]>
Commit | Line | Data |
---|---|---|
05bbf0a8 | 1 | %define modulename pam_mount |
0a5dd767 | 2 | Summary: A PAM module that can mount remote volumes for a user session |
8efc9570 | 3 | Summary(pl.UTF-8): Moduł PAM, pozwalający montować zdalne zasoby na czas sesji użytkownika |
05bbf0a8 | 4 | Name: pam-%{modulename} |
51be1a6f | 5 | Version: 0.18 |
6d2c6505 | 6 | Release: 2 |
5d6ea8fa | 7 | Epoch: 0 |
0a5dd767 | 8 | License: LGPL |
9 | Group: Base | |
51be1a6f | 10 | Source0: http://dl.sourceforge.net/pam-mount/%{modulename}-%{version}.tar.bz2 |
11 | # Source0-md5: c2e2a7eee61596a8c72d79d8bba3538d | |
16ec8df6 | 12 | URL: http://pam-mount.sourceforge.net/ |
0a5dd767 | 13 | BuildRequires: autoconf |
14 | BuildRequires: automake | |
16ec8df6 | 15 | BuildRequires: glib2-devel |
0a5dd767 | 16 | BuildRequires: libtool |
dc450ba1 | 17 | BuildRequires: openssl-devel >= 0.9.7d |
0a5dd767 | 18 | BuildRequires: pam-devel |
16ec8df6 | 19 | BuildRequires: pkgconfig |
2c5a8a23 | 20 | BuildRequires: zlib-devel |
838d7fd9 | 21 | Obsoletes: pam_mount |
0a5dd767 | 22 | BuildRoot: %{tmpdir}/%{name}-%{version}-root-%(id -u -n) |
23 | ||
24 | %description | |
25 | This module is aimed to environments with SMB (Samba or Windows NT) | |
26 | and/or NCP (Netware or Mars-NWE) servers that Unix users want or need | |
27 | to access, and some users have / every user has private volumes in | |
28 | that servers. The module also supports mounting home directories using | |
29 | loopback encrypted filesystems (see also | |
30 | http://www.tldp.org/HOWTO/Loopback-Encrypted-Filesystem-HOWTO.html). | |
31 | - Every user can access his/her own volumes | |
32 | - The user needs to type the password just once (at login) (*) | |
33 | - The mouting process is transparent to the users | |
34 | - There is no need to keep the login passwords in any additional file | |
35 | - The volumes are unmount upon logout, so it saves system resources, | |
36 | avoiding the need of listing every every possibly useful remote volume | |
37 | in /etc/fstab or in an automount/supermount config file. This is also | |
38 | necessary for securing encrypted filesystems. | |
39 | ||
40 | (*) Obviously, the user password in the Unix system and in the remote | |
41 | servers must be the same ;) | |
42 | ||
43 | Pam_mount "understands" SMB, NCP, and encrypted loopback volumes, but | |
44 | this can be extended very easily. | |
45 | ||
8efc9570 JR |
46 | %description -l pl.UTF-8 |
47 | Przeznaczeniem tego modułu są środowiska z protokołem SMB (Samba lub | |
48 | Windows NT) i/lub NCP (Netware lub Mars-NWE), w których użytkownicy | |
49 | chcą lub potrzebują indywidualnych zasobów. Moduł ten wspiera także | |
50 | montowanie katalogów domowych z zaszyfrowanych systemów plików przy | |
51 | użyciu loopbacka (zobacz także: | |
0a5dd767 | 52 | http://www.tldp.org/HOWTO/Loopback-Encrypted-Filesystem-HOWTO.html). |
8efc9570 JR |
53 | - każdy użytkownik ma dostęp do swoich zasobów |
