | algoritmos patentados y colocándolos en bibliotecas separadas | |
6c34819e | 146 | (OpenSSL). |
147 | ||
148 | Este paquete contiene "port" para Linux de OpenSSH. Se debe instalar | |
84ae85a3 | 149 | también el paquete openssh-clients u openssh-server o ambos. |
6c34819e | 150 | |
84ae85a3 JR |
151 | %description -l fr.UTF-8 |
152 | OpenSSH (Secure Shell) fournit un accès à un système distant. Il | |
aebfac88 | 153 | remplace telnet, rlogin, rexec et rsh, tout en assurant des |
84ae85a3 JR |
154 | communications cryptées securisées entre deux hôtes non fiabilisés sur |
155 | un réseau non sécurisé. Des connexions X11 et des ports TCP/IP | |
156 | arbitraires peuvent également être transmis sur le canal sécurisé. | |
aebfac88 | 157 | |
84ae85a3 | 158 | %description -l it.UTF-8 |
aebfac88 JB |
159 | OpenSSH (Secure Shell) fornisce l'accesso ad un sistema remoto. |
160 | Sostituisce telnet, rlogin, rexec, e rsh, e fornisce comunicazioni | |
161 | sicure e crittate tra due host non fidati su una rete non sicura. Le | |
162 | connessioni X11 ad una porta TCP/IP arbitraria possono essere | |
163 | inoltrate attraverso un canale sicuro. | |
164 | ||
84ae85a3 JR |
165 | %description -l pl.UTF-8 |
166 | Ssh (Secure Shell) to program służący do logowania się na zdalną | |
167 | maszynę i uruchamiania na niej aplikacji. W zamierzeniu openssh ma | |
168 | zastąpić rlogin, rsh i dostarczyć bezpieczne, szyfrowane połączenie | |
169 | pomiędzy dwoma hostami. | |
93e2d77c | 170 | |
84ae85a3 JR |
171 | Ten pakiet zawiera podstawowe pliki potrzebne zarówno po stronie |
172 | klienta jak i serwera OpenSSH. Aby był użyteczny, trzeba zainstalować | |
173 | co najmniej jeden z pakietów: openssh-clients lub openssh-server. | |
a42c5034 | 174 | |
0d5b2bd4 | 175 | %if %{with hpn} |
84ae85a3 JR |
176 | Ta wersja zawiera łaty z projektu High Performance SSH/SCP |
177 | http://www.psc.edu/networking/projects/hpn-ssh/, które mają na celu | |
a42c5034 ER |
178 | zwiększenie przepustowości transmisji dla szybkich połączeń z dużym |
179 | RTT (20-150 msec). Na stronie projektu znaleźć można odpowednie dla | |
180 | danego połączenia wartości parametru '-w' oraz opcje /proc/sys dla | |
181 | TCP. Nawiasem mówiąc w sieciach LAN RTT < 1 msec. | |
088aab43 | 182 | %endif |
aebfac88 | 183 | |
84ae85a3 | 184 | %description -l pt.UTF-8 |
aebfac88 | 185 | OpenSSH (Secure Shell) fornece acesso a um sistema remoto. Substitui o |
84ae85a3 JR |
186 | telnet, rlogin, rexec, e o rsh e fornece comunicações seguras e |
187 | cifradas entre duas máquinas sem confiança mútua sobre uma rede | |
188 | insegura. Ligações X11 e portos TCP/IP arbitrários também poder ser | |
aebfac88 JB |
189 | reenviados pelo canal seguro. |
190 | ||
84ae85a3 JR |
191 | %description -l pt_BR.UTF-8 |
192 | SSH é um programa para acessar e executar comandos em máquinas | |
193 | remotas. Ele substitui rlogin e rsh, e provem um canal de comunicação | |
194 | seguro entre dois hosts em uma rede insegura. Conexões X11 e portas | |
195 | TCP/IP arbitrárias também podem ser usadas pelo canal seguro. | |
6c34819e | 196 | |
84ae85a3 JR |
197 | OpenSSH é o resultado do trabalho da equipe do OpenBSD em continuar a |
198 | última versão gratuita do SSH, atualizando-o em termos de segurança e | |
6c34819e | 199 | recursos, assim como removendo todos os algoritmos patenteados e |
200 | colocando-os em bibliotecas separadas (OpenSSL). | |
201 | ||
84ae85a3 JR |
202 | Esse pacote contém o "port" pra Linux do OpenSSH. Você deve instalar |
203 | também ou o pacote openssh-clients, ou o openssh-server, ou ambos. | |
204 | ||
205 | %description -l ru.UTF-8 | |
206 | Ssh (Secure Shell) - это программа для "захода" (login) на удаленную | |
207 | машину и для выполнения команд на удаленной машине. Она предназначена | |
208 | для замены rlogin и rsh и обеспечивает безопасную шифрованную | |
209 | коммуникацию между двумя хостами в сети, являющейся небезопасной. | |
210 | Соединения X11 и любые порты TCP/IP могут также быть проведены через | |
211 | безопасный канал. | |
212 | ||
213 | OpenSSH - это переделка командой разработчиков OpenBSD последней | |
