Bug 227190 - Review Request: php-pear-Auth-OpenID - PHP OpenID
Summary: Review Request: php-pear-Auth-OpenID - PHP OpenID
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Fedora
Classification: Fedora
Component: Package Review
Version: rawhide
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Peter Lemenkov
QA Contact: Fedora Package Reviews List
URL:
Whiteboard:
: 439285 454580 (view as bug list)
Depends On:
Blocks: 218581 455211
TreeView+ depends on / blocked
 
Reported: 2007-02-03 01:34 UTC by Axel Thimm
Modified: 2013-05-02 11:04 UTC (History)
8 users (show)

Fixed In Version: 2.1.1-6
Clone Of:
Environment:
Last Closed: 2008-08-10 08:25:40 UTC
Type: ---
Embargoed:
lemenkov: fedora-review+
gwync: fedora-cvs+


Attachments (Terms of Use)

Description Axel Thimm 2007-02-03 01:34:19 UTC
Spec URL: http://dl.atrpms.net/all/php-pear-Auth-OpenID.spec
SRPM URL: http://dl.atrpms.net/all/php-pear-Auth-OpenID-1.2.1-1.at.src.rpm
Description:
An implementation of the OpenID single sign-on authentication
protocol.

Comment 1 Remi Collet 2007-04-22 07:26:40 UTC
I'm quite disappointed by this package...

BuildRequires should be php-pear >= 1:1.4.9-1.2 (older version doesn't provide
the used macros)

PHPUnit version 1.x is obsolete and replace in devel by PHPUnit 3 (which is not
compatible).

Empty build section should be provided (at least to avoid rpmlint warning, i
know there is a bug if there is no %build, even if it only affect arch RPM).

This package is not in default channel (pear.php.net) but in __uri one.
Channels was discussed by packaging commitee but nothing approved.

Uninstall command is :
pear uninstall --nodeps --ignore-errors --register-only %{channel}/%{pear_name}
With %{channel} defined to __uri

And provides should probably be : php-pear(%{channel}/%{pear_name}) = %{version}

Why are you moving %{pear_docdir}/%{pear_name}/doc to docdir and not all
%{pear_docdir}/%{pear_name}/* ?

And version 1.2.2 is available...

Comment 2 Axel Thimm 2007-04-22 08:30:07 UTC
(In reply to comment #1)
> I'm quite disappointed by this package...

I'm very sorry about that, but I followed the packaging guidelines which provide
explicit BuildRequires/Requires for pear packages.

http://fedoraproject.org/wiki/Packaging/PHP?action=recall&rev=2

If you consider the guidelines wrong, then please raise that as a general issue
on the packaging list, ranting on a specific package won't help.

> Channels was discussed by packaging commitee but nothing approved.

If nothing was approved/rejected, this means that the current guidelines still
apply, and you should try to get the FPC to modify them if need be.

> Empty build section should be provided (at least to avoid rpmlint warning, i
> know there is a bug if there is no %build, even if it only affect arch RPM).

Other than rpmlint not liking it there is no "bug".

> PHPUnit version 1.x is obsolete and replace in devel by PHPUnit 3 (which is
> not compatible)

That's bad. So we need a PHPUnit 1.x compat :/

> And version 1.2.2 is available...

Not when I submitted the package ;)

Does 1.2.2 work with PHPUnit 3?

Comment 3 Christopher Stone 2007-04-22 19:05:05 UTC
The guidelines need updating, thanks Axel for pointing this out.  We definately
need to get channel stuff in the guidelines, I did not think it important before
because I didn't think we'd have any packages that used other channels.  It
appears I was wrong.

I think any attempt at review on this package should probably wait until the
pear version # and channel guidelines are in approved by the packaging comittee.

In the meantime, Axel, can you please investigate the possibilities of modifying
this to work with PHPUnit3?  It may be that we will need a PHPUnit1-compat rpm
or something, so we should see how difficult it is to either package a compat
rpm or modify this rpm to work with PHPUnit3.

All the other stuff seems like politics to me, I would recommend that you just
use the php-pear template.  It appears you did because of some comments I see in
the spec, but I wouldn't bother removing stuff like %build or changing
%buildroot.  Thats just nonsense stuff and I'd rather focus on the more
important issues.

