Cross Reference: /illumos-gate/usr/src/cmd/svc/milestone/net-nwam

	net-nwam revision 1cfa752f4e24c34133009b0f6c139127a5c461de
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes#!/sbin/sh
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes#
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes# CDDL HEADER START
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes#
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes# The contents of this file are subject to the terms of the
ac7985784d08a3655291f24f711812b4d8b1cbcffuankg# Common Development and Distribution License (the "License").
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes# You may not use this file except in compliance with the License.
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes#
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes# or http://www.opensolaris.org/os/licensing.
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes# See the License for the specific language governing permissions
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes# and limitations under the License.
0662ed52e814f8f08ef0e09956413a792584eddffuankg#
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes# When distributing Covered Code, include this CDDL HEADER in each
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes# If applicable, add the following below this CDDL HEADER, with the
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes# fields enclosed by brackets "[]" replaced with your own identifying
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes# information: Portions Copyright [yyyy] [name of copyright owner]
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes#
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes# CDDL HEADER END
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes#
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes#
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes# Copyright (c) 2007, 2010, Oracle and/or its affiliates. All rights reserved.
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes#
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes. /lib/svc/share/smf_include.sh
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes. /lib/svc/share/net_include.sh
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes# FMRI constants
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholesIPSEC_IKE_FMRI="svc:/network/ipsec/ike"
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholesIPSEC_POLICY_FMRI="svc:/network/ipsec/policy"
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholesIPFILTER_FMRI="svc:/network/ipfilter:default"
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholesNIS_CLIENT_FMRI="svc:/network/nis/client:default"
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholesNET_PHYS_FMRI="svc:/network/physical:default"
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholesNET_NWAM_FMRI="svc:/network/physical:nwam"
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholesNET_LOC_FMRI="svc:/network/location:default"
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes#
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes# Default *.conf files
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes# Set appropriate config SMF property to these files when NWAM is stopped
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes# and corresponding config properties in the Legacy location are emtpy
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes#
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholesIPF6_DEFAULT_CONFIG_FILE=/etc/ipf/ipf6.conf
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholesIPNAT_DEFAULT_CONFIG_FILE=/etc/ipf/ipnat.conf
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholesIPPOOL_DEFAULT_CONFIG_FILE=/etc/ipf/ippool.conf
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholesIPSEC_IKE_DEFAULT_CONFIG_FILE=/etc/inet/ike/config
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholesIPSEC_POLICY_DEFAULT_CONFIG_FILE=/etc/inet/ipsecinit.conf
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes# commands
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholesBASENAME=/usr/bin/basename
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholesCAT=/usr/bin/cat
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholesCP=/usr/bin/cp
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholesDOMAINNAME=/usr/bin/domainname
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholesGREP=/usr/bin/grep
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholesLDAPCLIENT=/usr/sbin/ldapclient
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholesMKDIR=/usr/bin/mkdir
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholesMKFIFO=/usr/bin/mkfifo
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholesNAWK=/usr/bin/nawk
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholesNWAMCFG=/usr/sbin/nwamcfg
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholesRM=/usr/bin/rm
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholesSVCADM=/usr/sbin/svcadm
ac7985784d08a3655291f24f711812b4d8b1cbcffuankgSVCCFG=/usr/sbin/svccfg
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholesSVCPROP=/usr/bin/svcprop
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes# Path to directories
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes# We don't have a writable file system so we write to /etc/svc/volatile and
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes# then later copy anything interesting to /etc/nwam.
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholesLEGACY_PATH=/etc/svc/volatile/nwam/Legacy
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholesNIS_BIND_PATH=/var/yp/binding
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes#
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes# copy_to_legacy_loc <file>
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes#
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes# Copies the file to the Legacy location directory
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes#
ac7985784d08a3655291f24f711812b4d8b1cbcffuankgcopy_to_legacy_loc() {
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes    $MKDIR -p $LEGACY_PATH
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes    if [ -f "$1" ]; then
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes        $CP -p $1 $LEGACY_PATH
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes    fi
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes}
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes#
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes# copy_from_legacy_loc <destination file>