54 | - użytkownik musi wpisać swoje hasło tylko raz (przy logowaniu) (*) | |
55 | - proces montowania jest niewidzialny dla użytkownika | |
56 | - nie ma potrzeby trzymania hasła i loginu w żadnym dodatkowym pliku | |
57 | - katalogi są odmontowywane podczas wylogowania, co oszczędza zasoby | |
58 | systemowe, zabezpiecza przed koniecznością umieszczenia każdego | |
0a5dd767 | 59 | potrzebnego zdalnego zasobu w /etc/fstab lub w konfiguracji |
8efc9570 JR |
60 | automounta/supermounta. Jest to także konieczne do zabezpieczenia |
61 | zaszyfrowanych systemów plików. | |
0a5dd767 | 62 | |
8efc9570 | 63 | (*) Oczywiście hasło na lokalnym i zdalnym systemie musi być |
79be135b | 64 | identyczne ;) |
0a5dd767 | 65 | |
8efc9570 JR |
66 | pam_mount "rozumie" SMB, NCP oraz zaszyfrowane systemy plików po |
67 | loopbacku, ale może być rozszerzony w prosty sposób. | |
0a5dd767 | 68 | |
69 | %prep | |
05bbf0a8 | 70 | %setup -q -n %{modulename}-%{version} |
2c5a8a23 | 71 | |
0a5dd767 | 72 | %build |
73 | %{__libtoolize} | |
74 | %{__aclocal} | |
75 | %{__autoconf} | |
838d7fd9 JB |
76 | %{__autoheader} |
77 | %{__automake} | |
6d2c6505 | 78 | %configure \ |
79 | --disable-static | |
ecef6bd0 | 80 | %{__make} |
0a5dd767 | 81 | |
82 | %install | |
83 | rm -rf $RPM_BUILD_ROOT | |
16ec8df6 | 84 | install -d $RPM_BUILD_ROOT{/etc/security,/sbin} |
838d7fd9 JB |
85 | |
86 | %{__make} install \ | |
ecef6bd0 | 87 | moduledir=/%{_lib}/security \ |
838d7fd9 JB |
88 | DESTDIR=$RPM_BUILD_ROOT |
89 | ||
0a5dd767 | 90 | install config/pam_mount.conf $RPM_BUILD_ROOT/etc/security |
6d2c6505 | 91 | ln -sf /sbin/mount.crypt $RPM_BUILD_ROOT/%{_bindir}/mount.crypt |
0a5dd767 | 92 | |
6d2c6505 | 93 | rm -f $RPM_BUILD_ROOT/%{_lib}/security/pam_mount.la |
838d7fd9 | 94 | |
ce6bb920 ER |
95 | # void code on non-OpenBSD, besides broken |
96 | rm -f $RPM_BUILD_ROOT{%{_bindir}/mount_ehd,%{_mandir}/man8/mount_ehd.8} | |
97 | ||
0a5dd767 | 98 | %clean |
99 | rm -rf $RPM_BUILD_ROOT | |
100 | ||
101 | %files | |
102 | %defattr(644,root,root,755) | |
16ec8df6 | 103 | %doc AUTHORS ChangeLog FAQ NEWS README TODO |
5c97d925 | 104 | %attr(755,root,root) /%{_lib}/security/pam_mount.so |
79be135b | 105 | %config(noreplace) %verify(not md5 mtime size) /etc/security/pam_mount.conf |
6d2c6505 | 106 | %attr(755,root,root) /sbin/mount.crypt |
6f1652ad ER |
107 | %attr(755,root,root) /sbin/umount.crypt |
108 | %attr(755,root,root) %{_bindir}/autoehd | |
109 | %attr(755,root,root) %{_bindir}/mkehd | |
6d2c6505 | 110 | %attr(755,root,root) %{_bindir}/mount.crypt |
6f1652ad ER |
111 | %attr(755,root,root) %{_bindir}/passwdehd |
112 | %attr(755,root,root) %{_sbindir}/pmvarrun | |
113 | %{_mandir}/man1/mkehd.1* | |
114 | %{_mandir}/man8/autoehd.8* | |
115 | %{_mandir}/man8/mount.crypt.8* | |
6f1652ad ER |
116 | %{_mandir}/man8/pam_mount.8* |
117 | %{_mandir}/man8/passwdehd.8* | |
118 | %{_mandir}/man8/pmvarrun.8* | |
119 | %{_mandir}/man8/umount.crypt.8* |