New port: security/duo

Duo provides simple two-factor authentication as a service via:

    1.  Phone callback
    2.  SMS-delivered one-time passcodes
    3.  Duo mobile app to generate one-time passcodes
    4.  Duo mobile app for smartphone push authentication
    5.  Duo hardware token to generate one-time passcodes

This package allows an admin (or ordinary user) to quickly add Duo
authentication to any Unix login without setting up secondary user
accounts, directory synchronization, servers, or hardware.

WWW: http://duosecurity.com

Approved by:	tabthorpe (mentor)

9 files changed, 122 insertions, 0 deletions

diff --git a/security/duo/Makefile b/security/duo/Makefile
new file mode 100644
index 000000000000..2b9e1d37b74d
--- /dev/null
+++ b/security/duo/Makefile
@@ -0,0 +1,37 @@
+# New ports collection makefile for:	duo
+# Date created:				17 Jul 2011
+# Whom:					Ryan Steinmetz <zi@FreeBSD.org>
+#
+# $FreeBSD$
+#
+
+PORTNAME=	duo
+PORTVERSION=	1.7
+CATEGORIES=	security
+MASTER_SITES=	http://cloud.github.com/downloads/${PORTNAME}security/${PORTNAME}_unix/
+DISTNAME=	${PORTNAME}_unix-${PORTVERSION}
+
+MAINTAINER=	zi@FreeBSD.org
+COMMENT=	Duo unix integration package
+
+LICENSE=	GPLv2
+
+LIB_DEPENDS=	curl.6:${PORTSDIR}/ftp/curl
+
+CONFIGURE_ARGS=	--with-pam=${PREFIX}/lib/security --sysconfdir=${ETCDIR}
+
+GNU_CONFIGURE=	yes
+USE_LDCONFIG=	yes
+SUB_FILES=	pkg-message
+
+MAN3=		duo.3
+MAN8=		login_duo.8 pam_duo.8
+
+post-patch:
+	@${REINPLACE_CMD} -e 's|%%PREFIX%%|${PREFIX}|g' ${WRKSRC}/login_duo/login_duo.8
+	@${REINPLACE_CMD} -e 's|%%PREFIX%%|${PREFIX}|g' ${WRKSRC}/pam_duo/pam_duo.8
+
+post-install:
+	@${CAT} ${PKGMESSAGE}
+
+.include <bsd.port.mk>
diff --git a/security/duo/distinfo b/security/duo/distinfo
new file mode 100644
index 000000000000..360b7bc6e1d6
--- /dev/null
+++ b/security/duo/distinfo
@@ -0,0 +1,2 @@
+SHA256 (duo_unix-1.7.tar.gz) = 020027703afba0319a5b4c160d5a7762aed93c733c6ce0c58db498ad87828403
+SIZE (duo_unix-1.7.tar.gz) = 441371
diff --git a/security/duo/files/patch-lib__Makefile.am b/security/duo/files/patch-lib__Makefile.am
new file mode 100644
index 000000000000..2be9bd6b89f4
--- /dev/null
+++ b/security/duo/files/patch-lib__Makefile.am
@@ -0,0 +1,11 @@
+--- ./lib/Makefile.am.orig	2011-03-28 16:38:36.000000000 -0400
++++ ./lib/Makefile.am	2011-07-17 21:47:03.000000000 -0400
+@@ -18,7 +18,7 @@
+ 
+ notrans_dist_man3_MANS = duo.3
+ 
+-pkgconfigdir = $(libdir)/pkgconfig
++pkgconfigdir = $(prefix)/libdata/pkgconfig
+ pkgconfig_DATA = libduo.pc
+ 
+ noinst_PROGRAMS = testduo
diff --git a/security/duo/files/patch-lib__Makefile.in b/security/duo/files/patch-lib__Makefile.in
new file mode 100644
index 000000000000..422859d63748
--- /dev/null
+++ b/security/duo/files/patch-lib__Makefile.in
@@ -0,0 +1,11 @@
+--- ./lib/Makefile.in.orig	2011-07-17 21:47:09.000000000 -0400
++++ ./lib/Makefile.in	2011-07-17 21:47:16.000000000 -0400
+@@ -252,7 +252,7 @@
+ libduo_la_includedir = $(includedir)
+ libduo_la_include_HEADERS = duo.h
+ notrans_dist_man3_MANS = duo.3
+-pkgconfigdir = $(libdir)/pkgconfig
++pkgconfigdir = $(prefix)/libdata/pkgconfig
