Bug 1035499 - Review Request: mod_auth_mellon - A SAML 2.0 authentication module for the Apache Httpd Server
Summary: Review Request: mod_auth_mellon - A SAML 2.0 authentication module for the Ap...
Keywords:
Status: CLOSED RAWHIDE
Alias: None
Product: Fedora
Classification: Fedora
Component: Package Review
Version: rawhide
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Rob Crittenden
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2013-11-27 22:56 UTC by Simo Sorce
Modified: 2014-01-17 14:04 UTC (History)
4 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2013-12-11 16:17:14 UTC
Type: ---
Embargoed:
rcritten: fedora-review+
gwync: fedora-cvs+


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Bugzilla 737038 1 None None None 2021-01-20 06:05:38 UTC

Internal Links: 737038 1053341

Description Simo Sorce 2013-11-27 22:56:44 UTC
Spec URL: http://simo.fedorapeople.org/mod_auth_mellon/0/mod_auth_mellon.spec
SRPM URL: http://simo.fedorapeople.org/mod_auth_mellon/0/mod_auth_mellon-0.7.0-0.fc20.src.rpm
Description: The mod_auth_mellon module is an authentication service that implements the SAML 2.0 federation protocol. It grants access based on the attributes received in assertions generated by a IdP server.
Fedora Account System Username: simo

Comment 1 Simo Sorce 2013-11-27 23:00:05 UTC
Note that this package depends on the lasso library.
The review for lasso is here: https://bugzilla.redhat.com/show_bug.cgi?id=1034387

To review this package you can do the following:
$ fedora-review -b 1034387
$ fedora-review -b 1035499

The first review will build and install the lasso library in your mock chroot and make the dependency available in your mock environment to review mod_auth_mellon.

Comment 2 Michele Baldessari 2013-12-02 17:59:48 UTC
- Can you notify upstream about the new FSF address?
The Free Software Foundation address in this file seems to be outdated or
misspelled.  Ask upstream to update the address, or if this is a license file,
possibly the entire file with a new copy available from the FSF.

- You set  MellonLockFile "/run/mod_auth_mellon/lock" in the config, but I am
not sure who creates /run/mod_auth_mellon (could not see that in the code) or
if it should be package owned. Can you check that?

Comment 3 Simo Sorce 2013-12-02 18:24:30 UTC
(In reply to Michele Baldessari from comment #2)
> - Can you notify upstream about the new FSF address?
> The Free Software Foundation address in this file seems to be outdated or
> misspelled.  Ask upstream to update the address, or if this is a license
> file,
> possibly the entire file with a new copy available from the FSF.

Sigh, again, (just sent a mega patch for lasso to fix this :)

> - You set  MellonLockFile "/run/mod_auth_mellon/lock" in the config, but I am
> not sure who creates /run/mod_auth_mellon (could not see that in the code) or
> if it should be package owned. Can you check that?


See Source3, it is a tmpfiles.d configuration file that creates /run/mod_auth_mellon at startup.

Comment 4 Simo Sorce 2013-12-05 19:07:19 UTC
lasso is now built in rawhide, so I am dropping the dependency.

Comment 5 Rob Crittenden 2013-12-10 17:05:16 UTC
You need to own the tmpfiles.d directory per https://fedoraproject.org/wiki/Packaging:Tmpfiles.d with this in %files:

%dir /run/%{name}/

Otherwise looks ok.

Comment 7 Rob Crittenden 2013-12-10 20:25:49 UTC
Fix looks good, approved.

Comment 8 Simo Sorce 2013-12-10 20:33:59 UTC
New Package SCM Request
=======================
Package Name: mod_auth_mellon
Short Description: A SAML 2.0 authentication module for the Apache Httpd Server
Owners: simo
Branches: f20
InitialCC:

Comment 9 Gwyn Ciesla 2013-12-11 13:07:54 UTC
Git done (by process-git-requests).

Comment 10 Simo Sorce 2013-12-11 16:17:14 UTC
Built in Rawhide, thanks a lot to everyone involved.


Note You need to log in before you can comment on or make changes to this bug.