◎ AURWatch - AUR Security Monitor
scan coverage …
Last scan …
Next scan -

freeipa-client

maintainer patlefort · 25 votes · base freeipa · scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged The package builds from the official FreeIPA release tarball and a secondary data-only archive; both are from the project's own release infrastructure (pagure.org), which is trustworthy despite not being on the whitelist, and the content is source code and static files, not executable payloads.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds from the official FreeIPA release tarball and a secondary data-only archive; both are from the project's own release infrastructure (pagure.org), which is trustworthy despite not being on the whitelist, and the content is source code and static files, not executable payloads.

1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:40 source=("https://releases.pagure.org/freeipa/freeipa-${pkgver}.tar.gz"{,.asc}

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Patrick Northon <northon_patrick3@yahoo.ca>
2# Contributor: Brad Ackerman <brad@facefault.org>
3# Contributor: Felix Golatofski <contact@xdfr.de>
4# Contributor: EoleDev
5# Contributor: Jan Cholasta <grubber at grubber cz>
6# Contributor: Xiao-Long Chen <chenxiaolong@cxl.epac.to>
7
8pkgbase=freeipa
9pkgname=(python-ipalib
10 python-ipaclient
11 freeipa-common
12 freeipa-client-common
13 freeipa-client)
14pkgver=4.13.1
15pkgrel=1
16pkgdesc='The Identity, Policy and Audit system'
17arch=('i686' 'x86_64')
18url='http://www.freeipa.org/'
19license=('GPL-3.0-only')
20makedepends=('openldap'
21 'krb5>=1.15.1'
22 'libxmlrpc>=1.27.4'
23 'popt'
24 'gettext'
25 'python'
26 'python-setuptools'
27 'nspr'
28 'nss'
29 'openssl'
30 'ding-libs'
31 'libsasl'
32 'sssd>=1.13.0'
33 'python-jinja'
34 'python-pyasn1-modules'
35 'python-systemd')
36options=(emptydirs)
37validpgpkeys=(
38 'D756764D4D7E297C6DAD117269876F72A6E2D34F'
39 '0E63D716D76AC080A4A33513F40800B6298EB963')
40source=("https://releases.pagure.org/freeipa/freeipa-${pkgver}.tar.gz"{,.asc}
41 nis-domainname.service
42 ipaplatform.tar.gz)
43sha256sums=('5353127d7c56ca72bc2d458376d457f8b0cc451cdbd31dc7939a88058e91527c'
44 'SKIP'
45 '74a394af693e3677146eff18a770a4271fba961b2af93b15b8ae26157af1760a'
46 '7e20412c9347106485adee06b5fcee174c67eb5a30b6730452e300dfc44faa5e')
47
48prepare() {
49 cd freeipa-${pkgver}
50
51 rm -rf ipaplatform/arch
52
53 sed -i 's|/etc/sysconfig/autofs|/etc/autofs/autofs.conf|' 'client/man/ipa-client-automount.1'
54 sed -i 's|/etc/pki/ca-trust/source/ipa.p11-kit|/etc/ca-certificates/trust-source/ipa.p11-kit|' 'client/man/ipa-client-install.1'
55 sed -i 's|/etc/sysconfig/network|/etc/hostname\n.br\n/etc/conf.d/network|' 'client/man/ipa-client-install.1'
56 sed -i '/"ipaplatform.base"/a "ipaplatform.arch",' 'ipaplatform/setup.py'
57
58 tar xf "${srcdir}/ipaplatform.tar.gz"
59
60 autoreconf -i
61}
62
63build() {
64 cd freeipa-${pkgver}
65
66 ./configure \
67 --prefix=/usr \
68 --sysconfdir=/etc \
69 --sbindir=/usr/bin \
70 --with-vendor-suffix=-arch-${pkgrel} \
