Cross Reference: /illumos-gate/usr/src/cmd/svc/milestone/net-nwam

	net-nwam revision 1cfa752f4e24c34133009b0f6c139127a5c461de
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes#!/sbin/sh
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes#
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes# CDDL HEADER START
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes#
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes# The contents of this file are subject to the terms of the
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes# Common Development and Distribution License (the "License").
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes# You may not use this file except in compliance with the License.
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes#
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes# or http://www.opensolaris.org/os/licensing.
0662ed52e814f8f08ef0e09956413a792584eddffuankg# See the License for the specific language governing permissions
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes# and limitations under the License.
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes#
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes# When distributing Covered Code, include this CDDL HEADER in each
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes# If applicable, add the following below this CDDL HEADER, with the
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes# fields enclosed by brackets "[]" replaced with your own identifying
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes# information: Portions Copyright [yyyy] [name of copyright owner]
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes#
70953fb44a7140fe206c3a5f011e24209c8c5c6abnicholes# CDDL HEADER END
70953fb44a7140fe206c3a5f011e24209c8c5c6abnicholes#
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes#
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes# Copyright (c) 2007, 2010, Oracle and/or its affiliates. All rights reserved.
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes#
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes. /lib/svc/share/smf_include.sh
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes. /lib/svc/share/net_include.sh
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes# FMRI constants
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholesIPSEC_IKE_FMRI="svc:/network/ipsec/ike"
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholesIPSEC_POLICY_FMRI="svc:/network/ipsec/policy"
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholesIPFILTER_FMRI="svc:/network/ipfilter:default"
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholesNIS_CLIENT_FMRI="svc:/network/nis/client:default"
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholesNET_PHYS_FMRI="svc:/network/physical:default"
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholesNET_NWAM_FMRI="svc:/network/physical:nwam"
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholesNET_LOC_FMRI="svc:/network/location:default"
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes#
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes# Default *.conf files
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes# Set appropriate config SMF property to these files when NWAM is stopped
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes# and corresponding config properties in the Legacy location are emtpy
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes#
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholesIPF6_DEFAULT_CONFIG_FILE=/etc/ipf/ipf6.conf
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholesIPNAT_DEFAULT_CONFIG_FILE=/etc/ipf/ipnat.conf
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholesIPPOOL_DEFAULT_CONFIG_FILE=/etc/ipf/ippool.conf
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholesIPSEC_IKE_DEFAULT_CONFIG_FILE=/etc/inet/ike/config
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholesIPSEC_POLICY_DEFAULT_CONFIG_FILE=/etc/inet/ipsecinit.conf
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes# commands
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholesBASENAME=/usr/bin/basename
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholesCAT=/usr/bin/cat
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholesCP=/usr/bin/cp
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholesDOMAINNAME=/usr/bin/domainname
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholesGREP=/usr/bin/grep
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholesLDAPCLIENT=/usr/sbin/ldapclient
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholesMKDIR=/usr/bin/mkdir
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholesMKFIFO=/usr/bin/mkfifo
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholesNAWK=/usr/bin/nawk
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholesNWAMCFG=/usr/sbin/nwamcfg
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholesRM=/usr/bin/rm
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholesSVCADM=/usr/sbin/svcadm
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholesSVCCFG=/usr/sbin/svccfg
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholesSVCPROP=/usr/bin/svcprop
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes# Path to directories
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes# We don't have a writable file system so we write to /etc/svc/volatile and
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes# then later copy anything interesting to /etc/nwam.
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholesLEGACY_PATH=/etc/svc/volatile/nwam/Legacy
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholesNIS_BIND_PATH=/var/yp/binding
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes#
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes# copy_to_legacy_loc <file>
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes#
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes# Copies the file to the Legacy location directory
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes#
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholescopy_to_legacy_loc() {
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes    $MKDIR -p $LEGACY_PATH
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes    if [ -f "$1" ]; then
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes        $CP -p $1 $LEGACY_PATH
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes    fi
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes}
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes#
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes# copy_from_legacy_loc <destination file>
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes#
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes# Copies file with the same name from Legacy location to the given
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes# destination file
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes#
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholescopy_from_legacy_loc () {
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes    DEST_DIR=`/usr/bin/dirname $1`