Thanks.

Comment 4 Brandon Holbrook 2007-06-24 05:35:02 UTC
Axel, now that the pear guidelines have been finalized, I'd be glad to finally
get this review over for you.  Make your spec look like:

http://fedoraproject.org/wiki/SIGs/PHP/PearSpecTemplate

and post some new files.  Any remarks about PHPUnit (1-vs-3)?

Comment 5 Axel Thimm 2007-07-01 17:07:26 UTC
Thanks, setting to needinfo on me to bubble up in the frontpage.

Comment 6 Jason Tibbitts 2008-01-18 05:24:21 UTC
This has been needinfo for 5.5 months now; any chance something could happen
here?  There's a push for more openID in Fedora, so it would be nice to get this in.

Comment 7 Jason Tibbitts 2008-02-23 01:23:18 UTC
And it's been another month.  I will close this ticket soon if there is no response.

Comment 8 Axel Thimm 2008-02-23 08:11:45 UTC
Brandon, is it possible to have two different versions of a pear package in the
system? The latest version is 2.0.1, but mediawiki-openid still requires 1.2.x.

Comment 9 Brandon Holbrook 2008-03-10 04:09:11 UTC
I'm not sure, but I doubt it.  Most pear packages that I know of install as
/usr/share/pear/<Classname>.php so that they will automatically be picked up
when you require 'Classname.php'.  Can mediawiki be easily patched to use 2.x?

Comment 10 Axel Thimm 2008-03-10 11:01:48 UTC
Upstream notes that

"Note: the 2.x version of the library will break this extension. A future
version of the extension will work with the 2.x version correctly." I contacted
upstream directly to see what the status is.

Currently I tend to packaging 2.x in the hopes that the mediawiki openid
extension will catch up soon. But let's also wait for upstream's feedback.

Comment 11 Axel Thimm 2008-03-16 09:58:17 UTC
The upstream author asks for helping in testing the current cvs trunk of
mediawiki-openid. It is using version 2.x of this library.

So I'll upgrade to 2.x and once we have the package in rawhide and F-X we can
help  mediawiki to test its openid extension against v 2.x (of course if anyone
wants to test before the bits are packaged he/she should do so!).

Comment 12 Axel Thimm 2008-03-31 04:10:14 UTC
http://dl.atrpms.net/all/php-pear-Auth-OpenID.spec
http://dl.atrpms.net/all/php-pear-Auth-OpenID-2.0.1-4.src.rpm

* Sun Feb 24 2008 Axel Thimm <Axel.Thimm> - 2.0.1-4
- Update to 2.0.1.
- Change license.
- PEAR install method has regressed, some manual fixes are necessary.
- No testing done (needs too old PHPUnit).


Comment 13 Axel Thimm 2008-04-10 15:54:16 UTC
Brandon, did you find any time to look into this review? Thanks!

Comment 14 Peter Lemenkov 2008-04-15 12:17:33 UTC
If Brandon won't find any free time to review this package, then I'll pick it up. 

Comment 15 Peter Lemenkov 2008-05-10 13:11:35 UTC
Looks like Brandon is too busy to review this request so I reassign it to myself.



Comment 16 Peter Lemenkov 2008-05-10 19:37:57 UTC
ОK, some remarks first.

* According to PearSpecTemplate buildroot must be

BuildRoot:      %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)

In any case this is cosmetic issue and may be omitted. I wonder why we still need to explicitly define 
BuildRoot?

* According to PearSpecTemplate Requires(post) and Requires(postun) must be

Requires(post): %{__pear}
Requires(postun): %{__pear}

I personally don't know whether this is an issue at all or just a cosmetic

* to make rpmlint happy we need some CRLF-conversions, so we must add BuildRequires: dos2unix and 
add to %prep

dos2unix doc/media/*.css

in %files section we must add directories it owns and not only %{pear_phpdir}/* but %{pear_phpdir}/data/Auth_OpenID





Comment 17 Peter Lemenkov 2008-07-04 18:35:00 UTC
Ping!

Comment 18 Axel Thimm 2008-07-04 21:01:09 UTC
Sorry Peter, I missed comment 16!