214 | свободной версии SSH, доведенная до современного состояния в терминах | |
215 | уровня безопасности и поддерживаемых возможностей. Все патентованные | |
216 | алгоритмы вынесены в отдельные библиотеки (OpenSSL). | |
217 | ||
218 | Этот пакет содержит файлы, необходимые как для клиента, так и для | |
219 | сервера OpenSSH. Вам нужно будет установить еще openssh-clients, | |
220 | openssh-server, или оба пакета. | |
221 | ||
222 | %description -l uk.UTF-8 | |
223 | Ssh (Secure Shell) - це програма для "заходу" (login) до віддаленої | |
224 | машини та для виконання команд на віддаленій машині. Вона призначена | |
225 | для заміни rlogin та rsh і забезпечує безпечну шифровану комунікацію | |
226 | між двома хостами в мережі, яка не є безпечною. З'єднання X11 та | |
227 | довільні порти TCP/IP можуть також бути проведені через безпечний | |
228 | канал. | |
229 | ||
230 | OpenSSH - це переробка командою розробників OpenBSD останньої вільної | |
231 | версії SSH, доведена до сучасного стану в термінах рівня безпеки та | |
232 | підтримуваних можливостей. Всі патентовані алгоритми винесені до | |
233 | окремих бібліотек (OpenSSL). | |
234 | ||
235 | Цей пакет містить файли, необхідні як для клієнта, так і для сервера | |
236 | OpenSSH. Вам потрібно буде ще встановити openssh-clients, | |
237 | openssh-server, чи обидва пакети. | |
cb086001 | 238 | |
52000378 AF |
239 | %package clients |
240 | Summary: OpenSSH Secure Shell protocol clients | |
25e16946 ER |
241 | Summary(es.UTF-8): Clientes de OpenSSH |
242 | Summary(pl.UTF-8): Klienci protokołu Secure Shell | |
243 | Summary(pt_BR.UTF-8): Clientes do OpenSSH | |
244 | Summary(ru.UTF-8): OpenSSH - клиенты протокола Secure Shell | |
245 | Summary(uk.UTF-8): OpenSSH - клієнти протоколу Secure Shell | |
52000378 | 246 | Group: Applications/Networking |
f1608a0c | 247 | Requires: %{name} |
516496e1 | 248 | Provides: ssh-clients |
a14c109c | 249 | Obsoletes: ssh-clients |
6fe24471 | 250 | |
52000378 AF |
251 | %description clients |
252 | Ssh (Secure Shell) a program for logging into a remote machine and for | |
11530f15 | 253 | executing commands in a remote machine. It is intended to replace |
254 | rlogin and rsh, and provide secure encrypted communications between | |
255 | two untrusted hosts over an insecure network. X11 connections and | |
256 | arbitrary TCP/IP ports can also be forwarded over the secure channel. | |
6fe24471 | 257 | |
11530f15 | 258 | OpenSSH is OpenBSD's rework of the last free version of SSH, bringing |
259 | it up to date in terms of security and features, as well as removing | |
260 | all patented algorithms to seperate libraries (OpenSSL). | |
52000378 | 261 | |
11530f15 | 262 | This package includes the clients necessary to make encrypted |
263 | connections to SSH servers. | |
52000378 | 264 | |
84ae85a3 | 265 | %description clients -l es.UTF-8 |
6c34819e | 266 | Este paquete incluye los clientes que se necesitan para hacer |
267 | conexiones codificadas con servidores SSH. | |
268 | ||
84ae85a3 JR |
269 | %description clients -l pl.UTF-8 |
270 | Ssh (Secure Shell) to program służący do logowania się na zdalną | |
271 | maszynę i uruchamiania na niej aplikacji. W zamierzeniu openssh ma | |
272 | zastąpić rlogin, rsh i dostarczyć bezpieczne, szyfrowane połączenie | |
273 | pomiędzy dwoma hostami. | |
93e2d77c | 274 | |
84ae85a3 | 275 | Ten pakiet zawiera klientów służących do łączenia się z serwerami SSH. |
93e2d77c | 276 | |
84ae85a3 JR |
277 | %description clients -l pt_BR.UTF-8 |
278 | Esse pacote inclui os clientes necessários para fazer conexões | |
6c34819e | 279 | encriptadas com servidores SSH. |
280 | ||
84ae85a3 JR |
281 | %description clients -l ru.UTF-8 |
282 | Ssh (Secure Shell) - это программа для "захода" (login) на удаленную | |
283 | машину и для выполнения команд на удаленной машине. | |
cb086001 | 284 | |
84ae85a3 JR |
285 | Этот пакет содержит программы-клиенты, необходимые для установления |
286 | зашифрованных соединений с серверами SSH. | |
cb086001 | 287 | |
84ae85a3 JR |
288 | %description clients -l uk.UTF-8 |