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes    SRC_FILE="$LEGACY_PATH/`$BASENAME $1`"
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes    # Make destination directory if needed
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes    if [ ! -d "$DEST_DIR" ]; then
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes        $MKDIR -p $DEST_DIR
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes    fi
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes    if [ -f "$SRC_FILE" ]; then
0a39e7683f6611d66c55712f50bb240428d832a1bnicholes        $CP -p $SRC_FILE $DEST_DIR
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes    fi
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes}
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes#
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes# write_loc_prop <property> <value> <file>
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes#
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes# Appends to <file> a nwamcfg command to set <property> to <value> if non-empty
63e6fde94d80a39bd87f3893a5f9515fdbdb7aa4bnicholes#
63e6fde94d80a39bd87f3893a5f9515fdbdb7aa4bnicholeswrite_loc_prop () {
63e6fde94d80a39bd87f3893a5f9515fdbdb7aa4bnicholes    prop=$1
63e6fde94d80a39bd87f3893a5f9515fdbdb7aa4bnicholes    val=$2
63e6fde94d80a39bd87f3893a5f9515fdbdb7aa4bnicholes    file=$3
63e6fde94d80a39bd87f3893a5f9515fdbdb7aa4bnicholes
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes    if [ -n "$val" -a -n "$file" ]; then
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes        echo "set $prop=$val" >> $file
0662ed52e814f8f08ef0e09956413a792584eddffuankg    fi
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes}
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes#
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes# set_smf_prop <fmri> <property name> <property value>
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes#
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholesset_smf_prop () {
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes    $SVCCFG -s $1 setprop $2 = astring: "$3" && return
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes}
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes#
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes# get_smf_prop <fmri> <property name>
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes#
0662ed52e814f8f08ef0e09956413a792584eddffuankgget_smf_prop () {
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes    $SVCPROP -p $2 $1
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes}
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes#
0662ed52e814f8f08ef0e09956413a792584eddffuankg# Creates Legacy location from the current configuration
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes#
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholescreate_legacy_loc () {
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes    CREATE_LOC_LEGACY_FILE=/etc/svc/volatile/nwam/create_loc_legacy
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes    #
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes    # Write nwamcfg commands to create Legacy location to
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes    # $CREATE_LOC_LEGACY_FILE as values for properties are determined
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes    # Note that some of the *_CONFIG_FILE variables point at copies of
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes    # files we've made and others indicate where those copies should be
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes    # if we are enabling the location.
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes    #
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes    echo "create loc Legacy" > $CREATE_LOC_LEGACY_FILE
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes    write_loc_prop "activation-mode" "system" $CREATE_LOC_LEGACY_FILE
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes    NAMESERVICES=""
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes    NAMESERVICES_CONFIG_FILE=""
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes    DNS_NAMESERVICE_CONFIGSRC=""
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes    DNS_NAMESERVICE_DOMAIN=""
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes    DNS_NAMESERVICE_SERVERS=""
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes    DNS_NAMESERVICE_SEARCH=""
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes    NIS_NAMESERVICE_CONFIGSRC=""
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes    NIS_NAMESERVICE_SERVERS=""
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes    LDAP_NAMESERVICE_CONFIGSRC=""
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes    LDAP_NAMESERVICE_SERVERS=""
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes    DEFAULT_DOMAIN=""
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes    # Copy /etc/nsswitch.conf file
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes    copy_to_legacy_loc /etc/nsswitch.conf
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes    NAMESERVICES_CONFIG_FILE="$LEGACY_PATH/nsswitch.conf"
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes    # Gather DNS info from resolv.conf if present.
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes    if [ -f /etc/resolv.conf ]; then
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes        NAMESERVICES="dns,"
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes        $GREP -i "added by dhcp" /etc/nsswitch.conf >/dev/null
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes        if [ $? -eq 0 ]; then
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes            DNS_NAMESERVICE_CONFIGSRC="dhcp"
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes        else
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes            DNS_NAMESERVICE_CONFIGSRC="manual"
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes            DNS_NAMESERVICE_DOMAIN=`$NAWK '$1 == "domain" {\
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes                print $2 }' < /etc/resolv.conf`
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes            DNS_NAMESERVICE_SERVERS=`$NAWK '$1 == "nameserver" \
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes                { printf "%s,", $2 }' < /etc/resolv.conf`
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes            DNS_NAMESERVICE_SEARCH=`$NAWK '$1 == "search" \
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes                { printf "%s,", $2 }' < /etc/resolv.conf`
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes            copy_to_legacy_loc /etc/resolv.conf
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes        fi
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes    fi
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes    # Gather NIS info from appropriate file if present.
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes    if service_is_enabled $NIS_CLIENT_FMRI; then
