#

# Copyright 2005 Sun Microsystems, Inc. All rights reserved.

# Use is subject to license terms.

#

# CDDL HEADER START

#

# The contents of this file are subject to the terms of the

# Common Development and Distribution License, Version 1.0 only

# (the "License"). You may not use this file except in compliance

# with the License.

#

# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE

# or http://www.opensolaris.org/os/licensing.

# See the License for the specific language governing permissions

# and limitations under the License.

#

# When distributing Covered Code, include this CDDL HEADER in each

# file and include the License file at usr/src/OPENSOLARIS.LICENSE.

# If applicable, add the following below this CDDL HEADER, with the

# fields enclosed by brackets "[]" replaced with your own identifying

# information: Portions Copyright [yyyy] [name of copyright owner]

#

# CDDL HEADER END

#

# ident "%Z%%M% %I% %E% SMI"

# add the kprop script to crontab if needed

DEST=${PKG_INSTALL_ROOT:-/}/var/spool/cron/crontabs/root

grep -s /usr/lib/krb5/kprop_script $DEST >/dev/null 2>&1

if [ $? -ne 0 ]; then

echo "#10 3 * * * /usr/lib/krb5/kprop_script ___slave_kdcs___" >>$DEST

fi

# add SEAM URL for gkadmin if needed

KRB5_CFG=${PKG_INSTALL_ROOT:-/}/etc/krb5/krb5.conf

grep -s "^[# ]*gkadmin[ ]=[ ]{" $KRB5_CFG >/dev/null 2>&1

if [ $? -ne 0 ]; then

echo " gkadmin = {" >>$KRB5_CFG

echo " help_url = http://docs.sun.com:80/ab2/coll.384.1/SEAM/@AB2PageView/1195" >>$KRB5_CFG

echo " }" >>$KRB5_CFG

fi

if [ "$UPDATE" = yes ]; then

cat >> ${PKG_INSTALL_ROOT:-/}/var/svc/profile/upgrade <<-EOF

# We are deleting and reimporting kpropd's manifest, because we

# need to change the restarter.

kpfmri="svc:/network/security/krb5_prop"

kkfmri="svc:/network/security/krb5kdc:default"

lkpmani="/var/svc/manifest/network/security/krb5_prop.xml"

restarter=\`svcprop -c -p general/restarter \$kpfmri 2>&1\`

case \$restarter in

*network/inetd:default)

kken=\`svcprop -c -p general/enabled \$kkfmri\`

svccfg delete -f \$kpfmri

svccfg import \$lkpmani

# Enable kpropd if krb5kdc is enabled, since

# krb5kdc would have run kpropd

if [ \$kken = "true" ]; then

svcadm enable \$kpfmri

fi

;;

esac

EOF

fi

exit 0