289 | Ssh (Secure Shell) - це програма для "заходу" (login) до віддаленої | |
290 | машини та для виконання команд на віддаленій машині. | |
cb086001 | 291 | |
84ae85a3 JR |
292 | Цей пакет містить програми-клієнти, необхідні для встановлення |
293 | зашифрованих з'єднань з серверами SSH. | |
cb086001 | 294 | |
8a7ba6eb AM |
295 | %package clients-agent-profile_d |
296 | Summary: OpenSSH Secure Shell agent init script | |
4944be5f | 297 | Summary(pl.UTF-8): Skrypt startowy agenta OpenSSH |
8a7ba6eb AM |
298 | Group: Applications/Networking |
299 | Requires: %{name}-clients = %{epoch}:%{version}-%{release} | |
300 | ||
301 | %description clients-agent-profile_d | |
302 | profile.d scripts for starting SSH agent. | |
303 | ||
4944be5f JB |
304 | %description clients-agent-profile_d -l pl.UTF-8 |
305 | Skrypty profile.d do uruchamiania agenta SSH. | |
306 | ||
8a7ba6eb AM |
307 | %package clients-agent-xinitrc |
308 | Summary: OpenSSH Secure Shell agent init script | |
309 | Summary(pl.UTF-8): Skrypt inicjujący agenta ssh przez xinitrc | |
310 | Group: Applications/Networking | |
311 | Requires: %{name}-clients-agent-profile_d = %{epoch}:%{version}-%{release} | |
312 | Requires: xinitrc | |
313 | ||
314 | %description clients-agent-xinitrc | |
315 | xinitrc scripts for starting SSH agent. | |
316 | ||
4944be5f JB |
317 | %description clients-agent-xinitrc -l pl.UTF-8 |
318 | Skrypty xinitrc do uruchamiania agenta SSH. | |
8a7ba6eb | 319 | |
52000378 AF |
320 | %package server |
321 | Summary: OpenSSH Secure Shell protocol server (sshd) | |
25e16946 ER |
322 | Summary(de.UTF-8): OpenSSH Secure Shell Protocol-Server (sshd) |
323 | Summary(es.UTF-8): Servidor OpenSSH para comunicaciones codificadas | |
324 | Summary(fr.UTF-8): Serveur de protocole du shell sécurisé OpenSSH (sshd) | |
325 | Summary(it.UTF-8): Server OpenSSH per il protocollo Secure Shell (sshd) | |
326 | Summary(pl.UTF-8): Serwer protokołu Secure Shell (sshd) | |
327 | Summary(pt.UTF-8): Servidor do protocolo 'Secure Shell' OpenSSH (sshd) | |
328 | Summary(pt_BR.UTF-8): Servidor OpenSSH para comunicações encriptadas | |
329 | Summary(ru.UTF-8): OpenSSH - сервер протокола Secure Shell (sshd) | |
330 | Summary(uk.UTF-8): OpenSSH - сервер протоколу Secure Shell (sshd) | |
52000378 | 331 | Group: Networking/Daemons |
2ebfbf87 | 332 | Requires(post): /sbin/chkconfig |
40cb2e83 | 333 | Requires(post): grep |
0a069c2e | 334 | Requires(post,preun): /sbin/chkconfig |
9b604401 | 335 | Requires(postun): /usr/sbin/userdel |
0a069c2e ER |
336 | Requires(pre): /bin/id |
337 | Requires(pre): /usr/sbin/useradd | |
338 | Requires: %{name} = %{epoch}:%{version}-%{release} | |
44144fb7 ER |
339 | # remove in 6.0, kept for flawless upgrade |
340 | Requires: %{name}-server-ldap = %{epoch}:%{version}-%{release} | |
2ebfbf87 | 341 | Requires: pam >= %{pam_ver} |
c0f446a0 | 342 | Requires: rc-scripts >= 0.4.3.0 |
0a069c2e | 343 | Requires: util-linux |
0d5b2bd4 | 344 | Suggests: /bin/login |
516496e1 ER |
345 | Provides: ssh-server |
346 | Provides: user(sshd) | |
52000378 AF |
347 | |
348 | %description server | |
349 | Ssh (Secure Shell) a program for logging into a remote machine and for | |
11530f15 | 350 | executing commands in a remote machine. It is intended to replace |
351 | rlogin and rsh, and provide secure encrypted communications between | |
352 | two untrusted hosts over an insecure network. X11 connections and | |
353 | arbitrary TCP/IP ports can also be forwarded over the secure channel. | |
52000378 | 354 | |
11530f15 | 355 | OpenSSH is OpenBSD's rework of the last free version of SSH, bringing |
356 | it up to date in terms of security and features, as well as removing | |
357 | all patented algorithms to seperate libraries (OpenSSL). | |
52000378 | 358 | |
11530f15 | 359 | This package contains the secure shell daemon. The sshd is the server |
360 | part of the secure shell protocol and allows ssh clients to connect to | |
361 | your host. | |
6fe24471 | 362 | |
84ae85a3 | 363 | %description server -l de.UTF-8 |
aebfac88 JB |
364 | Dieses Paket installiert den sshd, den Server-Teil der OpenSSH. |
365 | ||
