#!/bin/sh

set -e

. /usr/share/debconf/confmodule

if [ ! -f /var/log/heimdal-kdc.log ]
then
	touch /var/log/heimdal-kdc.log
	chmod 600 /var/log/heimdal-kdc.log
fi

add_servers() {
kadmin_entry="kerberos-adm	stream	tcp	nowait	root	/usr/sbin/tcpd /usr/lib/heimdal-servers/kadmind"
hprop_entry="#krb_prop	stream	tcp	nowait	root	/usr/sbin/tcpd /usr/sbin/hpropd"

	update-inetd --group KRB5 --add "$kadmin_entry"
	update-inetd --group KRB5 --add "$hprop_entry"
}

enable_servers() {
	update-inetd --pattern '[ \t]/usr/lib/heimdal-servers/kadmind' --enable kerberos-adm
}

# if not configured but config exists in wrong place, try moving existing configuration
if [ ! -f /etc/heimdal-kdc/.configured ] &&
   [   -f /var/lib/heimdal-kdc/.configured ]
then
        for i in kdc.conf kadmind.acl
        do
                if [ -f /var/lib/heimdal-kdc/$i ]
                then
                        mv /var/lib/heimdal-kdc/$i /etc/heimdal-kdc/$i
                        ln -s /etc/heimdal-kdc/$i /var/lib/heimdal-kdc/$i
                fi
        done
        mv /var/lib/heimdal-kdc/.configured /etc/heimdal-kdc/.configured
fi

# Sample kdc.conf was broken in older versions, create symlink to kadmind.acl
# as a work around
if [ -n "$2" ] && dpkg --compare-versions "$2" lt 1.2.dfsg.1-3; then
        # also check to make sure that the symlink to kdc.conf exists - it is
        # required
        for i in kdc.conf kadmind.acl
        do
                if [ ! -e /var/lib/heimdal-kdc/$i ]
                then
                        ln -s /etc/heimdal-kdc/$i /var/lib/heimdal-kdc/$i
                fi
        done
fi

# if already configured - dont reconfigure
if [ ! -f /etc/heimdal-kdc/.configured ]
then
        db_get heimdal/realm; REALM="$RET"

        # get password
        db_get heimdal-kdc/password; PASSWORD="$RET"
        db_set heimdal-kdc/password ""

        # do stuff
        DST=/etc/heimdal-kdc/kdc.conf
        cat /usr/share/heimdal-kdc/kdc.conf > "$DST"
        # note this symlink is required as we haven't patched the source
        if [ ! -e /var/lib/heimdal-kdc/kdc.conf ]
        then
                ln -s "$DST" /var/lib/heimdal-kdc/kdc.conf
        fi

        DST=/etc/heimdal-kdc/kadmind.acl
        cp -a /usr/share/heimdal-kdc/kadmind.acl "$DST"

        if [ -z "$PASSWORD" ]; then
            kstash -k /var/lib/heimdal-kdc/m-key --random-key
        else
            kstash -k /var/lib/heimdal-kdc/m-key --master-key-fd=0 <<EOF
$PASSWORD
EOF
        fi

        kadmin  -l init --realm-max-ticket-life=unlimited --realm-max-renewable-life=unlimited "$REALM"

        touch /etc/heimdal-kdc/.configured
fi

case "$1" in
abort-upgrade | abort-deconfigure | abort-remove)
        ;;
configure)
        if [ -z "$2" ]
        then
                add_servers
        elif dpkg --compare-versions "$2" le "0.7.2.dfsg.1-6"
        then
                enable_servers
        fi
        ;;
*)
        printf "$0: incorrect arguments: $*\n" >&2
        exit 1
        ;;
esac

# Automatically added by dh_installinit/13.15.2
if [ "$1" = "configure" ] || [ "$1" = "abort-upgrade" ] || [ "$1" = "abort-deconfigure" ] || [ "$1" = "abort-remove" ] ; then
	if [ -z "${DPKG_ROOT:-}" ] && [ -x "/etc/init.d/heimdal-kdc" ]; then
		update-rc.d heimdal-kdc defaults >/dev/null
		if [ -n "$2" ]; then
			_dh_action=restart
		else
			_dh_action=start
		fi
		invoke-rc.d heimdal-kdc $_dh_action || exit 1
	fi
fi
# End automatically added section