-%(%{__id_u} -n): This is not considered the better buildroot, in fact we had
the wording of the guidelines changed to provide better alternatives last year.

%{__tool} vs tool is a matter of style used differently by every packager out
there. Personally I think this is overmacroizing things, as either the rpmbuild
setup is pointing to sane PATHs or you're in deep trouble anyway due to
non-absolute calls to binaries in Makefiles etc.

I'll add the dos2unix fixes, thanks for spotting!

I didn't understand the issue with %{pear_phpdir}/* vs %{pear_phpdir}/data. The
globbing does include all, or not?


Comment 19 Peter Lemenkov 2008-07-05 07:26:18 UTC
*** Bug 439285 has been marked as a duplicate of this bug. ***

Comment 20 Peter Lemenkov 2008-07-05 18:55:05 UTC
> -%(%{__id_u} -n): This is not considered the better buildroot, in fact we had
the wording of the guidelines changed to provide better alternatives last year.

I'm just following the current (at that moment guidelines). It's not a blocker,
I think.

> %{__tool} vs tool is a matter of style used differently by every packager out
there. 

Likewise. I'm just following guidelines (I'm not a keen in php/pear so I'm not
sure what is important and what is not).

> I'll add the dos2unix fixes, thanks for spotting!

OK.

> I didn't understand the issue with %{pear_phpdir}/* vs %{pear_phpdir}/data.
The globbing does include all, or not?

My wish was to avoid multiple ownership of directories. But looks like this kind
of inclusion is a common practice for php-pear-Auth-* packages.

Anywy, I'm waiting for your next release.


Comment 21 Rakesh Pandit 2008-07-09 11:26:24 UTC
Aah! I seem to have missed this review. But it seems to be long pending (since 1
year+). May you mark #454580 duplicate of this request as I am not sponsored yet
and wouldn't be able to change status. And close that request.
     Between is php-openid a pear package?

It would be great if this package makes it ASAP. Thanks.

Comment 22 Peter Lemenkov 2008-07-09 11:33:07 UTC
*** Bug 454580 has been marked as a duplicate of this bug. ***

Comment 23 Rakesh Pandit 2008-07-12 06:21:05 UTC
I am not sponsored yet, so these are just suggestios which may help:

1. using sed in place of dos2unix and removes Buildrequire: dos2unix
2. Everything(except doc) gets installed in data folder %{pear_datadir} => /usr/
share/pear/data/ which I believe is wrong. You should use %{pear__phpdir}
3. While building on my machine I get these warnings:
 (i) WARNING: configuration download directory "/tmp/pear/download" is not 
writeable.  Change download_dir config variable to a writeable dir to avoid 
this warning
     
         This doesn't seem to be an issue, but may be you would like to 
investigate. Or may be its only with me.

 (ii) warning: File listed twice: /usr/share/pear/data/Auth_OpenID/ was coming 
earlier but when I replaced with %{pear_phpdir} same warnings with modified 
file path.
          This also seems to be cosmetic issue. I guess it comes because source 
has not been pear packaged cleanly as %install requires to manually copy files 
in BUILD. May be you can have a look.

My suggestions are based on these changes I made:
http://rakesh.fedorapeople.org/patch/openid_spec.patch

Comment 24 Rakesh Pandit 2008-07-26 19:53:49 UTC
Axel, Did you find some time to update this ?

Thanks!

Comment 25 Axel Thimm 2008-07-30 15:03:39 UTC
Spec URL: http://dl.atrpms.net/all/php-pear-Auth-OpenID.spec
SRPM URL: http://dl.atrpms.net/all/php-pear-Auth-OpenID-2.1.1-5.src.rpm

* Wed Jul 30 2008 Axel Thimm <xxx> - 2.1.1-5
- Upgrade to 2.1.1.
- Use php_dir instead of data_dir (Rakesh Pandit <xxx>)
- Fix CRLF (Peter Lemenkov <xxx> & R. Pandit)

This should take care of all comments so far I hope.



