contrib/redhat/openssh.spec - third_party/openssh-portable - Git at Google

 # Version of OpenSSH
 %define oversion 3.0.2p1

 # Version of ssh-askpass
 %define aversion 1.2.4.1

 # Do we want to disable building of x11-askpass? (1=yes 0=no)
 %define no_x11_askpass 0

 # Do we want to disable building of gnome-askpass? (1=yes 0=no)
 %define no_gnome_askpass 0

 # Do we want to link against a static libcrypto? (1=yes 0=no)
 %define static_libcrypto 0

 # Do we want smartcard support (1=yes 0=no)
 %define scard 0

 # Use Redhat 7.0 pam control file
 %define redhat7 0

 # Disable IPv6 (avoids DNS hangs on some glibc versions)
 %define noip6 0

 # Reserve options to override askpass settings with:
 # rpm -ba|--rebuild --define 'skip_xxx 1'
 %{?skip_x11_askpass:%define no_x11_askpass 1}
 %{?skip_gnome_askpass:%define no_gnome_askpass 1}

 # Options for Redhat version:
 # rpm -ba|--rebuild --define "rh7 1"
 %{?rh7:%define redhat7 1}

 # Options for static OpenSSL link:
 # rpm -ba|--rebuild --define "static_openssl 1"
 %{?static_openssl:%define static_libcrypto 1}

 # Options for Smartcard support: (needs libsectok and openssl-engine)
 # rpm -ba|--rebuild --define "smartcard 1"
 %{?smartcard:%define scard 1}

 # Option to disable ipv6
 # rpm -ba|--rebuild --define "noipv6 1"
 %{?noipv6:%define noip6 1}

 %define exact_openssl_version   %(rpm -q openssl | cut -d - -f 2)

 Summary: The OpenSSH implementation of SSH protocol versions 1 and 2
 Name: openssh
 Version: %{oversion}
 Release: 1
 Packager: Damien Miller <djm@mindrot.org>
 URL: http://www.openssh.com/portable.html
 Source0: ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-%{oversion}.tar.gz
 %if ! %{no_x11_askpass}
 Source1: http://www.pobox.com/~jmknoble/software/x11-ssh-askpass/x11-ssh-askpass-%{aversion}.tar.gz
 %endif
 License: BSD
 Group: Applications/Internet
 BuildRoot: %{_tmppath}/%{name}-%{version}-buildroot
 Obsoletes: ssh
 BuildPreReq: perl, openssl-devel, tcp_wrappers
 BuildPreReq: /bin/login, /usr/include/security/pam_appl.h
 BuildPreReq: rpm >= 3.0.5
 %if ! %{no_x11_askpass}
 BuildPreReq: XFree86-devel
 %endif
 %if ! %{no_gnome_askpass}
 BuildPreReq: gnome-libs-devel
 %endif
 %if ! %{static_libcrypto}
 PreReq: openssl >= 0.9.5a
 PreReq: openssl = %{exact_openssl_version}
 Requires: openssl >= 0.9.5a
 %endif
 Requires: rpm >= 3.0.5

 %package clients
 Summary: OpenSSH clients.
 Requires: openssh = %{version}-%{release}
 Group: Applications/Internet
 Obsoletes: ssh-clients

 %package server
 Summary: The OpenSSH server daemon.
 Group: System Environment/Daemons
 Obsoletes: ssh-server
 PreReq: openssh = %{version}-%{release}, chkconfig >= 0.9
 %if %{redhat7}
 Requires: /etc/pam.d/system-auth
 %endif

 %package askpass
 Summary: A passphrase dialog for OpenSSH and X.
 Group: Applications/Internet
 Requires: openssh = %{version}-%{release}
 Obsoletes: ssh-extras

 %package askpass-gnome
 Summary: A passphrase dialog for OpenSSH, X, and GNOME.
 Group: Applications/Internet
 Requires: openssh = %{version}-%{release}
 Obsoletes: ssh-extras

 %description
 OpenSSH is OpenBSD's SSH (Secure SHell) protocol implementation. SSH
 replaces rlogin and rsh, to provide secure encrypted communications
 between two untrusted hosts over an insecure network. X11 connections
 and arbitrary TCP/IP ports can also be forwarded over the secure
 channel. Public key authentication may be used for "passwordless"
 access to servers.

