[bug#32052] [PATCH] gnu: Add oath-toolkit.

[bug#32052] [PATCH] gnu: Add oath-toolkit.

[Tobias Geerinckx-Rice]

* gnu/packages/authentication.scm: New file.
(oath-toolkit): New public variable.
* gnu/local.mk (GNU_SYSTEM_MODULES): Add the new file.
---

2FA, AF.

 gnu/local.mk                    |  1 +
 gnu/packages/authentication.scm | 69 +++++++++++++++++++++++++++++++++++++++++
 2 files changed, 70 insertions(+)
 create mode 100644 gnu/packages/authentication.scm

diff --git a/gnu/local.mk b/gnu/local.mk
index dad664ca1..fe5e40b89 100644
--- a/gnu/local.mk
+++ b/gnu/local.mk
@@ -67,6 +67,7 @@ GNU_SYSTEM_MODULES =				\
   %D%/packages/attr.scm				\
   %D%/packages/audio.scm			\
   %D%/packages/augeas.scm			\
+  %D%/packages/authentication.scm		\
   %D%/packages/autogen.scm			\
   %D%/packages/autotools.scm			\
   %D%/packages/avahi.scm			\
diff --git a/gnu/packages/authentication.scm b/gnu/packages/authentication.scm
new file mode 100644
index 000000000..1d3e1ec1a
--- /dev/null
+++ b/gnu/packages/authentication.scm
@@ -0,0 +1,69 @@
+;;; GNU Guix --- Functional package management for GNU
+;;; Copyright © 2018 Tobias Geerinckx-Rice <me@tobias.gr>
+;;;
+;;; This file is part of GNU Guix.
+;;;
+;;; GNU Guix is free software; you can redistribute it and/or modify it
+;;; under the terms of the GNU General Public License as published by
+;;; the Free Software Foundation; either version 3 of the License, or (at
+;;; your option) any later version.
+;;;
+;;; GNU Guix is distributed in the hope that it will be useful, but
+;;; WITHOUT ANY WARRANTY; without even the implied warranty of
+;;; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+;;; GNU General Public License for more details.
+;;;
+;;; You should have received a copy of the GNU General Public License
+;;; along with GNU Guix.  If not, see <http://www.gnu.org/licenses/>.
+
+(define-module (gnu packages authentication)
+  #:use-module (gnu packages linux)
+  #:use-module (gnu packages pkg-config)
+  #:use-module (guix build-system gnu)
+  #:use-module (guix download)
+  #:use-module ((guix licenses) #:prefix license:)
+  #:use-module (guix packages))
+
+(define-public oath-toolkit
+  ;; If gcc@7 breaks this package before its next release, try patching it:
+  ;; <https://gitlab.com/oath-toolkit/oath-toolkit/issues/2#note_52958748>.
+  (package
+    (name "oath-toolkit")
+    (version "2.6.2")
+    (source
+     (origin
+       (method url-fetch)
+       (uri (string-append "https://download.savannah.nongnu.org/releases/"
+                           name "/" name "-" version ".tar.gz"))
+       (sha256
+        (base32 "182ah8vfbg0yhv6mh1b6ap944d0na6x7lpfkwkmzb6jl9gx4cd5h"))))
+    (build-system gnu-build-system)
+    (arguments
+     ;; TODO ‘--enable-pskc’ causes xmlsec-related test suite failures.
+     `(#:configure-flags
+       (list "--enable-pam")))
+    (native-inputs
+     `(("pkg-config" ,pkg-config)))
+    (inputs
+     `(("linux-pam" ,linux-pam)))       ; for --enable-pam
+    (home-page "https://www.nongnu.org/oath-toolkit/")
+    (synopsis "One-time password (OTP) components")
+    ;; TODO Add the following items after they've been enabled.
+    ;; @item @command{pskctool}, a command-line tool for manipulating secret key
+    ;; files in the Portable Symmetric Key Container (@dfn{PSKC}) format
+    ;; described in RFC6030.
+    ;; @item @code{libpskc}, a shared and static C library for PSKC handling.
+    (description
+     "The @dfn{OATH} (Open AuTHentication) Toolkit provides various components
+for building one-time password (@dfn{OTP}) authentication systems:
+
+@itemize
+@item @command{oathtool}, a command-line tool for generating & validating OTPs.
+@item @code{liboath}, a shared and static C library for OATH handling.
+@item @code{pam_oath}, a PAM module for pluggable login authentication.
+@end itemize
+
+Supported technologies include the event-based @dfn{HOTP} algorithm (RFC4226)
+and the time-based @dfn{TOTP} algorithm (RFC6238).")
+    (license (list license:lgpl2.1+     ; the libraries (liboath/ & libpskc/)
+                   license:gpl3+))))    ; the tools (everything else)
-- 
2.16.2

[bug#32052] [PATCH] gnu: Add oath-toolkit.

[Tobias Geerinckx-Rice]

Tobias Geerinckx-Rice wrote:
> +@item @code{liboath}, a shared and static C library for OATH 
> handling.

Actually, I'd like to manually delete the static (.a) 
libraries. Objections?

Kind regards,

T G-R

[bug#32052] [PATCH] gnu: Add oath-toolkit.

[Marius Bakke]

[-- Attachment #1: Type: text/plain, Size: 385 bytes --]

Tobias Geerinckx-Rice <me@tobias.gr> writes:

> Tobias Geerinckx-Rice wrote:
>> +@item @code{liboath}, a shared and static C library for OATH 
>> handling.
>
> Actually, I'd like to manually delete the static (.a) 
> libraries. Objections?

No objections.  Although if it's well behaved, you may be able to simply
add (outputs ("out" "static")) to move them out of the way.

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 487 bytes --]

[bug#32052] [PATCH] gnu: Add oath-toolkit.

[Ludovic Courtès]

Marius Bakke <mbakke@fastmail.com> skribis:

> Tobias Geerinckx-Rice <me@tobias.gr> writes:
>
>> Tobias Geerinckx-Rice wrote:
>>> +@item @code{liboath}, a shared and static C library for OATH 
>>> handling.
>>
>> Actually, I'd like to manually delete the static (.a) 
>> libraries. Objections?
>
> No objections.  Although if it's well behaved, you may be able to simply
> add (outputs ("out" "static")) to move them out of the way.

Note that the “static” output is not handled automatically; you need to
manually move files around.

But I think it’s OK to just delete them in this case.

Ludo’.

bug#32052: [PATCH] gnu: Add oath-toolkit.

[Tobias Geerinckx-Rice]

Ludo', Marius,

Ludovic Courtès wrote:
> Marius Bakke <mbakke@fastmail.com> skribis:
>
>> Tobias Geerinckx-Rice <me@tobias.gr> writes:
>>> Actually, I'd like to manually delete the static (.a) 
>>> libraries. Objections?
>>
>> No objections.  Although if it's well behaved, you may be able 
>> to simply
>> add (outputs ("out" "static")) to move them out of the way.
>
> Note that the “static” output is not handled automatically; you 
> need to
> manually move files around.
>
> But I think it’s OK to just delete them in this case.

Done in commit b3543e6c79d547434c231eadc5089c720755ff73.

Thanks to you both!

T G-R