Comment 26 Peter Lemenkov 2008-07-31 13:45:19 UTC
REVIEW:

MUST Items:

+ rpmlint is silent
+ The package named according to the Package Naming Guidelines.
+ The spec file name matches the base package %{name}, in the format %{name}.spec.
+ The package meets the Packaging Guidelines .
+ The package is licensed with a Fedora approved license and meets the Licensing
Guidelines.
+ The License field in the package spec file matches the actual license.
+ The text of the license(s) included in %doc.
+ The spec file written in American English.
+ The spec file for the package is legible.
+ The sources used to build the package match the upstream source.

[petro@Sulaco SOURCES]$ md5sum php-openid-2.1.1.tar.bz2*
2fd3e4284f106f8a77fd5ba9c83b30f9  php-openid-2.1.1.tar.bz2
2fd3e4284f106f8a77fd5ba9c83b30f9  php-openid-2.1.1.tar.bz2.1
[petro@Sulaco SOURCES]$

+ The package successfully compiles and builds into binary rpms on at least one
supported architecture (tested on ppc).
+ All build dependencies are listed in BuildRequires.
+ A package owns all directories that it creates.
+ A package does not contain any duplicate files in the %files listing.
+ Permissions on files are set properly.
+ Each package has a %clean section.
+ Each package consistently uses macros.
+ The package contains code, or permissable content.
+ Packages does not own files or directories already owned by other packages. 
+ At the beginning of %install, each package runs rm -rf %{buildroot} 
+ All filenames in rpm packages are valid UTF-8.

However I still have some suggestions.

* docs should be packaged more consistently:

http://peter.fedorapeople.org/php-pear-Auth-OpenID_docs.diff

There are some valuable suggestions taken from Ian's spec:

http://peter.fedorapeople.org/php-openid.spec

* The package should provide php-yadis (seems that it should "Provides:
php-pear(Auth_Yadis) = 1.0.2" or something similar)
* Should it require php-pear-DB instead of php-pgsql and php-mysql (and
commented out php-sqlite)? I'm not sure, though.



Comment 27 Axel Thimm 2008-07-31 18:03:49 UTC
(In reply to comment #26)
> REVIEW:

Thanks!

> However I still have some suggestions.
> 
> * docs should be packaged more consistently:
> 
> http://peter.fedorapeople.org/php-pear-Auth-OpenID_docs.diff

OK, but let me keep it commented as when the package starts installing docs
again it would need to be special handled again.

> There are some valuable suggestions taken from Ian's spec:
> 
> http://peter.fedorapeople.org/php-openid.spec
> 
> * The package should provide php-yadis (seems that it should "Provides:
> php-pear(Auth_Yadis) = 1.0.2" or something similar)

There are extra Yadis packages out there (in fact I submitted one last year). I
would wait until someone needs that dependency. OTOH I actually don't have that
strong an opinion on that, if it turns out to be broken we could remove it later
just as good.

> * Should it require php-pear-DB instead of php-pgsql and php-mysql (and
> commented out php-sqlite)? I'm not sure, though.

The dependencies are from upstream and I even had Requires: php-pear-DB >= 1.80
in the previous specfile, but a user rightfully reported that this version in
the upstream dependency is completely broken. That's why I removed this
dependency altogether for now.

I suggest:

a) adopting your doc changed but leaving a comment block for future packages
   that may revide the doc install target
b) making adding a vitual Provides: for Yadis your call - e.g. if you still
   want it, I'll add it.
c) Letting php-pear-DB off as a dependency for now.


Comment 28 Peter Lemenkov 2008-07-31 18:11:23 UTC
OK, finally

APPROVED.

Comment 29 Axel Thimm 2008-08-01 07:10:36 UTC
Thanks!

New Package CVS Request
=======================
Package Name: php-pear-Auth-OpenID
Short Description: PHP OpenID
Owners: athimm
Branches: F-8 F-9
InitialCC: 
Cvsextras Commits: no


Comment 30 Kevin Fenzi 2008-08-01 16:03:21 UTC
cvs done.

Comment 31 Patrick Uiterwijk 2013-05-01 23:34:14 UTC
Package Change Request
======================
Package Name: php-pear-Auth-OpenID
New Branches: el6
Owners: puiterwijk
InitialCC: 

athimm is on the list of people who do not want to maintain EPEL packages.

Comment 32 Gwyn Ciesla 2013-05-02 11:04:37 UTC
Git done (by process-git-requests).


Note You need to log in before you can comment on or make changes to this bug.