 This package includes the core files necessary for both the OpenSSH
 client and server. To make this package useful, you should also
 install openssh-clients, openssh-server, or both.

 %description clients
 OpenSSH is OpenBSD's SSH (Secure SHell) protocol implementation.

 This package includes the clients necessary to make encrypted
 connections to SSH protocol servers.  You'll also need to install the
 openssh package on OpenSSH clients.

 %description server
 OpenSSH is OpenBSD's SSH (Secure SHell) protocol implementation.

 This package contains the secure shell daemon (sshd). The sshd daemon
 allows SSH clients to securely connect to your SSH server. You also
 need to have the openssh package installed.

 %description askpass
 OpenSSH is OpenBSD's SSH (Secure SHell) protocol implementation.

 This package contains an X11 passphrase dialog for OpenSSH.

 %description askpass-gnome
 OpenSSH is OpenBSD's SSH (Secure SHell) protocol implementation.

 This package contains an X11 passphrase dialog for OpenSSH and the
 GNOME GUI desktop environment.

 %prep

 %if ! %{no_x11_askpass}
 %setup -q -a 1
 %else
 %setup -q
 %endif

 %build

 %define _sysconfdir /etc/ssh

 EXTRA_OPTS=""

 %if %{scard}
 	EXTRA_OPTS="$EXTRA_OPTS --with-smartcard"
 %endif

 %if %{noip6}
 	EXTRA_OPTS="$EXTRA_OPTS --with-ipv4-default "
 %endif

 %configure \
 	--libexecdir=%{_libexecdir}/openssh \
 	--datadir=%{_datadir}/openssh \
 	--with-pam \
 	--with-tcp-wrappers \
 	--with-rsh=/usr/bin/rsh \
 	--with-default-path=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin \
 	$EXTRA_OPTS

 %if %{static_libcrypto}
 perl -pi -e "s|-lcrypto|/usr/lib/libcrypto.a|g" Makefile
 %endif

 make

 %if ! %{no_x11_askpass}
 pushd x11-ssh-askpass-%{aversion}
 %configure \
         --libexecdir=%{_libexecdir}/openssh
 xmkmf -a
 make
 popd
 %endif

 %if ! %{no_gnome_askpass}
 pushd contrib
 gcc -O -g `gnome-config --cflags gnome gnomeui` \
         gnome-ssh-askpass.c -o gnome-ssh-askpass \
         `gnome-config --libs gnome gnomeui`
 popd
 %endif

 %install
 rm -rf $RPM_BUILD_ROOT
 %{makeinstall} \
 	libexecdir=$RPM_BUILD_ROOT%{_libexecdir}/openssh \
 	datadir=$RPM_BUILD_ROOT%{_datadir}/openssh \
 	DESTDIR=/ # Hack to disable key generation


 install -d $RPM_BUILD_ROOT/etc/pam.d/
 install -d $RPM_BUILD_ROOT/etc/rc.d/init.d
 install -d $RPM_BUILD_ROOT%{_libexecdir}/openssh
 %if %{redhat7}
 install -m644 contrib/redhat/sshd.pam-7.x $RPM_BUILD_ROOT/etc/pam.d/sshd
 %else
 install -m644 contrib/redhat/sshd.pam $RPM_BUILD_ROOT/etc/pam.d/sshd
 %endif
 install -m755 contrib/redhat/sshd.init $RPM_BUILD_ROOT/etc/rc.d/init.d/sshd

 %if ! %{no_x11_askpass}
 install -s x11-ssh-askpass-%{aversion}/x11-ssh-askpass $RPM_BUILD_ROOT%{_libexecdir}/openssh/x11-ssh-askpass
 ln -s /usr/libexec/openssh/x11-ssh-askpass $RPM_BUILD_ROOT%{_libexecdir}/openssh/ssh-askpass
 %endif

