%define posix_threads 0

%{?!SDB:    %define SDB         1}

%{?!LIBBIND:%define LIBBIND	1}

%{?!efence: %define efence      0}

%{?!test:   %define test        0}

%{?!WITH_DBUS: %define WITH_DBUS 0} # enable when dhcdbd is in FC

# Usage: export RPM='/usr/bin/rpmbuild --define "test 1"'; make $arch;

Summary: The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) server.

Name: bind

License: BSD-like

Version: 9.3.1

Release: 8

Epoch:   24

Url: http://www.isc.org/products/BIND/

Buildroot: %{_tmppath}/%{name}-root

Group: System Environment/Daemons

Source: ftp://ftp.isc.org/isc/bind9/%{version}/bind-%{version}.tar.gz

#Source1: bind-manpages-2.tar.bz2 

# Finally, ISC are distributing man named.conf(5) and nslookup(8) !

Source1: named.sysconfig

Source2: named.init

Source3: named.logrotate

Source4: keygen.c

Source5: rfc1912.txt

Source6: bind-chroot.tar.gz

Source7: bind-9.3.1rc1-sdb_tools-Makefile.in

Source8: dnszone.schema

Source9: libbind-man.tar.gz

# http://www.venaas.no/ldap/bind-sdb/dnszone-schema.txt

Patch: bind-9.2.0rc3-varrun.patch

Patch1: bind-9.2.1-key.patch

Patch2: bind-9.3.1beta2-openssl-suffix.patch

Patch3: bind-posixthreads.patch

Patch4: bind-bsdcompat.patch

Patch5: bind-nonexec.patch

Patch6: bind-9.2.2-nsl.patch

Patch7: bind-9.2.4rc7-pie.patch

Patch8: bind-9.3.0-handle-send-errors.patch

Patch9: bind-9.3.0-missing-dnssec-tools.patch

Patch10: bind-9.3.1rc1-no-libtool-for-PIEs.patch

Patch11: bind-9.3.1rc1-sdbsrc.patch

Patch12: bind-9.3.1rc1-sdb.patch

Patch13: bind-9.3.1rc1-fix_libbind_includedir.patch

Patch14: libbind-9.3.1rc1-fix_h_errno.patch

Patch15: bind-9.3.1.dbus.patch

Patch16: bind-9.3.1-redhat_doc.patch

Patch17: bind-9.3.1-fix_sdb_ldap.patch

Patch18: bind-9.3.1-reject_resolv_conf_errors.patch

Patch19: bind-9.3.1-next_server_on_referral.patch

Patch20: bind-9.3.1-no_servfail_stops.patch

Requires(pre,preun): shadow-utils

Requires(post,preun): chkconfig

Requires(post): textutils, fileutils, sed, grep

Requires: bind-libs = %{epoch}:%{version}-%{release}, bind-utils = %{epoch}:%{version}-%{release},  glibc  >= 2.2, /bin/usleep

#Requires: kernel >= 2.4

#Requires: glibc  >= 2.3.2-5

%if %{SDB}

%if %{WITH_DBUS}

BuildRequires: openssl-devel gcc dbus-devel glibc-devel >= 2.2.5-26 glibc-kernheaders >= 2.4-7.10 libtool pkgconfig tar openldap-devel postgresql-devel

%else

BuildRequires: openssl-devel gcc glibc-devel >= 2.2.5-26 glibc-kernheaders >= 2.4-7.10 libtool pkgconfig tar openldap-devel postgresql-devel

%endif

%else

%if %{WITH_DBUS}

BuildRequires: openssl-devel gcc dbus-devel glibc-devel >= 2.2.5-26 glibc-kernheaders >= 2.4-7.10 libtool pkgconfig tar

%else

BuildRequires: openssl-devel gcc glibc-devel >= 2.2.5-26 glibc-kernheaders >= 2.4-7.10 libtool pkgconfig tar

%endif

%endif

%description

BIND (Berkeley Internet Name Domain) is an implementation of the DNS

(Domain Name System) protocols. BIND includes a DNS server (named),

which resolves host names to IP addresses; a resolver library

(routines for applications to use when interfacing with DNS); and

tools for verifying that the DNS server is operating properly.

%package libs

Summary: Libraries used by various DNS packages

Group: Applications/System

%description libs

Contains libraries used by both the bind server package as well as the utils packages.

%package utils

Summary: Utilities for querying DNS name servers.

Group: Applications/System

%description utils

Bind-utils contains a collection of utilities for querying DNS (Domain

Name System) name servers to find out information about Internet

hosts. These tools will provide you with the IP addresses for given

host names, as well as other information about registered domains and

network addresses.

You should install bind-utils if you need to get information from DNS name

servers.

%package devel

Summary: Include files and libraries needed for bind DNS development.

Group: Development/Libraries

Requires: bind-libs = %{epoch}:%{version}-%{release}

%description devel

The bind-devel package contains all the include files and the library

required for DNS (Domain Name System) development for BIND versions

9.x.x.