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes#
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes# Copies file with the same name from Legacy location to the given
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes# destination file
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes#
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholescopy_from_legacy_loc () {
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes    DEST_DIR=`/usr/bin/dirname $1`
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes    SRC_FILE="$LEGACY_PATH/`$BASENAME $1`"
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes    # Make destination directory if needed
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes    if [ ! -d "$DEST_DIR" ]; then
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes        $MKDIR -p $DEST_DIR
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes    fi
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes
ac7985784d08a3655291f24f711812b4d8b1cbcffuankg    if [ -f "$SRC_FILE" ]; then
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes        $CP -p $SRC_FILE $DEST_DIR
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes    fi
ac7985784d08a3655291f24f711812b4d8b1cbcffuankg}
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes#
d3fc1a9aec53a772142e2909441b213f3ae8102abnicholes# write_loc_prop <property> <value> <file>
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes#
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes# Appends to <file> a nwamcfg command to set <property> to <value> if non-empty
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes#
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholeswrite_loc_prop () {
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes    prop=$1
d3fc1a9aec53a772142e2909441b213f3ae8102abnicholes    val=$2
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes    file=$3
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes
ac7985784d08a3655291f24f711812b4d8b1cbcffuankg    if [ -n "$val" -a -n "$file" ]; then
0662ed52e814f8f08ef0e09956413a792584eddffuankg        echo "set $prop=$val" >> $file
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes    fi
ac7985784d08a3655291f24f711812b4d8b1cbcffuankg}
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes#
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes# set_smf_prop <fmri> <property name> <property value>
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes#
d3fc1a9aec53a772142e2909441b213f3ae8102abnicholesset_smf_prop () {
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes    $SVCCFG -s $1 setprop $2 = astring: "$3" && return
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes}
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes#
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes# get_smf_prop <fmri> <property name>
d3fc1a9aec53a772142e2909441b213f3ae8102abnicholes#
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholesget_smf_prop () {
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes    $SVCPROP -p $2 $1
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes}
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes
d3fc1a9aec53a772142e2909441b213f3ae8102abnicholes#
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes# Creates Legacy location from the current configuration
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes#
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholescreate_legacy_loc () {
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes    CREATE_LOC_LEGACY_FILE=/etc/svc/volatile/nwam/create_loc_legacy
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes    #
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes    # Write nwamcfg commands to create Legacy location to
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes    # $CREATE_LOC_LEGACY_FILE as values for properties are determined
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes    # Note that some of the *_CONFIG_FILE variables point at copies of
ac7985784d08a3655291f24f711812b4d8b1cbcffuankg    # files we've made and others indicate where those copies should be
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes    # if we are enabling the location.
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes    #
ac7985784d08a3655291f24f711812b4d8b1cbcffuankg    echo "create loc Legacy" > $CREATE_LOC_LEGACY_FILE
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes    write_loc_prop "activation-mode" "system" $CREATE_LOC_LEGACY_FILE
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes    NAMESERVICES=""
ac7985784d08a3655291f24f711812b4d8b1cbcffuankg    NAMESERVICES_CONFIG_FILE=""
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes    DNS_NAMESERVICE_CONFIGSRC=""
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes    DNS_NAMESERVICE_DOMAIN=""
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes    DNS_NAMESERVICE_SERVERS=""
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes    DNS_NAMESERVICE_SEARCH=""
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes    NIS_NAMESERVICE_CONFIGSRC=""
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes    NIS_NAMESERVICE_SERVERS=""
d3fc1a9aec53a772142e2909441b213f3ae8102abnicholes    LDAP_NAMESERVICE_CONFIGSRC=""
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes    LDAP_NAMESERVICE_SERVERS=""
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes    DEFAULT_DOMAIN=""
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes    # Copy /etc/nsswitch.conf file
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes    copy_to_legacy_loc /etc/nsswitch.conf
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes    NAMESERVICES_CONFIG_FILE="$LEGACY_PATH/nsswitch.conf"
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes    # Gather DNS info from resolv.conf if present.
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes    if [ -f /etc/resolv.conf ]; then
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes        NAMESERVICES="dns,"
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes        $GREP -i "added by dhcp" /etc/nsswitch.conf >/dev/null
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes        if [ $? -eq 0 ]; then
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes            DNS_NAMESERVICE_CONFIGSRC="dhcp"
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes        else
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes            DNS_NAMESERVICE_CONFIGSRC="manual"
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes            DNS_NAMESERVICE_DOMAIN=`$NAWK '$1 == "domain" {\
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes                print $2 }' < /etc/resolv.conf`
