1 |
Name: tac_plus |
2 |
Version: 4.0.4.14 |
3 |
Release: %mkrel 6 |
4 |
License: BSD |
5 |
Group: System/Servers |
6 |
Summary: TACACS+ server based on Cisco engineering release |
7 |
URL: http://www.shrubbery.net/tac_plus/ |
8 |
Source: ftp://ftp.shrubbery.net/pub/%{name}/tacacs+-F%{version}.tar.gz |
9 |
Source1: tac_plus.conf |
10 |
Source2: tac_plus.pamd |
11 |
Source3: tac_plus.init |
12 |
Source4: tac_plus.sysconfig |
13 |
Requires(pre): rpm-helper |
14 |
Requires(post): rpm-helper |
15 |
BuildRoot: %{_tmppath}/%{name}-%{version}-root |
16 |
BuildRequires: tcp_wrappers-devel pam-devel |
17 |
|
18 |
%description |
19 |
The base source for this TACACS+ package is Cisco's publicly available TACACS+ |
20 |
"developer's kit", for which we are grateful. |
21 |
|
22 |
We needed a way to limit certain groups within the company from logging into |
23 |
or getting enable access on certain devices. Access lists (ACLs) of a sort have |
24 |
been added that match against the address of the device speaking with the |
25 |
daemon. |
26 |
|
27 |
Being paranoid, we also wanted to limit which hosts could connect to the |
28 |
daemon. This can be done with tcp_wrappers via inetd, but this does not work if |
29 |
the daemon is running standalone. So, calls to libwrap, the tcp_wrappers |
30 |
library, have been added. For the source and more information about |
31 |
tcp_wrappers, see Wietse Venema's site at http://www.porcupine.org/. |
32 |
|
33 |
Along the way we have also added autoconf, expanded the manual pages, |
34 |
cleaned-up various formatting and STD C nits, added PAM authentication support, |
35 |
and fixed a few LP64 problems. |
36 |
|
37 |
Of course we have also received some enchancement requests from users. One of |
38 |
which was the addition of a host clause (per-host configuration). This has been |
39 |
added; ported from Devrim Seral's implementation. See the documentation for |
40 |
further information. |
41 |
|
42 |
|
43 |
%prep |
44 |
%setup -q -n tacacs+-F%{version} |
45 |
|
46 |
%build |
47 |
%configure |
48 |
%make |
49 |
|
50 |
%install |
51 |
rm -Rf %{buildroot} |
52 |
%makeinstall_std |
53 |
|
54 |
mkdir -p %{buildroot}/{%{_initrddir},%{_sysconfdir}/{pam.d,sysconfig}} |
55 |
install -m 640 %{SOURCE1} %{buildroot}/%{_sysconfdir}/ |
56 |
install -m 644 %{SOURCE2} %{buildroot}/%{_sysconfdir}/pam.d/%{name} |
57 |
install -m 755 %{SOURCE3} %{buildroot}/%{_initrddir}/%{name} |
58 |
install -m 644 %{SOURCE4} %{buildroot}/%{_sysconfdir}/sysconfig/%{name} |
59 |
mv %{buildroot}/%{_datadir}/{tacacs+,tac_plus} |
60 |
|
61 |
%clean |
62 |
rm -Rf %{buildroot} |
63 |
|
64 |
%post |
65 |
%_post_service %{name} |
66 |
|
67 |
%preun |
68 |
%_preun_service %{name} |
69 |
|
70 |
%files |
71 |
%defattr(-,root,root) |
72 |
%{_bindir}/tac_* |
73 |
%config(noreplace) %{_sysconfdir}/%{name}.conf |
74 |
%config(noreplace) %{_sysconfdir}/pam.d/%{name} |
75 |
%config(noreplace) %{_sysconfdir}/sysconfig/%{name} |
76 |
%{_initrddir}/%{name} |
77 |
%doc %{_mandir}/man5/tac_plus.conf.5.* |
78 |
%doc %{_mandir}/man8/tac_plus.8.* |
79 |
%doc %{_mandir}/man8/tac_pwd.8.* |
80 |
%doc %{_mandir}/man3/regexp.3.* |
81 |
%doc users_guide |
82 |
%{_datadir}/%{name} |
83 |
|
84 |
|
85 |
|
86 |
|