%if %{LIBBIND}

%package libbind-devel

Summary: Include files and library needed to use the BIND resolver library.

Group: Development/Libraries

Requires: bind-libs = %{epoch}:%{version}-%{release}

%description libbind-devel

The bind-libbind-devel package contains the libbind BIND resolver library,

compatible with that from ISC BIND 8, and the /usr/include/bind include files

necessary to develop software that uses it.

%endif

%package chroot

Summary: A chrooted tree for the BIND nameserver

Group: System Environment/Daemons

Prefix: /var/named/chroot

Requires: bind = %{epoch}:%{version}-%{release}

%description chroot

This package contains a tree of files which can be used as a

chroot(2) jail for the named(8) program from the BIND package.

Based off code from Jan "Yenya" Kasprzak <kas@fi.muni.cz>

%if %{SDB}

%package sdb

Summary: The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) server with database backends.

Group: System Environment/Daemons

Requires: bind-libs = %{epoch}:%{version}-%{release}, bind-utils = %{epoch}:%{version}-%{release},  glibc  >= 2.2, /bin/usleep

%description sdb

BIND (Berkeley Internet Name Domain) is an implementation of the DNS

(Domain Name System) protocols. BIND includes a DNS server (named),

which resolves host names to IP addresses; a resolver library

(routines for applications to use when interfacing with DNS); and

tools for verifying that the DNS server is operating properly.

BIND SDB (Simplified Database Backend) provides named_sdb, the DNS 

name server compiled to include support for using alternative Zone Databases 

stored in an LDAP server (ldapdb), a postgreSQL database (pgsqldb), or in the 

filesystem (dirdb), in addition  to the standard in-memory RBT (Red Black Tree) 

zone database. 

%endif

%prep

%setup -q -n %{name}-%{version}

%patch -p1 -b .varrun

%patch1 -p1 -b .key

%patch2 -p1 -b .openssl_suffix

#%if %{posix_threads}

#%patch3 -p1 -b .posixthreads

#%endif

# This patch is no longer required and would not work anyway (see BZ 87525).

%patch4 -p1 -b .bsdcompat

%patch5 -p1 -b .nonexec

%patch6 -p1 

%patch7 -p1 -b .pie

#%patch8 -p1 -b .handle_send_errors

# This patch is now in ISC bind-9.3.1x

%patch9 -p1 -b .missing_dnssec_tools

%patch10 -p1 -b .no-libtool-for-PIEs

%if %{SDB}

%patch11 -p1 -b .sdbsrc

# BUILD 'Simplified Database Backend' (SDB) version of named: named_sdb

cp -rfp bin/named bin/named_sdb

# SDB ldap

cp -fp contrib/sdb/ldap/ldapdb.[ch] bin/named_sdb

# SDB postgreSQL

cp -fp contrib/sdb/pgsql/pgsqldb.[ch] bin/named_sdb

# SDB Berkeley DB - needs to be ported to DB4!

#cp -fp contrib/sdb/bdb/bdb.[ch] bin/named_sdb

# SDB dir

cp -fp contrib/sdb/dir/dirdb.[ch] bin/named_sdb

# SDB tools

mkdir -p bin/sdb_tools

cp -fp %{SOURCE7} bin/sdb_tools/Makefile.in

#cp -fp contrib/sdb/bdb/zone2bdb.c bin/sdb_tools

cp -fp contrib/sdb/ldap/{zone2ldap.1,zone2ldap.c} bin/sdb_tools

cp -fp contrib/sdb/pgsql/zonetodb.c bin/sdb_tools

%patch12 -p1 -b .sdb

%endif

%if %{LIBBIND}

%patch13 -p1 -b .fix_libbind_includedir

%patch14 -p1 -b .fix_h_errno

%endif

%if %{WITH_DBUS}

%patch15 -p1 -b .dbus

%else

%patch16 -p1 -b .redhat_doc

%endif

%if %{SDB}

%patch17 -p1 -b .fix_sdb_ldap

%endif

%patch18 -p1 -b .reject_resolv_conf_errors

%patch19 -p1 -b .next_server_on_referral

%patch20 -p1 -b .no_servfail_stops

%build

libtoolize --copy --force; aclocal; autoconf

cp -f /usr/share/libtool/config.{guess,sub} .

export CFLAGS="$RPM_OPT_FLAGS"

if pkg-config openssl ; then

	export CFLAGS="$CFLAGS `pkg-config --cflags openssl`"

	export CPPFLAGS="$CPPFLAGS `pkg-config --cflags-only-I openssl`"

	export LDFLAGS="$LDFLAGS `pkg-config --libs-only-L openssl`"

fi

#export CFLAGS="-g $CFLAGS"