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes            DNS_NAMESERVICE_SERVERS=`$NAWK '$1 == "nameserver" \
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes                { printf "%s,", $2 }' < /etc/resolv.conf`
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes            DNS_NAMESERVICE_SEARCH=`$NAWK '$1 == "search" \
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes                { printf "%s,", $2 }' < /etc/resolv.conf`
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes            copy_to_legacy_loc /etc/resolv.conf
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes        fi
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes    fi
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes    # Gather NIS info from appropriate file if present.
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes    if service_is_enabled $NIS_CLIENT_FMRI; then
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes        NAMESERVICES="${NAMESERVICES}nis,"
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes        NIS_NAMESERVICE_CONFIGSRC="manual"
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes        DEFAULT_DOMAIN=`$CAT /etc/defaultdomain`
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes        yp_servers=`$NAWK '{ printf "%s ", $1 }' \
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes            < $NIS_BIND_PATH/$DEFAULT_DOMAIN/ypservers`
ac7985784d08a3655291f24f711812b4d8b1cbcffuankg        for serv in $yp_servers; do
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes            if is_valid_addr $serv; then
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes                addr="$serv,"
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes            else
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes                addr=`$GREP -iw $serv /etc/inet/hosts | \
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes                    $NAWK '{ printf "%s,", $1 }'`
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes            fi
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes            NIS_NAMESERVICE_SERVERS="${NIS_NAMESERVICE_SERVERS}$addr"
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes        done
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes    fi
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes    # Gather LDAP info via ldapclient(1M).
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes    if [ -f /var/ldap/ldap_client_file ]; then
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes        copy_to_legacy /var/ldap/ldap_client_file
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes        NAMESERVICES="${NAMESERVICES}ldap,"
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes        LDAP_NAMESERVICE_CONFIGSRC="manual"
ac7985784d08a3655291f24f711812b4d8b1cbcffuankg        LDAP_NAMESERVICE_SERVERS=`$LDAPCLIENT list 2>/dev/null | \
ac7985784d08a3655291f24f711812b4d8b1cbcffuankg            $NAWK '$1 == "preferredServerList:" { print $2 }'`
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes        DEFAULT_DOMAIN=`$CAT /etc/defaultdomain`
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes    fi
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes    # Now, write nwamcfg commands for nameservices
ac7985784d08a3655291f24f711812b4d8b1cbcffuankg    write_loc_prop "nameservices" $NAMESERVICES $CREATE_LOC_LEGACY_FILE
ac7985784d08a3655291f24f711812b4d8b1cbcffuankg    write_loc_prop "nameservices-config-file" $NAMESERVICES_CONFIG_FILE \
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes        $CREATE_LOC_LEGACY_FILE
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes    write_loc_prop "dns-nameservice-configsrc" $DNS_NAMESERVICE_CONFIGSRC \
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes        $CREATE_LOC_LEGACY_FILE
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes    write_loc_prop "dns-nameservice-domain" $DNS_NAMESERVICE_DOMAIN \
ac7985784d08a3655291f24f711812b4d8b1cbcffuankg        $CREATE_LOC_LEGACY_FILE
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes    write_loc_prop "dns-nameservice-servers" $DNS_NAMESERVICE_SERVERS \
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes        $CREATE_LOC_LEGACY_FILE
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes    write_loc_prop "dns-nameservice-search" $DNS_NAMESERVICE_SEARCH \
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes        $CREATE_LOC_LEGACY_FILE
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes    write_loc_prop "nis-nameservice-configsrc" $NIS_NAMESERVICE_CONFIGSRC \
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes        $CREATE_LOC_LEGACY_FILE
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes    write_loc_prop "nis-nameservice-servers" $NIS_NAMESERVICE_SERVERS \
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes        $CREATE_LOC_LEGACY_FILE
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes    write_loc_prop "ldap-nameservice-configsrc" $LDAP_NAMESERVICE_CONFIGSRC\
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes        $CREATE_LOC_LEGACY_FILE
ac7985784d08a3655291f24f711812b4d8b1cbcffuankg    write_loc_prop "ldap-nameservice-servers" $LDAP_NAMESERVICE_SERVERS \
0662ed52e814f8f08ef0e09956413a792584eddffuankg        $CREATE_LOC_LEGACY_FILE
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes    write_loc_prop "default-domain" $DEFAULT_DOMAIN $CREATE_LOC_LEGACY_FILE
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes
00d1c0c914426a97022d8205a875c48b211001c2fuankg    # Retrieve NFSv4 domain.
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes    if [ -f /etc/default/nfs ]; then
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes        copy_to_legacy_loc /etc/default/nfs
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes        NFS_DOMAIN=`$NAWK '/^NFSMAPID_DOMAIN.*/ { FS="=" ; print $2 }' \
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes            < /etc/default/nfs`
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes        write_loc_prop "nfsv4-domain" \
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes            $NFS_DOMAIN $CREATE_LOC_LEGACY_FILE
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes    fi
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes    IPF_CONFIG_FILE=""
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes    IPF6_CONFIG_FILE=""
0662ed52e814f8f08ef0e09956413a792584eddffuankg    IPNAT_CONFIG_FILE=""
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes    IPPOOL_CONFIG_FILE=""
c9ce2b84cc0bf2caa39be615eb06f7a9b68378d5bnicholes    IKE_CONFIG_FILE=""
    IPSEC_POLICY_CONFIG_FILE=""