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes        NAMESERVICES="${NAMESERVICES}nis,"
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes        NIS_NAMESERVICE_CONFIGSRC="manual"
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes        DEFAULT_DOMAIN=`$CAT /etc/defaultdomain`
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes        yp_servers=`$NAWK '{ printf "%s ", $1 }' \
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes            < $NIS_BIND_PATH/$DEFAULT_DOMAIN/ypservers`
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes        for serv in $yp_servers; do
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes            if is_valid_addr $serv; then
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes                addr="$serv,"
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes            else
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes                addr=`$GREP -iw $serv /etc/inet/hosts | \
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes                    $NAWK '{ printf "%s,", $1 }'`
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes            fi
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes            NIS_NAMESERVICE_SERVERS="${NIS_NAMESERVICE_SERVERS}$addr"
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes        done
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes    fi
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes    # Gather LDAP info via ldapclient(1M).
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes    if [ -f /var/ldap/ldap_client_file ]; then
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes        copy_to_legacy /var/ldap/ldap_client_file
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes        NAMESERVICES="${NAMESERVICES}ldap,"
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes        LDAP_NAMESERVICE_CONFIGSRC="manual"
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes        LDAP_NAMESERVICE_SERVERS=`$LDAPCLIENT list 2>/dev/null | \
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes            $NAWK '$1 == "preferredServerList:" { print $2 }'`
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes        DEFAULT_DOMAIN=`$CAT /etc/defaultdomain`
8ffac2c334103c0336602aaede650cb578611151fuankg    fi
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes    # Now, write nwamcfg commands for nameservices
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes    write_loc_prop "nameservices" $NAMESERVICES $CREATE_LOC_LEGACY_FILE
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes    write_loc_prop "nameservices-config-file" $NAMESERVICES_CONFIG_FILE \
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes        $CREATE_LOC_LEGACY_FILE
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes    write_loc_prop "dns-nameservice-configsrc" $DNS_NAMESERVICE_CONFIGSRC \
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes        $CREATE_LOC_LEGACY_FILE
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes    write_loc_prop "dns-nameservice-domain" $DNS_NAMESERVICE_DOMAIN \
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes        $CREATE_LOC_LEGACY_FILE
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes    write_loc_prop "dns-nameservice-servers" $DNS_NAMESERVICE_SERVERS \
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes        $CREATE_LOC_LEGACY_FILE
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes    write_loc_prop "dns-nameservice-search" $DNS_NAMESERVICE_SEARCH \
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes        $CREATE_LOC_LEGACY_FILE
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes    write_loc_prop "nis-nameservice-configsrc" $NIS_NAMESERVICE_CONFIGSRC \
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes        $CREATE_LOC_LEGACY_FILE
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes    write_loc_prop "nis-nameservice-servers" $NIS_NAMESERVICE_SERVERS \
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes        $CREATE_LOC_LEGACY_FILE
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes    write_loc_prop "ldap-nameservice-configsrc" $LDAP_NAMESERVICE_CONFIGSRC\
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes        $CREATE_LOC_LEGACY_FILE
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes    write_loc_prop "ldap-nameservice-servers" $LDAP_NAMESERVICE_SERVERS \
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes        $CREATE_LOC_LEGACY_FILE
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes    write_loc_prop "default-domain" $DEFAULT_DOMAIN $CREATE_LOC_LEGACY_FILE
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes    # Retrieve NFSv4 domain.
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes    if [ -f /etc/default/nfs ]; then
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes        copy_to_legacy_loc /etc/default/nfs
0662ed52e814f8f08ef0e09956413a792584eddffuankg        NFS_DOMAIN=`$NAWK '/^NFSMAPID_DOMAIN.*/ { FS="=" ; print $2 }' \
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes            < /etc/default/nfs`
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes        write_loc_prop "nfsv4-domain" \
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes            $NFS_DOMAIN $CREATE_LOC_LEGACY_FILE
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes    fi
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes    IPF_CONFIG_FILE=""
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes    IPF6_CONFIG_FILE=""
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes    IPNAT_CONFIG_FILE=""
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes    IPPOOL_CONFIG_FILE=""
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes    IKE_CONFIG_FILE=""
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes    IPSEC_POLICY_CONFIG_FILE=""
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes
0662ed52e814f8f08ef0e09956413a792584eddffuankg    #
d4e693ea6364a22d20884f3e6a98f2a2d271c778bnicholes    # IPFilter
    #
    # If the firewall policy is "custom", simply copy the
    # custom_policy_file.  If the firewall policy is "none", "allow" or
    # "deny", save the value as "/<value>".  When reverting back to the
    # Legacy location, these values will have to be treated as special.
    #
    # For all configuration files, copy them to the Legacy directory.
    # Use the respective properties to remember the original locations
    # of the files so that they can be copied back there when NWAM is
    # stopped.
    #
    if service_is_enabled $IPFILTER_FMRI; then
        FIREWALL_POLICY=`get_smf_prop $IPFILTER_FMRI \
            firewall_config_default/policy`
        if [ "$FIREWALL_POLICY" = "custom" ]; then
            IPF_CONFIG_FILE=`get_smf_prop $IPFILTER_FMRI \
                firewall_config_default/custom_policy_file`
            copy_to_legacy_loc $IPF_CONFIG_FILE
        else
            # save value as /none, /allow, or /deny
            IPF_CONFIG_FILE="/$FIREWALL_POLICY"
        fi
        IPF6_CONFIG_FILE=`get_smf_prop $IPFILTER_FMRI \
            config/ipf6_config_file`
        copy_to_legacy_loc $IPF6_CONFIG_FILE