%if %{efence}

export LDFLAGS=-lefence

%endif

%if %{LIBBIND}

%configure --with-libtool --localstatedir=/var \

	--enable-threads \

	--enable-ipv6 \

	--with-pic \

	--with-openssl=/usr \

	--enable-libbind

%else

%configure --with-libtool --localstatedir=/var \

	--enable-threads \

	--enable-ipv6 \

	--with-pic \

	--with-openssl=/usr

%endif

make

if [ $? -ne 0 ]; then

   exit $?;

fi;

cp %{SOURCE5} doc/rfc

gzip -9 doc/rfc/*

%install

rm -rf $RPM_BUILD_ROOT

mkdir -p ${RPM_BUILD_ROOT}/etc/{rc.d/init.d,logrotate.d}

mkdir -p ${RPM_BUILD_ROOT}/usr/{bin,lib,sbin,include}

mkdir -p ${RPM_BUILD_ROOT}/var/named

mkdir -p ${RPM_BUILD_ROOT}/var/named/slaves

mkdir -p ${RPM_BUILD_ROOT}/var/named/data

mkdir -p ${RPM_BUILD_ROOT}%{_mandir}/{man1,man5,man8}

mkdir -p ${RPM_BUILD_ROOT}/var/run/named

#chroot

mkdir -p ${RPM_BUILD_ROOT}/%{prefix}

tar --no-same-owner -zxvf %{SOURCE6} --directory ${RPM_BUILD_ROOT}/%{prefix} 

# these are required to prevent them being erased during upgrade of previous

# versions that included them (bug #130121):

touch ${RPM_BUILD_ROOT}/%{prefix}/etc/named.conf

touch ${RPM_BUILD_ROOT}/%{prefix}/etc/rndc.key

touch ${RPM_BUILD_ROOT}/%{prefix}/dev/null

touch ${RPM_BUILD_ROOT}/%{prefix}/dev/random

#end chroot

make DESTDIR=$RPM_BUILD_ROOT install

install -c -m 640 bin/rndc/rndc.conf $RPM_BUILD_ROOT%{_sysconfdir}

install -c -m 755 contrib/named-bootconf/named-bootconf.sh $RPM_BUILD_ROOT/usr/sbin/named-bootconf

install -c -m 755 %SOURCE2 $RPM_BUILD_ROOT/etc/rc.d/init.d/named

install -c -m 644 %SOURCE3 $RPM_BUILD_ROOT/etc/logrotate.d/named

touch $RPM_BUILD_ROOT%{_sysconfdir}/rndc.key

cat << __EOF > $RPM_BUILD_ROOT%{_sysconfdir}/rndc.key

key "rndckey" {

        algorithm       hmac-md5;

        secret "@KEY@";

};

__EOF

gcc $RPM_OPT_FLAGS -o $RPM_BUILD_ROOT/usr/sbin/dns-keygen %{SOURCE4}

mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}/sysconfig

cp %{SOURCE1} $RPM_BUILD_ROOT%{_sysconfdir}/sysconfig/named

#mv $RPM_BUILD_ROOT/usr/share/man/man8/named.conf.* $RPM_BUILD_ROOT/usr/share/man/man5

%if %{SDB}

mkdir -p $RPM_BUILD_ROOT/etc/openldap/schema

install -c -m 644 %{SOURCE8} $RPM_BUILD_ROOT/etc/openldap/schema/dnszone.schema

%endif

%if %{LIBBIND}

gunzip < %{SOURCE9} | (cd $RPM_BUILD_ROOT/usr/share; tar -xpf -) 

%endif

%if %{test}

if [ "`whoami`" = 'root' ]; then

   set -e

   chmod -R a+rwX .

   pushd bin/tests

   pushd system

   ./ifconfig.sh up

   popd

   make test

   e=$?   

   pushd system

   ./ifconfig.sh down	

   popd

   popd

   if [ "$e" -ne 0 ]; then

      echo "ERROR: this build of BIND failed 'make test'. Aborting."

      exit $e;

   fi;

else

   echo 'test==1 : only root can run the tests (they require an ifconfig).';   

fi

:;

%endif

%pre

/usr/sbin/groupadd -g 25 named >/dev/null 2>&1 || :;

/usr/sbin/useradd -c "Named" -u 25 -g named \

	-s /sbin/nologin -r -d /var/named named >/dev/null 2>&1 || :;

%post

if [ "$1" -eq 1 ]; then

	/sbin/chkconfig --add named

	if [ -f /etc/named.boot -a ! -f /etc/named.conf ]; then

	  if [ -x /usr/sbin/named-bootconf ]; then

		cat /etc/named.boot | /usr/sbin/named-bootconf > /etc/named.conf

	    	chmod 644 /etc/named.conf

	  fi

	fi

	if grep -q '@KEY@' /etc/rndc.key; then

	  sed -e "s/@KEY@/`/usr/sbin/dns-keygen`/" /etc/rndc.key >/etc/rndc.key.tmp

	  mv -f /etc/rndc.key.tmp /etc/rndc.key

	fi

	if [ ! -s /etc/named.conf ]; then	

	   echo -e '// Default named.conf generated by install of bind-'%{version}'-'%{release}'\noptions {\n\tdirectory "/var/named";\n\tdump-file "/var/named/data/cache_dump.db";\n\tstatistics-file "/var/named/data/named_stats.txt";\n};\ninclude "/etc/rndc.key";\n' > /etc/named.conf;

	fi;

