Added 3rd-party Kerberos authentication dynamic module.
diff --git a/alpine/Makefile.module-auth-spnego b/alpine/Makefile.module-auth-spnego new file mode 100644 index 0000000..b5cd3ba --- /dev/null +++ b/alpine/Makefile.module-auth-spnego
@@ -0,0 +1,41 @@ +MODULES+= auth-spnego + +MODULE_SUMMARY_auth_spnego= 3rd-party kerberos authentication dynamic module + +include $(CONTRIB)/src/spnego-http-auth-nginx-module/version + +MODULE_VERSION_auth_spnego= $(SPNEGO_HTTP_AUTH_NGINX_MODULE_VERSION) +MODULE_RELEASE_auth_spnego= 1 + +MODULE_VERSION_PREFIX_auth_spnego=$(MODULE_TARGET_PREFIX) + +MODULE_SOURCES_auth_spnego= spnego-http-auth-nginx-module-$(SPNEGO_HTTP_AUTH_NGINX_MODULE_GITHASH).tar.xz + +MODULE_CONFARGS_auth_spnego= --with-http_ssl_module \ + --add-dynamic-module=$(MODSRC_PREFIX)spnego-http-auth-nginx-module-$(SPNEGO_HTTP_AUTH_NGINX_MODULE_GITHASH) + +.deps-module-auth-spnego: + cd $(CONTRIB) && make .sum-spnego-http-auth-nginx-module + touch $@ + +prerequisites-for-module-auth-spnego: + +MODULE_BUILD_DEPENDS_auth_spnego=krb5-dev + +define MODULE_POST_auth_spnego +cat <<BANNER +---------------------------------------------------------------------- + +The $(MODULE_SUMMARY_auth_spnego) for $(MODULE_SUMMARY_PREFIX) has been installed. +To enable this module, add the following to /etc/nginx/nginx.conf +and reload nginx: + + load_module modules/ngx_http_auth_spnego_module.so; + +Please refer to the module documentation for further details: +https://github.com/stnoonan/spnego-http-auth-nginx-module + +---------------------------------------------------------------------- +BANNER +endef +export MODULE_POST_auth_spnego
diff --git a/contrib/src/spnego-http-auth-nginx-module/Makefile b/contrib/src/spnego-http-auth-nginx-module/Makefile new file mode 100644 index 0000000..75a9b6c --- /dev/null +++ b/contrib/src/spnego-http-auth-nginx-module/Makefile
@@ -0,0 +1,20 @@ +# spnego-http-auth-nginx-module + +include $(dir $(abspath $(lastword $(MAKEFILE_LIST))))/version +SPNEGO_HTTP_AUTH_NGINX_MODULE_GITURL := $(GITHUB)/stnoonan/spnego-http-auth-nginx-module.git + +PKGS += spnego-http-auth-nginx-module + +$(TARBALLS)/spnego-http-auth-nginx-module-$(SPNEGO_HTTP_AUTH_NGINX_MODULE_GITHASH).tar.xz: + $(call download_git,$(SPNEGO_HTTP_AUTH_NGINX_MODULE_GITURL),,$(SPNEGO_HTTP_AUTH_NGINX_MODULE_GITHASH)) + +.sum-spnego-http-auth-nginx-module: spnego-http-auth-nginx-module-$(SPNEGO_HTTP_AUTH_NGINX_MODULE_GITHASH).tar.xz + $(call check_githash,$(SPNEGO_HTTP_AUTH_NGINX_MODULE_GITHASH)) + touch $@ + +spnego-http-auth-nginx-module: spnego-http-auth-nginx-module-$(SPNEGO_HTTP_AUTH_NGINX_MODULE_GITHASH).tar.xz .sum-spnego-http-auth-nginx-module + $(UNPACK) + $(MOVE) + +.spnego-http-auth-nginx-module: spnego-http-auth-nginx-module + touch $@
diff --git a/contrib/src/spnego-http-auth-nginx-module/version b/contrib/src/spnego-http-auth-nginx-module/version new file mode 100644 index 0000000..13efc75 --- /dev/null +++ b/contrib/src/spnego-http-auth-nginx-module/version
@@ -0,0 +1,2 @@ +SPNEGO_HTTP_AUTH_NGINX_MODULE_VERSION := 1.1.0 +SPNEGO_HTTP_AUTH_NGINX_MODULE_GITHASH := 72c8ee04c81f929ec84d5a6d126f789b77781a8c
diff --git a/debian/Makefile.module-auth-spnego b/debian/Makefile.module-auth-spnego new file mode 100644 index 0000000..a8e08b7 --- /dev/null +++ b/debian/Makefile.module-auth-spnego
@@ -0,0 +1,39 @@ +MODULES+= auth-spnego + +MODULE_SUMMARY_auth_spnego= 3rd-party kerberos authentication dynamic module + +include $(CONTRIB)/src/spnego-http-auth-nginx-module/version + +MODULE_VERSION_auth_spnego= $(SPNEGO_HTTP_AUTH_NGINX_MODULE_VERSION) +MODULE_RELEASE_auth_spnego= 1 + +MODULE_VERSION_PREFIX_auth_spnego=$(MODULE_TARGET_PREFIX) + +MODULE_SOURCES_auth_spnego= spnego-http-auth-nginx-module-$(SPNEGO_HTTP_AUTH_NGINX_MODULE_GITHASH).tar.xz + +MODULE_CONFARGS_auth_spnego= --with-http_ssl_module \ + --add-dynamic-module=$(MODSRC_PREFIX)spnego-http-auth-nginx-module-$(SPNEGO_HTTP_AUTH_NGINX_MODULE_GITHASH) + +.deps-module-auth-spnego: + cd $(CONTRIB) && make .sum-spnego-http-auth-nginx-module + touch $@ + +MODULE_BUILD_DEPENDS_auth_spnego=,libkrb5-dev + +define MODULE_POST_auth_spnego +cat <<BANNER +---------------------------------------------------------------------- + +The $(MODULE_SUMMARY_auth_spnego) for $(MODULE_SUMMARY_PREFIX) has been installed. +To enable this module, add the following to /etc/nginx/nginx.conf +and reload nginx: + + load_module modules/ngx_http_auth_spnego_module.so; + +Please refer to the module documentation for further details: +https://github.com/stnoonan/spnego-http-auth-nginx-module + +---------------------------------------------------------------------- +BANNER +endef +export MODULE_POST_auth_spnego