 %if ! %{no_gnome_askpass}
 install -s contrib/gnome-ssh-askpass $RPM_BUILD_ROOT%{_libexecdir}/openssh/gnome-ssh-askpass
 %endif

 perl -pi -e "s|$RPM_BUILD_ROOT||g" $RPM_BUILD_ROOT%{_mandir}/man*/*

 %clean
 rm -rf $RPM_BUILD_ROOT

 %post server
 /sbin/chkconfig --add sshd
 if test -r /var/run/sshd.pid ; then
 	/etc/rc.d/init.d/sshd restart >&2
 fi

 %preun server
 if [ "$1" = 0 ] ; then
 	/etc/rc.d/init.d/sshd stop >&2
 	/sbin/chkconfig --del sshd
 fi

 %files
 %defattr(-,root,root)
 %doc CREDITS ChangeLog INSTALL LICENCE OVERVIEW README* RFC* TODO WARNING*
 %attr(0755,root,root) %{_bindir}/ssh-keygen
 %attr(0755,root,root) %{_bindir}/scp
 %attr(0644,root,root) %{_mandir}/man1/ssh-keygen.1*
 %attr(0644,root,root) %{_mandir}/man1/scp.1*
 %attr(0755,root,root) %dir %{_sysconfdir}
 %attr(0600,root,root) %config(noreplace) %{_sysconfdir}/moduli
 %attr(0755,root,root) %dir %{_libexecdir}/openssh
 %if %{scard}
 %attr(0755,root,root) %dir %{_datadir}/openssh
 %attr(0644,root,root) %{_datadir}/openssh/Ssh.bin
 %endif

 %files clients
 %defattr(-,root,root)
 %attr(4755,root,root) %{_bindir}/ssh
 %attr(0755,root,root) %{_bindir}/ssh-agent
 %attr(0755,root,root) %{_bindir}/ssh-add
 %attr(0755,root,root) %{_bindir}/ssh-keyscan
 %attr(0755,root,root) %{_bindir}/sftp
 %attr(0644,root,root) %{_mandir}/man1/ssh.1*
 %attr(0644,root,root) %{_mandir}/man1/ssh-agent.1*
 %attr(0644,root,root) %{_mandir}/man1/ssh-add.1*
 %attr(0644,root,root) %{_mandir}/man1/ssh-keyscan.1*
 %attr(0644,root,root) %{_mandir}/man1/sftp.1*
 %attr(0644,root,root) %config(noreplace) %{_sysconfdir}/ssh_config
 %attr(-,root,root) %{_bindir}/slogin
 %attr(-,root,root) %{_mandir}/man1/slogin.1*

 %files server
 %defattr(-,root,root)
 %attr(0755,root,root) %{_sbindir}/sshd
 %attr(0755,root,root) %{_libexecdir}/openssh/sftp-server
 %attr(0644,root,root) %{_mandir}/man8/sshd.8*
 %attr(0644,root,root) %{_mandir}/man8/sftp-server.8*
 #%attr(0600,root,root) %config(noreplace) %{_sysconfdir}/sshd_config
 %attr(0600,root,root) %config(noreplace) %{_sysconfdir}/sshd_config
 %attr(0600,root,root) %config(noreplace) /etc/pam.d/sshd
 %attr(0755,root,root) %config /etc/rc.d/init.d/sshd

 %if ! %{no_x11_askpass}
 %files askpass
 %defattr(-,root,root)
 %doc x11-ssh-askpass-%{aversion}/README
 %doc x11-ssh-askpass-%{aversion}/ChangeLog
 %doc x11-ssh-askpass-%{aversion}/SshAskpass*.ad
 %attr(0755,root,root) %{_libexecdir}/openssh/ssh-askpass
 %attr(0755,root,root) %{_libexecdir}/openssh/x11-ssh-askpass
 %endif

 %if ! %{no_gnome_askpass}
 %files askpass-gnome
 %defattr(-,root,root)
 %attr(0755,root,root) %{_libexecdir}/openssh/gnome-ssh-askpass
 %endif