        [ -d /selinux ] && [ -x /sbin/restorecon ] && /sbin/restorecon /etc/rndc.key /etc/rndc.conf /etc/named.conf >/dev/null 2>&1

	chmod 0640 /etc/rndc.conf /etc/rndc.key

	chown root:named /etc/rndc.conf /etc/rndc.key /etc/named.conf

	/sbin/ldconfig

fi

:;

%preun

if [ "$1" = 0 ]; then

   /etc/rc.d/init.d/named stop >/dev/null 2>&1 || :;

   /usr/sbin/userdel named 2>/dev/null || :;

   /usr/sbin/groupdel named 2>/dev/null || :;

   /sbin/chkconfig --del named || :;

fi

:;

%postun

if [ "$1" -ge 1 ]; then

   /etc/rc.d/init.d/named condrestart >/dev/null 2>&1 || :   	   

fi;

/sbin/ldconfig

%postun utils

# because bind-utils depends on bind, it gets uninstalled first,

# so bind's preun's 'service named stop' will fail (no rndc).

if [ $1 = 0 ]; then

   if [ -f /var/lock/subsys/named ]; then

      /etc/rc.d/init.d/named stop >/dev/null  2>&1 || :;

   fi;

fi;

:;

%triggerpostun -- bind < 8.2.2_P5-15

/sbin/chkconfig --add named

/sbin/ldconfig

:;

%triggerpostun -n bind -- bind <= 22:9.3.0-2

if [ "$1" -gt 0 ]; then

# These versions of bind installed named service at order 55 in 

# runlevel startup order, after programs like  nis / ntp / nfs 

# which may need its services if using no nameservers in resolv.conf.

   rl=()

   for l in 0 1 2 3 4 5 6; 

   do

	if chkconfig --level=$l named; then

	   rl=(${rl[@]} 1)

	else

	   rl=(${rl[@]} 0)

	fi

   done

   chkconfig --del named

   chkconfig --add named

   let l=0;

   for s in ${rl[@]};

   do

       if [ "$s" = "1" ]; then

          chkconfig --level=$l named on;

       else

          chkconfig --level=$l named off;

       fi;

       let l='l+1';

   done;

fi

:;

%clean

rm -rf ${RPM_BUILD_ROOT}

# ${RPM_BUILD_DIR}/%{name}-%{version}

:;

%post libs -p /sbin/ldconfig

%postun libs -p /sbin/ldconfig

%files

%defattr(-,root,root)

%doc CHANGES COPYRIGHT README

%doc doc/arm doc/misc

%if %{WITH_DBUS}

%doc doc/README.DBUS

%endif

%config(noreplace) /etc/logrotate.d/named

%attr(754,root,root) %config /etc/rc.d/init.d/named

%config(noreplace) /etc/sysconfig/named

%verify(not size,not md5) %config(noreplace) %attr(0640,root,named) /etc/rndc.conf

%verify(not size,not md5) %config(noreplace) %attr(0640,root,named) /etc/rndc.key

%{_sbindir}/dnssec*

%{_sbindir}/lwresd

%{_sbindir}/named

%{_sbindir}/named-bootconf

%{_sbindir}/named-check*

%{_sbindir}/rndc*

%{_sbindir}/dns-keygen

%{_mandir}/man5/named.conf.5*

%{_mandir}/man5/rndc.conf.5*

%{_mandir}/man8/rndc.8*

%{_mandir}/man8/named.8*

%{_mandir}/man8/lwresd.8*

%{_mandir}/man8/dnssec*.8*

%{_mandir}/man8/named-checkconf.8*

%{_mandir}/man8/named-checkzone.8*

%{_mandir}/man8/rndc-confgen.8*

%attr(750,root,named) %dir /var/named

%attr(770,named,named) %dir /var/named/slaves

%attr(770,named,named) %dir /var/named/data

%attr(770,named,named) %dir /var/run/named

%files libs

%defattr(-,root,root)

%{_libdir}/*so*

%{_libdir}/*.la

%files utils

%defattr(-,root,root)

%{_bindir}/dig

%{_bindir}/host

%{_bindir}/nslookup

%{_bindir}/nsupdate

%{_mandir}/man1/host.1*

%{_mandir}/man8/nsupdate.8*

%{_mandir}/man1/dig.1*

%{_mandir}/man1/nslookup.1*

%files devel

%defattr(-,root,root)