        IPNAT_CONFIG_FILE=`get_smf_prop $IPFILTER_FMRI \
            config/ipnat_config_file`
        copy_to_legacy_loc $IPNAT_CONFIG_FILE

        IPPOOL_CONFIG_FILE=`get_smf_prop $IPFILTER_FMRI \
            config/ippool_config_file`
        copy_to_legacy_loc $IPPOOL_CONFIG_FILE
    fi

    # IKE
    if service_is_enabled $IPSEC_IKE_FMRI:default; then
        IKE_CONFIG_FILE=`get_smf_prop $IPSEC_IKE_FMRI config/config_file`
        copy_to_legacy_loc $IKE_CONFIG_FILE
    fi

    # IPsec
    if service_is_enabled $IPSEC_POLICY_FMRI:default; then
        IPSEC_POLICY_CONFIG_FILE=`get_smf_prop $IPSEC_POLICY_FMRI \
            config/config_file`
        copy_to_legacy_loc $IPSEC_POLICY_CONFIG_FILE
    fi

    if [ -n "$IPF_CONFIG_FILE" -a \( "$IPF_CONFIG_FILE" = "/allow" \
        -o "$IPF_CONFIG_FILE" = "/deny" -o "$IPF_CONFIG_FILE" = "/none" \
        -o -f "$IPF_CONFIG_FILE" \) ]; then
        write_loc_prop "ipfilter-config-file" $IPF_CONFIG_FILE \
            $CREATE_LOC_LEGACY_FILE
    fi
    if [ -n "$IPF6_CONFIG_FILE" -a -f "$IPF6_CONFIG_FILE" ]; then
        write_loc_prop "ipfilter-v6-config-file" $IPF6_CONFIG_FILE \
            $CREATE_LOC_LEGACY_FILE
    fi
    if [ -n "$IPNAT_CONFIG_FILE" -a -f "$IPNAT_CONFIG_FILE" ]; then
        write_loc_prop "ipnat-config-file" $IPNAT_CONFIG_FILE \
            $CREATE_LOC_LEGACY_FILE
    fi
    if [ -n "$IPPOOL_CONFIG_FILE" -a -f "$IPPOOL_CONFIG_FILE" ]; then
        write_loc_prop "ippool-config-file" $IPPOOL_CONFIG_FILE \
            $CREATE_LOC_LEGACY_FILE
    fi
    if [ -n "$IKE_CONFIG_FILE" -a -f "$IKE_CONFIG_FILE" ]; then
        write_loc_prop "ike-config-file" $IKE_CONFIG_FILE \
            $CREATE_LOC_LEGACY_FILE
    fi
    if [ -n "$IPSEC_POLICY_CONFIG_FILE" -a -f "$IPSEC_POLICY_CONFIG_FILE" ]
    then
        write_loc_prop "ipsecpolicy-config-file" \
            $IPSEC_POLICY_CONFIG_FILE $CREATE_LOC_LEGACY_FILE
    fi