84ae85a3 | 366 | %description server -l es.UTF-8 |
6c34819e | 367 | Este paquete contiene el servidor SSH. sshd es la parte servidor del |
368 | protocolo secure shell y permite que clientes ssh se conecten a su | |
369 | servidor. | |
370 | ||
84ae85a3 | 371 | %description server -l fr.UTF-8 |
aebfac88 JB |
372 | Ce paquetage installe le 'sshd', partie serveur de OpenSSH. |
373 | ||
84ae85a3 | 374 | %description server -l it.UTF-8 |
aebfac88 JB |
375 | Questo pacchetto installa sshd, il server di OpenSSH. |
376 | ||
84ae85a3 JR |
377 | %description server -l pl.UTF-8 |
378 | Ssh (Secure Shell) to program służący do logowania się na zdalną | |
379 | maszynę i uruchamiania na niej aplikacji. W zamierzeniu openssh ma | |
380 | zastąpić rlogin, rsh i dostarczyć bezpieczne, szyfrowane połączenie | |
381 | pomiędzy dwoma hostami. | |
93e2d77c | 382 | |
84ae85a3 | 383 | Ten pakiet zawiera serwer sshd (do którego mogą łączyć się klienci |
11530f15 | 384 | ssh). |
93e2d77c | 385 | |
84ae85a3 | 386 | %description server -l pt.UTF-8 |
aebfac88 JB |
387 | Este pacote intala o sshd, o servidor do OpenSSH. |
388 | ||
84ae85a3 JR |
389 | %description server -l pt_BR.UTF-8 |
390 | Esse pacote contém o servidor SSH. O sshd é a parte servidor do | |
6c34819e | 391 | protocolo secure shell e permite que clientes ssh se conectem ao seu |
392 | host. | |
393 | ||
84ae85a3 JR |
394 | %description server -l ru.UTF-8 |
395 | Ssh (Secure Shell) - это программа для "захода" (login) на удаленную | |
396 | машину и для выполнения команд на удаленной машине. | |
cb086001 | 397 | |
84ae85a3 JR |
398 | Этот пакет содержит sshd - "демон" Secure Shell. sshd - это серверная |
399 | часть протокола Secure Shell, позволяющая клиентам ssh соединяться с | |
400 | вашим хостом. | |
cb086001 | 401 | |
84ae85a3 JR |
402 | %description server -l uk.UTF-8 |
403 | Ssh (Secure Shell) - це програма для "заходу" (login) до віддаленої | |
404 | машини та для виконання команд на віддаленій машині. | |
cb086001 | 405 | |
84ae85a3 JR |
406 | Цей пакет містить sshd - "демон" Secure Shell. sshd - це серверна |
407 | частина протоколу Secure Shell, яка дозволяє клієнтам ssh зв'язуватись | |
408 | з вашим хостом. | |
cb086001 | 409 | |
44144fb7 ER |
410 | %package server-ldap |
411 | Summary: A LDAP support for open source SSH server daemon | |
bb7a58b9 | 412 | Summary(pl.UTF-8): Wsparcie LDAP dla serwera OpenSSH |
44144fb7 | 413 | Group: Daemons |
1a0628c8 | 414 | Requires: %{name} = %{epoch}:%{version}-%{release} |
44144fb7 ER |
415 | |
416 | %description server-ldap | |
417 | OpenSSH LDAP backend is a way how to distribute the authorized tokens | |
418 | among the servers in the network. | |
419 | ||
bb7a58b9 JB |
420 | %description server-ldap -l pl.UTF-8 |
421 | Backend LDAP dla OpenSSH to metoda rozprowadzania autoryzowanych | |
422 | tokenów między serwerami w sieci. | |
423 | ||
c0f446a0 JK |
424 | %package server-upstart |
425 | Summary: Upstart job description for OpenSSH server | |
426 | Summary(pl.UTF-8): Opis zadania Upstart dla serwera OpenSSH | |
427 | Group: Daemons | |
428 | Requires: %{name}-server = %{epoch}:%{version}-%{release} | |
429 | Requires: upstart >= 0.6 | |
74f7fb64 | 430 | Conflicts: syslog-ng < 3.2.4-1 |
c0f446a0 JK |
431 | |
432 | %description server-upstart | |
433 | Upstart job description for OpenSSH. | |
434 | ||
435 | %description server-upstart -l pl.UTF-8 | |
436 | Opis zadania Upstart dla OpenSSH. | |
437 | ||
6e70f4f7 | 438 | %package gnome-askpass |
52000378 | 439 | Summary: OpenSSH GNOME passphrase dialog |
25e16946 ER |
440 | Summary(de.UTF-8): OpenSSH GNOME Passwort-Dialog |
441 | Summary(es.UTF-8): Diálogo para introducción de passphrase para GNOME | |
442 | Summary(fr.UTF-8): Dialogue pass-phrase GNOME d'OpenSSH | |
443 | Summary(it.UTF-8): Finestra di dialogo GNOME per la frase segreta di OpenSSH | |
444 | Summary(pl.UTF-8): Odpytywacz hasła OpenSSH dla GNOME | |
445 | Summary(pt.UTF-8): Diálogo de pedido de senha para GNOME do OpenSSH | |
446 | Summary(pt_BR.UTF-8): Diálogo para entrada de passphrase para GNOME | |
447 | Summary(ru.UTF-8): OpenSSH - диалог ввода ключевой фразы (passphrase) для GNOME | |
