#!/bin/sh
# postinst script for dknpamldapconfig
#
# see: dh_installdeb(1)

set -e


case "$1" in
    configure)

    # make homedirectories 
    if ! grep "pam_mkhomedir.so" /etc/pam.d/common-session; then
    cat <<EOF>> /etc/pam.d/common-session
# make homedirs automatically - an alternative ist to use
# pam-scripts to use different skels for different groups
session	required	pam_mkhomedir.so	skel=/etc/skel	umask=0077
EOF
    fi

    # configure for pam_group
    if ! grep "pam_group.so" /etc/pam.d/common-auth; then
    cat <<EOF>> /etc/pam.d/common-auth

# use pam-group for setting extra groups
auth    optional        pam_group.so
EOF
    fi

    # configure nslcd for ldap groups
    if ! grep "uniqueMember" /etc/nslcd.conf; then
    cat <<EOF>> /etc/nslcd.conf

# take groups from ldap
map group member uniqueMember
EOF
    fi

    # configure common-password - passwords should be changable from ldap
    sed -i '/use_authtok/ s/use_authtok//' /etc/pam.d/common-password

    service nslcd restart
    service nscd restart

    ;;

    abort-upgrade|abort-remove|abort-deconfigure)
    ;;

    *)
        echo "postinst called with unknown argument \`$1'" >&2
        exit 1
    ;;
esac

# dh_installdeb will replace this with shell code automatically
# generated by other debhelper scripts.

#DEBHELPER#

exit 0