    # End
    echo "end" >> $CREATE_LOC_LEGACY_FILE
    # network/location will create the Legacy location with these commands.
}

#
# Undoes the effects of the Legacy location creation
#
revert_to_legacy_loc () {
    $SVCADM disable dns/client
    $SVCADM disable nis/client
    $SVCADM disable ldap/client

    # copy nsswitch.conf to /etc/nsswitch.conf
    copy_from_legacy_loc /etc/nsswitch.conf

    # DNS - copy resolv.conf to /etc/resolv.conf
    if [ -f "$LEGACY_PATH/resolv.conf" ]; then
        copy_from_legacy_loc /etc/resolv.conf
            $SVCADM enable dns/client
    fi

    # set /etc/defaultdomain and domainname(1M)
    DEFAULT_DOMAIN=`nwam_get_loc_prop Legacy default-domain`
    if [ -n "$DEFAULT_DOMAIN" ]; then
        $DOMAINNAME $DEFAULT_DOMAIN
        $DOMAINNAME > /etc/defaultdomain
    fi

    # NIS - directory and ypserver in /var/yp/binding/
    NIS_CONFIGSRC=`nwam_get_loc_prop Legacy nis-nameservice-configsrc`
    NIS_SERVERS=`nwam_get_loc_prop Legacy nis-nameservice-servers`
    if [ -n "$NIS_CONFIGSRC" ]; then
        if [ ! -d "$NIS_BIND_PATH/$DEFAULT_DOMAIN" ]; then
            $MKDIR -p $NIS_BIND_PATH/$DEFAULT_DOMAIN
        fi
        if [ -n "$NIS_SERVERS" ]; then
            echo "$NIS_SERVERS" | $NAWK \
                'FS="," { for (i = 1; i <= NF; i++) print $i }' \
                > $NIS_BIND_PATH/$DEFAULT_DOMAIN/ypservers
        fi
        $SVCADM enable nis/client
    fi

    # LDAP - copy ldap_client_file to /var/ldap/ldap_client_file
    if [ -f "$LEGACY_PATH/ldap_client_file" ]; then
        copy_from_legacy_loc /var/ldap/ldap_client_file
        $SVCADM enable ldap/client
    fi

    # Copy back nfs file
        copy_from_legacy_loc /etc/default/nfs

    # IPFilter, IPsec, and IKE
    ipf_file=`nwam_get_loc_prop Legacy ipfilter-config-file`
    ipf6_file=`nwam_get_loc_prop Legacy ipfilter-v6-config-file`
    ipnat_file=`nwam_get_loc_prop Legacy ipnat-config-file`
    ippool_file=`nwam_get_loc_prop Legacy ippool-config-file`
    ike_file=`nwam_get_loc_prop Legacy ike-config-file`
    pol_file=`nwam_get_loc_prop Legacy ipsecpolicy-config-file`

    if [ -n "$ike_file" ]; then
        copy_from_legacy_loc $ike_file
        set_smf_prop $IPSEC_IKE_FMRI config/config_file $ike_file
        $SVCADM refresh $IPSEC_IKE_FMRI
        $SVCADM enable $IPSEC_IKE_FMRI
    else
        set_smf_prop $IPSEC_IKE_FMRI config/config_file \
            $IPSEC_IKE_DEFAULT_CONFIG_FILE
        $SVCADM disable $IPSEC_IKE_FMRI
    fi
    if [ -n "$pol_file" ]; then
        copy_from_legacy_loc $pol_file
        set_smf_prop $IPSEC_POLICY_FMRI config/config_file $pol_file
        $SVCADM refresh $IPSEC_POLICY_FMRI
        $SVCADM enable $IPSEC_POLICY_FMRI
    else
        set_smf_prop $IPSEC_POLICY_FMRI config/config_file \
            $IPSEC_POLICY_DEFAULT_CONFIG_FILE
        $SVCADM disable $IPSEC_POLICY_FMRI
    fi