%{_libdir}/libbind9.a

%{_libdir}/libdns.a

%{_libdir}/libisc.a

%{_libdir}/libisccc.a

%{_libdir}/libisccfg.a

%{_libdir}/liblwres.a

%{_includedir}/bind9

%{_includedir}/dns

%{_includedir}/dst

%{_includedir}/isc

%{_includedir}/isccc

%{_includedir}/isccfg

%{_includedir}/lwres

%{_mandir}/man3/lwres*

%{_bindir}/isc-config.sh

%doc doc/draft doc/rfc 

%if %{LIBBIND}

%files libbind-devel

%defattr(-,root,root)

%{_libdir}/libbind.*

%{_includedir}/bind

%{_mandir}/man3/libbind-*

%{_mandir}/man7/libbind-*

%{_mandir}/man5/libbind-*

%post libbind-devel -p /sbin/ldconfig

%postun libbind-devel -p /sbin/ldconfig

%endif

%files chroot

%defattr(-,root,root)

%attr(770,root,named) %dir %prefix

%attr(770,root,named) %dir %prefix/dev

%attr(770,root,named) %dir %prefix/etc

%attr(770,root,named) %dir %prefix/var

%attr(770,root,named) %dir  %prefix/var/run

%attr(770,named,named) %dir %prefix/var/tmp

%attr(770,named,named) %dir %prefix/var/run/named

%attr(750,root,named) %dir  %prefix/var/named

%attr(770,named,named) %dir %prefix/var/named/slaves

%attr(770,named,named) %dir %prefix/var/named/data

%ghost %prefix/etc/named.conf

%ghost %prefix/etc/rndc.key

%ghost %prefix/dev/null

%ghost %prefix/dev/random

%if %{SDB}

%files sdb

%defattr(-,root,named)

%{_sbindir}/named_sdb

%config /etc/openldap/schema/dnszone.schema

%{_sbindir}/zone2ldap

%{_sbindir}/ldap2zone

%{_sbindir}/zonetodb

%{_mandir}/man1/zone2ldap.1*

%doc contrib/sdb/ldap/README.ldap contrib/sdb/ldap/INSTALL.ldap

%post sdb

if [ "$1" -ge 1 ]; then

   # check that dnszone.schema is installed in OpenLDAP's slapd.conf

   if [ -x /usr/sbin/named_sdb ] && [ -f /etc/openldap/slapd.conf ]; then

   # include the LDAP dnszone.schema in slapd.conf:

      if ! /bin/egrep -q '^include.*\dnszone.schema' /etc/openldap/slapd.conf; then

         tf=`/bin/mktemp /tmp/XXXXXX`

         let n=`/bin/grep -n '^include.*\.schema' /etc/openldap/slapd.conf | /usr/bin/tail -1 | /bin/sed 's/:.*//'`

         if [ "$n" -gt 0 ]; then

   	    /bin/cp -fp /etc/openldap/slapd.conf /etc/openldap/slapd.conf.rpmsave;

	    /usr/bin/head -$n /etc/openldap/slapd.conf > $tf

            echo 'include         /etc/openldap/schema/dnszone.schema' >> $tf

            let n='n+1'

            /usr/bin/tail +$n /etc/openldap/slapd.conf >> $tf

            /bin/mv -f $tf /etc/openldap/slapd.conf;

            /bin/chmod --reference=/etc/openldap/slapd.conf.rpmsave /etc/openldap/slapd.conf

            [ -d /selinux ] && [ -x /sbin/restorecon ] && /sbin/restorecon /etc/openldap/slapd.conf >/dev/null 2>&1

            [ -x /etc/init.d/ldap ] && /etc/init.d/ldap condrestart >/dev/null 2>&1

         fi

         rm -f $tf >/dev/null 2>&1 || :;

      fi;

   fi;

fi;

:;

%preun sdb

if [ "$1" -eq 0 ] && [ -x /usr/sbin/named_sdb ] && [ -f /etc/openldap/slapd.conf ]; then

   if /bin/egrep -q '^include.*\dnszone.schema' /etc/openldap/slapd.conf; then

      tf=`/bin/mktemp /tmp/XXXXXX`

      /bin/egrep -v '^include.*dnszone\.schema' /etc/openldap/slapd.conf > $tf

      /bin/mv -f $tf /etc/openldap/slapd.conf;

      rm -f $tf >/dev/null 2>&1

      [ -d /selinux ] && [ -x /sbin/restorecon ] && /sbin/restorecon /etc/openldap/slapd.conf >/dev/null 2>&1

      [ -x /etc/init.d/ldap ] && /etc/init.d/ldap condrestart >/dev/null 2>&1 || :;

   fi;

fi;

:;

%endif # SDB

%post chroot

safe_replace()

{

   f1=$1;

   f2=$2;

   o=$3;

   g=$4;

   m=$5;

   dc=$6;

   if /usr/bin/test "x" =  "x$f1" -o "x" =  "x$f2" -o "$f1" =  "$f2"; then

      return 1;

   fi;

   if /usr/bin/test -r $f1 -a -s $f1 -a '!' -L $f1; then  

      if /usr/bin/test -r $f2 -a -s $f2 -a '!' -L $f2; then

         /bin/mv $f1 $f1'.rpmsave' >/dev/null 2>&1 || :;

