;;; GNU Guix --- Functional package management for GNU ;;; Copyright © 2018 Tobias Geerinckx-Rice ;;; Copyright © 2019 Ricardo Wurmus ;;; ;;; This file is part of GNU Guix. ;;; ;;; GNU Guix is free software; you can redistribute it and/or modify it ;;; under the terms of the GNU General Public License as published by ;;; the Free Software Foundation; either version 3 of the License, or (at ;;; your option) any later version. ;;; ;;; GNU Guix is distributed in the hope that it will be useful, but ;;; WITHOUT ANY WARRANTY; without even the implied warranty of ;;; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the ;;; GNU General Public License for more details. ;;; ;;; You should have received a copy of the GNU General Public License ;;; along with GNU Guix. If not, see . (define-module (gnu packages authentication) #:use-module (gnu packages) #:use-module (gnu packages autotools) #:use-module (gnu packages documentation) #:use-module (gnu packages linux) #:use-module (gnu packages pkg-config) #:use-module (gnu packages security-token) #:use-module (guix build-system gnu) #:use-module (guix download) #:use-module (guix git-download) #:use-module ((guix licenses) #:prefix license:) #:use-module (guix packages)) (define-public oath-toolkit (package (name "oath-toolkit") (version "2.6.2") (source (origin (method url-fetch) (uri (string-append "https://download.savannah.nongnu.org/releases/" name "/" name "-" version ".tar.gz")) (patches (append (search-patches "oath-toolkit-glibc-compat.patch") (list (origin ;; This huge commit updates gnulib for GCC 7 compatibility. (method url-fetch) (uri (string-append "https://gitlab.com/oath-toolkit/oath-toolkit/commit/" "2fffce2a471f74a585939c84cce16ef3015e5d3d.diff")) (file-name "oath-toolkit-update-gnulib.patch") (sha256 (base32 "088c9s4ay1b54bjqc4mwfs5l3f6357zj5vpw771zlq5g4addd4s0")))))) (sha256 (base32 "182ah8vfbg0yhv6mh1b6ap944d0na6x7lpfkwkmzb6jl9gx4cd5h")))) (build-system gnu-build-system) (arguments ;; TODO ‘--enable-pskc’ causes xmlsec-related test suite failures. `(#:configure-flags (list "--enable-pam") #:phases (modify-phases %standard-phases (add-after 'install 'delete-static-libraries (lambda* (#:key outputs #:allow-other-keys) (let* ((out (assoc-ref outputs "out")) (lib (string-append out "/lib"))) (for-each delete-file (find-files lib "\\.a$")) #t)))))) (native-inputs `(("pkg-config" ,pkg-config))) (inputs `(("linux-pam" ,linux-pam))) ; for --enable-pam (home-page "https://www.nongnu.org/oath-toolkit/") (synopsis "One-time password (OTP) components") ;; TODO Add the following items after they've been enabled. ;; @item @command{pskctool}, a command-line tool for manipulating secret key ;; files in the Portable Symmetric Key Container (@dfn{PSKC}) format ;; described in RFC6030. ;; @item @code{libpskc}, a shared and static C library for PSKC handling. (description "The @dfn{OATH} (Open AuTHentication) Toolkit provides various components for building one-time password (@dfn{OTP}) authentication systems: @itemize @item @command{oathtool}, a command-line tool for generating & validating OTPs. @item @code{liboath}, a C library for OATH handling. @item @code{pam_oath}, a PAM module for pluggable login authentication. @end itemize Supported technologies include the event-based @dfn{HOTP} algorithm (RFC4226) and the time-based @dfn{TOTP} algorithm (RFC6238).") (license (list license:lgpl2.1+ ; the libraries (liboath/ & libpskc/) license:gpl3+)))) ; the tools (everything else) (define-public yubico-pam (let ((commit "b5bd00db81e0e0e0ecced65c684080bb56ddc35b") (revision "0")) (package (name "yubico-pam") (version (git-version "2.26" revision commit)) (source (origin (method git-fetch) (uri (git-reference (url "https://github.com/Yubico/yubico-pam.git") (commit commit))) (file-name (git-file-name name version)) (sha256 (base32 "10dq8dqi3jldllj6p8r9hldx9sank9n82c44w8akxrs1vli6nj3m")))) (build-system gnu-build-system) (arguments ;; The pam_test fails because ykclient fails to build a Curl handle. '(#:make-flags '("TESTS=util_test"))) (inputs `(("linux-pam" ,linux-pam) ("libyubikey" ,libyubikey) ("ykclient" ,ykclient) ("yubikey-personalization" ,yubikey-personalization))) (native-inputs `(("autoconf" ,autoconf) ("automake" ,automake) ("libtool" ,libtool) ("asciidoc" ,asciidoc) ("pkg-config" ,pkg-config))) (home-page "https://developers.yubico.com/yubico-pam") (synopsis "Yubico pluggable authentication module") (description "The Yubico PAM module provides an easy way to integrate the YubiKey into your existing user authentication infrastructure.") (license license:bsd-2)))) 6ea425629d'>daemon: Invoke 'guix gc --list-busy' instead of 'list-runtime-roots'....* nix/scripts/list-runtime-roots.in: Remove. * guix/store/roots.scm (%proc-directory): New variable. (proc-file-roots, proc-exe-roots, proc-cwd-roots) (proc-fd-roots, proc-maps-roots, proc-environ-roots) (referenced-files, canonicalize-store-item, busy-store-items): New procedures, taken from 'list-runtime-roots.in'. * nix/libstore/globals.hh (Settings)[guixProgram]: New field. * nix/libstore/globals.cc (Settings::processEnvironment): Initialize 'guixProgram'. * nix/libstore/gc.cc (addAdditionalRoots): Drop code related to 'NIX_ROOT_FINDER'. Run "guix gc --list-busy". * nix/local.mk (nodist_pkglibexec_SCRIPTS): Remove 'scripts/list-runtime-roots'. * config-daemon.ac: Don't output nix/scripts/list-runtime-roots. * build-aux/pre-inst-env.in: Don't set 'NIX_ROOT_FINDER'. Set 'GUIX'. * doc/guix.texi (Invoking guix gc): Document '--list-busy'. * guix/scripts/gc.scm (show-help, %options): Add "--list-busy". (guix-gc)[list-busy]: New procedure. Handle the 'list-busy' action. Ludovic Courtès 2019-02-04daemon: Remove unused 'NIX_DATA_DIR' environment variable....* nix/libstore/globals.hh (Settings)[nixDataDir]: Remove. * nix/libstore/globals.cc (Settings:processEnvironment): Remove setting of 'nixDataDir'. * nix/local.mk (libstore_a_CPPFLAGS): Remove '-DNIX_DATA_DIR'. Ludovic Courtès