    refresh_ipf=false
    if [ -n "$ipf_file" ]; then
        # change /none, /allow, and /deny to firewall policy
        if [ "$ipf_file" = "/none" -o "$ipf_file" = "/allow" \
            -o "$ipf_file" = "/deny" ]; then
            policy=`echo "$ipf_file" | $NAWK 'FS="/" { print $2 }'`
            set_smf_prop $IPFILTER_FMRI \
                firewall_config_default/policy $policy
            # no need to clear custom_policy_file as it isn't "custom"
        else
            copy_from_legacy_loc $ipf_file
            set_smf_prop $IPFILTER_FMRI \
                firewall_config_default/policy "custom"
            set_smf_prop $IPFILTER_FMRI \
                firewall_config_default/custom_policy_file $ipf_file
        fi
        refresh_ipf=true
    fi
    if [ -n "$ipf6_file" ]; then
        copy_from_legacy_loc $ipf6_file
        set_smf_prop $IPFILTER_FMRI config/ipf6_config_file $ipf6_file
        refresh_ipf=true
    else
        set_smf_prop $IPFILTER_FMRI config/ipf6_config_file \
            $IPF6_DEFAULT_CONFIG_FILE
    fi
    if [ -n "$ipnat_file" ]; then
        copy_from_legacy_loc $ipnat_file
        set_smf_prop $IPFILTER_FMRI config/ipnat_config_file $ipnat_file
        refresh_ipf=true
    else
        set_smf_prop $IPFILTER_FMRI config/ipnat_config_file \
            $IPNAT_DEFAULT_CONFIG_FILE
    fi
    if [ -n "$ippool_file" ]; then
        copy_from_legacy_loc $ippool_file
        set_smf_prop $IPFILTER_FMRI config/ippool_config_file \
            $ippool_file
        refresh_ipf=true
    else
        set_smf_prop $IPFILTER_FMRI config/ippool_config_file \
            $IPPOOL_DEFAULT_CONFIG_FILE
    fi

    $SVCADM refresh $IPFILTER_FMRI
    if [ "$refresh_ipf" = "true" ]; then
        $SVCADM enable $IPFILTER_FMRI
    else
        $SVCADM disable $IPFILTER_FMRI
    fi

    # Remove the Legacy directory and location
    $RM -rf $LEGACY_PATH
    $NWAMCFG destroy loc Legacy
}

#
# Script entry point
#
# Arguments to net-nwam are
#       method ( start | refresh | stop | -u | -c )
#

#
# Create nwam directory in /etc/svc/volatile
#
if [ ! -d /etc/svc/volatile/nwam ]; then
    $MKDIR -m 0755 /etc/svc/volatile/nwam
fi

case "$1" in
'refresh')
    /usr/bin/pkill -HUP -z `smf_zonename` nwamd
    #
    # Enable network/location.  Needed on first boot post-install as
    # network/location will not exist until after manifest-import runs.
    #
    if service_exists $NET_LOC_FMRI ; then
        $SVCADM enable -t $NET_LOC_FMRI
    fi
    ;;

'start')
    # The real daemon is not started in a shared stack zone. But we need to
    # create a dummy background process to preserve contract lifetime.
    smf_configure_ip
    if [ $? = "1" ] ; then
        $RM -f /etc/svc/volatile/nwam/nwam_blocked
        $MKFIFO /etc/svc/volatile/nwam/nwam_blocked
        ($CAT </etc/svc/volatile/nwam/nwam_blocked >/dev/null) &
        exit $SMF_EXIT_OK
    fi