448 | Summary(uk.UTF-8): OpenSSH - діалог вводу ключової фрази (passphrase) для GNOME | |
52000378 | 449 | Group: Applications/Networking |
96f686c2 | 450 | Requires: %{name} = %{epoch}:%{version}-%{release} |
f937b661 | 451 | Obsoletes: openssh-askpass |
0a069c2e ER |
452 | Obsoletes: ssh-askpass |
453 | Obsoletes: ssh-extras | |
52000378 | 454 | |
6e70f4f7 | 455 | %description gnome-askpass |
52000378 | 456 | Ssh (Secure Shell) a program for logging into a remote machine and for |
11530f15 | 457 | executing commands in a remote machine. It is intended to replace |
458 | rlogin and rsh, and provide secure encrypted communications between | |
459 | two untrusted hosts over an insecure network. X11 connections and | |
460 | arbitrary TCP/IP ports can also be forwarded over the secure channel. | |
52000378 | 461 | |
11530f15 | 462 | OpenSSH is OpenBSD's rework of the last free version of SSH, bringing |
463 | it up to date in terms of security and features, as well as removing | |
464 | all patented algorithms to seperate libraries (OpenSSL). | |
52000378 AF |
465 | |
466 | This package contains the GNOME passphrase dialog. | |
467 | ||
84ae85a3 JR |
468 | %description gnome-askpass -l es.UTF-8 |
469 | Este paquete contiene un programa que abre una caja de diálogo para | |
6c34819e | 470 | entrada de passphrase en GNOME. |
471 | ||
84ae85a3 JR |
472 | %description gnome-askpass -l pl.UTF-8 |
473 | Ssh (Secure Shell) to program służący do logowania się na zdalną | |
474 | maszynę i uruchamiania na niej aplikacji. W zamierzeniu openssh ma | |
475 | zastąpić rlogin, rsh i dostarczyć bezpieczne, szyfrowane połączenie | |
476 | pomiędzy dwoma hostami. | |
93e2d77c | 477 | |
84ae85a3 | 478 | Ten pakiet zawiera ,,odpytywacz hasła'' dla GNOME. |
93e2d77c | 479 | |
84ae85a3 JR |
480 | %description gnome-askpass -l pt_BR.UTF-8 |
481 | Esse pacote contém um programa que abre uma caixa de diálogo para | |
6c34819e | 482 | entrada de passphrase no GNOME. |
483 | ||
84ae85a3 JR |
484 | %description gnome-askpass -l ru.UTF-8 |
485 | Ssh (Secure Shell) - это программа для "захода" (login) на удаленную | |
486 | машину и для выполнения команд на удаленной машине. | |
cb086001 | 487 | |
84ae85a3 | 488 | Этот пакет содержит диалог ввода ключевой фразы для использования под |
cb086001 | 489 | GNOME. |
490 | ||
84ae85a3 JR |
491 | %description gnome-askpass -l uk.UTF-8 |
492 | Ssh (Secure Shell) - це програма для "заходу" (login) до віддаленої | |
493 | машини та для виконання команд на віддаленій машині. | |
cb086001 | 494 | |
84ae85a3 | 495 | Цей пакет містить діалог вводу ключової фрази для використання під |
cb086001 | 496 | GNOME. |
497 | ||
b32891d6 JR |
498 | %package -n openldap-schema-openssh-lpk |
499 | Summary: OpenSSH LDAP Public Key schema | |
500 | Summary(pl.UTF-8): Schemat klucza publicznego LDAP dla OpenSSH | |
501 | Group: Networking/Daemons | |
502 | Requires(post,postun): sed >= 4.0 | |
503 | Requires: openldap-servers | |
504 | ||
505 | %description -n openldap-schema-openssh-lpk | |
506 | This package contains OpenSSH LDAP Public Key schema for openldap. | |
507 | ||
508 | %description -n openldap-schema-openssh-lpk -l pl.UTF-8 | |
0d5b2bd4 ER |
509 | Ten pakiet zawiera schemat klucza publicznego LDAP dla OpenSSH dla |
510 | openldap-a. | |
b32891d6 | 511 | |
52000378 | 512 | %prep |
ecf377a3 | 513 | %setup -q |
2ebfbf87 | 514 | %{?with_kerberos5:%patch100 -p1} |
4946f6e5 | 515 | %patch0 -p1 |
1aca01a4 | 516 | %patch2 -p1 |
200ba837 | 517 | %patch3 -p1 |
8e00389d ER |
518 | %patch4 -p1 |
519 | %patch5 -p1 | |
520 | %patch8 -p1 | |
501aed94 | 521 | %patch6 -p1 |
108bb9ae | 522 | %patch7 -p1 |
516496e1 | 523 | %{?with_hpn:%patch9 -p1} |
8d59ede4 | 524 | %patch10 -p1 |
100234b3 | 525 | %patch11 -p1 |
35844bbb | 526 | %patch12 -p1 |
92dc7c43 | 527 | %patch13 -p1 |
eefe27ae | 528 | %patch14 -p1 |
52000378 | 529 | |
57f5c94e | 530 | cp -p %{SOURCE3} sshd.pam |
95191792 | 531 | install -p %{SOURCE2} sshd.init |
55c2af60 | 532 | |
a42c5034 ER |
533 | %if "%{pld_release}" == "ac" |
534 | # fix for missing x11.pc | |