         /bin/mv $f2 $f1 > /dev/null 2>&1 || :;         

      else

         /bin/rm -f $f2 > /dev/null 2>&1 || :;

      fi;

      /bin/mv $f1 $f2 > /dev/null 2>&1 || :;

      /bin/ln -s $f2 $f1 > /dev/null 2>&1 || :;

   else

      /bin/rm -f $f1 > /dev/null 2>&1 || :;

      if /usr/bin/test -r $f2 -a -s $f2; then

         /bin/ln -s $f2 $f1 > /dev/null 2>&1 || :;

      else

	 if /usr/bin/test "x$dc" != "x"; then 

	    echo  $dc > $f2;

	    /bin/ln -s $f2 $f1 > /dev/null 2>&1 || :;

	 else

	    return 2;

         fi;

      fi;

   fi;

   chown $o':'$g $f2;

   chmod $m $f2;

   return 0;

}

if /usr/bin/test -r /etc/sysconfig/named && /bin/egrep -q '^ROOTDIR=' /etc/sysconfig/named; then 

  :;

else 

  echo ROOTDIR="%{prefix}" >>/etc/sysconfig/named;

fi

if /usr/bin/test -r /etc/localtime; then 

   /bin/cp -fp /etc/localtime "%{prefix}/etc/localtime"

fi

safe_replace /etc/rndc.key "%{prefix}/etc/rndc.key" root named 644 '';

r=$?;

if /usr/bin/test "$r" -eq 2; then

   /bin/rm -f /etc/rndc.key

   echo -e 'key "rndckey" {\nalgorithm       hmac-md5;\nsecret "'`/usr/sbin/dns-keygen`'"\n};' > /etc/rndc.key;

   safe_replace /etc/rndc.key "%{prefix}/etc/rndc.key" root named 644 '';

fi;

default_ndc='include "/etc/rndc.key";'

if [ -f /etc/named.custom ]; then

   default_ndc='include "/etc/rndc.key";\ninclude "/etc/named.custom";'

   safe_replace /etc/named.custom "%{prefix}/etc/named.custom" root named 644 '' || :;

fi

safe_replace /etc/named.conf "%{prefix}/etc/named.conf" root named 644  "$default_ndc"

/usr/bin/find /var/named -xdev -type f | /bin/egrep -v '/var/named/chroot' | while read f; 

do

   d=`/usr/bin/dirname $f`;

   if test '!' -d "%{prefix}$d"; then

	mkdir -p "%{prefix}$d"; 

	chown named:named "%{prefix}$d";

	chmod 655 "%{prefix}$d";

   fi;

   safe_replace $f "%{prefix}$f" named named 644 '' || :;

done

[ ! -e "%{prefix}/dev/random" ] && mknod "%{prefix}/dev/random" c 1 8

[ ! -e "%{prefix}/dev/zero" ] && mknod "%{prefix}/dev/zero" c 1 5

[ ! -e "%{prefix}/dev/null" ] && mknod "%{prefix}/dev/null" c 1 3

chmod a+r "%{prefix}/dev/random" "%{prefix}/dev/null" "%{prefix}/dev/" 

chown root:named "%{prefix}/var/named"

chown named:named "%{prefix}/var/named/slaves"

chown named:named "%{prefix}/var/named/data"

/etc/init.d/named condrestart >/dev/null 2>&1 || :;

[ -d /selinux ] && [ -x /sbin/restorecon ] && /sbin/restorecon -R %{prefix} >/dev/null 2>&1

:;

%preun chroot

if [ "$1" = "0" ]; then

	/usr/bin/find /var/named/chroot -xdev -type f | while read f;

	do

	  F=`echo $f | sed 's#/var/named/chroot##'`;

	  if /usr/bin/test -L $F && test `/usr/bin/readlink $F` = $f; then

	     /bin/rm -f $F;

	     /bin/mv $f $F; 

	  fi;

	done

	if test -r /etc/sysconfig/named && grep -q '^ROOTDIR=' /etc/sysconfig/named; then		

          named_tmp=`/bin/mktemp /tmp/XXXXXX`

	  grep -v '^ROOTDIR='%{prefix} /etc/sysconfig/named > $named_tmp	

	  mv -f $named_tmp /etc/sysconfig/named

	  [ -d /selinux ] && [ -x /sbin/restorecon ] && /sbin/restorecon /etc/sysconfig/named

	fi

	/etc/init.d/named condrestart >/dev/null 2>&1 || :;

fi

:;

%triggerpostun -n bind-chroot -- bind-chroot

# Fix mess left by bind-chroot-9.2.2's %preun (bug 131803)

if [ "$1" -gt 0 ]; then

   if test -r /etc/sysconfig/named && grep -q '^ROOTDIR=' /etc/sysconfig/named; then

      :;

   else

      echo 'ROOTDIR='%{prefix} >> /etc/sysconfig/named

      /etc/init.d/named condrestart >/dev/null 2>&1 || :;

   fi;

fi;

:;

%changelog

* Tue Jul 19 2005 Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-8

- fix named.init script bugs 163598, 163409, 151852(addendum)

* Tue Jul 12 2005 Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-7

- fix bug 160914: resolver utilities should try next server on empty referral

                  (now that glibc bug 162625 is fixed)

		  host and nslookup now by default try next server on SERVFAIL

		  (host now has '-s' option to disable, and nslookup given

                   '[no]fail' option similar to dig's [no]fail option).