    #
    # IPFilter
    #
    # If the firewall policy is "custom", simply copy the
    # custom_policy_file.  If the firewall policy is "none", "allow" or
    # "deny", save the value as "/<value>".  When reverting back to the
    # Legacy location, these values will have to be treated as special.
    #
    # For all configuration files, copy them to the Legacy directory.
    # Use the respective properties to remember the original locations
    # of the files so that they can be copied back there when NWAM is
    # stopped.
    #
    if service_is_enabled $IPFILTER_FMRI; then
        FIREWALL_POLICY=`get_smf_prop $IPFILTER_FMRI \
            firewall_config_default/policy`
        if [ "$FIREWALL_POLICY" = "custom" ]; then
            IPF_CONFIG_FILE=`get_smf_prop $IPFILTER_FMRI \
                firewall_config_default/custom_policy_file`
            copy_to_legacy_loc $IPF_CONFIG_FILE
        else
            # save value as /none, /allow, or /deny
            IPF_CONFIG_FILE="/$FIREWALL_POLICY"
        fi
        IPF6_CONFIG_FILE=`get_smf_prop $IPFILTER_FMRI \
            config/ipf6_config_file`
        copy_to_legacy_loc $IPF6_CONFIG_FILE

        IPNAT_CONFIG_FILE=`get_smf_prop $IPFILTER_FMRI \
            config/ipnat_config_file`
        copy_to_legacy_loc $IPNAT_CONFIG_FILE

        IPPOOL_CONFIG_FILE=`get_smf_prop $IPFILTER_FMRI \
            config/ippool_config_file`
        copy_to_legacy_loc $IPPOOL_CONFIG_FILE
    fi

    # IKE
    if service_is_enabled $IPSEC_IKE_FMRI:default; then
        IKE_CONFIG_FILE=`get_smf_prop $IPSEC_IKE_FMRI config/config_file`
        copy_to_legacy_loc $IKE_CONFIG_FILE
    fi

    # IPsec
    if service_is_enabled $IPSEC_POLICY_FMRI:default; then
        IPSEC_POLICY_CONFIG_FILE=`get_smf_prop $IPSEC_POLICY_FMRI \
            config/config_file`
        copy_to_legacy_loc $IPSEC_POLICY_CONFIG_FILE
    fi