535 | %{__sed} -i -e '/pkg-config/s/ x11//' contrib/Makefile | |
55c2af60 | 536 | # not present in ac, no point searching it |
57f5c94e | 537 | %{__sed} -i -e '/pam_keyinit.so/d' sshd.pam |
95191792 ER |
538 | |
539 | # openssl on ac does not have OPENSSL_HAS_ECC | |
540 | %{__sed} -i -e '/ecdsa/d' sshd.init | |
a42c5034 ER |
541 | %endif |
542 | ||
afde20c1 AM |
543 | # hack since arc4random from openbsd-compat needs symbols from libssh and vice versa |
544 | sed -i -e 's#-lssh -lopenbsd-compat#-lssh -lopenbsd-compat -lssh#g' Makefile* | |
545 | ||
8e00389d ER |
546 | grep -rl /usr/libexec/openssh/ssh-ldap-helper . | xargs \ |
547 | %{__sed} -i -e 's,/usr/libexec/openssh/ssh-ldap-helper,%{_libexecdir}/ssh-ldap-helper,' | |
548 | ||
52000378 | 549 | %build |
64f1c35c | 550 | cp /usr/share/automake/config.sub . |
0b24ec17 | 551 | %{__aclocal} |
5c76eb87 | 552 | %{__autoconf} |
501aed94 | 553 | %{__autoheader} |
37aa5700 | 554 | CPPFLAGS="-DCHROOT" |
52000378 | 555 | %configure \ |
c59fae24 | 556 | PERL=%{__perl} \ |
26d23d17 JB |
557 | --disable-strip \ |
558 | --enable-utmpx \ | |
559 | --enable-wtmpx \ | |
93e2d77c | 560 | --with-4in6 \ |
26d23d17 JB |
561 | %{?with_audit:--with-audit=linux} \ |
562 | --with-ipaddr-display \ | |
4a5c0c7d | 563 | %{?with_kerberos5:--with-kerberos5=/usr} \ |
8e00389d | 564 | --with-ldap%{!?with_ldap:=no} \ |
26d23d17 JB |
565 | %{?with_libedit:--with-libedit} \ |
566 | --with-mantype=man \ | |
567 | --with-md5-passwords \ | |
568 | --with-pam \ | |
108bb9ae | 569 | --with-authorized-keys-command \ |
05fbd2e9 | 570 | --with-pid-dir=%{_localstatedir}/run \ |
26d23d17 JB |
571 | --with-privsep-path=%{_privsepdir} \ |
572 | %{?with_selinux:--with-selinux} \ | |
573 | --with-tcp-wrappers \ | |
2ebfbf87 | 574 | %if "%{pld_release}" == "ac" |
26d23d17 | 575 | --with-xauth=/usr/X11R6/bin/xauth |
2ebfbf87 | 576 | %else |
26d23d17 | 577 | --with-xauth=%{_bindir}/xauth |
2ebfbf87 | 578 | %endif |
82f989ae | 579 | |
b8002dec | 580 | echo '#define LOGIN_PROGRAM "/bin/login"' >>config.h |
f9bf943b | 581 | |
100832a0 | 582 | %{__make} |
475ef6df | 583 | |
40cb2e83 | 584 | cd contrib |
9cfed0b2 | 585 | %if %{with gnome} |
40cb2e83 JB |
586 | %{__make} gnome-ssh-askpass1 \ |
587 | CC="%{__cc} %{rpmldflags} %{rpmcflags}" | |
588 | %endif | |
9cfed0b2 | 589 | %if %{with gtk} |
40cb2e83 JB |
590 | %{__make} gnome-ssh-askpass2 \ |
591 | CC="%{__cc} %{rpmldflags} %{rpmcflags}" | |
592 | %endif | |
6fe24471 AF |
593 | |
594 | %install | |
595 | rm -rf $RPM_BUILD_ROOT | |
c0f446a0 | 596 | install -d $RPM_BUILD_ROOT{%{_sysconfdir},/etc/{init,pam.d,rc.d/init.d,sysconfig,security,env.d}} \ |
b32891d6 | 597 | $RPM_BUILD_ROOT{%{_libexecdir}/ssh,%{schemadir}} |
8a7ba6eb | 598 | install -d $RPM_BUILD_ROOT/etc/{profile.d,X11/xinit/xinitrc.d} |
52000378 | 599 | |
9a2a459a PG |
600 | %{__make} install \ |
601 | DESTDIR=$RPM_BUILD_ROOT | |
0d32b20f | 602 | |
486d736c | 603 | bzip2 -dc %{SOURCE1} | tar xf - -C $RPM_BUILD_ROOT%{_mandir} |
40cb2e83 | 604 | |
95191792 | 605 | install -p sshd.init $RPM_BUILD_ROOT/etc/rc.d/init.d/sshd |
55c2af60 ER |
606 | cp -p sshd.pam $RPM_BUILD_ROOT/etc/pam.d/sshd |
607 | cp -p %{SOURCE4} $RPM_BUILD_ROOT/etc/sysconfig/sshd | |
608 | cp -p %{SOURCE5} $RPM_BUILD_ROOT/etc/profile.d | |
486d736c | 609 | ln -sf /etc/profile.d/ssh-agent.sh $RPM_BUILD_ROOT/etc/X11/xinit/xinitrc.d/ssh-agent.sh |
55c2af60 ER |
610 | cp -p %{SOURCE6} $RPM_BUILD_ROOT%{_sysconfdir} |
611 | cp -p %{SOURCE7} $RPM_BUILD_ROOT%{schemadir} | |
612 | cp -p %{SOURCE8} $RPM_BUILD_ROOT/etc/init/sshd.conf | |
c0f446a0 | 613 | |
9cfed0b2 | 614 | %if %{with gnome} |
55c2af60 | 615 | install -p contrib/gnome-ssh-askpass1 $RPM_BUILD_ROOT%{_libexecdir}/ssh/ssh-askpass |
40cb2e83 | 616 | %endif |
9cfed0b2 | 617 | %if %{with gtk} |
55c2af60 | 618 | install -p contrib/gnome-ssh-askpass2 $RPM_BUILD_ROOT%{_libexecdir}/ssh/ssh-askpass |
1d1e6997 PG |
619 | %endif |
620 | %if %{with gnome} || %{with gtk} | |
6157007b | 621 | cat << 'EOF' >$RPM_BUILD_ROOT/etc/env.d/GNOME_SSH_ASKPASS_GRAB_SERVER |
1d1e6997 PG |
622 | #GNOME_SSH_ASKPASS_GRAB_SERVER="true" |
623 | EOF | |