71 --disable-server \
72 --without-ipatests \
73 --disable-pylint --without-jslint \
74 --with-ipaplatform=arch
75
76 rm -rf ../install
77 mkdir -p ../install
78 make install DESTDIR="$PWD"/../install
79
80 # remove files which are useful only for make uninstall
81 find ../install -wholename '*/site-packages/*/install_files.txt' -exec rm {} \;
82
83 mkdir -p ../install/etc/ipa
84 mkdir -p ../install/etc/ipa/nssdb
85 mkdir -p ../install/var/lib/ipa-client/pki
86 mkdir -p ../install/var/lib/ipa-client/sysrestore
87
88 touch ../install/etc/ipa/default.conf
89 touch ../install/etc/ipa/ca.crt
90}
91
92package_python-ipalib() {
93 pkgdesc='Python libraries used by IPA'
94 arch=('any')
95 depends=(
96 "freeipa-common=$pkgver-$pkgrel"
97 'python-gssapi>=1.2.0'
98 'gnupg'
99 'keyutils'
100 'python-cryptography>=1.6'
101 'python-netaddr>=0.7.16'
102 'sssd'
103 'python-qrcode>=5.0.0'
104 'python-pyasn1'
105 'python-pyasn1-modules'
106 'python-dateutil'
107 'python-yubico>=1.2.3'
108 'python-dbus'
109 'python-setuptools'
110 'python-six'
111 'python-ldap'
112 'python-dnspython>=1.15'
113 'python-netifaces>=0.10.4'
114 'python-pyusb'
115 'python-urllib3'
116 'python-ifaddr'
117 'python-requests'
118 'python-lxml'
119 'python-pillow'
120 'python-argcomplete'
121 'python-systemd'
122 'python-jwcrypto>=0.4.2')
123 provides=(
124 "python-ipapython=$pkgver-$pkgrel"
125 "python-ipaplatform=$pkgver-$pkgrel")
126
127 cd freeipa-${pkgver}
128
129 install -D -m644 -t"$pkgdir"/usr/share/doc/$pkgname README.md Contributors.txt
130
131 local _file
132 for _file in \
133 ../install/usr/lib/python3.*/site-packages/ipapython \
134 ../install/usr/lib/python3.*/site-packages/ipalib \
135 ../install/usr/lib/python3.*/site-packages/ipaplatform \
136 ../install/usr/lib/python3.*/site-packages/ipapython-*.egg-info \
137 ../install/usr/lib/python3.*/site-packages/ipalib-*.egg-info \
138 ../install/usr/lib/python3.*/site-packages/ipaplatform-*.egg-info
139 do
140 _file="${_file#../install/}"
141 mkdir -p "$pkgdir"/"${_file%/*}"
142 mv ../install/"$_file" "$pkgdir"/"$_file"
143 done
144}
145
146package_python-ipaclient() {
147 pkgdesc='Python libraries used by IPA client'
148 arch=('any')
149 depends=(
150 "freeipa-client-common=$pkgver-$pkgrel"
151 "freeipa-common=$pkgver-$pkgrel"
152 "python-ipalib=$pkgver-$pkgrel"
153 'python-dnspython>=1.15'
154 'python-jinja')
155 optdepends=('oddjob-selinux: mkhomedir support')
156
157 cd freeipa-${pkgver}
158
159 install -D -m644 -t"$pkgdir"/usr/share/doc/$pkgname README.md Contributors.txt
160
161 local _file
162 for _file in \
163 ../install/usr/lib/python3.*/site-packages/ipaclient \
164 ../install/usr/lib/python3.*/site-packages/ipaclient-*.egg-info
165 do
166 _file="${_file#../install/}"
167 mkdir -p "$pkgdir"/"${_file%/*}"
168 mv ../install/"$_file" "$pkgdir"/"$_file"
169 done
170}
171
172package_freeipa-common() {
173 pkgdesc='Common files used by IPA'
174 arch=('any')
175
176 cd freeipa-${pkgver}
177
178 install -D -m644 -t"$pkgdir"/usr/share/doc/$pkgname README.md Contributors.txt
179
180 local _file