    if [ -n "$IPF_CONFIG_FILE" -a \( "$IPF_CONFIG_FILE" = "/allow" \
        -o "$IPF_CONFIG_FILE" = "/deny" -o "$IPF_CONFIG_FILE" = "/none" \
        -o -f "$IPF_CONFIG_FILE" \) ]; then
        write_loc_prop "ipfilter-config-file" $IPF_CONFIG_FILE \
            $CREATE_LOC_LEGACY_FILE
    fi
    if [ -n "$IPF6_CONFIG_FILE" -a -f "$IPF6_CONFIG_FILE" ]; then
        write_loc_prop "ipfilter-v6-config-file" $IPF6_CONFIG_FILE \
            $CREATE_LOC_LEGACY_FILE
    fi
    if [ -n "$IPNAT_CONFIG_FILE" -a -f "$IPNAT_CONFIG_FILE" ]; then
        write_loc_prop "ipnat-config-file" $IPNAT_CONFIG_FILE \
            $CREATE_LOC_LEGACY_FILE
    fi
    if [ -n "$IPPOOL_CONFIG_FILE" -a -f "$IPPOOL_CONFIG_FILE" ]; then
        write_loc_prop "ippool-config-file" $IPPOOL_CONFIG_FILE \
            $CREATE_LOC_LEGACY_FILE
    fi
    if [ -n "$IKE_CONFIG_FILE" -a -f "$IKE_CONFIG_FILE" ]; then
        write_loc_prop "ike-config-file" $IKE_CONFIG_FILE \
            $CREATE_LOC_LEGACY_FILE
    fi
    if [ -n "$IPSEC_POLICY_CONFIG_FILE" -a -f "$IPSEC_POLICY_CONFIG_FILE" ]
    then
        write_loc_prop "ipsecpolicy-config-file" \
            $IPSEC_POLICY_CONFIG_FILE $CREATE_LOC_LEGACY_FILE
    fi

    # End
    echo "end" >> $CREATE_LOC_LEGACY_FILE
    # network/location will create the Legacy location with these commands.
}

#
# Undoes the effects of the Legacy location creation
#
revert_to_legacy_loc () {
    $SVCADM disable dns/client
    $SVCADM disable nis/client
    $SVCADM disable ldap/client

    # copy nsswitch.conf to /etc/nsswitch.conf
    copy_from_legacy_loc /etc/nsswitch.conf

    # DNS - copy resolv.conf to /etc/resolv.conf
    if [ -f "$LEGACY_PATH/resolv.conf" ]; then
        copy_from_legacy_loc /etc/resolv.conf
            $SVCADM enable dns/client
    fi

    # set /etc/defaultdomain and domainname(1M)
    DEFAULT_DOMAIN=`nwam_get_loc_prop Legacy default-domain`
    if [ -n "$DEFAULT_DOMAIN" ]; then
        $DOMAINNAME $DEFAULT_DOMAIN
        $DOMAINNAME > /etc/defaultdomain
    fi

    # NIS - directory and ypserver in /var/yp/binding/
    NIS_CONFIGSRC=`nwam_get_loc_prop Legacy nis-nameservice-configsrc`
    NIS_SERVERS=`nwam_get_loc_prop Legacy nis-nameservice-servers`
    if [ -n "$NIS_CONFIGSRC" ]; then
        if [ ! -d "$NIS_BIND_PATH/$DEFAULT_DOMAIN" ]; then
            $MKDIR -p $NIS_BIND_PATH/$DEFAULT_DOMAIN
        fi
        if [ -n "$NIS_SERVERS" ]; then
            echo "$NIS_SERVERS" | $NAWK \
                'FS="," { for (i = 1; i <= NF; i++) print $i }' \
                > $NIS_BIND_PATH/$DEFAULT_DOMAIN/ypservers
        fi
        $SVCADM enable nis/client
    fi

    # LDAP - copy ldap_client_file to /var/ldap/ldap_client_file
    if [ -f "$LEGACY_PATH/ldap_client_file" ]; then
        copy_from_legacy_loc /var/ldap/ldap_client_file
        $SVCADM enable ldap/client
    fi

    # Copy back nfs file
        copy_from_legacy_loc /etc/default/nfs

    # IPFilter, IPsec, and IKE
    ipf_file=`nwam_get_loc_prop Legacy ipfilter-config-file`
    ipf6_file=`nwam_get_loc_prop Legacy ipfilter-v6-config-file`
    ipnat_file=`nwam_get_loc_prop Legacy ipnat-config-file`
    ippool_file=`nwam_get_loc_prop Legacy ippool-config-file`
    ike_file=`nwam_get_loc_prop Legacy ike-config-file`
    pol_file=`nwam_get_loc_prop Legacy ipsecpolicy-config-file`

