Bug 1035499

Summary: Review Request: mod_auth_mellon - A SAML 2.0 authentication module for the Apache Httpd Server
Product: [Fedora] Fedora Reporter: Simo Sorce <ssorce>
Component: Package ReviewAssignee: Rob Crittenden <rcritten>
Status: CLOSED RAWHIDE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: medium Docs Contact:
Priority: medium    
Version: rawhideCC: michele, package-review, rcritten, sgallagh
Target Milestone: ---Flags: rcritten: fedora-review+
gwync: fedora-cvs+
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2013-12-11 16:17:14 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description Simo Sorce 2013-11-27 22:56:44 UTC
Spec URL: http://simo.fedorapeople.org/mod_auth_mellon/0/mod_auth_mellon.spec
SRPM URL: http://simo.fedorapeople.org/mod_auth_mellon/0/mod_auth_mellon-0.7.0-0.fc20.src.rpm
Description: The mod_auth_mellon module is an authentication service that implements the SAML 2.0 federation protocol. It grants access based on the attributes received in assertions generated by a IdP server.
Fedora Account System Username: simo

Comment 1 Simo Sorce 2013-11-27 23:00:05 UTC
Note that this package depends on the lasso library.
The review for lasso is here: https://bugzilla.redhat.com/show_bug.cgi?id=1034387

To review this package you can do the following:
$ fedora-review -b 1034387
$ fedora-review -b 1035499

The first review will build and install the lasso library in your mock chroot and make the dependency available in your mock environment to review mod_auth_mellon.

Comment 2 Michele Baldessari 2013-12-02 17:59:48 UTC
- Can you notify upstream about the new FSF address?
The Free Software Foundation address in this file seems to be outdated or
misspelled.  Ask upstream to update the address, or if this is a license file,
possibly the entire file with a new copy available from the FSF.

- You set  MellonLockFile "/run/mod_auth_mellon/lock" in the config, but I am
not sure who creates /run/mod_auth_mellon (could not see that in the code) or
if it should be package owned. Can you check that?

Comment 3 Simo Sorce 2013-12-02 18:24:30 UTC
(In reply to Michele Baldessari from comment #2)
> - Can you notify upstream about the new FSF address?
> The Free Software Foundation address in this file seems to be outdated or
> misspelled.  Ask upstream to update the address, or if this is a license
> file,
> possibly the entire file with a new copy available from the FSF.

Sigh, again, (just sent a mega patch for lasso to fix this :)

> - You set  MellonLockFile "/run/mod_auth_mellon/lock" in the config, but I am
> not sure who creates /run/mod_auth_mellon (could not see that in the code) or
> if it should be package owned. Can you check that?


See Source3, it is a tmpfiles.d configuration file that creates /run/mod_auth_mellon at startup.

Comment 4 Simo Sorce 2013-12-05 19:07:19 UTC
lasso is now built in rawhide, so I am dropping the dependency.

Comment 5 Rob Crittenden 2013-12-10 17:05:16 UTC
You need to own the tmpfiles.d directory per https://fedoraproject.org/wiki/Packaging:Tmpfiles.d with this in %files:

%dir /run/%{name}/

Otherwise looks ok.

Comment 7 Rob Crittenden 2013-12-10 20:25:49 UTC
Fix looks good, approved.

Comment 8 Simo Sorce 2013-12-10 20:33:59 UTC
New Package SCM Request
=======================
Package Name: mod_auth_mellon
Short Description: A SAML 2.0 authentication module for the Apache Httpd Server
Owners: simo
Branches: f20
InitialCC:

Comment 9 Gwyn Ciesla 2013-12-11 13:07:54 UTC
Git done (by process-git-requests).

Comment 10 Simo Sorce 2013-12-11 16:17:14 UTC
Built in Rawhide, thanks a lot to everyone involved.