181 for _file in ../install/usr/share/locale/*/*/ipa.mo
182 do
183 _file="${_file#../install/}"
184 mkdir -p "$pkgdir"/"${_file%/*}"
185 mv ../install/"$_file" "$pkgdir"/"$_file"
186 done
187}
188
189package_freeipa-client-common() {
190 pkgdesc='Common files used by IPA client'
191 arch=('any')
192
193 cd freeipa-${pkgver}
194
195 install -D -m644 -t"$pkgdir"/usr/share/doc/$pkgname README.md Contributors.txt
196
197 local _file
198 for _file in \
199 ../install/etc/ipa/nssdb \
200 ../install/var/lib/ipa-client/pki \
201 ../install/var/lib/ipa-client/sysrestore \
202 ../install/usr/share/ipa/client/* \
203 ../install/usr/share/man/man5/default.conf.5*
204 do
205 _file="${_file#../install/}"
206 mkdir -p "$pkgdir"/"${_file%/*}"
207 mv ../install/"$_file" "$pkgdir"/"$_file"
208 done
209}
210
211package_freeipa-client() {
212 pkgdesc='IPA authentication for use on clients'
213 depends=(
214 "freeipa-client-common=$pkgver-$pkgrel"
215 "freeipa-common=$pkgver-$pkgrel"
216 "python-ipaclient=$pkgver-$pkgrel"
217 'python-augeas'
218 'cyrus-sasl-gssapi'
219 'ntp'
220 'krb5'
221 'authselect'
222 'curl>=7.21.7'
223 'yp-tools'
224 'libxmlrpc>=1.27.4'
225 'sssd>=1.14.0'
226 'certmonger>=0.78'
227 'nss'
228 'bind-tools'
229 'oddjob-selinux'
230 'python-gssapi>=1.2.0'
231 'autofs'
232 'nfsidmap'
233 'nfs-utils'
234 'chrony')
235 install=freeipa-client.install
236
237 cd freeipa-${pkgver}
238
239 install -D -m644 -t"$pkgdir"/usr/share/doc/$pkgname README.md Contributors.txt
240
241 install -Dm644 "$srcdir/nis-domainname.service" -t "$pkgdir/usr/lib/systemd/system"
242 install -dm755 "$pkgdir/etc/krb5.conf.d"
243
244 local _file
245 for _file in \
246 ../install/etc/bash_completion.d \
247 ../install/usr/bin/ipa \
248 ../install/usr/bin/ipa-client-install \
249 ../install/usr/bin/ipa-client-automount \
250 ../install/usr/bin/ipa-certupdate \
251 ../install/usr/bin/ipa-getkeytab \
252 ../install/usr/bin/ipa-rmkeytab \
253 ../install/usr/bin/ipa-join \
254 ../install/usr/share/man/man1/ipa.1 \
255 ../install/usr/share/man/man1/ipa-getkeytab.1* \
256 ../install/usr/share/man/man1/ipa-rmkeytab.1* \
257 ../install/usr/share/man/man1/ipa-client-install.1* \
258 ../install/usr/share/man/man1/ipa-client-automount.1* \
259 ../install/usr/share/man/man1/ipa-certupdate.1* \
260 ../install/usr/share/man/man1/ipa-join.1*
261 do
262 _file="${_file#../install/}"
263 mkdir -p "$pkgdir"/"${_file%/*}"
264 mv ../install/"$_file" "$pkgdir"/"$_file"
265 done
266}
267

Scan history

Scanned at (UTC)SeverityRules
2026-08-03 00:08:14 LOW 2
2026-08-02 00:16:08 LOW 2
2026-08-01 00:11:18 LOW 2
2026-07-31 00:14:10 LOW 2
2026-07-30 00:17:23 LOW 2
2026-07-29 00:25:53 LOW 2
2026-07-28 00:07:28 LOW 2
2026-07-27 00:24:32 LOW 2
2026-07-26 00:07:32 LOW 2
2026-07-25 00:13:44 LOW 2
2026-07-24 00:02:28 LOW 2
2026-07-23 00:14:47 LOW 2
2026-07-22 00:29:32 LOW 2
2026-07-21 00:24:15 LOW 2
2026-07-20 00:19:49 LOW 2
2026-07-19 00:17:08 LOW 2
2026-07-18 00:14:48 LOW 2
2026-07-17 00:06:16 LOW 2
2026-07-16 00:05:41 LOW 2
2026-07-15 00:09:25 LOW 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion