Summary: a RFC 1413 ident protocol daemon

Name: authd

Version: 1.4.1

Release: 1.fc3

License: GPL

Group: System Environment/Daemons

Obsoletes: pidentd

Provides: pidentd = 3.2

Requires: openssl

Source0: %{name}-%{version}.tar.gz

BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root

BuildRequires: openssl-devel

%description

authd is a small and fast RFC 1413 ident protocol daemon

with both xinetd server and interactive modes that

supports IPv6 and IPv4 as well as the more popular features

of pidentd.

%prep

%setup -q

sed -i -e "s|/etc|%{_sysconfdir}|" config.h

%build

make prefix=%{_prefix}

%install

rm -rf $RPM_BUILD_ROOT

%makeinstall

install -d ${RPM_BUILD_ROOT}%{_sysconfdir}/xinetd.d

install -m 644 xinetd.conf.auth ${RPM_BUILD_ROOT}%{_sysconfdir}/xinetd.d/auth

sed -i -e 's|/usr/local|/usr|' ${RPM_BUILD_ROOT}%{_sysconfdir}/xinetd.d/auth

touch ${RPM_BUILD_ROOT}%{_sysconfdir}/ident.key

%find_lang %{name}

%clean

rm -rf $RPM_BUILD_ROOT

%post

/usr/sbin/adduser -s /sbin/nologin -r ident 2>/dev/null || true

/usr/bin/openssl rand -base64 -out %{_sysconfdir}/ident.key 32

echo CHANGE THE LINE ABOVE TO A PASSPHRASE >> %{_sysconfdir}/ident.key

/bin/chown ident:ident %{_sysconfdir}/ident.key

chmod o-rw %{_sysconfdir}/ident.key

%files -f authd.lang

%defattr(-,root,root,-)

%doc COPYING README.html rfc1413.txt

%config(noreplace) %{_sysconfdir}/xinetd.d/auth

%config %{_sysconfdir}/ident.key

%{_sbindir}/in.authd

%changelog

* Wed Jul 28 2004 Adrian Havill <havill@redhat.com> - 1.4.1-1

- only scan for ESTABLISHED connections

- extra debug output for crypto

* Mon Jul 26 2004 Adrian Havill <havill@redhat.com> - 1.4.0-1

- revise makefile; don't over-optimize as gcc can produce bad code

- ptr cleanup when multiquery and missing /proc/net/tcp*

- improve create_opt (error handling, debugging, identifiers)

- add --prefix option for matching IPv4 to IPv6

* Tue Jul 13 2004 Adrian Havill <havill@redhat.com> - 1.3.4-1

- retry reading proc with pauses to reduce false negatives

- match IPv4 addresses against IPv6 compatibility addresses

* Mon Jul 12 2004 Adrian Havill <havill@redhat.com> - 1.3.3-1

- use gnu *_unlocked stream funcs for faster I/O

* Sat Jul 10 2004 Adrian Havill <havill@redhat.com> - 1.3.2-1

- enforce rfc restriction limiting port search to the connected

  local/foreign pair

* Fri Jul 08 2004 Adrian Havill <havill@redhat.com> - 1.3.1-1

- increase default connections-per-sec/max-instances for HP

- more doc cleanup

- remove unnecessary rootdir check for -N/--ident

* Fri Jul 02 2004 Adrian Havill <havill@redhat.com> - 1.3.0-1

- add unknown-error only -e option

- edit readme, add rfc to docdir

- code cleanup; remove static buffers, orthagonalize id names

- ipv6 hybrid addr zero run correction

- extra eight bits added to random key

* Wed Jun 30 2004 Adrian Havill <havill@redhat.com> - 1.2.8-1

- zero out invalid port(s)

* Tue Jun 29 2004 Adrian Havill <havill@redhat.com> - 1.2.7-1

- added Provides to satisfy HP pkg rpm dep (#121447, #111640)

- more code cleanup; minimize --resolve dns lookups

* Mon Jun 28 2004 Adrian Havill <havill@redhat.com> - 1.2.6-1

- incorporated suggestions from Thomas Zehetbauer (#124914)

* Sat Jun 26 2004 Adrian Havill <havill@redhat.com> - 1.2.5-1

- clean up src

* Thu Jun 24 2004 Adrian Havill <havill@redhat.com> - 1.2.4-1

- code vet and minor changes re alan@'s comments

- default operating mode to alias all usernames as 'nobody'

  to prevent noobies from getting their mail addr harvested

- clean up README documentation

* Wed Jun 23 2004 Adrian Havill <havill@redhat.com> - 1.2.3-1

- mark xinetd conf file as a noreplace config file

- more robust error checking for proper rfc1413 tokens

* Tue Jun 22 2004 Adrian Havill <havill@redhat.com> - 1.2.1-1

- add Requires and BuildRequires

* Mon Jun 21 2004 Adrian Havill <havill@redhat.com> - 1.2.0-1

- A few tweaks in the cmdline options for orthagonality

- minor bug fix regarding reading from stdin in some multiquery cmdline cases

- add --resolve

* Sun Jun 20 2004 Adrian Havill <havill@redhat.com> - 1.1.0-1

- add extra options for --help, --usage

* Sat Jun 19 2004 Adrian Havill <havill@redhat.com> - 1.0.0-2

- Obsolete pidentd -- authd and pidentd can't/shouldn't coexist on FC/RHEL

- license tweak to allow openssl under any condition

- no spec url needed; package is not worthy enough.

* Fri Jun 18 2004 Jens Petersen <petersen@redhat.com> - 1.0.0-1

- Initial packaging