%define name	pam-pgsql
%define version 0.6.4
%define release %mkrel 4

Summary:	Postgresql authentication for PAM
Name:		%{name}
Version:	%{version}
Release:	%{release}
Epoch:      1
License:	GPL
Group:		System/Libraries
URL:		http://sourceforge.net/projects/pam-pgsql
Source:		http://ovh.dl.sourceforge.net/sourceforge/pam-pgsql/%{name}_%{version}.tar.gz
Patch0:     pam-pgsql.null.patch
# submit upstream:
# https://sourceforge.net/tracker/index.php?func=detail&aid=2044002&group_id=62198&atid=499729
Patch1:     pam-pgsql-session-query.patch
Requires:	pam
BuildRequires:	pam-devel, postgresql-devel, libmhash-devel
BuildRoot:	%{_tmppath}/%{name}-%{version}-root

%description
This is a module that allows people to login to PAM-aware applications by
authenticating to a Postgresql database.

%prep
%setup -q
%patch0 -p0 -b .null
%patch1 -p0 -b .session

%build
%configure --with-postgres=%_includedir/pgsql --libdir=/%_lib/security
%make

%install
mkdir -p %buildroot/%_lib/security/

install -c -m 644 pam_pgsql.so %buildroot/%_lib/security/

mkdir -p %buildroot/%_sysconfdir
cat > %buildroot/%_sysconfdir/pam_pgsql.conf <<EOF
# PAM pgsql configuration files
# Olivier Thauvin <nanardon@mandriva.org>

# connect - the database connection string
# (see http://www.postgresql.org/docs/7.4/interactive/libpq.html#LIBPQ-CONNECT)

# auth_query      - authentication query (should return one column -- password)
# auth_succ_query - query to be executed after successful authentication
# auth_fail_query - query to be executed after failed authentication
# acct_query      - account options query (should return 3 boolean columns -- expired, new password required and password is null)
# pwd_query       - query to be executed for password changing

# You can use %u as username, %p as (new) password, %h for hostname of client
# as specified by PAM subsystem, %i for IP got by gethostbyname(%h) and %s as
# pa service name in any query. Please don't forget to specify pw_type as %p
# is replaced by password of pw_type form.

connect = dbname=sysdb user=ljb password=sth connect_timeout=15
auth_query = select user_password from account where user_name = %u
acct_query = select (acc_expired = 'y' OR acc_expired = '1'), (acc_new_pwreq = 'y' OR acc_new_pwreq = '1'), (user_password
 IS NULL OR user_password = '') from account where user_name = %u
pwd_query = update account set user_password = %p where user_name = %u
pw_type = crypt_md5

EOF


%clean
rm -rf %buildroot

%files
%defattr(-, root, root)
%doc CREDITS README
/%_lib/security/pam_pgsql.*
%attr(600, root, root) %config(noreplace) %_sysconfdir/pam_pgsql.conf



%changelog
* Fri Sep 04 2009 Thierry Vignaud <tvignaud@mandriva.com> 1:0.6.4-4mdv2010.0
+ Revision: 430232
- rebuild

  + Olivier Thauvin <nanardon@mandriva.org>
    - add patch url on sourceforge

* Sat Aug 09 2008 Olivier Thauvin <nanardon@mandriva.org> 1:0.6.4-3mdv2009.0
+ Revision: 270053
- allow to run query on session start and close

* Fri Aug 08 2008 Thierry Vignaud <tvignaud@mandriva.com> 1:0.6.4-2mdv2009.0
+ Revision: 268357
- rebuild early 2009.0 package (before pixel changes)

* Mon Jun 02 2008 Olivier Thauvin <nanardon@mandriva.org> 1:0.6.4-1mdv2009.0
+ Revision: 214269
- 0.6.4

  + Olivier Blin <oblin@mandriva.com>
    - restore BuildRoot

  + Thierry Vignaud <tvignaud@mandriva.com>
    - kill re-definition of %%buildroot on Pixel's request


* Sat Mar 10 2007 Olivier Thauvin <nanardon@mandriva.org> 0.6.1-4mdv2007.1
+ Revision: 141060
- rebuild
- Import pam-pgsql

* Thu Feb 09 2006 Olivier Thauvin <nanardon@mandriva.org> 0.6.1-3mdk
- fix upload, change software source

* Sat Feb 04 2006 Olivier Thauvin <nanardon@mandriva.org> 0.6.1-2mdk
- Fix desc and summary

* Sat Feb 04 2006 Olivier Thauvin <nanardon@mandriva.org> 0.9.3
- Initial spec