#Module-Specific definitions
%define mod_version 4.11
%define release 3mdk
%define mod_name mod_auth_kerb
%define mod_conf 88_%{mod_name}.conf
%define mod_so %{mod_name}.so
%define sourcename %{mod_name}-%{mod_version}

#New ADVX macros
%define ADVXdir %{_libdir}/ADVX
%{expand:%(cat %{ADVXdir}/ADVX-build)}
%{expand:%%global ap_version %(%{_sbindir}/apxs -q ap_version)}

# Standard Module Definitions
%define name %{ap_name}-%{mod_name}
%define version %{ap_version}_%{mod_version}

#Standard ADVX requires
Prereq:		%{ap_name} = %{ap_version}
Prereq:		%{ap_name}-conf
BuildRequires:  ADVX-build
BuildRequires:	%{ap_name}-devel 


Summary:	Mod_auth_kerb is a DSO module for the Apache%{tmp_ext} Web server.
Name:		%{name}
Version:	%{version}
Release:	%{release}
Group:		System/Servers
Source0:	%{mod_name}-%{mod_version}.tar.bz2
Source1:	%{mod_conf}.bz2
Patch:		%{mod_name}_register.patch.bz2
License:	Apache License
URL:		http://modauthkerb.sourceforge.net/
Requires:	krb5-libs
BuildPrereq:	krb5-devel
BuildRoot:	%{_tmppath}/%{name}-buildroot

%description
Mod_auth_kerb is an %{ap_name} module designed to provide Kerberos
user authentication to the Apache web server. Using the Basic
Auth mechanism, it retrieves a username/password pair from the
browser and checks them against a Kerberos server as set up by
your particular organization. It also supports mutual ticket
authentication, but most browsers do not support that natively.

I might look into writing a netscape plugin for it at some point.
Some browsers also require being told that they are to use Basic
Auth as opposed to seeing KerberosV* and handling that as basic
auth. The module accounts for this and 'tricks' the browser into
thinking it's normal basic auth. 

If you are using the Basic Auth mechanmism, the module does not
do any special encryption of any sort. The passing of the
username and password is done with the same Base64 encoding that
Basic Auth uses. This can easily be converted to plain text. To
counter this, I would suggest also using mod_ssl. 

%prep

%setup -q -c -n %{name}
%patch 

%build

echo "No documentation yet.. fixme" > README
%{_sbindir}/apxs -DAPXS2 -DKRB5 -DKRB5_SAVE_CREDENTIALS -DKRB_DEF_REALM=\\\"EOS.NCSU.EDU\\\" \
    -ldl -lkrb5 -lcom_err -lk5crypto -c src/modules/kerberos/mod_auth_kerb.c -n mod_auth_kerb.so

%install
[ "%{buildroot}" != "/" ] && rm -rf %{buildroot}

mv src/modules/kerberos/.libs .
%ADVXinstlib
%ADVXinstconf %{SOURCE1} %{mod_conf}
%ADVXinstdoc %{name}-%{version}

%clean
[ "%{buildroot}" != "/" ] && rm -rf %{buildroot}

%post
%ADVXpost

%postun
%ADVXpost


%files
%defattr(-,root,root)
%config(noreplace) %{ap_confd}/%{mod_conf}
%{ap_extralibs}/%{mod_so}
%{ap_webdoc}/*
%doc README
#%doc AUTHORS ChangeLog INSTALL NEWS README THANKS

%changelog
* Wed Sep  3 2002 Jean-Michel Dault <jmdault@mandrakesoft.com> 2.0.40ADVX_4.11-3mdk
- Comply with ADVX policy at http://advx.org/devel/policy.php
- Add P0 to register module

* Sun Sep  1 2002 Oden Eriksson <oden.eriksson@kvikkjokk.net> 4.11-2mdk
- fix S1

* Sat Aug 31 2002 Oden Eriksson <oden.eriksson@kvikkjokk.net> 4.11-1mdk
- initial cooker contrib