# # Copyright 2005 Sun Microsystems, Inc. All rights reserved. # Use is subject to license terms. # # CDDL HEADER START # # The contents of this file are subject to the terms of the # Common Development and Distribution License, Version 1.0 only # (the "License"). You may not use this file except in compliance # with the License. # # You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE # or http://www.opensolaris.org/os/licensing. # See the License for the specific language governing permissions # and limitations under the License. # # When distributing Covered Code, include this CDDL HEADER in each # file and include the License file at usr/src/OPENSOLARIS.LICENSE. # If applicable, add the following below this CDDL HEADER, with the # fields enclosed by brackets "[]" replaced with your own identifying # information: Portions Copyright [yyyy] [name of copyright owner] # # CDDL HEADER END # # ident "%Z%%M% %I% %E% SMI" # add the kprop script to crontab if needed DEST=${PKG_INSTALL_ROOT:-/}/var/spool/cron/crontabs/root grep -s /usr/lib/krb5/kprop_script $DEST >/dev/null 2>&1 if [ $? -ne 0 ]; then echo "#10 3 * * * /usr/lib/krb5/kprop_script ___slave_kdcs___" >>$DEST fi # add SEAM URL for gkadmin if needed KRB5_CFG=${PKG_INSTALL_ROOT:-/}/etc/krb5/krb5.conf grep -s "^[# ]*gkadmin[ ]=[ ]{" $KRB5_CFG >/dev/null 2>&1 if [ $? -ne 0 ]; then echo " gkadmin = {" >>$KRB5_CFG echo " help_url = http://docs.sun.com:80/ab2/coll.384.1/SEAM/@AB2PageView/1195" >>$KRB5_CFG echo " }" >>$KRB5_CFG fi if [ "$UPDATE" = yes ]; then cat >> ${PKG_INSTALL_ROOT:-/}/var/svc/profile/upgrade <<-EOF # We are deleting and reimporting kpropd's manifest, because we # need to change the restarter. kpfmri="svc:/network/security/krb5_prop" kkfmri="svc:/network/security/krb5kdc:default" lkpmani="/var/svc/manifest/network/security/krb5_prop.xml" restarter=\`svcprop -c -p general/restarter \$kpfmri 2>&1\` case \$restarter in *network/inetd:default) kken=\`svcprop -c -p general/enabled \$kkfmri\` svccfg delete -f \$kpfmri svccfg import \$lkpmani # Enable kpropd if krb5kdc is enabled, since # krb5kdc would have run kpropd if [ \$kken = "true" ]; then svcadm enable \$kpfmri fi ;; esac EOF fi exit 0