 %changelog
 * Mon Oct 18 2000 Damien Miller <djm@mindrot.org>
 - Merge some of Nalin Dahyabhai <nalin@redhat.com> changes from the
   Redhat 7.0 spec file
 * Tue Sep 05 2000 Damien Miller <djm@mindrot.org>
 - Use RPM configure macro
 * Tue Aug 08 2000 Damien Miller <djm@mindrot.org>
 - Some surgery to sshd.init (generate keys at runtime)
 - Cleanup of groups and removal of keygen calls
 * Wed Jul 12 2000 Damien Miller <djm@mindrot.org>
 - Make building of X11-askpass and gnome-askpass optional
 * Mon Jun 12 2000 Damien Miller <djm@mindrot.org>
 - Glob manpages to catch compressed files
 * Wed Mar 15 2000 Damien Miller <djm@ibs.com.au>
 - Updated for new location
 - Updated for new gnome-ssh-askpass build
 * Sun Dec 26 1999 Damien Miller <djm@mindrot.org>
 - Added Jim Knoble's <jmknoble@pobox.com> askpass
 * Mon Nov 15 1999 Damien Miller <djm@mindrot.org>
 - Split subpackages further based on patch from jim knoble <jmknoble@pobox.com>
 * Sat Nov 13 1999 Damien Miller <djm@mindrot.org>
 - Added 'Obsoletes' directives
 * Tue Nov 09 1999 Damien Miller <djm@ibs.com.au>
 - Use make install
 - Subpackages
 * Mon Nov 08 1999 Damien Miller <djm@ibs.com.au>
 - Added links for slogin
 - Fixed perms on manpages
 * Sat Oct 30 1999 Damien Miller <djm@ibs.com.au>
 - Renamed init script
 * Fri Oct 29 1999 Damien Miller <djm@ibs.com.au>
 - Back to old binary names
 * Thu Oct 28 1999 Damien Miller <djm@ibs.com.au>
 - Use autoconf
 - New binary names
 * Wed Oct 27 1999 Damien Miller <djm@ibs.com.au>
 - Initial RPMification, based on Jan "Yenya" Kasprzak's <kas@fi.muni.cz> spec.
	# Version of OpenSSH
	%define oversion 3.0.2p1

	# Version of ssh-askpass
	%define aversion 1.2.4.1

	# Do we want to disable building of x11-askpass? (1=yes 0=no)
	%define no_x11_askpass 0

	# Do we want to disable building of gnome-askpass? (1=yes 0=no)
	%define no_gnome_askpass 0

	# Do we want to link against a static libcrypto? (1=yes 0=no)
	%define static_libcrypto 0

	# Do we want smartcard support (1=yes 0=no)
	%define scard 0

	# Use Redhat 7.0 pam control file
	%define redhat7 0

	# Disable IPv6 (avoids DNS hangs on some glibc versions)
	%define noip6 0

	# Reserve options to override askpass settings with:
	# rpm -ba\|--rebuild --define 'skip_xxx 1'
	%{?skip_x11_askpass:%define no_x11_askpass 1}
	%{?skip_gnome_askpass:%define no_gnome_askpass 1}

	# Options for Redhat version:
	# rpm -ba\|--rebuild --define "rh7 1"
	%{?rh7:%define redhat7 1}

	# Options for static OpenSSL link:
	# rpm -ba\|--rebuild --define "static_openssl 1"
	%{?static_openssl:%define static_libcrypto 1}

	# Options for Smartcard support: (needs libsectok and openssl-engine)
	# rpm -ba\|--rebuild --define "smartcard 1"
	%{?smartcard:%define scard 1}

	# Option to disable ipv6
	# rpm -ba\|--rebuild --define "noipv6 1"
	%{?noipv6:%define noip6 1}

	%define exact_openssl_version %(rpm -q openssl \| cut -d - -f 2)

