1 |
buchan |
262822 |
Name: tac_plus |
2 |
|
|
Version: 4.0.4.14 |
3 |
umeabot |
384003 |
Release: %mkrel 6 |
4 |
buchan |
262822 |
License: BSD |
5 |
|
|
Group: System/Servers |
6 |
|
|
Summary: TACACS+ server based on Cisco engineering release |
7 |
|
|
URL: http://www.shrubbery.net/tac_plus/ |
8 |
|
|
Source: ftp://ftp.shrubbery.net/pub/%{name}/tacacs+-F%{version}.tar.gz |
9 |
|
|
Source1: tac_plus.conf |
10 |
|
|
Source2: tac_plus.pamd |
11 |
|
|
Source3: tac_plus.init |
12 |
|
|
Source4: tac_plus.sysconfig |
13 |
|
|
Requires(pre): rpm-helper |
14 |
|
|
Requires(post): rpm-helper |
15 |
|
|
BuildRoot: %{_tmppath}/%{name}-%{version}-root |
16 |
|
|
BuildRequires: tcp_wrappers-devel pam-devel |
17 |
|
|
|
18 |
|
|
%description |
19 |
|
|
The base source for this TACACS+ package is Cisco's publicly available TACACS+ |
20 |
|
|
"developer's kit", for which we are grateful. |
21 |
|
|
|
22 |
|
|
We needed a way to limit certain groups within the company from logging into |
23 |
|
|
or getting enable access on certain devices. Access lists (ACLs) of a sort have |
24 |
|
|
been added that match against the address of the device speaking with the |
25 |
|
|
daemon. |
26 |
|
|
|
27 |
|
|
Being paranoid, we also wanted to limit which hosts could connect to the |
28 |
|
|
daemon. This can be done with tcp_wrappers via inetd, but this does not work if |
29 |
|
|
the daemon is running standalone. So, calls to libwrap, the tcp_wrappers |
30 |
|
|
library, have been added. For the source and more information about |
31 |
|
|
tcp_wrappers, see Wietse Venema's site at http://www.porcupine.org/. |
32 |
|
|
|
33 |
|
|
Along the way we have also added autoconf, expanded the manual pages, |
34 |
|
|
cleaned-up various formatting and STD C nits, added PAM authentication support, |
35 |
|
|
and fixed a few LP64 problems. |
36 |
|
|
|
37 |
|
|
Of course we have also received some enchancement requests from users. One of |
38 |
|
|
which was the addition of a host clause (per-host configuration). This has been |
39 |
|
|
added; ported from Devrim Seral's implementation. See the documentation for |
40 |
|
|
further information. |
41 |
|
|
|
42 |
|
|
|
43 |
|
|
%prep |
44 |
|
|
%setup -q -n tacacs+-F%{version} |
45 |
|
|
|
46 |
|
|
%build |
47 |
|
|
%configure |
48 |
|
|
%make |
49 |
|
|
|
50 |
|
|
%install |
51 |
|
|
rm -Rf %{buildroot} |
52 |
|
|
%makeinstall_std |
53 |
|
|
|
54 |
|
|
mkdir -p %{buildroot}/{%{_initrddir},%{_sysconfdir}/{pam.d,sysconfig}} |
55 |
|
|
install -m 640 %{SOURCE1} %{buildroot}/%{_sysconfdir}/ |
56 |
|
|
install -m 644 %{SOURCE2} %{buildroot}/%{_sysconfdir}/pam.d/%{name} |
57 |
|
|
install -m 755 %{SOURCE3} %{buildroot}/%{_initrddir}/%{name} |
58 |
|
|
install -m 644 %{SOURCE4} %{buildroot}/%{_sysconfdir}/sysconfig/%{name} |
59 |
|
|
mv %{buildroot}/%{_datadir}/{tacacs+,tac_plus} |
60 |
|
|
|
61 |
|
|
%clean |
62 |
|
|
rm -Rf %{buildroot} |
63 |
|
|
|
64 |
|
|
%post |
65 |
|
|
%_post_service %{name} |
66 |
|
|
|
67 |
|
|
%preun |
68 |
|
|
%_preun_service %{name} |
69 |
|
|
|
70 |
|
|
%files |
71 |
|
|
%defattr(-,root,root) |
72 |
|
|
%{_bindir}/tac_* |
73 |
|
|
%config(noreplace) %{_sysconfdir}/%{name}.conf |
74 |
|
|
%config(noreplace) %{_sysconfdir}/pam.d/%{name} |
75 |
|
|
%config(noreplace) %{_sysconfdir}/sysconfig/%{name} |
76 |
|
|
%{_initrddir}/%{name} |
77 |
|
|
%doc %{_mandir}/man5/tac_plus.conf.5.* |
78 |
|
|
%doc %{_mandir}/man8/tac_plus.8.* |
79 |
|
|
%doc %{_mandir}/man8/tac_pwd.8.* |
80 |
|
|
%doc %{_mandir}/man3/regexp.3.* |
81 |
|
|
%doc users_guide |
82 |
|
|
%{_datadir}/%{name} |
83 |
|
|
|
84 |
|
|
|
85 |
|
|
|
86 |
|
|
|