    #
    # Enable network/location.
    #
    if service_exists $NET_LOC_FMRI ; then
        $SVCADM enable -t $NET_LOC_FMRI
    fi

    if smf_is_globalzone; then
        net_reconfigure || exit $SMF_EXIT_ERR_CONFIG

        # Update PVID on interfaces configured with VLAN 1
        update_pvid

        #
        # Upgrade handling. The upgrade file consists of a series
        # of dladm(1M) commands. Note that after we are done, we
        # cannot rename the upgrade script file as the file system
        # is still read-only at this point. Defer this to the
        # manifest-import service.
        #
        upgrade_script=/var/svc/profile/upgrade_datalink
        if [ -f "${upgrade_script}" ]; then
            . "${upgrade_script}"
        fi

        #
        # Upgrade handling for ibd:
        # After we are done with the upgrade handling, we can not set the
        # ibd/ibd_upgraded property to "true" as the file system is
        # read-only at this point. It will be done later by ibd-post-upgrade
        # service.
        #
        ibd_upgraded=`/bin/svcprop -c -p ibd/ibd_upgraded \
            svc:/network/physical:default 2> /dev/null`
        if [ "$ibd_upgraded" != "true" ]; then
            /sbin/ibd_upgrade -v
        fi

        # Bring up simnet instances
        /sbin/dladm up-simnet
        # Initialize security objects.
        /sbin/dladm init-secobj

        #
        # Initialize VNICs, VLANs and flows.  Though they are brought
        # up here, NWAM will not automatically manage VNICs and VLANs.
        #
        /sbin/dladm up-vnic
        /sbin/dladm up-vlan
        /sbin/dladm up-part
        /sbin/dladm up-aggr
        /sbin/flowadm init-flow
    fi

    #
    # We also need to create the Legacy location, which is used
    # to restore non-NWAM settings that are overwritten when
    # NWAM is enabled (e.g. resolv.conf, nsswitch.conf, etc.).
    #
    $NWAMCFG list loc Legacy >/dev/null 2>&1
    if [ $? -eq 1 ]; then
        create_legacy_loc
    fi

    # start nwamd in foreground; it will daemonize itself
    if /lib/inet/nwamd ; then
        exit $SMF_EXIT_OK
    else
        exit $SMF_EXIT_ERR_FATAL
    fi
    ;;

'stop')
    # We need to make the dummy process we created above stop.
    smf_configure_ip
    if [ $? = "1" ] ; then
        echo "stop" > /etc/svc/volatile/nwam/nwam_blocked
        exit $SMF_EXIT_OK
    fi

    /usr/bin/pkill -z `smf_zonename` nwamd

    #
    # Restore the non-NWAM settings.
    #
    $NWAMCFG list loc Legacy >/dev/null 2>&1
    if [ $? -eq 1 ]; then
        echo "No Legacy location to revert to!"
        exit $SMF_EXIT_OK
    fi
    revert_to_legacy_loc
    # remove the location property group
    $SVCCFG -s $NET_LOC_FMRI delpg location
    ;;

'-u')
    # After we run this part of the script upon the next reboot
    # network/physical:default will be enabled and
    # network/physical:nwam will be disabled.
    # There are various other parts of the system (nscd, nfs) that
    # depend on continuing to have a working network.  For this
    # reason we don't change the network configuration immediately.
    #
    # Disable network/physical temporarily and make sure that will
    # be enabled on reboot.
    $SVCADM disable -st $NET_PHYS_FMRI
    $SVCCFG -s $NET_PHYS_FMRI setprop general/enabled=true

    # If nwam is online then make sure that it's temporarily enabled.
    nwam_online=`$SVCPROP -t -p restarter/state $NET_NWAM_FMRI`
    if [ $? -eq 0 ]; then
        set -- $nwam_online
        [ $3 = "online" ] && $SVCADM enable -st $NET_NWAM_FMRI
    fi

    # Set nwam so that it won't be enabled upon reboot.
    $SVCCFG -s $NET_NWAM_FMRI setprop general/enabled=false
    exit 0
    ;;

'-c')
    # Nothing to do for sysidtool
    exit 0
    ;;

*)
    echo "Usage: $0 { start | stop | refresh }"
    exit $SMF_EXIT_ERR_FATAL
    ;;
esac
exit $SMF_EXIT_OK