- rebuild and re-test with new glibc & gcc (all tests passed).

* Tue May 31 2005 Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-6

- fix bug 157950: dig / host / nslookup should reject invalid resolv.conf

                  files and not use uninitialized garbage nameserver values

                  (ISC bug 14841 raised).

* Mon May 23 2005 Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_FC4

- Fix SDB LDAP

* Mon May 16 2005 Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4 

- Fix bug 157601: give named.init a configtest function

- Fix bug 156797: named.init should check SELinux booleans.local before booleans

- Fix bug 154335: if no controls in named.conf, stop named with -TERM sig, not rndc

- Fix bug 155848: add NOTES section to named.8 man-page with info on all Red Hat 

                  BIND quirks and SELinux DDNS / slave zone file configuration

- D-BUS patches NOT applied until dhcdbd is in FC

* Sun May 15 2005 Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_dbus

- Enhancement to allow dynamic forwarder table management and 

- DHCP forwarder auto-configuration with D-BUS

* Thu Apr 14 2005 Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-2_FC4

- Rebuild for bind-sdb libpq.so.3 dependency

- fix bug 150981: don't install libbind man-pages if no libbind

- fix bug 151852: mount proc on $ROOTDIR/proc to allow sysconf(...)

  to work and correct number of CPUs to be determined

* Fri Mar 11 2005 Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-1_FC4

- Upgrade to ISC BIND 9.3.1 (final release) released today.

* Wed Mar  9 2005 Jason Vas Dias <jvdias@redhat.com> - 22.9.3.1rc1-5

- fix bug 150288: h_errno not being accessed / set correctly in libbind 

- add libbind man-pages from bind-8.4.6

* Mon Mar  7 2005 Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-4

- Rebuild with gcc4 / glibc-2.3.4-14.

* Tue Mar  1 2005 Nalin Dahyabhai <nalin@redhat.com> - 22:9.3.1rc1-3

- configure with --with-pic to get PIC libraries

* Sun Feb 20 2005 Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-2

- fix bug 149183: don't use getifaddrs() .

* Wed Feb 16 2005 Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-1

- Upgrade to 9.3.1rc1

- Add Simplified Database Backend (SDB) sub-package ( bind-sdb )

-     add named_sdb - ldap + pgsql + dir database backend support with 

-     'ENABLE_SDB' named.sysconfig option

- Add BIND resolver library & includes sub-package ( libbind-devel)

- fix bug 147824 / 147073 / 145664: ENABLE_ZONE_WRITE in named.init

- fix bug 146084 : shutup restorecon

* Tue Jan 11 2005 Jason Vas Dias <jvdias@redhat.com> - 22:9.3.0-2

- Fix bug 143438: named.init will now make correct ownership of $ROOTDIR/var/named

-                 based on 'named_write_master_zones' SELinux boolean.

- Fix bug 143744: dig & nsupdate IPv6 timeout  (dup of 140528)

* Mon Nov 29 2004 Jason Vas Dias <jvdias@redhat.com> - 9.3.0-1

- Upgrade BIND to 9.3.0 in Rawhide / FC4 (bugs 134529, 133654...)

* Mon Nov 29 2004 Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-4

- Fix bugs 140528 and 141113:

- 2 second timeouts when IPv6 not configured and root nameserver's

- AAAA addresses are queried

* Mon Oct 18 2004 Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-2

- Fix bug 136243: bind-chroot %post must run restorecon -R %{prefix}

- Fix bug 135175: named.init must return non-zero if named is not run

- Fix bug 134060: bind-chroot %post must use mktemp, not /tmp/named

- Fix bug 133423: bind-chroot %files entries should have been %dirs

* Thu Sep 23 2004 Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-1

- BIND 9.2.4 (final release) released - source code actually

- identical to 9.2.4rc8, with only version number change.

* Mon Sep 20 2004 Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14

- Upgrade to upstream bind-9.2.4rc8 .

- Progress: Finally! Hooray! ISC bind now distributes:

- o named.conf(5) and nslookup(8) manpages 

-    'bind-manpages.bz2' source can now disappear

-    (could this have something to do with ISC bug I raised about this?)