6157007b | 624 | cat << 'EOF' >$RPM_BUILD_ROOT/etc/env.d/GNOME_SSH_ASKPASS_GRAB_POINTER |
1d1e6997 PG |
625 | #GNOME_SSH_ASKPASS_GRAB_POINTER="true" |
626 | EOF | |
4ae0bc0d | 627 | ln -s %{_libexecdir}/ssh/ssh-askpass $RPM_BUILD_ROOT%{_libexecdir}/ssh-askpass |
40cb2e83 | 628 | %endif |
6e70f4f7 | 629 | |
55c2af60 ER |
630 | install -p contrib/ssh-copy-id $RPM_BUILD_ROOT%{_bindir} |
631 | cp -p contrib/ssh-copy-id.1 $RPM_BUILD_ROOT%{_mandir}/man1 | |
0906c8d0 | 632 | |
26d23d17 | 633 | %{__rm} $RPM_BUILD_ROOT%{_mandir}/man1/slogin.1 |
5f72fe6f | 634 | echo ".so ssh.1" > $RPM_BUILD_ROOT%{_mandir}/man1/slogin.1 |
41897191 | 635 | |
ffbc041f | 636 | touch $RPM_BUILD_ROOT/etc/security/blacklist.sshd |
643dc12f | 637 | |
b8002dec | 638 | cat << 'EOF' > $RPM_BUILD_ROOT/etc/env.d/SSH_ASKPASS |
1d1e6997 PG |
639 | #SSH_ASKPASS="%{_libexecdir}/ssh-askpass" |
640 | EOF | |
641 | ||
26d23d17 | 642 | %{__rm} $RPM_BUILD_ROOT%{_mandir}/README.openssh-non-english-man-pages |
be063a4e | 643 | %{__rm} $RPM_BUILD_ROOT%{_sysconfdir}/ldap.conf |
92815192 | 644 | |
6fe24471 AF |
645 | %clean |
646 | rm -rf $RPM_BUILD_ROOT | |
647 | ||
b259ae2c ER |
648 | %post clients |
649 | %env_update | |
650 | ||
651 | %postun clients | |
652 | %env_update | |
653 | ||
654 | %post gnome-askpass | |
655 | %env_update | |
656 | ||
657 | %postun gnome-askpass | |
658 | %env_update | |
659 | ||
8a304ceb | 660 | %pre server |
0225d3b8 | 661 | %useradd -P %{name}-server -u 40 -d %{_privsepdir} -s /bin/false -c "OpenSSH PrivSep User" -g nobody sshd |
4c8ae2f8 | 662 | |
52000378 | 663 | %post server |
d7fde396 | 664 | /sbin/chkconfig --add sshd |
fb0e16d1 | 665 | %service sshd reload "OpenSSH Daemon" |
40cb2e83 JB |
666 | if ! grep -qs ssh /etc/security/passwd.conf ; then |
667 | umask 022 | |
ec00afd0 JR |
668 | echo "ssh" >> /etc/security/passwd.conf |
669 | fi | |
6fe24471 | 670 | |
52000378 | 671 | %preun server |
d7fde396 | 672 | if [ "$1" = "0" ]; then |
b054de44 | 673 | %service sshd stop |
d7fde396 | 674 | /sbin/chkconfig --del sshd |
675 | fi | |
6fe24471 | 676 | |
9b604401 JB |
677 | %postun server |
678 | if [ "$1" = "0" ]; then | |
5f4ffc90 | 679 | %userremove sshd |
9b604401 JB |
680 | fi |
681 | ||
e0cf2666 | 682 | %triggerpostun server -- %{name}-server < 2:5.9p1-1 |
3906e3c0 ER |
683 | # lpk.patch to ldap.patch |
684 | if grep -qE '^(UseLPK|Lpk)' %{_sysconfdir}/sshd_config; then | |
685 | echo >&2 "Migrating LPK patch to LDAP patch" | |
686 | cp -f %{_sysconfdir}/sshd_config{,.rpmorig} | |
687 | %{__sed} -i -e ' | |
688 | # disable old configs | |
689 | # just UseLPK/LkpLdapConf supported for now | |
690 | s/^UseLPK/## Obsolete &/ | |
ac8426db | 691 | s/^Lpk/## Obsolete &/ |
3906e3c0 | 692 | # Enable new ones, assumes /etc/ldap.conf defaults, see HOWTO.ldap-keys |
fb0e16d1 | 693 | /UseLPK/iAuthorizedKeysCommand %{_libexecdir}/ssh-ldap-wrapper |
3906e3c0 | 694 | ' %{_sysconfdir}/sshd_config |
fb0e16d1 | 695 | %service -q sshd reload |
3906e3c0 ER |
696 | fi |
697 | ||
c0f446a0 JK |
698 | %post server-upstart |
699 | %upstart_post sshd | |
700 | ||
701 | %postun server-upstart | |
702 | %upstart_postun sshd | |
703 | ||
7073aeeb JR |
704 | %post -n openldap-schema-openssh-lpk |
705 | %openldap_schema_register %{schemadir}/openssh-lpk.schema | |
706 | %service -q ldap restart | |
707 | ||
708 | %postun -n openldap-schema-openssh-lpk | |
709 | if [ "$1" = "0" ]; then | |
710 | %openldap_schema_unregister %{schemadir}/openssh-lpk.schema | |
711 | %service -q ldap restart | |
712 | fi | |
713 | ||
6fe24471 | 714 | %files |
52000378 | 715 | %defattr(644,root,root,755) |
afde20c1 | 716 | %doc TODO README OVERVIEW CREDITS Change* |
a6eef44c | 717 | %attr(755,root,root) %{_bindir}/ssh-key* |
35844bbb | 718 | %attr(755,root,root) %{_bindir}/ssh-vulnkey* |
a6eef44c | 719 | %{_mandir}/man1/ssh-key*.1* |
35844bbb | 720 | %{_mandir}/man1/ssh-vulnkey*.1* |
52000378 | 721 | %dir %{_sysconfdir} |
9df62d0f | 722 | %dir %{_libexecdir} |
52000378 AF |
723 | |
724 | %files clients | |
725 | %defattr(644,root,root,755) | |
96f686c2 JB |
726 | %attr(755,root,root) %{_bindir}/ssh |