    if [ -n "$ike_file" ]; then
        copy_from_legacy_loc $ike_file
        set_smf_prop $IPSEC_IKE_FMRI config/config_file $ike_file
        $SVCADM refresh $IPSEC_IKE_FMRI
        $SVCADM enable $IPSEC_IKE_FMRI
    else
        set_smf_prop $IPSEC_IKE_FMRI config/config_file \
            $IPSEC_IKE_DEFAULT_CONFIG_FILE
        $SVCADM disable $IPSEC_IKE_FMRI
    fi
    if [ -n "$pol_file" ]; then
        copy_from_legacy_loc $pol_file
        set_smf_prop $IPSEC_POLICY_FMRI config/config_file $pol_file
        $SVCADM refresh $IPSEC_POLICY_FMRI
        $SVCADM enable $IPSEC_POLICY_FMRI
    else
        set_smf_prop $IPSEC_POLICY_FMRI config/config_file \
            $IPSEC_POLICY_DEFAULT_CONFIG_FILE
        $SVCADM disable $IPSEC_POLICY_FMRI
    fi

    refresh_ipf=false
    if [ -n "$ipf_file" ]; then
        # change /none, /allow, and /deny to firewall policy
        if [ "$ipf_file" = "/none" -o "$ipf_file" = "/allow" \
            -o "$ipf_file" = "/deny" ]; then
            policy=`echo "$ipf_file" | $NAWK 'FS="/" { print $2 }'`
            set_smf_prop $IPFILTER_FMRI \
                firewall_config_default/policy $policy
            # no need to clear custom_policy_file as it isn't "custom"
        else
            copy_from_legacy_loc $ipf_file
            set_smf_prop $IPFILTER_FMRI \
                firewall_config_default/policy "custom"
            set_smf_prop $IPFILTER_FMRI \
                firewall_config_default/custom_policy_file $ipf_file
        fi
        refresh_ipf=true
    fi
    if [ -n "$ipf6_file" ]; then
        copy_from_legacy_loc $ipf6_file
        set_smf_prop $IPFILTER_FMRI config/ipf6_config_file $ipf6_file
        refresh_ipf=true
    else
        set_smf_prop $IPFILTER_FMRI config/ipf6_config_file \
            $IPF6_DEFAULT_CONFIG_FILE
    fi
    if [ -n "$ipnat_file" ]; then
        copy_from_legacy_loc $ipnat_file
        set_smf_prop $IPFILTER_FMRI config/ipnat_config_file $ipnat_file
        refresh_ipf=true
    else
        set_smf_prop $IPFILTER_FMRI config/ipnat_config_file \
            $IPNAT_DEFAULT_CONFIG_FILE
    fi
    if [ -n "$ippool_file" ]; then
        copy_from_legacy_loc $ippool_file
        set_smf_prop $IPFILTER_FMRI config/ippool_config_file \
            $ippool_file
        refresh_ipf=true
    else
        set_smf_prop $IPFILTER_FMRI config/ippool_config_file \
            $IPPOOL_DEFAULT_CONFIG_FILE
    fi

    $SVCADM refresh $IPFILTER_FMRI
    if [ "$refresh_ipf" = "true" ]; then
        $SVCADM enable $IPFILTER_FMRI
    else
        $SVCADM disable $IPFILTER_FMRI
    fi

    # Remove the Legacy directory and location
    $RM -rf $LEGACY_PATH
    $NWAMCFG destroy loc Legacy
}

#
# Script entry point
#
# Arguments to net-nwam are
#       method ( start | refresh | stop | -u | -c )
#

#
# Create nwam directory in /etc/svc/volatile
#
if [ ! -d /etc/svc/volatile/nwam ]; then
    $MKDIR -m 0755 /etc/svc/volatile/nwam
fi

case "$1" in
'refresh')
    /usr/bin/pkill -HUP -z `smf_zonename` nwamd
    #
    # Enable network/location.  Needed on first boot post-install as
    # network/location will not exist until after manifest-import runs.
    #
    if service_exists $NET_LOC_FMRI ; then
        $SVCADM enable -t $NET_LOC_FMRI
    fi
    ;;

'start')
    # The real daemon is not started in a shared stack zone. But we need to
    # create a dummy background process to preserve contract lifetime.
    smf_configure_ip
    if [ $? = "1" ] ; then
        $RM -f /etc/svc/volatile/nwam/nwam_blocked
        $MKFIFO /etc/svc/volatile/nwam/nwam_blocked
        ($CAT </etc/svc/volatile/nwam/nwam_blocked >/dev/null) &
        exit $SMF_EXIT_OK
    fi