	Summary: The OpenSSH implementation of SSH protocol versions 1 and 2
	Name: openssh
	Version: %{oversion}
	Release: 1
	Packager: Damien Miller <djm@mindrot.org>
	URL: http://www.openssh.com/portable.html
	Source0: ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-%{oversion}.tar.gz
	%if ! %{no_x11_askpass}
	Source1: http://www.pobox.com/~jmknoble/software/x11-ssh-askpass/x11-ssh-askpass-%{aversion}.tar.gz
	%endif
	License: BSD
	Group: Applications/Internet
	BuildRoot: %{_tmppath}/%{name}-%{version}-buildroot
	Obsoletes: ssh
	BuildPreReq: perl, openssl-devel, tcp_wrappers
	BuildPreReq: /bin/login, /usr/include/security/pam_appl.h
	BuildPreReq: rpm >= 3.0.5
	%if ! %{no_x11_askpass}
	BuildPreReq: XFree86-devel
	%endif
	%if ! %{no_gnome_askpass}
	BuildPreReq: gnome-libs-devel
	%endif
	%if ! %{static_libcrypto}
	PreReq: openssl >= 0.9.5a
	PreReq: openssl = %{exact_openssl_version}
	Requires: openssl >= 0.9.5a
	%endif
	Requires: rpm >= 3.0.5

	%package clients
	Summary: OpenSSH clients.
	Requires: openssh = %{version}-%{release}
	Group: Applications/Internet
	Obsoletes: ssh-clients

	%package server
	Summary: The OpenSSH server daemon.
	Group: System Environment/Daemons
	Obsoletes: ssh-server
	PreReq: openssh = %{version}-%{release}, chkconfig >= 0.9
	%if %{redhat7}
	Requires: /etc/pam.d/system-auth
	%endif

	%package askpass
	Summary: A passphrase dialog for OpenSSH and X.
	Group: Applications/Internet
	Requires: openssh = %{version}-%{release}
	Obsoletes: ssh-extras

	%package askpass-gnome
	Summary: A passphrase dialog for OpenSSH, X, and GNOME.
	Group: Applications/Internet
	Requires: openssh = %{version}-%{release}
	Obsoletes: ssh-extras

	%description
	OpenSSH is OpenBSD's SSH (Secure SHell) protocol implementation. SSH
	replaces rlogin and rsh, to provide secure encrypted communications
	between two untrusted hosts over an insecure network. X11 connections
	and arbitrary TCP/IP ports can also be forwarded over the secure
	channel. Public key authentication may be used for "passwordless"
	access to servers.

	This package includes the core files necessary for both the OpenSSH
	client and server. To make this package useful, you should also
	install openssh-clients, openssh-server, or both.

	%description clients
	OpenSSH is OpenBSD's SSH (Secure SHell) protocol implementation.

	This package includes the clients necessary to make encrypted
	connections to SSH protocol servers. You'll also need to install the
	openssh package on OpenSSH clients.

	%description server
	OpenSSH is OpenBSD's SSH (Secure SHell) protocol implementation.

	This package contains the secure shell daemon (sshd). The sshd daemon
	allows SSH clients to securely connect to your SSH server. You also
	need to have the openssh package installed.

	%description askpass
	OpenSSH is OpenBSD's SSH (Secure SHell) protocol implementation.

	This package contains an X11 passphrase dialog for OpenSSH.

	%description askpass-gnome
	OpenSSH is OpenBSD's SSH (Secure SHell) protocol implementation.

	This package contains an X11 passphrase dialog for OpenSSH and the
	GNOME GUI desktop environment.

	%prep

	%if ! %{no_x11_askpass}
	%setup -q -a 1
	%else
	%setup -q
	%endif

	%build

	%define _sysconfdir /etc/ssh

	EXTRA_OPTS=""

	%if %{scard}
	EXTRA_OPTS="$EXTRA_OPTS --with-smartcard"
	%endif

	%if %{noip6}
	EXTRA_OPTS="$EXTRA_OPTS --with-ipv4-default "
	%endif

	%configure \
	--libexecdir=%{_libexecdir}/openssh \
	--datadir=%{_datadir}/openssh \
	--with-pam \
	--with-tcp-wrappers \
	--with-rsh=/usr/bin/rsh \
	--with-default-path=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin \
	$EXTRA_OPTS

