# $Cambridge: hermes/src/prayer/defaults/Config-RPM,v 1.9 2010/07/01 12:12:05 dpc22 Exp $
#
# Prayer - a Webmail Interface
#
# Copyright (c) University of Cambridge 2000 - 2002
# See the file NOTICE for conditions of use and distribution.
#
# Config file for Redhat RPM system

SSL_ENABLE           = true   # SSL requires OpenSSL
SESSION_CACHE_ENABLE = true   # SSL session cache Requires Berkeley DB 3 or 4
GZIP_ENABLE          = true   # Enable on the fly compression of pages
LDAP_ENABLE          = true   # Add LDAP interface
FENCE_ENABLE         = false  # Use Electric Fence to catch malloc problems
DIRECT_ENABLE        = false  # Experimental. Leave this switched off... 
TIDY_ENABLE          = true   # Use libtidy for HTML sanitisation.

# Following depend on the way that you have configured c-client
CCLIENT_SSL_ENABLE   = false  # C-client was built with SSL support
CCLIENT_PAM_ENABLE   = false  # C-client was built with PAM support
CCLIENT_KERB_ENABLE  = false  # C-client was built with Kerberos support

# Probably don't need the following
RAVEN_ENABLE         = false  # Only of use in Cambridge at the moment.
ACCOUNTD_ENABLE      = false  # Only of use in Cambridge at the moment.
ACCOUNTD_SSL_ENABLE  = false  # Enable SSL support in account management daemon
ACCOUNTD_PAM_ENABLE  = true   # Enable PAM support in account management daemon

############################################################################
# Location of compiler
CC           = gcc
# Location of make program (GNU make required)
MAKE         = gmake
# Location of install program (GNU install or compatible required)
INSTALL      = install

# Base Compiler options for GCC
BASE_LIBS    = -lcrypt -lutil

ifdef CPPFLAGS
  BASECFLAGS   = $(CPPFLAGS)
else
  BASECFLAGS   = -Wall -O2
endif
ifdef INCLUDES
  BASECFLAGS += $(INCLUDES)
endif
ifdef LDFLAGS
 BASELDFLAGS  = $(LDFLAGS)
else
 BASELDFLAGS  = -s
endif

############################################################################
# Location of various include files and libraries.
############################################################################

# Location of c-client library.
# Following works with imap-devel RPM package from Redhat 7.
#
CCLIENT_INCLUDE = -I/usr/include/imap
CCLIENT_LIBS    = -lc-client
#
# Complication:
#   The Redhat RPM package links against SSL, PAM and kerberos libraries.
#
CCLIENT_SSL_ENABLE  = true
CCLIENT_PAM_ENABLE  = true
CCLIENT_KERB_ENABLE = true

############################################################################

# Electric fence (required if FENCE_ENABLE set)
FENCE_INCLUDE=
FENCE_LIBS=-lmcheck

# Enable hrml_secure_tidy (required if TIDY_ENABLE set)
TIDY_INCLUDE=
TIDY_LIBS=-ltidy

# Zlib (required if GZIP_ENABLE set)
Z_INCLUDE =
Z_LIBS    = -lz

# LDAP (required if LDAP_ENABLE set)
LDAP_INCLUDE =
LDAP_LIBS    = -lldap

# Pam (required if CCLIENT_PAM_ENABLE set)
PAM_INCLUDE =
PAM_LIBS    = -lpam

# Kerberos (required if CCLIENT_KERB_ENABLE set)
KERB_INCLUDE = -I/usr/kerberos/include
KERB_LIBS    = -L/usr/kerberos/lib -lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err

# SSL definitions (required if SSL_ENABLE or CCLIENT_SSL_ENABLE set)
#
# Following suitable for Linux and FreeBSD which have SSL preinstalled
# (Header files from OpenSSL 0.9.7 want to include various Kerboros stuff)
#
SSL_INCLUDE= -I/usr/kerberos/include
SSL_LIBS=-lssl -lcrypto
OPENSSL=openssl

# DB definitions (required if SESSION_CACHE_ENABLE set)
#
# Following suitable for Redhat Linux which has DB 3 preinstalled
DB_INCLUDE=
DB_LIBS=-ldb

############################################################################

# Install location of prayer configuration and support files. The initial
# config file runs prayer processes as user "prayer" and group "prayer".
# If you are using SSL, the certificate file must be readable by RW_USER or
# RW_GROUP. It is important that nothing else can read the certificate file.

# Build root (used by Redhat RPM system)
BROOT=${RPM_BUILD_ROOT}

# Directory, User and group for read-write files: log files, sockets etc
VAR_PREFIX = /var/spool/prayer
RW_USER    = prayer
RW_GROUP   = prayer

# Root Directory, User and group for read-only configuration files.
# Default configuration and permissions does not allow prayer user to
# update prayer configuration file.

PREFIX    = /usr/share/prayer
RO_USER   = root
RO_GROUP  = prayer

# Access permissions for general objects (wrt above users and groups)
PUBLIC_EXEC  = 0755
PUBLIC_DIR   = 0755
PUBLIC_FILE  = 0644

# Access permissions for private objects (wrt above users and groups)
PRIVATE_EXEC = 0750
PRIVATE_DIR  = 0750
PRIVATE_FILE = 0640

# Location of configuration files and binaries
PRAYER_CONFIG_FILE   = /etc/prayer.cf
BIN_DIR              = /usr/sbin
ACCOUNTD_CONFIG_FILE = /etc/prayer-accountd.cf