+ pkgconfig_DATA = libduo.pc
+ testduo_LDADD = libduo.la
+ all: all-am
diff --git a/security/duo/files/patch-login_duo__login_duo.8 b/security/duo/files/patch-login_duo__login_duo.8
new file mode 100644
index 000000000000..f8488c9a51db
--- /dev/null
+++ b/security/duo/files/patch-login_duo__login_duo.8
@@ -0,0 +1,11 @@
+--- ./login_duo/login_duo.8.orig	2011-07-17 22:00:28.000000000 -0400
++++ ./login_duo/login_duo.8	2011-07-17 22:00:53.000000000 -0400
+@@ -111,7 +111,7 @@
+ .Nm .
+ .Sh FILES
+ .Bl -tag -width ".Cm failmode"
+-.It Pa /etc/duo/login_duo.conf
++.It Pa %%PREFIX%%/etc/duo/login_duo.conf
+ Default configuration file path
+ .El
+ .Sh AUTHORS
diff --git a/security/duo/files/patch-pam_duo__pam_duo.8 b/security/duo/files/patch-pam_duo__pam_duo.8
new file mode 100644
index 000000000000..1092c633add4
--- /dev/null
+++ b/security/duo/files/patch-pam_duo__pam_duo.8
@@ -0,0 +1,11 @@
+--- ./pam_duo/pam_duo.8.orig	2011-07-17 22:01:01.000000000 -0400
++++ ./pam_duo/pam_duo.8	2011-07-17 22:01:12.000000000 -0400
+@@ -60,7 +60,7 @@
+ etc.
+ .Sh FILES
+ .Bl -tag -width ".Cm failmode"
+-.It Pa /etc/duo/pam_duo.conf
++.It Pa %%PREFIX%%/etc/duo/pam_duo.conf
+ Default configuration file path
+ .El
+ .Sh AUTHORS
diff --git a/security/duo/files/pkg-message.in b/security/duo/files/pkg-message.in
new file mode 100644
index 000000000000..69370e26b6da
--- /dev/null
+++ b/security/duo/files/pkg-message.in
@@ -0,0 +1,12 @@
+
+=================================================================
+Configuration file %%ETCDIR%%/login_duo.conf was created.
+You must edit it to add your Duo integration and secret keys.
+
+If you are using the PAM module, a line similar to the following
+should be added to your service(s) of choice in /etc/pam.d:
+auth	required	%%PREFIX%%/lib/security/pam_duo.so
+
+Additionally, you must edit %%ETCDIR%%/pam_duo.conf
+=================================================================
+
diff --git a/security/duo/pkg-descr b/security/duo/pkg-descr
new file mode 100644
index 000000000000..c3f505a59d0f
--- /dev/null
+++ b/security/duo/pkg-descr
@@ -0,0 +1,13 @@
+Duo provides simple two-factor authentication as a service via:
+
+    1.  Phone callback
+    2.  SMS-delivered one-time passcodes
+    3.  Duo mobile app to generate one-time passcodes
+    4.  Duo mobile app for smartphone push authentication
+    5.  Duo hardware token to generate one-time passcodes
+
+This package allows an admin (or ordinary user) to quickly add Duo
+authentication to any Unix login without setting up secondary user
+accounts, directory synchronization, servers, or hardware.
+
+WWW: http://duosecurity.com
diff --git a/security/duo/pkg-plist b/security/duo/pkg-plist
new file mode 100644
index 000000000000..1fddf8e27b42
--- /dev/null
+++ b/security/duo/pkg-plist
@@ -0,0 +1,14 @@
+%%ETCDIR%%/login_duo.conf
+%%ETCDIR%%/pam_duo.conf
+include/duo.h
+lib/libduo.so.3
+lib/libduo.so
+lib/libduo.la
+lib/libduo.a
+libdata/pkgconfig/libduo.pc
+lib/security/pam_duo.so
+lib/security/pam_duo.la
+lib/security/pam_duo.a
+sbin/login_duo
+@dirrmtry lib/security
+@dirrmtry %%ETCDIR%%