- o 'deprecation_msg' global has vanished 

-     bind-9.2.3rc3-deprecation_msg_shut_up.diff.bz2 can disappear

* Mon Sep 20 2004 Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14

- Fix bug 106572/132385: copy /etc/localtime to chroot on start

* Fri Sep 10 2004 Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-12_EL3

- Fix bug 132303: if ROOTDIR line was replaced after upgrade from

- bind-chroot-9.2.2-21, restart named

* Wed Sep 8  2004 Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-11_EL3

- Fix bug 131803: replace ROOTDIR line removed by broken 

- bind-chroot 9.2.2-21's '%postun'; added %triggerpostun for bind-chroot

* Tue Sep 7  2004 Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10_EL3

- Fix bugs 130121 & 130981 for RHEL-3

* Mon Aug 30 2004 Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10

- Fix bug 130121: add '%ghost' entries for files included in previous

- bind-chroot & not in current - ie. named.conf, rndc.key, dev/* - 

- that RPM removed after upgrade .

* Thu Aug 26 2004 Jason Vas Dias <jvdias@redhat.com> 

- Fix bug 130981: add '-t' option to named-checkconf invocation in

- named.init if chroot installed.

* Wed Aug 25 2004 Jason Vas Dias <jvdias@redhat.com>

- Remove resolver(5) manpage now in man-pages (bug 130792); 

- Don't create /dev/ entries in bind-chroot if already there (bug 127556);

- fix bind-devel Requires (bug 130919)

- Set default location for dumpdb & stats files to /var/named/data

* Tue Aug 24 2004 Jason Vas Dias <jvdias@redhat.com>

- Fix devel Requires for bug 130738 & fix version

* Tue Aug 24 2004 Jason Vas Dias <jvdias@redhat.com>

- Fix errors on clean install if named group does not exist

- (bug 130777)

* Thu Aug 19 2004 Jason Vas Dias <jvdias@redhat.com>

- Upgrade to bind-9.2.4rc7; applied initscript fix

- for bug 102035.

* Mon Aug  9 2004 Jason Vas Dias <jvdias@redhat.com>

- Fixed bug 129289: bind-chroot install / deinstall

- on install, existing config files 'safe_replace'd

- with links to chroot copies; on uninstall, moved back.

* Fri Aug  6 2004 Jason Vas Dias <jvdias@redhat.com>

- Fixed bug 129258: "${prefix}/var/tmp" typo in spec

* Wed Jul 28 2004 Jason Vas Dias <jvdias@redhat.com>

- Fixed bug 127124 : 'Requires: kernel >= 2.4' 

- causes problems with Linux VServers

* Tue Jul 27 2004 Jason Vas Dias <jvdias@redhat.com>

- Fixed bug 127555 : chroot tar missing var/named/slaves

* Fri Jul 16 2004 Jason Vas Dias <jvdias@redhat.com>

- Upgraded to ISC version 9.2.4rc6

* Fri Jul 16 2004 Jason Vas Dias <jvdias@redhat.com>

- Fixed named.init generation of error messages on

- 'service named stop' and 'service named reload'

- as per bug 127775

* Thu Jun 23 2004 Daniel Walsh <dwalsh@redhat.com> 9.2.3-19

- Bump for rhel 3.0  U3

* Thu Jun 23 2004 Daniel Walsh <dwalsh@redhat.com> 9.2.3-18

- remove disable-linux-caps

* Wed Jun 16 2004 Daniel Walsh <dwalsh@redhat.com> 9.2.3-17

- Update RHEL3 to latest bind 

* Tue Jun 15 2004 Elliot Lee <sopwith@redhat.com>

- rebuilt

* Wed Jun 8 2004 Daniel Walsh <dwalsh@redhat.com> 9.2.3-15

- Remove device files from chroot,  Named uses the system one

* Fri Mar 26 2004 Daniel Walsh <dwalsh@redhat.com> 9.2.3-14

- Move RFC to devel package 

* Fri Mar 26 2004 Daniel Walsh <dwalsh@redhat.com> 9.2.3-13

- Fix location of restorecon

* Thu Mar 25 2004 Daniel Walsh <dwalsh@redhat.com> 9.2.3-12

- Tighten security on config files.  Should be owned by root 

* Thu Mar 25 2004 Daniel Walsh <dwalsh@redhat.com> 9.2.3-11

- Update key patch to include conf-keygen

* Tue Mar 23 2004 Daniel Walsh <dwalsh@redhat.com> 9.2.3-10

- fix chroot to only happen once.

- fix init script to do kill insteall of killall

* Mon Mar 15 2004 Daniel Walsh <dwalsh@redhat.com> 9.2.3-9

- Add fix for SELinux security context

* Tue Mar 02 2004 Elliot Lee <sopwith@redhat.com>

- rebuilt

* Sat Feb 28 2004 Florian La Roche <Florian.LaRoche@redhat.de>

- run ldconfig for libs subrpm

* Mon Feb 23 2004 Tim Waugh <twaugh@redhat.com>

- Use ':' instead of '.' as separator for chown.

* Tue Feb 17 2004 Daniel Walsh <dwalsh@redhat.com> 9.2.3-7

- Add COPYRIGHT

* Fri Feb 13 2004 Elliot Lee <sopwith@redhat.com>