;;; GNU Guix --- Functional package management for GNU
;;; Copyright © 2013, 2014, 2015, 2017 Ludovic Courtès <ludo@gnu.org>
;;; Copyright © 2013 Andreas Enge <andreas@enge.fr>
;;; Copyright © 2016 Leo Famulari <leo@famulari.name>
;;; Copyright © 2019 Mathieu Othacehe <m.othacehe@gmail.com>
;;;
;;; This file is part of GNU Guix.
;;;
;;; GNU Guix is free software; you can redistribute it and/or modify it
;;; under the terms of the GNU General Public License as published by
;;; the Free Software Foundation; either version 3 of the License, or (at
;;; your option) any later version.
;;;
;;; GNU Guix is distributed in the hope that it will be useful, but
;;; WITHOUT ANY WARRANTY; without even the implied warranty of
;;; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
;;; GNU General Public License for more details.
;;;
;;; You should have received a copy of the GNU General Public License
;;; along with GNU Guix.  If not, see <http://www.gnu.org/licenses/>.

(define-module (gnu packages cyrus-sasl)
  #:use-module (gnu packages)
  #:use-module (gnu packages autotools)
  #:use-module (gnu packages dbm)
  #:use-module (gnu packages kerberos)
  #:use-module (gnu packages tls)
  #:use-module ((guix licenses) #:prefix license:)
  #:use-module (guix packages)
  #:use-module (guix download)
  #:use-module (guix build-system gnu))

(define-public cyrus-sasl
  (package
   (name "cyrus-sasl")
   (version "2.1.27")
   (source (origin
            (method url-fetch)
            (uri (list (string-append
                        "https://cyrusimap.org/releases/cyrus-sasl-"
                        version ".tar.gz")
                       (string-append
                        "ftp://ftp.cyrusimap.org/cyrus-sasl/cyrus-sasl-"
                        version ".tar.gz")))
            (sha256 (base32
                     "1m85zcpgfdhm43cavpdkhb1s2zq1b31472hq1w1gs3xh94anp1i6"))
            (patches (search-patches "cyrus-sasl-ac-try-run-fix.patch"
                                     "cyrus-sasl-CVE-2019-19906.patch"))))
   (build-system gnu-build-system)
   (native-inputs
     `(("autoconf" ,autoconf)
       ("automake" ,automake)
       ("libtool" ,libtool)))
   (inputs `(("gdbm" ,gdbm)
             ("openssl" ,openssl)))
   (propagated-inputs
    `(;; cyrus-sasl.pc refers to -lkrb5, so propagate it.
      ("mit-krb5" ,mit-krb5)))
   (arguments
    '(#:configure-flags (list (string-append "--with-plugindir="
                                             (assoc-ref %outputs "out")
                                             "/lib/sasl2"))

      ;; The 'plugins' directory has shared source files, such as
      ;; 'plugin_common.c'.  When building the shared libraries there, libtool
      ;; ends up doing "ln -s plugin_common.lo plugin_common.o", which can
      ;; fail with EEXIST when building things in parallel.
      #:parallel-build? #f

      #:phases
      (modify-phases %standard-phases
        (add-after 'unpack 'autogen
          (lambda _
            (invoke "autoreconf" "-vif"))))))
   (synopsis "Simple Authentication Security Layer implementation")
   (description
    "SASL (Simple Authentication Security Layer) is an Internet
standards-track method for remote computers to authenticate.  The Cyrus SASL
library makes supporting various SASL mechanisms easy for both client and
server writers.")
   (license (license:non-copyleft "file://COPYING"
                                  "See COPYING in the distribution."))
   (home-page "https://cyrusimap.org/sasl/")))
 Likewise.
* gnu/tests.scm (%simple-os): Likewise.
* gnu/tests/install.scm (%minimal-os, %minimal-os-on-vda):
(%separate-home-os, %encrypted-root-os, %btrfs-root-os): Likewise.
* tests/accounts.scm ("allocate-passwd")
("allocate-passwd with previous state"): Likewise.
</span></span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2019-03-07 20:05:09 +0100'>2019-03-07</span></td><td><a href='/guix/commit/gnu/system/accounts.scm?id=6061d01512081c93c53fdd1d4302b36696403061'>activation: Operate on &lt;user-account&gt; and &lt;user-group&gt; records.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/system/accounts.scm (sexp-&gt;user-group, sexp-&gt;user-account): New
procedures.
* gnu/system/shadow.scm (account-activation): Call them in the arguments
to 'activate-users+groups'.
(account-shepherd-service): Likewise.
* gnu/build/activation.scm (activate-users+groups): Expect a list of
&lt;user-account&gt; and a list of &lt;user-group&gt;.  Replace uses of 'match' on
tuples with calls to record accessors.
(activate-user-home): Likewise.
</span></span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2019-03-07 20:04:02 +0100'>2019-03-07</span></td><td><a href='/guix/commit/gnu/system/accounts.scm?id=f6f67b87c08fe7b901db834c714aceaef2b62b60'>system: Add (gnu system accounts).</a><span class='msg-avail'>...<span class='msg-tooltip'>The (gnu system accounts) module is meant to be used both on the build-
and on the host-side.

* gnu/system/shadow.scm &lt;top level&gt;: Call 'default-shell'.
(&lt;user-account&gt;, &lt;user-group&gt;): Move to...
* gnu/system/accounts.scm: ... here.  New file.
* gnu/local.mk (GNU_SYSTEM_MODULES): Add system/accounts.scm.
</span></span></td><td>Ludovic Courtès</td></tr>
pan title='2020-10-09 23:25:33 +0200'>2020-10-09</span></td><td><a href='/guix/commit/gnu/system/examples/bare-hurd.tmpl?id=16f8ea064cde3ee4ef36212cdbdef90e98ba6914'>system: hurd: Add PAM support with shadow and sudo.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/system.scm (hurd-default-essential-services): Add
setuid-program-service-type.
* gnu/system/hurd.scm (%base-packages/hurd): Add shadow, sudo.
(%setuid-programs/hurd): New variable.
(%hurd-default-operating-system)[setuid-program]: Use it.
[pam-services, sudoers-file]: Remove overrides; enabling regular defaults.
* gnu/system/examples/bare-hurd.tmpl (%hurd-os)[users]: New field.
[services]: Do not disable PAM in SSH.
</span></span></td><td>Jan (janneke) Nieuwenhuizen</td></tr>
<tr><td><span title='2020-06-13 09:11:47 +0200'>2020-06-13</span></td><td><a href='/guix/commit/gnu/system/examples/bare-hurd.tmpl?id=edbc067138fa417d03cbb204511d8b08b61a3d4d'>system: bare-hurd.tmpl: Add openssh-sans-x client and service.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/system/examples/bare-hurd.tmpl (%hurd-os)[packages]: Add openssh-sans-x.
[services]: Add openssh-service.  Add example usage.
</span></span></td><td>Jan (janneke) Nieuwenhuizen</td></tr>
<tr><td><span title='2020-06-08 13:51:19 +0200'>2020-06-08</span></td><td><a href='/guix/commit/gnu/system/examples/bare-hurd.tmpl?id=59bcffa314171294278444aad4b7012abe50257a'>system: examples: Add bare-hurd.tmpl.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/system/hurd.scm (%hurd-def%hurd-default-operating-system-kernel,
%hurd-default-operating-system): New exported variables.
* gnu/system/examples/bare-hurd.tmpl: New file.
* Makefile.am (EXAMPLES): Add it.
* tests/guix-system.sh: Add --target=i586-pc-gnu when testing it.
</span></span></td><td>Jan (janneke) Nieuwenhuizen</td></tr>