727 | %attr(755,root,root) %{_bindir}/slogin | |
728 | %attr(755,root,root) %{_bindir}/sftp | |
729 | %attr(755,root,root) %{_bindir}/ssh-agent | |
730 | %attr(755,root,root) %{_bindir}/ssh-add | |
0906c8d0 | 731 | %attr(755,root,root) %{_bindir}/ssh-copy-id |
96f686c2 | 732 | %attr(755,root,root) %{_bindir}/scp |
794e0987 JB |
733 | %config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/ssh_config |
734 | %config(noreplace,missingok) %verify(not md5 mtime size) /etc/env.d/SSH_ASKPASS | |
52000378 AF |
735 | %{_mandir}/man1/scp.1* |
736 | %{_mandir}/man1/ssh.1* | |
41897191 | 737 | %{_mandir}/man1/slogin.1* |
a6eef44c | 738 | %{_mandir}/man1/sftp.1* |
52000378 AF |
739 | %{_mandir}/man1/ssh-agent.1* |
740 | %{_mandir}/man1/ssh-add.1* | |
0906c8d0 | 741 | %{_mandir}/man1/ssh-copy-id.1* |
902cef13 | 742 | %{_mandir}/man5/ssh_config.5* |
2b7669a6 | 743 | %lang(it) %{_mandir}/it/man1/ssh.1* |
744 | %lang(it) %{_mandir}/it/man5/ssh_config.5* | |
745 | %lang(pl) %{_mandir}/pl/man1/scp.1* | |
746 | %lang(zh_CN) %{_mandir}/zh_CN/man1/scp.1* | |
ec82f607 JB |
747 | |
748 | # for host-based auth (suid required for accessing private host key) | |
749 | #%attr(4755,root,root) %{_libexecdir}/ssh-keysign | |
750 | #%{_mandir}/man8/ssh-keysign.8* | |
52000378 | 751 | |
8a7ba6eb AM |
752 | %files clients-agent-profile_d |
753 | %defattr(644,root,root,755) | |
754 | %config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/ssh-agent.conf | |
755 | %attr(755,root,root) /etc/profile.d/ssh-agent.sh | |
756 | ||
757 | %files clients-agent-xinitrc | |
758 | %defattr(644,root,root,755) | |
759 | %attr(755,root,root) /etc/X11/xinit/xinitrc.d/ssh-agent.sh | |
760 | ||
52000378 AF |
761 | %files server |
762 | %defattr(644,root,root,755) | |
763 | %attr(755,root,root) %{_sbindir}/sshd | |
a6eef44c | 764 | %attr(755,root,root) %{_libexecdir}/sftp-server |
ad852e00 | 765 | %attr(755,root,root) %{_libexecdir}/ssh-keysign |
50835229 | 766 | %attr(755,root,root) %{_libexecdir}/ssh-pkcs11-helper |
52000378 | 767 | %{_mandir}/man8/sshd.8* |
a6eef44c | 768 | %{_mandir}/man8/sftp-server.8* |
ad852e00 | 769 | %{_mandir}/man8/ssh-keysign.8* |
50835229 | 770 | %{_mandir}/man8/ssh-pkcs11-helper.8* |
902cef13 | 771 | %{_mandir}/man5/sshd_config.5* |
78aa4c3c | 772 | %{_mandir}/man5/moduli.5* |
794e0987 JB |
773 | %attr(640,root,root) %config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/sshd_config |
774 | %attr(640,root,root) %config(noreplace) %verify(not md5 mtime size) /etc/pam.d/sshd | |
634d69b4 | 775 | %attr(640,root,root) %{_sysconfdir}/moduli |
52000378 | 776 | %attr(754,root,root) /etc/rc.d/init.d/sshd |
794e0987 JB |
777 | %attr(640,root,root) %config(noreplace) %verify(not md5 mtime size) /etc/sysconfig/sshd |
778 | %attr(640,root,root) %config(noreplace) %verify(not md5 mtime size) /etc/security/blacklist.sshd | |
52000378 | 779 | |
44144fb7 ER |
780 | %if %{with ldap} |
781 | %files server-ldap | |
782 | %defattr(644,root,root,755) | |
783 | %doc HOWTO.ldap-keys ldap.conf | |
784 | %attr(755,root,root) %{_libexecdir}/ssh-ldap-helper | |
785 | %attr(755,root,root) %{_libexecdir}/ssh-ldap-wrapper | |
786 | %{_mandir}/man5/ssh-ldap.conf.5* | |
787 | %{_mandir}/man8/ssh-ldap-helper.8* | |
788 | %endif | |
789 | ||
0d32b20f | 790 | %if %{with gnome} || %{with gtk} |
40cb2e83 JB |
791 | %files gnome-askpass |
792 | %defattr(644,root,root,755) | |
794e0987 | 793 | %config(noreplace,missingok) %verify(not md5 mtime size) /etc/env.d/GNOME_SSH_ASKPASS* |
40cb2e83 JB |
794 | %dir %{_libexecdir}/ssh |
795 | %attr(755,root,root) %{_libexecdir}/ssh/ssh-askpass | |
4ae0bc0d | 796 | %attr(755,root,root) %{_libexecdir}/ssh-askpass |
40cb2e83 | 797 | %endif |
b32891d6 JR |
798 | |
799 | %if %{with ldap} | |
800 | %files -n openldap-schema-openssh-lpk | |
801 | %defattr(644,root,root,755) | |
802 | %{schemadir}/openssh-lpk.schema | |
803 | %endif | |
c0f446a0 | 804 | |
4ec733f6 | 805 | %if "%{pld_release}" != "ti" |
c0f446a0 JK |
806 | %files server-upstart |
807 | %defattr(644,root,root,755) | |
808 | %config(noreplace) %verify(not md5 mtime size) /etc/init/sshd.conf | |
4ec733f6 | 809 | %endif |