	%if %{static_libcrypto}
	perl -pi -e "s\|-lcrypto\|/usr/lib/libcrypto.a\|g" Makefile
	%endif

	make

	%if ! %{no_x11_askpass}
	pushd x11-ssh-askpass-%{aversion}
	%configure \
	--libexecdir=%{_libexecdir}/openssh
	xmkmf -a
	make
	popd
	%endif

	%if ! %{no_gnome_askpass}
	pushd contrib
	gcc -O -g `gnome-config --cflags gnome gnomeui` \
	gnome-ssh-askpass.c -o gnome-ssh-askpass \
	`gnome-config --libs gnome gnomeui`
	popd
	%endif

	%install
	rm -rf $RPM_BUILD_ROOT
	%{makeinstall} \
	libexecdir=$RPM_BUILD_ROOT%{_libexecdir}/openssh \
	datadir=$RPM_BUILD_ROOT%{_datadir}/openssh \
	DESTDIR=/ # Hack to disable key generation


	install -d $RPM_BUILD_ROOT/etc/pam.d/
	install -d $RPM_BUILD_ROOT/etc/rc.d/init.d
	install -d $RPM_BUILD_ROOT%{_libexecdir}/openssh
	%if %{redhat7}
	install -m644 contrib/redhat/sshd.pam-7.x $RPM_BUILD_ROOT/etc/pam.d/sshd
	%else
	install -m644 contrib/redhat/sshd.pam $RPM_BUILD_ROOT/etc/pam.d/sshd
	%endif
	install -m755 contrib/redhat/sshd.init $RPM_BUILD_ROOT/etc/rc.d/init.d/sshd

	%if ! %{no_x11_askpass}
	install -s x11-ssh-askpass-%{aversion}/x11-ssh-askpass $RPM_BUILD_ROOT%{_libexecdir}/openssh/x11-ssh-askpass
	ln -s /usr/libexec/openssh/x11-ssh-askpass $RPM_BUILD_ROOT%{_libexecdir}/openssh/ssh-askpass
	%endif

	%if ! %{no_gnome_askpass}
	install -s contrib/gnome-ssh-askpass $RPM_BUILD_ROOT%{_libexecdir}/openssh/gnome-ssh-askpass
	%endif

	perl -pi -e "s\|$RPM_BUILD_ROOT\|\|g" $RPM_BUILD_ROOT%{_mandir}/man/

	%clean
	rm -rf $RPM_BUILD_ROOT

	%post server
	/sbin/chkconfig --add sshd
	if test -r /var/run/sshd.pid ; then
	/etc/rc.d/init.d/sshd restart >&2
	fi

	%preun server
	if [ "$1" = 0 ] ; then
	/etc/rc.d/init.d/sshd stop >&2
	/sbin/chkconfig --del sshd
	fi

	%files
	%defattr(-,root,root)
	%doc CREDITS ChangeLog INSTALL LICENCE OVERVIEW README* RFC* TODO WARNING*
	%attr(0755,root,root) %{_bindir}/ssh-keygen
	%attr(0755,root,root) %{_bindir}/scp
	%attr(0644,root,root) %{_mandir}/man1/ssh-keygen.1*
	%attr(0644,root,root) %{_mandir}/man1/scp.1*
	%attr(0755,root,root) %dir %{_sysconfdir}
	%attr(0600,root,root) %config(noreplace) %{_sysconfdir}/moduli
	%attr(0755,root,root) %dir %{_libexecdir}/openssh
	%if %{scard}
	%attr(0755,root,root) %dir %{_datadir}/openssh
	%attr(0644,root,root) %{_datadir}/openssh/Ssh.bin
	%endif