    #
    # Enable network/location.
    #
    if service_exists $NET_LOC_FMRI ; then
        $SVCADM enable -t $NET_LOC_FMRI
    fi

    if smf_is_globalzone; then
        net_reconfigure || exit $SMF_EXIT_ERR_CONFIG

        # Update PVID on interfaces configured with VLAN 1
        update_pvid

        #
        # Upgrade handling. The upgrade file consists of a series
        # of dladm(1M) commands. Note that after we are done, we
        # cannot rename the upgrade script file as the file system
        # is still read-only at this point. Defer this to the
        # manifest-import service.
        #
        upgrade_script=/var/svc/profile/upgrade_datalink
        if [ -f "${upgrade_script}" ]; then
            . "${upgrade_script}"
        fi

        #
        # Upgrade handling for ibd:
        # After we are done with the upgrade handling, we can not set the
        # ibd/ibd_upgraded property to "true" as the file system is
        # read-only at this point. It will be done later by ibd-post-upgrade
        # service.
        #
        ibd_upgraded=`/bin/svcprop -c -p ibd/ibd_upgraded \
            svc:/network/physical:default 2> /dev/null`
        if [ "$ibd_upgraded" != "true" ]; then
            /sbin/ibd_upgrade -v
        fi

        # Bring up simnet instances
        /sbin/dladm up-simnet
        # Initialize security objects.
        /sbin/dladm init-secobj

        #
        # Initialize VNICs, VLANs and flows.  Though they are brought
        # up here, NWAM will not automatically manage VNICs and VLANs.
        #
        /sbin/dladm up-vnic
        /sbin/dladm up-vlan
        /sbin/dladm up-part
        /sbin/dladm up-aggr
        /sbin/flowadm init-flow
    fi

    #
    # We also need to create the Legacy location, which is used
    # to restore non-NWAM settings that are overwritten when
    # NWAM is enabled (e.g. resolv.conf, nsswitch.conf, etc.).
    #
    $NWAMCFG list loc Legacy >/dev/null 2>&1
    if [ $? -eq 1 ]; then
        create_legacy_loc
    fi

    # start nwamd in foreground; it will daemonize itself
    if /lib/inet/nwamd ; then
        exit $SMF_EXIT_OK
    else
        exit $SMF_EXIT_ERR_FATAL
    fi
    ;;

'stop')
    # We need to make the dummy process we created above stop.
    smf_configure_ip
    if [ $? = "1" ] ; then
        echo "stop" > /etc/svc/volatile/nwam/nwam_blocked
        exit $SMF_EXIT_OK
    fi

    /usr/bin/pkill -z `smf_zonename` nwamd

    #
    # Restore the non-NWAM settings.
    #
    $NWAMCFG list loc Legacy >/dev/null 2>&1
    if [ $? -eq 1 ]; then
        echo "No Legacy location to revert to!"
        exit $SMF_EXIT_OK
    fi
    revert_to_legacy_loc
    # remove the location property group
    $SVCCFG -s $NET_LOC_FMRI delpg location
    ;;

'-u')
    # After we run this part of the script upon the next reboot
    # network/physical:default will be enabled and
    # network/physical:nwam will be disabled.
    # There are various other parts of the system (nscd, nfs) that
    # depend on continuing to have a working network.  For this
    # reason we don't change the network configuration immediately.
    #
    # Disable network/physical temporarily and make sure that will
    # be enabled on reboot.
    $SVCADM disable -st $NET_PHYS_FMRI
    $SVCCFG -s $NET_PHYS_FMRI setprop general/enabled=true

    # If nwam is online then make sure that it's temporarily enabled.
    nwam_online=`$SVCPROP -t -p restarter/state $NET_NWAM_FMRI`
    if [ $? -eq 0 ]; then
        set -- $nwam_online
        [ $3 = "online" ] && $SVCADM enable -st $NET_NWAM_FMRI
    fi

    # Set nwam so that it won't be enabled upon reboot.
    $SVCCFG -s $NET_NWAM_FMRI setprop general/enabled=false
    exit 0
    ;;

'-c')
    # Nothing to do for sysidtool
    exit 0
    ;;

*)
    echo "Usage: $0 { start | stop | refresh }"
    exit $SMF_EXIT_ERR_FATAL
    ;;
esac
exit $SMF_EXIT_OK