1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
|
#!/bin/sh -e
PACKAGE=libnss-ldap
CONFFILE="/etc/libnss-ldap.conf"
add_missing()
{
# FIXME: it would be nice to get the prototype from a template.
parameter=$1
value=$2
echo "$parameter $value" >> $CONFFILE
}
change_value()
{
parameter=$1
value=$2
commented=0 ; notthere=0
egrep -i -q "^$parameter " $CONFFILE || notthere=1
if [ "$notthere" = "1" ]; then
if ( egrep -i -q "^# *$parameter" $CONFFILE ); then
notthere=0
commented=1
fi
fi
if [ "$notthere" = "1" ]; then
add_missing $parameter $value
else
replacestring="^$parameter .*"
if [ "$commented" = "1" ]; then
replacestring="^# *$parameter .*"
fi
# i really need a better way to do this...
# currently we replace only the first match, we need a better
# way of dealing with multiple hits.
perl -i -p -e "s/$replacestring/$parameter $value/i
and \$match=1 if (\$match != 1)" $CONFFILE
fi
}
disable_param()
{
parameter=$1
enabled=0
egrep -q "^$parameter " $CONFFILE && enabled=1
if [ "$enabled" = "1" ]; then
perl -i -p -e "s/^($parameter .*)/#\$1/i" $CONFFILE
fi
}
# Real functions begin here.
case "$1" in
configure)
# ok, lets get to business..
. /usr/share/debconf/confmodule
# lets create the configuration from example if it's not there.
examplefile=/usr/share/$PACKAGE/ldap.conf
if [ ! -e $CONFFILE -a -e $examplefile ]; then
cat > $CONFFILE << EOM
###DEBCONF###
# the configuration of this file will be done by debconf as long as the
# first line of the file says '###DEBCONF###'
#
# you should use dpkg-reconfigure libnss-ldap to configure this file.
#
EOM
cat $examplefile >> $CONFFILE
chmod 0644 $CONFFILE
db_set libnss-ldap/override true
fi
db_get libnss-ldap/override
if [ "$RET" = "true" ]; then
if ( head -1 $CONFFILE | grep -q -v '###DEBCONF###' ); then
mv $CONFFILE $CONFFILE.tmp
cat > $CONFFILE << EOM
###DEBCONF###
EOM
cat $CONFFILE.tmp >> $CONFFILE
rm -f $CONFFILE.tmp
chmod 0644 $CONFFILE
fi
db_get shared/ldapns/ldap-server
change_value host "$RET"
db_get shared/ldapns/base-dn
change_value base "$RET"
db_get shared/ldapns/ldap_version
change_value ldap_version "$RET"
db_get libnss-ldap/dblogin
if [ "$RET" = "true" ]; then
# user wants to log in to the database, so be it.
db_get libnss-ldap/binddn
change_value binddn "$RET"
db_get libnss-ldap/bindpw
if [ "$RET" != "" ]; then
change_value bindpw "$RET"
db_set libnss-ldap/bindpw ''
fi
else
# once again, user didn't.. lets make sure we dont.
disable_param binddn
disable_param bindpw
fi
db_get libnss-ldap/confperm
if [ "$RET" = "true" ]; then
# FIXME: we need a way to check if the file
# was 0700 and we removed the flag.
chmod 0600 $CONFFILE
else
# ICK! ugly hack, but i didn't get anything
# better to work.
find $CONFFILE -perm 0600 -exec chmod 0644 {} \;
fi
fi
db_stop
;;
abort-upgrade|abort-remove|abort-deconfigure)
exit 0
;;
*)
echo "postinst called with unknown argument \`$1'" >&2
exit 1
;;
esac
if [ -s /usr/sbin/nscd ]; then
if [ `pidof -s nscd` ]; then
/etc/init.d/nscd restart
fi
fi
#DEBHELPER#
|