diff --git a/docs/Makefile b/docs/Makefile index b3e5ffb..f5d3c1c 100644 --- a/docs/Makefile +++ b/docs/Makefile
@@ -5,6 +5,7 @@ XSLS?= xslscript.pl PACKAGES= nginx \ + nginx-module-auth-spnego \ nginx-module-brotli \ nginx-module-encrypted-session \ nginx-module-geoip \
diff --git a/docs/nginx-module-auth-spnego.copyright b/docs/nginx-module-auth-spnego.copyright new file mode 100644 index 0000000..6a00b30 --- /dev/null +++ b/docs/nginx-module-auth-spnego.copyright
@@ -0,0 +1,28 @@ +/* + * Copyright (C) 2009 Michal Kowalski <superflouos{at}gmail[dot]com> + * Copyright (C) 2012-2013 Sean Timothy Noonan <stnoonan@obsolescence.net> + * Copyright (C) 2013 Marcello Barnaba <vjt@openssl.it> + * Copyright (C) 2013 Alexander Pyhalov <alp@sfedu.ru> + * + * Redistribution and use in source and binary forms, with or without + * modification, are permitted provided that the following conditions + * are met: + * 1. Redistributions of source code must retain the above copyright + * notice, this list of conditions and the following disclaimer. + * 2. Redistributions in binary form must reproduce the above copyright + * notice, this list of conditions and the following disclaimer in the + * documentation and/or other materials provided with the distribution. + * + * THIS SOFTWARE IS PROVIDED BY AUTHOR AND CONTRIBUTORS ``AS IS'' AND + * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE + * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE + * ARE DISCLAIMED. IN NO EVENT SHALL AUTHOR OR CONTRIBUTORS BE LIABLE + * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL + * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS + * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) + * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT + * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY + * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF + * SUCH DAMAGE. + * + */
diff --git a/docs/nginx-module-auth-spnego.xml b/docs/nginx-module-auth-spnego.xml new file mode 100644 index 0000000..018b00f --- /dev/null +++ b/docs/nginx-module-auth-spnego.xml
@@ -0,0 +1,21 @@ +<?xml version="1.0" ?> +<!DOCTYPE change_log SYSTEM "changes.dtd" > + + +<change_log title="nginx_module_auth_spnego"> + + +<changes apply="nginx-module-auth-spnego" ver="1.1.0" rev="1" basever="1.19.6" + date="2021-01-11" time="09:10:00 +0300" + packager="Andrei Belov <defanator@gmail.com>"> + +<change> +<para> +Initial release of spnego-http-auth nginx module package. +</para> +</change> + +</changes> + + +</change_log>
diff --git a/rpm/SPECS/Makefile.module-auth-spnego b/rpm/SPECS/Makefile.module-auth-spnego new file mode 100644 index 0000000..aebdfbb --- /dev/null +++ b/rpm/SPECS/Makefile.module-auth-spnego
@@ -0,0 +1,42 @@ +MODULES+= auth-spnego + +MODULE_SUMMARY_auth_spnego= 3rd-party kerberos authentication dynamic module + +include $(CONTRIB)/src/spnego-http-auth-nginx-module/version + +MODULE_VERSION_auth_spnego= $(SPNEGO_HTTP_AUTH_NGINX_MODULE_VERSION) +MODULE_RELEASE_auth_spnego= 1 + +MODULE_VERSION_PREFIX_auth_spnego=$(MODULE_TARGET_PREFIX) + +MODULE_SOURCES_auth_spnego= spnego-http-auth-nginx-module-$(SPNEGO_HTTP_AUTH_NGINX_MODULE_GITHASH).tar.xz + +MODULE_CONFARGS_auth_spnego= --with-http_ssl_module \ + --add-dynamic-module=spnego-http-auth-nginx-module-$(SPNEGO_HTTP_AUTH_NGINX_MODULE_GITHASH) + +.deps-module-auth-spnego: + cd $(CONTRIB) && make .sum-spnego-http-auth-nginx-module + touch $@ + +define MODULE_DEFINITIONS_auth_spnego +BuildRequires: krb5-devel +endef +export MODULE_DEFINITIONS_auth_spnego + +define MODULE_POST_auth_spnego +cat <<BANNER +---------------------------------------------------------------------- + +The $(MODULE_SUMMARY_auth_spnego) for $(MODULE_SUMMARY_PREFIX) has been installed. +To enable this module, add the following to /etc/nginx/nginx.conf +and reload nginx: + + load_module modules/ngx_http_auth_spnego_module.so; + +Please refer to the module documentation for further details: +https://github.com/stnoonan/spnego-http-auth-nginx-module + +---------------------------------------------------------------------- +BANNER +endef +export MODULE_POST_auth_spnego