Bug 501393 (389-dsgw)

Good:
+ Basename of SPEC files matches with package name
+ Package name fullfill naming guidelines
+ Package contains valid license tag
+ URL tag shows on proper project homepage
+ Could download sources via spectool -g
+ Package sources matches with upstream
(md5sum: 0357fee5f1ab61e7ead345a2c76cd3b6)
+ License tag state GPLv2 as a valid OSS license
+ Consistently usage of rpm macros
+ Package doesn't contains subpacakges
+ Package has proper Provides/Obsoles statement for renaming
+ Proper Buildroot defintion
+ Buildroot will be cleaned on beginning of %clean and %install
+ Package contains SMP-enabled build
+ Local build works fine
+ Build use $RPM_OPT_FLAGS as compiler flags
+ No complaints from rpmlint for source rpm
+ No complaints from rpmlint for binary rpm
+ No complaints from rpmlint for debuginfo rpm
+ Debuginfo contains sources
+ Files has proper file permission
+ %file stanza doesn't contains dupblicated entries
+ All package files are owned by this package
+ Ther are no other package which claims one of the package files
+ %doc stanza is small.
+ Chagelog stanza has proper format


Bad:
- LICENSE file state GPLV2+ as license
- Header files state GPLv2 with exception or GPLv2 as
  license
- Package doesn't contains verbatin copy of the license
- Scratch build fails on koji
  (Please refer to: http://koji.fedoraproject.org/koji/taskinfo?taskID=1380175)

All of the issues have been addressed.  The code has been relicensed, including all header files, to use GPLv2 (not +).  I did not try to build in koji.  It builds cleanly in mock using -r fedora-10-i386

Spec URL: http://rmeggins.fedorapeople.org/pkgreview/389-dsgw.spec
SRPM URL: http://rmeggins.fedorapeople.org/pkgreview/389-dsgw-1.1.2-3.src.rpm
Source URL: http://port389.org/sources/389-dsgw-1.1.2.tar.bz2
md5sum 389-dsgw-1.1.2.tar.bz2 
0eed1a7a66ce7d77895067e31e064445  389-dsgw-1.1.2.tar.bz2
sha1sum 389-dsgw-1.1.2.tar.bz2 
e2ac8fa22c56754aef6e826a166e4ec75b67ab52  389-dsgw-1.1.2.tar.bz2

Good:
+ License tag says GPLv2 now.

Bad:
- Header files has a reverence of special exceptions on the copyright notes, which are not clarified.
- package doesn't contains a verbatin copy of the license text. The LICENSE files only told anything about the GPL and down't match with the copyright note of the source files, because the LICENSE files allow the use of a later version of the GPL, but the copyright notes on the sources doesn't.

Please calrified the licensing situation of your package.

Can you please verify the md5sum of the 389-dsgw-1.1.2.tar.bz2 you are looking at? All of those licensing issues have been resolved.  The LICENSE file now contains the full text of the GPLv2.  You should have this file:
md5sum  389-dsgw-1.1.2.tar.bz2 
0eed1a7a66ce7d77895067e31e064445  389-dsgw-1.1.2.tar.bz2

I have got

0357fee5f1ab61e7ead345a2c76cd3b6  389-dsgw-1.1.2.tar.bz2


If you have changed anything in the upstream tar ball, please increase the minor version of it.

(In reply to comment #5)
> I have got
> 
> 0357fee5f1ab61e7ead345a2c76cd3b6  389-dsgw-1.1.2.tar.bz2

There is a squid cache on port389.org - most likely you are hitting the cache instead of the file on disk.  Try again.

> 
> 
> If you have changed anything in the upstream tar ball, please increase the
> minor version of it.  

I'd rather not, for this case, since there is really no functionality change, and since this is a package rename, it's already distinct from fedora-ds-dsgw-1.1.2.tar.bz2

Soory, the wrong md5sum is from the packaged tar ball which I have downloaded from the fedorapoeple.org place.

Please provide a proper source rpm for review.

And at least: Even if you didn't changed any user visible functionality, increase the version number, because this help us for audit the validation of the package source tar balls agains upstream.

Version changed to 1.1.3

Spec URL: http://rmeggins.fedorapeople.org/pkgreview/389-dsgw.spec
SRPM URL: http://rmeggins.fedorapeople.org/pkgreview/389-dsgw-1.1.3-1.src.rpm
Source URL: http://port389.org/sources/389-dsgw-1.1.3.tar.bz2
md5sum 389-dsgw-1.1.3.tar.bz2 
cd46daccd82073e859c9531d50057a2c  389-dsgw-1.1.3.tar.bz2

Good:
+ License tag state GPLv2 as described in the package
+ Package contains verbatin copy of the license text
+ Koji scratch build works fine

your package is APPROVED.

New Package CVS Request
=======================
Package Name: 389-dsgw
Short Description: 389 Directory Server Gateway web apps
Owners: rmeggins nkinder nhosoi
Branches: F-9 F-10 F-11

CVS done.

cvs import done - all branches

Still waiting on https://fedorahosted.org/fedora-infrastructure/ticket/1425 so that I can tag and build in koji

tagging issue fixed - built in koji for f12

New Package CVS Request
=======================
Package Name: 389-dsgw
Short Description: 389 Directory Server Gateway web apps
Owners: stahnma
Branches: stahnma

cvs done.

Package Change Request
======================
Package Name: 389-dsgw
New Branches: epel7
Owners: mreynolds nhosoi nkinder rmeggins

Git done (by process-git-requests).