	%files clients
	%defattr(-,root,root)
	%attr(4755,root,root) %{_bindir}/ssh
	%attr(0755,root,root) %{_bindir}/ssh-agent
	%attr(0755,root,root) %{_bindir}/ssh-add
	%attr(0755,root,root) %{_bindir}/ssh-keyscan
	%attr(0755,root,root) %{_bindir}/sftp
	%attr(0644,root,root) %{_mandir}/man1/ssh.1*
	%attr(0644,root,root) %{_mandir}/man1/ssh-agent.1*
	%attr(0644,root,root) %{_mandir}/man1/ssh-add.1*
	%attr(0644,root,root) %{_mandir}/man1/ssh-keyscan.1*
	%attr(0644,root,root) %{_mandir}/man1/sftp.1*
	%attr(0644,root,root) %config(noreplace) %{_sysconfdir}/ssh_config
	%attr(-,root,root) %{_bindir}/slogin
	%attr(-,root,root) %{_mandir}/man1/slogin.1*

	%files server
	%defattr(-,root,root)
	%attr(0755,root,root) %{_sbindir}/sshd
	%attr(0755,root,root) %{_libexecdir}/openssh/sftp-server
	%attr(0644,root,root) %{_mandir}/man8/sshd.8*
	%attr(0644,root,root) %{_mandir}/man8/sftp-server.8*
	#%attr(0600,root,root) %config(noreplace) %{_sysconfdir}/sshd_config
	%attr(0600,root,root) %config(noreplace) %{_sysconfdir}/sshd_config
	%attr(0600,root,root) %config(noreplace) /etc/pam.d/sshd
	%attr(0755,root,root) %config /etc/rc.d/init.d/sshd

	%if ! %{no_x11_askpass}
	%files askpass
	%defattr(-,root,root)
	%doc x11-ssh-askpass-%{aversion}/README
	%doc x11-ssh-askpass-%{aversion}/ChangeLog
	%doc x11-ssh-askpass-%{aversion}/SshAskpass*.ad
	%attr(0755,root,root) %{_libexecdir}/openssh/ssh-askpass
	%attr(0755,root,root) %{_libexecdir}/openssh/x11-ssh-askpass
	%endif

	%if ! %{no_gnome_askpass}
	%files askpass-gnome
	%defattr(-,root,root)
	%attr(0755,root,root) %{_libexecdir}/openssh/gnome-ssh-askpass
	%endif

	%changelog
	* Mon Oct 18 2000 Damien Miller <djm@mindrot.org>
	- Merge some of Nalin Dahyabhai <nalin@redhat.com> changes from the
	Redhat 7.0 spec file
	* Tue Sep 05 2000 Damien Miller <djm@mindrot.org>
	- Use RPM configure macro
	* Tue Aug 08 2000 Damien Miller <djm@mindrot.org>
	- Some surgery to sshd.init (generate keys at runtime)
	- Cleanup of groups and removal of keygen calls
	* Wed Jul 12 2000 Damien Miller <djm@mindrot.org>
	- Make building of X11-askpass and gnome-askpass optional
	* Mon Jun 12 2000 Damien Miller <djm@mindrot.org>
	- Glob manpages to catch compressed files
	* Wed Mar 15 2000 Damien Miller <djm@ibs.com.au>
	- Updated for new location
	- Updated for new gnome-ssh-askpass build
	* Sun Dec 26 1999 Damien Miller <djm@mindrot.org>
	- Added Jim Knoble's <jmknoble@pobox.com> askpass
	* Mon Nov 15 1999 Damien Miller <djm@mindrot.org>
	- Split subpackages further based on patch from jim knoble <jmknoble@pobox.com>
	* Sat Nov 13 1999 Damien Miller <djm@mindrot.org>
	- Added 'Obsoletes' directives
	* Tue Nov 09 1999 Damien Miller <djm@ibs.com.au>
	- Use make install
	- Subpackages
	* Mon Nov 08 1999 Damien Miller <djm@ibs.com.au>
	- Added links for slogin
	- Fixed perms on manpages
	* Sat Oct 30 1999 Damien Miller <djm@ibs.com.au>
	- Renamed init script
	* Fri Oct 29 1999 Damien Miller <djm@ibs.com.au>
	- Back to old binary names
	* Thu Oct 28 1999 Damien Miller <djm@ibs.com.au>
	- Use autoconf
	- New binary names
	* Wed Oct 27 1999 Damien Miller <djm@ibs.com.au>
	- Initial RPMification, based on Jan "Yenya" Kasprzak's <kas@fi.muni.cz> spec.